$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/86d9c550-ee57-3ea5-89e3-bcb007f6657f.roa File: 86d9c550-ee57-3ea5-89e3-bcb007f6657f.roa (raw, json) Hash identifier: fCZOKHd/1Mg9CD4E6mv4+j5CTZpy6ysBjwLm8zfu/ZA= Subject key identifier: 13:FB:C7:FA:28:39:9C:C9:2E:A9:83:E8:F6:F3:FA:22:83:98:74:8C Certificate issuer: /CN=9227887c-706f-46d5-a5a6-f0db08bf46a0 Certificate serial: 010D0C9F4328584A612B1BE56F0EFCED81AA4D50 Authority key identifier: 69:69:5A:17:AD:83:C2:A9:94:79:43:7F:05:57:28:00:0D:3A:80:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/86d9c550-ee57-3ea5-89e3-bcb007f6657f.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 396423 IP address blocks: 23.132.8.0/24 maxlen: 24 198.62.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:1b:e5:6f:0e:fc:ed:81:aa:4d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9227887c-706f-46d5-a5a6-f0db08bf46a0 Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=2fd4b69a-92cc-455c-b9f8-7880fc91fed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0b:ed:ce:64:42:98:cc:32:9d:d2:9b:e0:47: 7b:2d:2a:1e:b8:5d:10:fa:54:b4:48:fd:71:28:51: f4:da:fe:83:91:fe:94:f5:8c:d9:28:c1:69:0b:fd: cd:d4:ef:12:1d:dd:1e:29:11:e6:50:8b:ab:b0:83: db:98:5e:d0:2b:ec:51:1d:73:39:d5:50:e9:35:7b: f1:a3:c4:6c:99:0d:b4:25:e5:2e:6b:92:c5:13:08: b4:71:87:96:ec:da:20:96:2b:0b:8b:4d:aa:7a:54: 21:85:a5:73:2d:a9:85:6f:42:81:05:88:98:95:f7: 17:4f:71:d9:09:46:ba:3b:22:6c:79:69:9c:74:e9: db:88:0a:c3:1f:b1:db:a8:7e:02:8f:d3:9d:16:95: 0c:a8:f5:77:59:20:9a:4c:dd:0c:fc:22:35:cf:b6: 3d:ac:73:07:2d:be:3b:63:51:83:52:83:43:fd:f2: d3:94:83:70:dc:ce:05:ee:c7:b5:a7:8e:21:2e:dc: ce:20:2d:78:db:7b:0b:ab:05:2c:cc:1b:ac:ae:15: a7:3d:be:aa:8a:a7:dc:39:66:78:13:9b:68:1b:e0: d6:43:69:cd:6f:0c:a0:32:07:2e:c5:36:63:c4:cc: 72:ac:1d:57:6f:a7:13:d0:be:71:81:63:4d:e3:0c: 6d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:FB:C7:FA:28:39:9C:C9:2E:A9:83:E8:F6:F3:FA:22:83:98:74:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/86d9c550-ee57-3ea5-89e3-bcb007f6657f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.crl X509v3 Authority Key Identifier: keyid:69:69:5A:17:AD:83:C2:A9:94:79:43:7F:05:57:28:00:0D:3A:80:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer sbgp-ipAddrBlock: critical IPv4: 23.132.8.0/24 198.62.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:31:91:c0:32:db:d6:91:f4:a7:66:8b:fd:bf:41:31:b3:19: 92:7c:a5:ea:80:ae:35:88:2d:f6:33:79:ff:61:5c:68:34:6b: 1e:33:54:6a:f5:28:5d:54:5d:b5:ad:80:92:32:3a:f2:67:be: 72:51:89:48:3c:18:d2:a1:01:93:94:42:32:0f:7b:b9:34:be: fc:91:f4:69:a0:4a:3d:32:35:cf:b5:5e:b9:c3:74:7c:58:c9: a8:73:4c:be:fc:c2:30:9b:76:f4:fc:4f:ff:fa:25:ff:b9:74: 6b:42:12:06:f1:e2:a1:3f:56:42:84:86:bb:99:df:0c:38:46: ed:c3:e5:4d:3b:79:6f:03:0d:39:c5:34:eb:69:c8:55:24:b3: f7:7b:29:c8:a2:07:8d:4f:86:81:44:3e:53:10:59:b8:43:2a: 96:c4:5a:26:cd:8b:4d:fc:44:62:28:3a:a5:1d:bd:e2:f6:db: 6b:8e:0c:e5:cc:1d:97:c3:f0:6b:d1:c5:ba:0b:b0:db:3a:ce: d1:06:f2:8d:fb:26:7d:8e:a0:37:bf:d8:c6:a3:a3:0a:09:4f: d3:7a:d4:e9:49:3e:56:5d:ca:35:52:d5:ab:f5:8e:04:bc:22: 37:39:5f:86:7b:7c:b8:52:3b:cb:ff:1e:61:2c:09:98:35:bb: 99:cc:39:3c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEphKxvlbw787YGqTVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTIyNzg4N2MtNzA2Zi00NmQ1LWE1YTYtZjBkYjA4YmY0 NmEwMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk MmZkNGI2OWEtOTJjYy00NTVjLWI5ZjgtNzg4MGZjOTFmZWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQvtzmRCmMwyndKb4Ed7LSoeuF0Q+lS0SP1x KFH02v6Dkf6U9YzZKMFpC/3N1O8SHd0eKRHmUIursIPbmF7QK+xRHXM51VDpNXvx o8RsmQ20JeUua5LFEwi0cYeW7NoglisLi02qelQhhaVzLamFb0KBBYiYlfcXT3HZ CUa6OyJseWmcdOnbiArDH7HbqH4Cj9OdFpUMqPV3WSCaTN0M/CI1z7Y9rHMHLb47 Y1GDUoND/fLTlINw3M4F7se1p44hLtzOIC1423sLqwUszBusrhWnPb6qiqfcOWZ4 E5toG+DWQ2nNbwygMgcuxTZjxMxyrB1Xb6cT0L5xgWNN4wxtkQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBP7x/ooOZzJLqmD6Pbz+iKDmHSMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MjI3 ODg3Yy03MDZmLTQ2ZDUtYTVhNi1mMGRiMDhiZjQ2YTAvODZkOWM1NTAtZWU1Ny0z ZWE1LTg5ZTMtYmNiMDA3ZjY2NTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTIyNzg4N2MtNzA2Zi00NmQ1LWE1 YTYtZjBkYjA4YmY0NmEwLzkyMjc4ODdjLTcwNmYtNDZkNS1hNWE2LWYwZGIwOGJm NDZhMC5jcmwwHwYDVR0jBBgwFoAUaWlaF62DwqmUeUN/BVcoAA06gKQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MjI3ODg3Yy03MDZmLTQ2ZDUtYTVhNi1mMGRi MDhiZjQ2YTAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4QIAwQA xj6IMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIIxkcAy29aR9Kdmi/2/QTGzGZJ8peqArjWILfYzef9hXGg0 ax4zVGr1KF1UXbWtgJIyOvJnvnJRiUg8GNKhAZOUQjIPe7k0vvyR9GmgSj0yNc+1 XrnDdHxYyahzTL78wjCbdvT8T//6Jf+5dGtCEgbx4qE/VkKEhruZ3ww4Ru3D5U07 eW8DDTnFNOtpyFUks/d7KciiB41PhoFEPlMQWbhDKpbEWibNi038RGIoOqUdveL2 22uODOXMHZfD8GvRxboLsNs6ztEG8o37Jn2OoDe/2MajowoJT9N61OlJPlZdyjVS 1av1jgS8Ijc5X4Z7fLhSO8v/HmEsCZg1u5nMOTw= -----END CERTIFICATE-----Generated at Wed Jul 2 04:13:11 2025 by rpki-client