$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/5214e82b-d1ec-36d6-b58a-04d845aed9cf.roa File: 5214e82b-d1ec-36d6-b58a-04d845aed9cf.roa (raw, json) Hash identifier: n2P2tT4j08Y1Fkn3tlYf7oNsGhys1VHLidaX3LQhxyY= Subject key identifier: A2:7B:17:6B:D6:EA:67:6A:FD:ED:80:A5:B1:B5:D6:D9:BA:91:B2:85 Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F4328584AECC133428E87C4FB4AA2A140 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/5214e82b-d1ec-36d6-b58a-04d845aed9cf.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 68.71.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:33:42:8e:87:c4:fb:4a:a2:a1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=7a02d7e8-9adc-4ee7-8d5a-d13737560d5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:30:b8:a8:63:ce:5b:55:6f:70:a3:d1:d8:4f: b1:13:65:b3:a6:d2:4b:2c:24:56:40:51:c1:22:0d: 6b:4d:1f:1a:b5:c5:b4:a6:d4:ba:ee:29:27:ad:59: 95:af:ce:fa:20:cd:c9:f2:56:71:83:19:13:b1:6d: 34:43:48:dc:22:e8:89:8a:32:08:ae:b5:41:27:98: 93:28:8a:e4:3a:75:9a:a2:44:89:13:7c:6b:1f:8e: b0:a8:4c:60:49:ed:d6:48:2f:18:9e:fe:26:d1:e0: 3a:46:aa:64:c5:ff:49:7f:c2:d4:de:87:8f:f3:a0: e6:20:7e:c9:4b:20:3d:69:97:55:1d:7d:7d:e0:7e: 4a:54:6e:27:37:9c:af:b7:27:e6:31:15:29:4f:bb: aa:14:5b:6f:e7:b4:67:f0:f0:6e:5f:c7:d9:f5:d8: f2:9b:1d:37:48:14:61:39:d5:94:e0:45:f2:ce:67: b2:32:da:e0:2c:82:94:c6:fe:6a:df:59:4a:83:94: b8:f6:50:1d:0d:5f:5f:4c:4b:c9:6f:fc:87:e8:00: 0d:ba:0e:b3:b7:ad:e8:8f:5a:ef:81:db:0d:90:36: 70:67:4e:01:53:cb:68:d1:40:ec:ce:05:8e:c8:6b: b5:de:10:eb:50:2a:2d:d9:55:d7:49:e5:5c:90:70: dc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:7B:17:6B:D6:EA:67:6A:FD:ED:80:A5:B1:B5:D6:D9:BA:91:B2:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/5214e82b-d1ec-36d6-b58a-04d845aed9cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:d7:74:40:32:fa:64:85:64:96:f3:59:d3:cb:21:47:01:a9: 5f:b1:a4:22:15:97:0a:b7:8d:09:9e:15:6c:0a:73:40:69:17: 21:46:d9:62:0b:a8:ee:b4:ca:63:60:4a:2d:d6:1b:49:51:b8: f4:b8:86:02:84:7b:f5:ba:e2:36:5d:f7:3a:66:f8:6b:9e:7f: 47:8b:b0:45:8b:19:6f:6b:af:74:a5:78:39:1d:69:5b:d4:6b: 72:54:4e:96:b0:99:cd:7b:c0:48:28:20:06:ea:69:c3:ed:a3: c0:2f:4c:c3:ea:94:6d:17:6f:6b:55:da:24:49:d9:89:7a:da: fc:8e:37:93:d6:04:0d:45:fb:60:17:57:13:58:8c:bf:12:23: e6:30:ff:34:98:a0:86:2b:df:db:3b:db:5a:d4:6c:ab:4d:cb: 9c:b2:01:69:51:69:7a:97:bf:37:33:7f:b4:49:28:b6:fb:bc: 84:be:1b:cb:38:f7:ae:d4:08:5f:c2:e1:d3:f1:ee:22:5e:dc: c9:7c:87:be:ae:80:8b:49:57:d2:7e:5a:b3:5c:7c:86:54:22: 8d:bc:d3:f9:38:65:b0:ad:d8:68:4c:c0:0d:82:a0:e0:b3:3c: 75:eb:31:59:18:41:0c:2a:32:c9:3a:12:90:58:66:8d:22:58: 02:b3:2e:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswTNCjofE+0qioUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk N2EwMmQ3ZTgtOWFkYy00ZWU3LThkNWEtZDEzNzM3NTYwZDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzC4qGPOW1VvcKPR2E+xE2WzptJLLCRWQFHB Ig1rTR8atcW0ptS67iknrVmVr876IM3J8lZxgxkTsW00Q0jcIuiJijIIrrVBJ5iT KIrkOnWaokSJE3xrH46wqExgSe3WSC8Ynv4m0eA6Rqpkxf9Jf8LU3oeP86DmIH7J SyA9aZdVHX194H5KVG4nN5yvtyfmMRUpT7uqFFtv57Rn8PBuX8fZ9djymx03SBRh OdWU4EXyzmeyMtrgLIKUxv5q31lKg5S49lAdDV9fTEvJb/yH6AANug6zt63oj1rv gdsNkDZwZ04BU8to0UDszgWOyGu13hDrUCot2VXXSeVckHDcqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJ7F2vW6mdq/e2ApbG11tm6kbKFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvNTIxNGU4MmItZDFlYy0z NmQ2LWI1OGEtMDRkODQ1YWVkOWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBREfoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTXdEAy+mSFZJbzWdPLIUcBqV+xpCIVlwq3jQmeFWwKc0BpFyFG2WIL qO60ymNgSi3WG0lRuPS4hgKEe/W64jZd9zpm+Guef0eLsEWLGW9rr3SleDkdaVvU a3JUTpawmc17wEgoIAbqacPto8AvTMPqlG0Xb2tV2iRJ2Yl62vyON5PWBA1F+2AX VxNYjL8SI+Yw/zSYoIYr39s721rUbKtNy5yyAWlRaXqXvzczf7RJKLb7vIS+G8s4 967UCF/C4dPx7iJe3Ml8h76ugItJV9J+WrNcfIZUIo280/k4ZbCt2GhMwA2CoOCz PHXrMVkYQQwqMsk6EpBYZo0iWAKzLsk= -----END CERTIFICATE-----Generated at Sat Aug 23 06:42:46 2025 by rpki-client