$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/bd9fa510-4cb1-36ac-b6ef-d4748c094e1a.roa File: bd9fa510-4cb1-36ac-b6ef-d4748c094e1a.roa (raw, json) Hash identifier: LTo9BsNivqj5GF3LSANvUNKj4lhedZPbHEn4BPAp3Ew= Subject key identifier: 93:02:B8:92:3A:B2:16:66:26:56:20:D6:2E:10:9B:91:ED:76:C5:CC Certificate issuer: /CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc Certificate serial: 010D0C9F4328584A9E9612C8B1AE660866506180 Authority key identifier: 54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/bd9fa510-4cb1-36ac-b6ef-d4748c094e1a.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 399624 IP address blocks: 23.129.68.0/24 maxlen: 24 2602:f7a7::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:12:c8:b1:ae:66:08:66:50:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=9d716b47-2ce6-41c6-9713-acbd7705dd36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:53:f7:3c:3d:21:13:f3:da:1e:4e:5c:6b:45: a3:e7:5f:3d:27:b7:02:5d:ad:55:7b:5c:fc:15:ef: 62:6b:9b:05:c2:ea:86:52:82:3d:74:11:dc:3e:92: 7b:a8:59:a4:dc:26:44:7c:aa:4d:93:f1:1c:fd:24: 0c:71:fc:aa:59:02:79:99:b3:0f:eb:57:94:c1:7e: 2e:55:d5:c6:a6:56:9b:98:43:8c:35:7a:c4:a3:db: c6:89:66:b2:17:2b:97:2b:97:c3:cc:e5:22:c9:38: 86:39:3c:bc:39:a1:f4:b7:bd:a9:46:2c:c3:f9:47: 61:e2:d8:9b:f6:ab:e4:a2:fc:72:18:2f:76:4e:f5: 84:e9:4c:e3:42:3e:56:73:94:f2:8c:6a:d4:fa:8b: 59:c2:ce:ad:21:69:17:8f:2c:61:03:bb:82:82:5e: a0:2b:51:ea:fe:28:51:09:22:91:3e:31:72:18:78: c4:d0:01:72:40:55:4c:49:0b:ac:2a:36:89:64:31: 19:c0:9d:2d:1d:33:d6:68:4d:77:72:a6:4c:9a:63: 52:cc:8c:40:27:1d:4c:43:f7:2b:1e:3d:62:1b:aa: f8:25:c5:1a:7f:4f:c6:03:9b:02:44:df:e2:23:b0: 4c:a2:7a:50:f0:ed:37:60:74:0e:2e:23:eb:96:0b: 5c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:02:B8:92:3A:B2:16:66:26:56:20:D6:2E:10:9B:91:ED:76:C5:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/bd9fa510-4cb1-36ac-b6ef-d4748c094e1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl X509v3 Authority Key Identifier: keyid:54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer sbgp-ipAddrBlock: critical IPv4: 23.129.68.0/24 IPv6: 2602:f7a7::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:c6:f2:eb:c3:a7:a3:b6:42:4b:4d:97:a5:86:91:56:34:37: f9:21:02:98:f3:cb:bd:e6:46:90:28:da:1f:43:40:55:a4:48: dd:ae:de:8e:24:34:aa:9c:ff:d8:c6:60:52:b7:39:51:58:10: a4:a9:42:95:22:7c:61:7a:24:21:f8:39:3d:de:b9:6d:b5:d5: 49:27:ac:ee:80:ca:77:c0:c9:31:7f:17:7f:3b:40:d1:3c:b7: de:03:e0:07:01:6c:77:ff:79:a5:85:6f:fe:d6:65:33:ba:2b: 13:3c:ed:61:02:82:d2:5a:9b:b0:b6:0f:51:05:9d:cf:af:e3: 02:da:17:ae:03:8f:2c:5b:5a:12:7e:13:a5:df:cc:87:fd:e3: 65:9a:3a:e1:03:14:b5:8b:d5:16:bd:51:ac:35:17:06:ea:0d: 5d:9e:e9:34:6d:5d:41:11:45:5f:89:a7:05:96:d1:8e:2f:f5: c7:8d:a2:ad:f9:23:7a:04:a3:62:23:19:a7:7e:8e:9d:61:0b: 90:88:61:78:79:38:00:34:a8:64:e4:55:bf:21:77:9e:a3:d1: 89:bc:d0:68:f1:13:06:5c:6e:c4:fa:ed:4d:ef:58:45:c0:ea: db:0d:de:27:32:56:86:80:bd:47:3b:63:c0:45:e8:19:fc:17: 11:b2:ef:05 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEqelhLIsa5mCGZQYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWUyMmM1OWUtMjkwNC00ZWE2LWIwNDQtMGE5ZmFjMzk0 NmNjMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk OWQ3MTZiNDctMmNlNi00MWM2LTk3MTMtYWNiZDc3MDVkZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVP3PD0hE/PaHk5ca0Wj5189J7cCXa1Ve1z8 Fe9ia5sFwuqGUoI9dBHcPpJ7qFmk3CZEfKpNk/Ec/SQMcfyqWQJ5mbMP61eUwX4u VdXGplabmEOMNXrEo9vGiWayFyuXK5fDzOUiyTiGOTy8OaH0t72pRizD+Udh4tib 9qvkovxyGC92TvWE6UzjQj5Wc5TyjGrU+otZws6tIWkXjyxhA7uCgl6gK1Hq/ihR CSKRPjFyGHjE0AFyQFVMSQusKjaJZDEZwJ0tHTPWaE13cqZMmmNSzIxAJx1MQ/cr Hj1iG6r4JcUaf0/GA5sCRN/iI7BMonpQ8O03YHQOLiPrlgtcuwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJMCuJI6shZmJlYg1i4Qm5HtdsXMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZTIy YzU5ZS0yOTA0LTRlYTYtYjA0NC0wYTlmYWMzOTQ2Y2MvYmQ5ZmE1MTAtNGNiMS0z NmFjLWI2ZWYtZDQ3NDhjMDk0ZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWUyMmM1OWUtMjkwNC00ZWE2LWIw NDQtMGE5ZmFjMzk0NmNjLzVlMjJjNTllLTI5MDQtNGVhNi1iMDQ0LTBhOWZhYzM5 NDZjYy5jcmwwHwYDVR0jBBgwFoAUVAq19A7rP/3q8yJu5kT27+vMkGkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZTIyYzU5ZS0yOTA0LTRlYTYtYjA0NC0wYTlm YWMzOTQ2Y2MuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4FEMA4E AgACMAgDBgAmAvenADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCFxvLrw6ejtkJLTZelhpFWNDf5IQKY88u9 5kaQKNofQ0BVpEjdrt6OJDSqnP/YxmBStzlRWBCkqUKVInxheiQh+Dk93rlttdVJ J6zugMp3wMkxfxd/O0DRPLfeA+AHAWx3/3mlhW/+1mUzuisTPO1hAoLSWpuwtg9R BZ3Pr+MC2heuA48sW1oSfhOl38yH/eNlmjrhAxS1i9UWvVGsNRcG6g1dnuk0bV1B EUVfiacFltGOL/XHjaKt+SN6BKNiIxmnfo6dYQuQiGF4eTgANKhk5FW/IXeeo9GJ vNBo8RMGXG7E+u1N71hFwOrbDd4nMlaGgL1HO2PARegZ/BcRsu8F -----END CERTIFICATE-----Generated at Sun Aug 24 09:38:29 2025 by rpki-client