$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284/53223fbd-6eb9-3932-b866-ff8d180e02ab.roa File: 53223fbd-6eb9-3932-b866-ff8d180e02ab.roa (raw, json) Hash identifier: rfTZIVwzaLQBVM+th+ns5lVo9WEmHIpei9+rqFUV4ts= Subject key identifier: B0:01:F1:EB:BA:91:61:78:63:D9:9C:CF:9C:F5:15:D4:6A:79:03:97 Certificate issuer: /CN=fa477642-e4af-4ff3-96bf-ada919ef1284 Certificate serial: 010D0C9F4328584ACCA64A1E172B9E12AD6EE380 Authority key identifier: E0:FF:A5:07:F5:AD:7E:37:8C:5F:0A:76:43:9A:47:AD:22:51:D6:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284/53223fbd-6eb9-3932-b866-ff8d180e02ab.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 394743 IP address blocks: 23.167.80.0/24 maxlen: 24 23.172.32.0/24 maxlen: 24 2605:12c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284/fa477642-e4af-4ff3-96bf-ada919ef1284.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284/fa477642-e4af-4ff3-96bf-ada919ef1284.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:4a:1e:17:2b:9e:12:ad:6e:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa477642-e4af-4ff3-96bf-ada919ef1284 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=eee1567f-74df-4edf-8749-a710c70033f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f7:93:ff:fe:19:d8:53:96:91:f1:4b:5d:f5: 70:ef:68:42:a6:38:3b:70:eb:20:9e:c4:2f:6e:4b: 55:7d:71:d4:5d:f9:3b:fc:8e:34:f0:4a:fa:f9:ed: 08:cb:0b:fa:26:bc:ff:84:d4:00:b4:6b:45:41:fb: a6:c4:41:65:4c:cf:1c:bd:ec:6c:a3:0f:93:90:dc: e4:b3:7a:27:88:1d:31:6f:85:89:e3:6a:8e:6e:06: dc:6d:24:df:bf:65:69:5f:77:dd:5a:ce:9a:04:b8: 0e:bd:d6:e2:30:65:30:99:c4:23:8a:57:97:47:5f: 10:21:6a:74:2a:54:ca:b0:a2:dc:6c:60:d0:48:a8: 07:06:61:c5:e7:c6:b5:86:49:2a:59:fe:42:42:fa: 94:3b:75:fc:5e:2b:cf:fd:6b:f7:52:5d:97:3a:5c: af:34:82:27:81:bd:10:5d:b0:51:81:98:1d:d2:a5: b0:af:cc:6f:85:8c:ab:db:19:ab:05:d7:c0:9a:12: 6e:05:52:47:89:dc:f2:57:f6:6d:0e:53:51:29:23: 86:94:bf:a5:2c:88:7a:71:d0:69:d7:11:10:be:83: bb:b9:23:e2:54:71:bc:67:57:05:06:bb:52:b5:5f: 5d:d5:07:5a:67:cf:95:fc:81:5f:86:0c:45:e6:65: 68:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:01:F1:EB:BA:91:61:78:63:D9:9C:CF:9C:F5:15:D4:6A:79:03:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284/53223fbd-6eb9-3932-b866-ff8d180e02ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284/fa477642-e4af-4ff3-96bf-ada919ef1284.crl X509v3 Authority Key Identifier: keyid:E0:FF:A5:07:F5:AD:7E:37:8C:5F:0A:76:43:9A:47:AD:22:51:D6:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284.cer sbgp-ipAddrBlock: critical IPv4: 23.167.80.0/24 23.172.32.0/24 IPv6: 2605:12c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:f3:14:1b:b9:e5:23:53:d3:0d:9e:2a:49:7d:9e:7b:26:1a: 05:9a:0a:66:54:8b:0e:c0:46:b4:2b:57:a4:f3:43:c8:43:84: b9:32:0d:00:d4:d4:70:e5:dc:02:e6:74:ba:4b:cc:8d:ba:8c: b5:28:0f:ec:c1:54:b8:01:0f:48:82:de:87:cc:2a:b3:ee:b8: 51:47:bf:16:d9:0e:b6:f1:58:98:86:9b:6d:70:cc:0c:8d:57: f8:46:45:e8:8f:7e:fa:c1:aa:36:a4:d4:2f:5c:71:18:24:a2: 86:1a:12:ce:e3:e3:81:13:19:2e:5d:31:8b:10:98:13:72:b6: 4e:16:a8:93:eb:a9:30:65:04:21:9e:e8:64:8b:8f:2c:61:3b: 18:ab:23:6b:d7:e4:44:8e:83:32:ac:26:69:6b:f7:9a:2f:32: 51:24:de:9a:17:bc:95:34:9f:55:e3:05:c8:76:67:57:49:d6: 9a:72:23:75:eb:cb:c0:7a:b8:c0:bf:79:cd:ff:32:82:de:41: 07:e5:85:7d:6a:72:79:25:1c:0e:53:5a:af:c0:35:c6:b4:a7: cc:fc:b7:e3:96:f3:45:3b:be:c2:b4:7b:51:04:12:88:16:72: 58:e3:55:da:87:2b:18:88:6e:b8:21:61:55:09:17:74:81:16: bf:a8:b0:d6 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWErMpkoeFyueEq1u44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmE0Nzc2NDItZTRhZi00ZmYzLTk2YmYtYWRhOTE5ZWYx Mjg0MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZWVlMTU2N2YtNzRkZi00ZWRmLTg3NDktYTcxMGM3MDAzM2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/eT//4Z2FOWkfFLXfVw72hCpjg7cOsgnsQv bktVfXHUXfk7/I408Er6+e0Iywv6Jrz/hNQAtGtFQfumxEFlTM8cvexsow+TkNzk s3oniB0xb4WJ42qObgbcbSTfv2VpX3fdWs6aBLgOvdbiMGUwmcQjileXR18QIWp0 KlTKsKLcbGDQSKgHBmHF58a1hkkqWf5CQvqUO3X8XivP/Wv3Ul2XOlyvNIIngb0Q XbBRgZgd0qWwr8xvhYyr2xmrBdfAmhJuBVJHidzyV/ZtDlNRKSOGlL+lLIh6cdBp 1xEQvoO7uSPiVHG8Z1cFBrtStV9d1QdaZ8+V/IFfhgxF5mVo+QIDAQABo4IDajCC A2YwHQYDVR0OBBYEFLAB8eu6kWF4Y9mcz5z1FdRqeQOXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mYTQ3 NzY0Mi1lNGFmLTRmZjMtOTZiZi1hZGE5MTllZjEyODQvNTMyMjNmYmQtNmViOS0z OTMyLWI4NjYtZmY4ZDE4MGUwMmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmE0Nzc2NDItZTRhZi00ZmYzLTk2 YmYtYWRhOTE5ZWYxMjg0L2ZhNDc3NjQyLWU0YWYtNGZmMy05NmJmLWFkYTkxOWVm MTI4NC5jcmwwHwYDVR0jBBgwFoAU4P+lB/WtfjeMXwp2Q5pHrSJR1i8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mYTQ3NzY0Mi1lNGFmLTRmZjMtOTZiZi1hZGE5 MTllZjEyODQuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF6dQAwQA F6wgMA0EAgACMAcDBQAmBRLAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADnzFBu55SNT0w2eKkl9nnsmGgWa CmZUiw7ARrQrV6TzQ8hDhLkyDQDU1HDl3ALmdLpLzI26jLUoD+zBVLgBD0iC3ofM KrPuuFFHvxbZDrbxWJiGm21wzAyNV/hGReiPfvrBqjak1C9ccRgkooYaEs7j44ET GS5dMYsQmBNytk4WqJPrqTBlBCGe6GSLjyxhOxirI2vX5ESOgzKsJmlr95ovMlEk 3poXvJU0n1XjBch2Z1dJ1ppyI3Xry8B6uMC/ec3/MoLeQQflhX1qcnklHA5TWq/A Nca0p8z8t+OW80U7vsK0e1EEEogWcljjVdqHKxiIbrghYVUJF3SBFr+osNY= -----END CERTIFICATE-----Generated at Sun Aug 24 09:54:00 2025 by rpki-client