$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/d8d325c9-b65a-3269-8aa7-2b6f2a54e8c7.roa File: d8d325c9-b65a-3269-8aa7-2b6f2a54e8c7.roa (raw, json) Hash identifier: 5QNxqFnmfwGQUdMmBMhtlMqimrd41IuBJWYj3O7aAhk= Subject key identifier: 5F:7C:FA:08:20:EA:02:9F:79:91:6C:21:61:82:D7:34:22:F6:9F:9E Certificate issuer: /CN=029df8bd-41c5-4f22-a4bc-f84f1bc04bfc Certificate serial: 010D0C9F4328584A4DA03F78831E31A7DF59B380 Authority key identifier: 8A:ED:2B:27:17:D4:6B:41:C6:6A:26:23:08:87:A8:D8:8F:91:6D:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/d8d325c9-b65a-3269-8aa7-2b6f2a54e8c7.roa Signing time: Wed 25 Jun 2025 01:00:49 +0000 ROA not before: Wed 25 Jun 2025 01:00:49 +0000 ROA not after: Tue 23 Sep 2025 01:00:49 +0000 asID: 401556 IP address blocks: 23.132.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4d:a0:3f:78:83:1e:31:a7:df:59:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=029df8bd-41c5-4f22-a4bc-f84f1bc04bfc Validity Not Before: Jun 25 01:00:49 2025 GMT Not After : Sep 23 01:00:49 2025 GMT Subject: CN=fbc6d139-dfee-466a-8379-f6351bf302b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:17:87:1a:36:18:03:c7:71:90:38:24:63:87: 3b:ac:58:00:7c:c5:f5:48:79:3b:8e:a4:b3:51:5c: 31:7b:3c:ff:8d:82:97:86:18:86:af:7f:72:31:59: 95:d9:78:bf:df:77:9c:8e:b9:a4:86:d9:62:70:48: 92:88:c0:7c:35:9a:88:bb:8d:48:a4:fe:b8:0a:a0: 48:07:31:6c:4f:92:d2:5f:4a:af:d8:b6:49:b0:9e: b0:3b:cd:52:18:13:78:60:11:ca:ab:b7:b2:a2:16: bc:6d:c6:46:23:35:f5:ce:d9:8b:5b:ff:d9:fb:33: 3d:4c:af:42:23:f0:54:d5:b0:cd:d6:f9:00:f1:93: a5:c4:72:b9:11:55:43:e1:71:88:58:79:4b:04:6f: e1:2c:95:2a:27:a5:7d:86:02:3f:6e:86:db:88:24: 83:b9:6f:1c:28:a7:a1:75:0a:fe:50:99:c3:d4:20: 99:c3:86:a7:59:d7:79:be:4f:cf:ad:b4:2c:b0:43: 9a:df:4b:5f:91:9a:b3:15:e6:05:80:90:62:70:16: 0d:93:46:04:32:cd:66:b7:15:45:78:18:ed:30:13: 37:48:5d:07:49:0d:f0:dd:56:c2:82:a4:be:51:bd: 62:07:57:88:c6:57:18:14:9d:0d:13:69:f7:5a:1b: ea:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:7C:FA:08:20:EA:02:9F:79:91:6C:21:61:82:D7:34:22:F6:9F:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/d8d325c9-b65a-3269-8aa7-2b6f2a54e8c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc.crl X509v3 Authority Key Identifier: keyid:8A:ED:2B:27:17:D4:6B:41:C6:6A:26:23:08:87:A8:D8:8F:91:6D:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc.cer sbgp-ipAddrBlock: critical IPv4: 23.132.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:dc:4e:ee:47:8e:9d:c6:22:ba:3d:45:de:d7:c9:e2:b1:13: 9d:10:01:c3:9f:44:0d:fc:d2:37:d3:c0:a7:a8:bc:a8:cf:00: bc:46:18:9c:5a:3c:b2:47:1b:91:d5:11:52:54:3b:e3:08:f8: 73:13:9d:b1:8e:84:68:72:9a:d2:e5:ca:bf:39:40:46:73:68: f0:2c:70:97:5d:77:55:9f:36:0c:4e:98:e6:54:f8:62:df:83: cb:d8:9e:13:ec:90:aa:f6:da:c9:94:26:55:7a:95:5b:da:42: 94:a3:3e:24:a3:26:66:8e:a2:6c:1b:0e:e6:c2:0c:1f:c9:4e: fb:55:99:b1:f0:66:a6:49:4c:94:d4:8c:91:70:c1:74:75:48: 81:7a:f8:bb:bb:57:80:0a:a0:07:58:c5:2a:2d:e6:8d:59:c1: 1d:65:6c:51:fc:c7:45:86:dc:c8:54:08:73:3a:77:d9:c2:c8: b6:02:67:3f:d1:41:78:45:a6:89:a1:16:21:41:b9:11:de:eb: fd:3c:ae:e9:0c:db:b2:54:95:e3:4c:96:07:3f:50:d2:06:b4: 8a:d8:1b:52:bb:2d:6c:c1:d9:66:f5:e2:00:3a:c4:ac:c0:c2: 30:e9:e2:cd:b0:86:bd:9f:f1:3b:50:77:f0:cf:75:c6:d0:a2: c8:6a:22:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpNoD94gx4xp99Zs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDI5ZGY4YmQtNDFjNS00ZjIyLWE0YmMtZjg0ZjFiYzA0 YmZjMB4XDTI1MDYyNTAxMDA0OVoXDTI1MDkyMzAxMDA0OVowLzEtMCsGA1UEAxMk ZmJjNmQxMzktZGZlZS00NjZhLTgzNzktZjYzNTFiZjMwMmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxeHGjYYA8dxkDgkY4c7rFgAfMX1SHk7jqSz UVwxezz/jYKXhhiGr39yMVmV2Xi/33ecjrmkhtlicEiSiMB8NZqIu41IpP64CqBI BzFsT5LSX0qv2LZJsJ6wO81SGBN4YBHKq7eyoha8bcZGIzX1ztmLW//Z+zM9TK9C I/BU1bDN1vkA8ZOlxHK5EVVD4XGIWHlLBG/hLJUqJ6V9hgI/bobbiCSDuW8cKKeh dQr+UJnD1CCZw4anWdd5vk/PrbQssEOa30tfkZqzFeYFgJBicBYNk0YEMs1mtxVF eBjtMBM3SF0HSQ3w3VbCgqS+Ub1iB1eIxlcYFJ0NE2n3WhvqnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF98+ggg6gKfeZFsIWGC1zQi9p+eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8wMjlk ZjhiZC00MWM1LTRmMjItYTRiYy1mODRmMWJjMDRiZmMvZDhkMzI1YzktYjY1YS0z MjY5LThhYTctMmI2ZjJhNTRlOGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMDI5ZGY4YmQtNDFjNS00ZjIyLWE0 YmMtZjg0ZjFiYzA0YmZjLzAyOWRmOGJkLTQxYzUtNGYyMi1hNGJjLWY4NGYxYmMw NGJmYy5jcmwwHwYDVR0jBBgwFoAUiu0rJxfUa0HGaiYjCIeo2I+RbXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8wMjlkZjhiZC00MWM1LTRmMjItYTRiYy1mODRm MWJjMDRiZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4Q8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPcTu5Hjp3GIro9Rd7XyeKxE50QAcOfRA380jfTwKeovKjPALxGGJxa PLJHG5HVEVJUO+MI+HMTnbGOhGhymtLlyr85QEZzaPAscJddd1WfNgxOmOZU+GLf g8vYnhPskKr22smUJlV6lVvaQpSjPiSjJmaOomwbDubCDB/JTvtVmbHwZqZJTJTU jJFwwXR1SIF6+Lu7V4AKoAdYxSot5o1ZwR1lbFH8x0WG3MhUCHM6d9nCyLYCZz/R QXhFpomhFiFBuRHe6/08rukM27JUleNMlgc/UNIGtIrYG1K7LWzB2Wb14gA6xKzA wjDp4s2whr2f8TtQd/DPdcbQoshqIlA= -----END CERTIFICATE-----Generated at Tue Jul 1 05:13:22 2025 by rpki-client