$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4f74ea5d-ed82-4ec7-ba82-247305c841cd/9bd0a949-19d7-3d46-8dcc-08c51d63a399.roa File: 9bd0a949-19d7-3d46-8dcc-08c51d63a399.roa (raw, json) Hash identifier: Pbh+TqMxkwou3mrnJ7qLpTjmzaTJhQDl4CJU6HV1sNg= Subject key identifier: 48:90:D7:D1:2C:84:FE:9F:73:08:6B:79:D2:68:3C:4C:76:D4:12:D1 Certificate issuer: /CN=4f74ea5d-ed82-4ec7-ba82-247305c841cd Certificate serial: 010D0C9F4328584AD7D105197CB2F314F52BFE00 Authority key identifier: 07:2E:09:3F:E4:BD:49:99:43:C9:B4:2D:E2:2F:2F:2C:0E:60:4E:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4f74ea5d-ed82-4ec7-ba82-247305c841cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4f74ea5d-ed82-4ec7-ba82-247305c841cd/9bd0a949-19d7-3d46-8dcc-08c51d63a399.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 25731 IP address blocks: 23.145.216.0/24 maxlen: 24 142.202.95.0/24 maxlen: 24 2602:fab5::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4f74ea5d-ed82-4ec7-ba82-247305c841cd/4f74ea5d-ed82-4ec7-ba82-247305c841cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4f74ea5d-ed82-4ec7-ba82-247305c841cd/4f74ea5d-ed82-4ec7-ba82-247305c841cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4f74ea5d-ed82-4ec7-ba82-247305c841cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:05:19:7c:b2:f3:14:f5:2b:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f74ea5d-ed82-4ec7-ba82-247305c841cd Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=af692354-e00b-4be3-9190-bfb5aa53516a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a2:c1:fa:23:1d:90:f4:2d:40:86:3c:a2:1d: dc:07:f4:9d:b2:9d:72:60:54:8e:80:89:53:37:c3: c6:d2:e3:ee:12:df:f6:6b:1d:d9:9a:39:8d:3a:ba: ee:2d:11:81:07:b5:3a:64:b2:f5:bf:96:99:95:e2: 39:c2:4f:15:89:73:cd:8f:fc:05:c1:02:7e:39:a7: 4e:4c:4b:d3:50:75:70:a2:3e:78:c9:c1:2f:43:d2: 7a:dd:50:06:ea:72:e2:24:41:52:b0:08:e3:bf:7b: f9:e3:60:76:38:24:63:bd:98:8a:aa:32:67:4c:a6: f6:5e:de:d6:c8:e1:84:55:ec:3a:69:4f:ce:64:9a: ab:95:f3:37:19:87:d8:bb:35:35:0a:e0:f9:4a:43: 39:2d:f7:6f:49:51:05:3f:6e:21:0c:18:73:6d:55: c4:3b:1b:1c:0c:6f:43:d0:da:5e:d1:d1:c6:bb:07: cf:31:8d:e5:36:d2:c3:45:d2:5c:8a:31:a1:2f:7b: 27:31:df:f1:17:85:fc:78:d9:0f:d8:5b:37:31:42: 0c:92:50:ac:fa:3c:75:ce:1f:13:9a:87:29:f8:df: 84:8a:70:75:85:db:82:6a:03:46:07:d3:9e:f4:f0: 0b:ac:c9:88:9d:31:89:00:e7:f9:ab:1c:81:db:95: 7e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:90:D7:D1:2C:84:FE:9F:73:08:6B:79:D2:68:3C:4C:76:D4:12:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4f74ea5d-ed82-4ec7-ba82-247305c841cd/9bd0a949-19d7-3d46-8dcc-08c51d63a399.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4f74ea5d-ed82-4ec7-ba82-247305c841cd/4f74ea5d-ed82-4ec7-ba82-247305c841cd.crl X509v3 Authority Key Identifier: keyid:07:2E:09:3F:E4:BD:49:99:43:C9:B4:2D:E2:2F:2F:2C:0E:60:4E:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4f74ea5d-ed82-4ec7-ba82-247305c841cd.cer sbgp-ipAddrBlock: critical IPv4: 23.145.216.0/24 142.202.95.0/24 IPv6: 2602:fab5::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:6b:17:83:7d:f7:2a:88:7a:da:53:70:4e:ac:de:6c:6f:4f: 49:8a:41:3e:91:de:34:88:e4:dc:1c:e0:68:9c:5f:60:cb:76: 0f:4b:ce:c0:35:93:54:bb:1e:2c:79:d9:e8:6d:af:bb:51:4e: 5f:66:f3:37:b3:87:96:ee:a3:e0:4b:9b:80:3e:82:20:e7:3b: 39:b6:64:b9:b4:73:0a:2b:79:2a:3d:f8:24:a7:1e:e6:d5:2b: 1e:90:6f:a7:06:72:ee:56:d1:6f:39:62:65:8d:15:00:55:02: 95:34:35:e5:dc:e2:34:6d:cb:ea:28:a8:2d:9c:96:b9:24:5a: 19:2d:ff:b6:1f:ef:87:1b:95:5a:2f:cb:63:ea:db:96:a6:7b: d7:d9:18:bc:97:07:42:45:db:ee:e0:71:cb:c8:e9:92:fa:bf: 8a:f3:ed:d7:5b:7c:05:56:42:2d:41:55:df:1a:b0:1c:a4:8a: ba:56:5f:3f:48:96:4c:5a:23:c1:d0:bc:7b:e4:1d:5c:c3:b7: 9e:a6:8e:5a:3a:05:fe:d1:b3:85:99:cb:5d:dc:d0:88:d6:c1: 80:e0:63:5c:42:64:76:87:da:e1:30:02:c7:c4:9d:84:9d:2e: 7b:4e:56:9b:f7:1b:1b:13:5c:7a:0c:30:7f:6b:40:3c:13:6f: 2b:eb:1a:92 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWErX0QUZfLLzFPUr/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY3NGVhNWQtZWQ4Mi00ZWM3LWJhODItMjQ3MzA1Yzg0 MWNkMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk YWY2OTIzNTQtZTAwYi00YmUzLTkxOTAtYmZiNWFhNTM1MTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaLB+iMdkPQtQIY8oh3cB/Sdsp1yYFSOgIlT N8PG0uPuEt/2ax3ZmjmNOrruLRGBB7U6ZLL1v5aZleI5wk8ViXPNj/wFwQJ+OadO TEvTUHVwoj54ycEvQ9J63VAG6nLiJEFSsAjjv3v542B2OCRjvZiKqjJnTKb2Xt7W yOGEVew6aU/OZJqrlfM3GYfYuzU1CuD5SkM5LfdvSVEFP24hDBhzbVXEOxscDG9D 0Npe0dHGuwfPMY3lNtLDRdJcijGhL3snMd/xF4X8eNkP2Fs3MUIMklCs+jx1zh8T mocp+N+EinB1hduCagNGB9Oe9PALrMmInTGJAOf5qxyB25V+3wIDAQABo4IDazCC A2cwHQYDVR0OBBYEFEiQ19EshP6fcwhredJoPEx21BLRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80Zjc0 ZWE1ZC1lZDgyLTRlYzctYmE4Mi0yNDczMDVjODQxY2QvOWJkMGE5NDktMTlkNy0z ZDQ2LThkY2MtMDhjNTFkNjNhMzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNGY3NGVhNWQtZWQ4Mi00ZWM3LWJh ODItMjQ3MzA1Yzg0MWNkLzRmNzRlYTVkLWVkODItNGVjNy1iYTgyLTI0NzMwNWM4 NDFjZC5jcmwwHwYDVR0jBBgwFoAUBy4JP+S9SZlDybQt4i8vLA5gTsAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80Zjc0ZWE1ZC1lZDgyLTRlYzctYmE4Mi0yNDcz MDVjODQxY2QuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF5HYAwQA jspfMA4EAgACMAgDBgAmAvq1ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQASaxeDffcqiHraU3BOrN5sb09J ikE+kd40iOTcHOBonF9gy3YPS87ANZNUux4sednoba+7UU5fZvM3s4eW7qPgS5uA PoIg5zs5tmS5tHMKK3kqPfgkpx7m1SsekG+nBnLuVtFvOWJljRUAVQKVNDXl3OI0 bcvqKKgtnJa5JFoZLf+2H++HG5VaL8tj6tuWpnvX2Ri8lwdCRdvu4HHLyOmS+r+K 8+3XW3wFVkItQVXfGrAcpIq6Vl8/SJZMWiPB0Lx75B1cw7eepo5aOgX+0bOFmctd 3NCI1sGA4GNcQmR2h9rhMALHxJ2EnS57Tlab9xsbE1x6DDB/a0A8E28r6xqS -----END CERTIFICATE-----Generated at Sun Aug 24 01:25:12 2025 by rpki-client