$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38/1b6b4554-6168-3529-a377-02cd9bc61653.roa File: 1b6b4554-6168-3529-a377-02cd9bc61653.roa (raw, json) Hash identifier: TfZyXJ/OVvluaoBhOO67s8+qL6qgSZOY6QiWb6iAcAw= Subject key identifier: 92:9F:42:BF:B5:F1:F2:77:55:3A:20:14:04:AF:F3:1F:9A:C6:EE:3A Certificate issuer: /CN=16a8300a-6b73-42c6-b812-6b49b6587a38 Certificate serial: 010D0C9F4328584A82AB4BB512A86E27BC588940 Authority key identifier: 99:16:53:9A:35:B6:5A:F5:A1:E1:A4:92:9E:EF:8B:2B:1D:87:43:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38/1b6b4554-6168-3529-a377-02cd9bc61653.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 395648 IP address blocks: 23.173.248.0/24 maxlen: 24 2602:f946::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38/16a8300a-6b73-42c6-b812-6b49b6587a38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38/16a8300a-6b73-42c6-b812-6b49b6587a38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:4b:b5:12:a8:6e:27:bc:58:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16a8300a-6b73-42c6-b812-6b49b6587a38 Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=f9a965c3-3142-41c0-8a24-db14f665ab08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6b:5b:a9:73:9c:31:56:53:24:f0:4d:54:21: 97:0b:68:16:2a:09:b0:92:09:1d:c0:a6:7a:1a:e0: f5:5f:66:47:ec:3e:b5:7a:44:b5:2b:13:e5:a3:18: 28:dd:c5:16:2d:14:e8:cb:c8:d6:f1:85:3f:9b:83: 0b:ae:2f:fa:f8:81:7e:23:85:36:a7:77:17:89:ac: 12:a7:bf:13:ad:98:fd:81:9d:ea:51:9a:68:05:9c: 2b:dc:5f:90:98:d5:c2:3c:59:20:05:33:ce:38:c8: 41:df:36:7f:c4:e9:69:92:d7:b4:66:99:22:9f:a1: a2:fd:0b:46:02:e3:e4:65:c2:fb:52:3e:59:92:4f: c0:9b:07:3b:d9:3c:0f:fa:ec:f5:79:e4:f6:e9:01: 90:06:3a:e9:fb:c1:34:e2:13:87:86:9e:b1:5d:4d: 40:18:1d:29:95:68:ad:04:bf:4f:2f:1a:39:c1:0f: 06:53:ee:37:e3:69:7d:bd:76:3e:4c:b8:6a:d3:66: c8:7f:bb:e3:6f:a0:a7:7e:d5:ea:a4:fa:c0:5e:b3: 2b:6f:10:aa:ef:06:9f:cd:a1:a2:6e:3c:ef:1d:ac: fb:58:80:b9:c3:1f:fd:80:39:58:0e:72:98:91:c1: 67:e7:a8:04:7e:ed:84:f5:0c:4b:84:c7:7b:f1:2d: 3c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:9F:42:BF:B5:F1:F2:77:55:3A:20:14:04:AF:F3:1F:9A:C6:EE:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38/1b6b4554-6168-3529-a377-02cd9bc61653.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38/16a8300a-6b73-42c6-b812-6b49b6587a38.crl X509v3 Authority Key Identifier: keyid:99:16:53:9A:35:B6:5A:F5:A1:E1:A4:92:9E:EF:8B:2B:1D:87:43:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/16a8300a-6b73-42c6-b812-6b49b6587a38.cer sbgp-ipAddrBlock: critical IPv4: 23.173.248.0/24 IPv6: 2602:f946::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:aa:dc:0b:11:e7:5a:56:57:db:c1:a9:4c:6b:21:ff:49:f3: 8e:2e:11:fe:51:92:13:0d:85:b5:9e:ca:50:c1:f8:7c:bd:66: 32:6c:9f:dc:fc:11:65:c5:af:0f:ec:47:76:0f:f4:86:fd:21: 55:35:f6:f0:bd:70:9d:5e:10:92:d2:05:be:d3:21:64:f3:f4: 64:f8:82:c8:a8:70:af:5c:64:4b:ec:ca:1b:31:ea:07:04:e3: f8:c1:ed:28:b2:73:0e:60:43:9c:9e:81:e1:bc:4f:a3:94:28: d9:ea:7f:71:3d:36:34:8f:fa:17:1d:19:91:72:e5:4a:ad:4c: 12:62:53:31:3b:bf:c1:86:ef:96:64:4d:02:19:3b:ef:41:16: 06:86:aa:02:89:75:a9:3f:fa:d6:65:d3:ca:19:dd:16:17:9c: 61:b9:00:d2:d2:6f:5d:7a:92:e0:fb:a4:40:7d:eb:2a:19:17: 71:ef:21:b1:3c:d5:91:e4:b0:b7:f3:1e:2e:2d:8c:8c:d8:71: 2f:bc:5c:97:b3:55:92:4f:e2:a8:2a:e1:9d:8c:63:cd:be:ec: 52:b0:36:2b:12:79:19:ab:73:24:e7:43:11:b2:eb:dd:a4:f5: c4:0e:2b:10:e4:01:34:3c:72:1c:b5:71:27:07:29:3c:bb:57: 63:f9:e3:a2 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEqCq0u1EqhuJ7xYiUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZhODMwMGEtNmI3My00MmM2LWI4MTItNmI0OWI2NTg3 YTM4MB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk ZjlhOTY1YzMtMzE0Mi00MWMwLThhMjQtZGIxNGY2NjVhYjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2tbqXOcMVZTJPBNVCGXC2gWKgmwkgkdwKZ6 GuD1X2ZH7D61ekS1KxPloxgo3cUWLRToy8jW8YU/m4MLri/6+IF+I4U2p3cXiawS p78TrZj9gZ3qUZpoBZwr3F+QmNXCPFkgBTPOOMhB3zZ/xOlpkte0Zpkin6Gi/QtG AuPkZcL7Uj5Zkk/Amwc72TwP+uz1eeT26QGQBjrp+8E04hOHhp6xXU1AGB0plWit BL9PLxo5wQ8GU+4342l9vXY+TLhq02bIf7vjb6CnftXqpPrAXrMrbxCq7wafzaGi bjzvHaz7WIC5wx/9gDlYDnKYkcFn56gEfu2E9QxLhMd78S08nQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJKfQr+18fJ3VTogFASv8x+axu46MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xNmE4 MzAwYS02YjczLTQyYzYtYjgxMi02YjQ5YjY1ODdhMzgvMWI2YjQ1NTQtNjE2OC0z NTI5LWEzNzctMDJjZDliYzYxNjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMTZhODMwMGEtNmI3My00MmM2LWI4 MTItNmI0OWI2NTg3YTM4LzE2YTgzMDBhLTZiNzMtNDJjNi1iODEyLTZiNDliNjU4 N2EzOC5jcmwwHwYDVR0jBBgwFoAUmRZTmjW2WvWh4aSSnu+LKx2HQ9swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xNmE4MzAwYS02YjczLTQyYzYtYjgxMi02YjQ5 YjY1ODdhMzguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF634MA4E AgACMAgDBgAmAvlGADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCjqtwLEedaVlfbwalMayH/SfOOLhH+UZIT DYW1nspQwfh8vWYybJ/c/BFlxa8P7Ed2D/SG/SFVNfbwvXCdXhCS0gW+0yFk8/Rk +ILIqHCvXGRL7MobMeoHBOP4we0osnMOYEOcnoHhvE+jlCjZ6n9xPTY0j/oXHRmR cuVKrUwSYlMxO7/Bhu+WZE0CGTvvQRYGhqoCiXWpP/rWZdPKGd0WF5xhuQDS0m9d epLg+6RAfesqGRdx7yGxPNWR5LC38x4uLYyM2HEvvFyXs1WST+KoKuGdjGPNvuxS sDYrEnkZq3Mk50MRsuvdpPXEDisQ5AE0PHIctXEnByk8u1dj+eOi -----END CERTIFICATE-----Generated at Wed Aug 6 05:23:54 2025 by rpki-client