$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d1339b43-8caf-4134-a9d1-240a359ff9b1/fdb5113f-f4cc-3fc5-a72d-b07c07c7a519.roa File: fdb5113f-f4cc-3fc5-a72d-b07c07c7a519.roa (raw, json) Hash identifier: gHQLosKJ2LtmsYcnhQ+B0DOwm4a4TGP6fsx6YS5qyZ8= Subject key identifier: 90:8D:E9:25:16:38:D8:96:AB:3C:51:F6:38:6A:72:4E:FA:C9:35:33 Certificate issuer: /CN=d1339b43-8caf-4134-a9d1-240a359ff9b1 Certificate serial: 010D0C9F4328584A189549FDED29B7A45ECB8800 Authority key identifier: FA:AC:5A:02:14:F4:37:71:9D:55:52:F7:D1:2E:26:FC:59:2C:9A:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d1339b43-8caf-4134-a9d1-240a359ff9b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d1339b43-8caf-4134-a9d1-240a359ff9b1/fdb5113f-f4cc-3fc5-a72d-b07c07c7a519.roa Signing time: Fri 06 Jun 2025 01:00:50 +0000 ROA not before: Fri 06 Jun 2025 01:00:50 +0000 ROA not after: Thu 04 Sep 2025 01:00:50 +0000 asID: 401023 IP address blocks: 23.185.8.0/24 maxlen: 24 2602:f912::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d1339b43-8caf-4134-a9d1-240a359ff9b1/d1339b43-8caf-4134-a9d1-240a359ff9b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d1339b43-8caf-4134-a9d1-240a359ff9b1/d1339b43-8caf-4134-a9d1-240a359ff9b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d1339b43-8caf-4134-a9d1-240a359ff9b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:95:49:fd:ed:29:b7:a4:5e:cb:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1339b43-8caf-4134-a9d1-240a359ff9b1 Validity Not Before: Jun 6 01:00:50 2025 GMT Not After : Sep 4 01:00:50 2025 GMT Subject: CN=c0a3db7f-15d1-4588-928d-9645fd4f336a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a7:e8:a1:13:25:d3:45:9b:57:e6:c5:88:8e: db:cf:8b:67:53:e5:c3:13:c6:85:03:9b:9e:a7:23: 56:56:72:53:d2:c9:21:7a:40:18:25:4b:0b:c1:e4: fc:43:25:e0:73:98:c4:ba:88:f2:4b:7c:73:45:ef: 13:ac:49:16:3f:9c:5b:57:e1:84:db:8e:a8:45:6c: b7:98:b5:b6:ea:27:e9:68:f8:99:5a:1b:54:c2:00: 38:49:d1:c5:34:65:6c:1a:38:a4:d5:a7:d6:a9:37: 2c:61:ae:f9:85:5a:cb:2a:a2:b8:b8:69:ba:db:46: b3:b9:b5:3c:6f:6b:e9:bd:4a:a2:a6:9f:b1:2b:dc: 47:9a:bc:2d:96:a7:39:19:8a:1f:2c:2c:bb:c4:db: ff:34:5d:11:a9:19:e5:e0:f0:f4:18:5b:5f:50:23: 05:6d:e3:29:c1:b3:a6:82:9f:14:8c:d3:df:52:f0: 9c:89:d6:52:20:53:6b:21:29:d6:82:6b:b6:d5:5b: b1:2c:4a:69:86:a4:81:2d:36:00:76:92:74:65:5f: 86:3f:87:c4:b9:2a:56:29:66:06:94:98:32:32:56: f7:d2:22:44:2c:3a:39:59:b5:d3:23:25:56:10:67: 7d:34:31:66:27:f7:d3:ff:d6:08:24:4e:84:cf:ae: 77:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8D:E9:25:16:38:D8:96:AB:3C:51:F6:38:6A:72:4E:FA:C9:35:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d1339b43-8caf-4134-a9d1-240a359ff9b1/fdb5113f-f4cc-3fc5-a72d-b07c07c7a519.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d1339b43-8caf-4134-a9d1-240a359ff9b1/d1339b43-8caf-4134-a9d1-240a359ff9b1.crl X509v3 Authority Key Identifier: keyid:FA:AC:5A:02:14:F4:37:71:9D:55:52:F7:D1:2E:26:FC:59:2C:9A:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d1339b43-8caf-4134-a9d1-240a359ff9b1.cer sbgp-ipAddrBlock: critical IPv4: 23.185.8.0/24 IPv6: 2602:f912::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:cd:f0:f4:5b:72:05:86:f7:6d:29:fe:0a:e6:e9:f1:f1:30: 8c:07:a6:f0:28:b5:d5:2f:5b:78:22:20:6d:61:7f:97:91:33: 9e:15:b8:7d:f1:4d:7b:9e:ea:31:bd:1e:ca:0d:34:a8:de:e6: ac:ec:bb:41:87:0b:ad:dd:11:81:15:44:ec:ee:58:d7:4c:72: 2f:ba:37:8e:0e:3d:10:0c:0b:86:ff:e3:4a:54:84:b3:37:31: ba:59:da:49:77:0a:b9:fa:9d:aa:6f:9d:e2:e2:ff:76:68:6a: 48:f8:13:11:04:62:50:b6:46:84:ab:57:83:9c:c0:5c:92:f4: 95:9a:06:cc:64:4d:e7:2f:ce:79:9d:20:a6:02:a4:92:67:a3: d8:1a:5c:b4:33:47:10:f9:58:38:9c:99:05:08:f5:d8:99:64: 5f:2d:91:f9:a1:47:ef:ce:c0:4a:bf:32:30:36:25:3b:64:e5: 1f:5e:69:b7:6e:c7:ba:56:67:e2:9d:a8:ea:bb:a2:cf:e8:40: bf:d0:e6:f5:98:20:72:8f:b4:35:c5:19:0d:f7:5d:74:b7:f3: 1c:00:82:c5:0e:1f:3c:21:a8:9e:fc:62:3c:53:c3:a4:69:d1: 46:e3:2d:27:4e:9d:be:dc:d8:be:67:5d:90:e7:17:e3:b5:3c: a0:a4:82:b0 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEoYlUn97Sm3pF7LiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDEzMzliNDMtOGNhZi00MTM0LWE5ZDEtMjQwYTM1OWZm OWIxMB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk YzBhM2RiN2YtMTVkMS00NTg4LTkyOGQtOTY0NWZkNGYzMzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqfooRMl00WbV+bFiI7bz4tnU+XDE8aFA5ue pyNWVnJT0skhekAYJUsLweT8QyXgc5jEuojyS3xzRe8TrEkWP5xbV+GE246oRWy3 mLW26ifpaPiZWhtUwgA4SdHFNGVsGjik1afWqTcsYa75hVrLKqK4uGm620azubU8 b2vpvUqipp+xK9xHmrwtlqc5GYofLCy7xNv/NF0RqRnl4PD0GFtfUCMFbeMpwbOm gp8UjNPfUvCcidZSIFNrISnWgmu21VuxLEpphqSBLTYAdpJ0ZV+GP4fEuSpWKWYG lJgyMlb30iJELDo5WbXTIyVWEGd9NDFmJ/fT/9YIJE6Ez653WwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFJCN6SUWONiWqzxR9jhqck76yTUzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMTMz OWI0My04Y2FmLTQxMzQtYTlkMS0yNDBhMzU5ZmY5YjEvZmRiNTExM2YtZjRjYy0z ZmM1LWE3MmQtYjA3YzA3YzdhNTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDEzMzliNDMtOGNhZi00MTM0LWE5 ZDEtMjQwYTM1OWZmOWIxL2QxMzM5YjQzLThjYWYtNDEzNC1hOWQxLTI0MGEzNTlm ZjliMS5jcmwwHwYDVR0jBBgwFoAU+qxaAhT0N3GdVVL30S4m/Fksmo0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMTMzOWI0My04Y2FmLTQxMzQtYTlkMS0yNDBh MzU5ZmY5YjEuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF7kIMA0E AgACMAcDBQAmAvkSMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAGzN8PRbcgWG920p/grm6fHxMIwHpvAotdUv W3giIG1hf5eRM54VuH3xTXue6jG9HsoNNKje5qzsu0GHC63dEYEVROzuWNdMci+6 N44OPRAMC4b/40pUhLM3MbpZ2kl3Crn6napvneLi/3Zoakj4ExEEYlC2RoSrV4Oc wFyS9JWaBsxkTecvznmdIKYCpJJno9gaXLQzRxD5WDicmQUI9diZZF8tkfmhR+/O wEq/MjA2JTtk5R9eabdux7pWZ+KdqOq7os/oQL/Q5vWYIHKPtDXFGQ33XXS38xwA gsUOHzwhqJ78YjxTw6Rp0UbjLSdOnb7c2L5nXZDnF+O1PKCkgrA= -----END CERTIFICATE-----Generated at Sun Jun 15 15:25:54 2025 by rpki-client