$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/c7802a2b-f10d-3f9f-b4b5-5f85ccb933de.roa File: c7802a2b-f10d-3f9f-b4b5-5f85ccb933de.roa (raw, json) Hash identifier: sLRfbMg2lzjJbOFuGJMY3G7hecTXIs2hI9ngUwFQ6w0= Subject key identifier: A1:88:EE:14:91:93:C7:0D:87:31:D1:CF:7B:49:83:31:67:59:BB:D9 Certificate issuer: /CN=cf96d190-5b35-4b24-ac78-599aa0e50405 Certificate serial: 010D0C9F4328584A2C202262B187E20517601740 Authority key identifier: 56:97:1D:BB:93:D3:52:CE:15:61:9B:81:22:B2:A7:B6:42:51:FB:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/c7802a2b-f10d-3f9f-b4b5-5f85ccb933de.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 400655 IP address blocks: 23.191.184.0/24 maxlen: 24 2602:f7e4::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/cf96d190-5b35-4b24-ac78-599aa0e50405.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/cf96d190-5b35-4b24-ac78-599aa0e50405.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:22:62:b1:87:e2:05:17:60:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf96d190-5b35-4b24-ac78-599aa0e50405 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=55a997a6-6964-420f-b9c6-4ef4eb07703f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:00:bc:7b:1b:eb:ab:65:32:41:78:6a:b2:e1: 83:bd:49:44:86:8e:97:e9:cf:a5:2f:bf:88:52:d0: 04:a1:ba:91:a5:f2:83:5b:2e:2f:63:56:52:49:73: 7f:2d:3d:53:98:86:63:53:ed:50:54:60:6d:4d:56: 1e:97:76:93:00:20:80:80:51:e4:64:e0:82:4e:b2: 74:4c:d4:d8:96:48:c5:83:77:a9:73:a4:7b:2e:94: 45:83:c7:eb:2a:0f:be:ae:10:20:86:f6:fd:eb:89: e5:2a:b9:8d:b0:97:c8:6f:4d:ae:7e:4f:e6:5b:6d: d6:a5:54:3b:04:0e:47:f9:3e:ec:b5:ad:b0:79:a7: ba:a2:98:45:ca:66:23:3f:48:75:f7:35:4f:11:98: e3:7a:15:95:91:20:d9:2b:3b:71:47:d1:67:77:18: c0:a0:ed:49:1c:56:2f:c1:0f:3e:99:0f:76:02:6c: b7:63:ad:93:fb:21:09:cc:39:31:02:b6:d9:4b:28: 2e:bc:63:b6:4b:11:87:1f:46:8d:c6:98:84:b6:68: 1e:5b:b0:b7:1e:3c:23:04:f9:f9:f9:46:3a:d5:33: 71:48:3e:40:6b:3c:0e:ea:94:71:92:01:12:4a:e2: 35:f3:6a:28:02:26:8e:d5:e0:88:2f:07:9a:7c:5a: be:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:88:EE:14:91:93:C7:0D:87:31:D1:CF:7B:49:83:31:67:59:BB:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/c7802a2b-f10d-3f9f-b4b5-5f85ccb933de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/cf96d190-5b35-4b24-ac78-599aa0e50405.crl X509v3 Authority Key Identifier: keyid:56:97:1D:BB:93:D3:52:CE:15:61:9B:81:22:B2:A7:B6:42:51:FB:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405.cer sbgp-ipAddrBlock: critical IPv4: 23.191.184.0/24 IPv6: 2602:f7e4::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:f2:97:c5:80:15:ed:da:0c:a3:af:33:7c:34:7d:3a:19:a2: a8:43:9c:7b:09:0f:5e:1b:4c:37:52:36:dc:23:31:39:7c:f4: f5:09:4a:c7:eb:f9:5b:31:98:c6:82:08:9e:3b:33:55:1f:00: b7:95:2f:30:41:a1:3d:e4:ef:92:d2:9c:bc:11:23:8d:3f:ed: 32:d3:df:48:e6:7c:cb:dc:fb:ad:b4:eb:41:99:de:dd:8c:c0: a9:1e:5a:41:8c:dc:c6:a1:6b:14:6c:c5:bc:24:30:d5:dc:72: bc:18:8a:a9:a9:70:d8:0d:3e:4b:89:57:7b:1e:ac:bb:5e:d3: f6:51:94:69:ff:87:d1:01:ec:23:d6:4c:ff:d8:54:f6:0b:47: c5:cf:17:0e:de:ff:36:ee:08:e2:c4:cb:66:b7:87:4b:1f:55: 1e:c6:bb:0f:74:2f:d6:f8:fa:93:a7:e4:80:46:21:ed:b5:cb: 63:bd:65:77:42:92:be:47:45:b6:94:41:a4:39:1c:1e:a6:a4: 4f:8c:2c:35:7e:93:db:00:7c:c1:21:f5:e4:39:a4:a7:76:7f: c6:18:01:66:da:20:b0:19:0a:c2:ce:db:20:3c:24:63:76:b2: 77:2a:57:19:b8:84:89:16:5b:1a:2c:d3:d6:44:f8:2d:89:00: 28:ed:f7:65 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEosICJisYfiBRdgF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Y5NmQxOTAtNWIzNS00YjI0LWFjNzgtNTk5YWEwZTUw NDA1MB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk NTVhOTk3YTYtNjk2NC00MjBmLWI5YzYtNGVmNGViMDc3MDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngC8exvrq2UyQXhqsuGDvUlEho6X6c+lL7+I UtAEobqRpfKDWy4vY1ZSSXN/LT1TmIZjU+1QVGBtTVYel3aTACCAgFHkZOCCTrJ0 TNTYlkjFg3epc6R7LpRFg8frKg++rhAghvb964nlKrmNsJfIb02ufk/mW23WpVQ7 BA5H+T7sta2weae6ophFymYjP0h19zVPEZjjehWVkSDZKztxR9FndxjAoO1JHFYv wQ8+mQ92Amy3Y62T+yEJzDkxArbZSyguvGO2SxGHH0aNxpiEtmgeW7C3HjwjBPn5 +UY61TNxSD5AazwO6pRxkgESSuI182ooAiaO1eCILweafFq+8wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKGI7hSRk8cNhzHRz3tJgzFnWbvZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jZjk2 ZDE5MC01YjM1LTRiMjQtYWM3OC01OTlhYTBlNTA0MDUvYzc4MDJhMmItZjEwZC0z ZjlmLWI0YjUtNWY4NWNjYjkzM2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2Y5NmQxOTAtNWIzNS00YjI0LWFj NzgtNTk5YWEwZTUwNDA1L2NmOTZkMTkwLTViMzUtNGIyNC1hYzc4LTU5OWFhMGU1 MDQwNS5jcmwwHwYDVR0jBBgwFoAUVpcdu5PTUs4VYZuBIrKntkJR+6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jZjk2ZDE5MC01YjM1LTRiMjQtYWM3OC01OTlh YTBlNTA0MDUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7+4MA4E AgACMAgDBgAmAvfkADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCM8pfFgBXt2gyjrzN8NH06GaKoQ5x7CQ9e G0w3UjbcIzE5fPT1CUrH6/lbMZjGggieOzNVHwC3lS8wQaE95O+S0py8ESONP+0y 099I5nzL3PuttOtBmd7djMCpHlpBjNzGoWsUbMW8JDDV3HK8GIqpqXDYDT5LiVd7 Hqy7XtP2UZRp/4fRAewj1kz/2FT2C0fFzxcO3v827gjixMtmt4dLH1UexrsPdC/W +PqTp+SARiHttctjvWV3QpK+R0W2lEGkORwepqRPjCw1fpPbAHzBIfXkOaSndn/G GAFm2iCwGQrCztsgPCRjdrJ3KlcZuISJFlsaLNPWRPgtiQAo7fdl -----END CERTIFICATE-----Generated at Tue Jun 17 02:45:47 2025 by rpki-client