$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/d603bc48-0e7c-3f9c-ac30-aa2ddd7af2bc.roa File: d603bc48-0e7c-3f9c-ac30-aa2ddd7af2bc.roa (raw, json) Hash identifier: pzYVWfXFRw+f5aS5DUdHaPysYiMsKpvjQTR1VivITnA= Subject key identifier: 8B:F6:73:FA:E5:4B:0B:BB:08:07:A5:10:71:93:2D:A4:23:6D:A3:57 Certificate issuer: /CN=3789343d-8560-48b0-9530-d2a1129fefe7 Certificate serial: 010D0C9F43285849D42FB0353B27B3E3466D8D80 Authority key identifier: 42:FD:E7:FA:D2:03:A1:BC:60:07:16:6B:17:B1:BA:42:B9:C1:9A:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/d603bc48-0e7c-3f9c-ac30-aa2ddd7af2bc.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 401228 IP address blocks: 23.183.216.0/24 maxlen: 24 2602:f87c::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:b0:35:3b:27:b3:e3:46:6d:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3789343d-8560-48b0-9530-d2a1129fefe7 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=90bc0c04-ea0e-4ccd-82b3-e0c0b4d7da39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3d:96:d3:1a:05:d8:0d:45:66:9a:3b:5a:ea: c3:00:c2:3f:a9:53:c1:70:2b:d3:27:40:7b:d4:7d: dd:e1:46:d6:38:ea:38:77:ec:a4:b9:3b:21:7f:6b: df:6f:e5:7d:51:5f:d6:30:be:9b:c7:96:20:13:f5: 35:98:83:d8:c3:4b:68:74:a3:9d:66:aa:da:73:08: 65:64:76:c1:0b:6c:db:25:6c:d0:20:5f:01:aa:81: cc:ee:9f:be:30:85:d6:d8:ec:cd:d8:6b:4b:b7:e7: 87:71:88:bd:5c:f3:e3:15:20:c1:31:54:45:aa:af: 83:b4:8b:e4:76:af:9f:71:08:a2:64:68:7a:51:6c: 88:f9:7c:f7:9d:b5:8f:ad:69:c2:2d:50:65:19:81: 21:9b:be:17:52:36:a1:01:78:2f:84:fc:24:3c:fc: cb:2e:cc:48:75:dd:7d:4c:ee:46:d4:e7:ac:7e:53: 66:b7:ba:b6:fc:f7:c6:64:6e:23:d1:a4:f2:15:df: b7:a0:3d:f3:93:2b:36:77:09:2d:79:fc:3d:1d:7b: d7:78:2d:da:fe:f7:7f:b4:38:39:fc:a4:32:bf:17: 48:4f:2c:62:df:3c:c7:eb:12:a4:09:24:06:2e:04: f2:ed:87:ee:dc:10:1f:d7:da:09:6f:8e:a6:a0:71: 56:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F6:73:FA:E5:4B:0B:BB:08:07:A5:10:71:93:2D:A4:23:6D:A3:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/d603bc48-0e7c-3f9c-ac30-aa2ddd7af2bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.crl X509v3 Authority Key Identifier: keyid:42:FD:E7:FA:D2:03:A1:BC:60:07:16:6B:17:B1:BA:42:B9:C1:9A:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7.cer sbgp-ipAddrBlock: critical IPv4: 23.183.216.0/24 IPv6: 2602:f87c::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:b9:27:65:92:03:67:1c:31:29:3e:de:45:7c:54:70:a9:cd: 47:ba:64:95:19:85:4a:f8:e6:70:16:04:97:9e:e1:5a:b5:b2: 2c:ed:57:70:fe:f9:81:e1:02:ab:36:62:08:c8:b1:53:2d:1a: a8:10:d1:5f:07:29:ba:4f:73:2d:25:d1:92:d5:0d:dc:86:f1: b8:95:de:53:d0:31:df:bd:9a:f4:4f:c8:97:6c:32:49:18:ff: e9:1e:85:ff:b6:5d:92:20:e9:06:d7:34:6a:bb:56:23:f8:b2: e8:ac:c1:17:3e:f3:32:8e:79:4f:cf:26:e4:a9:47:82:f1:23: 87:e8:ef:05:54:47:1e:3f:2d:41:4f:b9:55:73:25:1e:31:7b: 40:97:e4:5f:b9:1d:c2:ac:a1:64:9a:9b:bb:52:c5:7a:85:2f: 28:bf:09:8e:a8:fd:af:cb:38:c2:a9:34:9c:4d:9b:23:4e:36: 57:aa:b1:2d:09:97:06:40:5e:90:d6:bc:08:a8:0f:e9:32:00: c1:3f:35:7f:bd:75:e4:ec:93:ff:1e:6f:29:1c:59:51:0a:02: 48:97:2e:25:e9:f6:26:28:18:73:d1:26:69:21:4c:4e:6d:83: c7:8b:f8:c2:46:21:3e:9c:8d:d5:70:83:3a:49:a9:f0:18:12: 14:af:1c:b9 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEnUL7A1Oyez40ZtjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzc4OTM0M2QtODU2MC00OGIwLTk1MzAtZDJhMTEyOWZl ZmU3MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk OTBiYzBjMDQtZWEwZS00Y2NkLTgyYjMtZTBjMGI0ZDdkYTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgj2W0xoF2A1FZpo7WurDAMI/qVPBcCvTJ0B7 1H3d4UbWOOo4d+ykuTshf2vfb+V9UV/WML6bx5YgE/U1mIPYw0todKOdZqracwhl ZHbBC2zbJWzQIF8BqoHM7p++MIXW2OzN2GtLt+eHcYi9XPPjFSDBMVRFqq+DtIvk dq+fcQiiZGh6UWyI+Xz3nbWPrWnCLVBlGYEhm74XUjahAXgvhPwkPPzLLsxIdd19 TO5G1OesflNmt7q2/PfGZG4j0aTyFd+3oD3zkys2dwktefw9HXvXeC3a/vd/tDg5 /KQyvxdITyxi3zzH6xKkCSQGLgTy7Yfu3BAf19oJb46moHFWDwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFIv2c/rlSwu7CAelEHGTLaQjbaNXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zNzg5 MzQzZC04NTYwLTQ4YjAtOTUzMC1kMmExMTI5ZmVmZTcvZDYwM2JjNDgtMGU3Yy0z ZjljLWFjMzAtYWEyZGRkN2FmMmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzc4OTM0M2QtODU2MC00OGIwLTk1 MzAtZDJhMTEyOWZlZmU3LzM3ODkzNDNkLTg1NjAtNDhiMC05NTMwLWQyYTExMjlm ZWZlNy5jcmwwHwYDVR0jBBgwFoAUQv3n+tIDobxgBxZrF7G6QrnBmlMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zNzg5MzQzZC04NTYwLTQ4YjAtOTUzMC1kMmEx MTI5ZmVmZTcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7fYMA4E AgACMAgDBgAmAvh8ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCIuSdlkgNnHDEpPt5FfFRwqc1HumSVGYVK +OZwFgSXnuFatbIs7Vdw/vmB4QKrNmIIyLFTLRqoENFfBym6T3MtJdGS1Q3chvG4 ld5T0DHfvZr0T8iXbDJJGP/pHoX/tl2SIOkG1zRqu1Yj+LLorMEXPvMyjnlPzybk qUeC8SOH6O8FVEcePy1BT7lVcyUeMXtAl+RfuR3CrKFkmpu7UsV6hS8ovwmOqP2v yzjCqTScTZsjTjZXqrEtCZcGQF6Q1rwIqA/pMgDBPzV/vXXk7JP/Hm8pHFlRCgJI ly4l6fYmKBhz0SZpIUxObYPHi/jCRiE+nI3VcIM6SanwGBIUrxy5 -----END CERTIFICATE-----Generated at Tue Jun 17 03:27:48 2025 by rpki-client