$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/603aac71-6f4f-3ebf-bc6d-6aa249c2f40d.roa File: 603aac71-6f4f-3ebf-bc6d-6aa249c2f40d.roa (raw, json) Hash identifier: M2b81S/cy4kYzaCgDO8lssPq3QN5uSfnPdQY8hYcoiI= Subject key identifier: 28:E5:4D:E3:53:AD:FF:C8:25:03:70:C2:6D:F4:A7:8E:EA:61:70:07 Certificate issuer: /CN=4164770e-1f48-4239-921d-775b5152fa2e Certificate serial: 010D0C9F4328584A9A6636874A0BB2B25E3AF3C0 Authority key identifier: 83:CB:8B:EB:85:4D:F2:17:9E:37:1A:F6:F7:DF:52:05:04:76:B5:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/603aac71-6f4f-3ebf-bc6d-6aa249c2f40d.roa Signing time: Tue 22 Jul 2025 13:01:03 +0000 ROA not before: Tue 22 Jul 2025 13:01:03 +0000 ROA not after: Mon 20 Oct 2025 13:01:03 +0000 asID: 20055 IP address blocks: 23.131.120.0/24 maxlen: 24 2606:acc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/4164770e-1f48-4239-921d-775b5152fa2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/4164770e-1f48-4239-921d-775b5152fa2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:66:36:87:4a:0b:b2:b2:5e:3a:f3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4164770e-1f48-4239-921d-775b5152fa2e Validity Not Before: Jul 22 13:01:03 2025 GMT Not After : Oct 20 13:01:03 2025 GMT Subject: CN=596dec3d-1d77-4047-b63c-de72105db885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ab:61:09:e6:27:8f:51:07:29:ae:2c:11:91: ad:58:d0:a1:a6:8f:e1:79:3d:f2:e5:7a:ee:94:84: 63:3b:d5:a4:74:e2:bf:1c:c5:3e:32:33:12:fb:25: af:1c:70:52:ed:ad:b1:c6:16:2f:e1:dd:2e:d5:b5: ff:97:28:14:b8:63:4e:ea:c5:4f:87:94:03:85:c4: 8c:44:d4:8c:30:50:3b:0f:b9:bb:14:88:f7:0b:32: ff:04:fb:df:39:40:a9:6e:c4:0f:97:a7:8d:26:62: 16:3b:5e:f1:39:fe:01:f2:1c:5f:9c:0e:d5:41:75: f2:6c:be:fc:20:7e:20:ec:1a:f7:75:10:ac:c3:88: 02:b4:b3:1a:56:92:0f:55:d5:bd:55:05:4a:ab:26: 38:d7:8a:9d:a0:c0:b0:07:ab:55:99:26:df:c0:a7: 10:a7:d3:4a:50:ab:aa:50:73:5b:39:22:e8:65:a8: f4:6b:45:8c:26:a4:94:63:42:1a:50:da:aa:85:cd: f3:72:fa:16:2a:55:97:e5:72:c8:50:21:7c:de:7c: 6f:27:1e:68:6f:2a:96:b7:de:26:22:ea:02:f9:c7: a2:ea:23:7b:dc:82:ae:9c:e0:27:ea:86:fd:b9:03: bc:bd:1e:d7:e8:7e:fc:84:20:5a:03:38:53:61:fa: 43:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E5:4D:E3:53:AD:FF:C8:25:03:70:C2:6D:F4:A7:8E:EA:61:70:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/603aac71-6f4f-3ebf-bc6d-6aa249c2f40d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/4164770e-1f48-4239-921d-775b5152fa2e.crl X509v3 Authority Key Identifier: keyid:83:CB:8B:EB:85:4D:F2:17:9E:37:1A:F6:F7:DF:52:05:04:76:B5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e.cer sbgp-ipAddrBlock: critical IPv4: 23.131.120.0/24 IPv6: 2606:acc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:36:e6:2c:85:5f:b0:48:03:ff:49:f0:f5:d6:d8:17:c5:59: f1:42:3b:29:d8:f9:65:f4:d1:7c:1d:c0:ad:5f:22:69:79:60: f6:31:01:d3:a0:72:c8:f1:a2:89:ac:46:7a:ac:f4:3e:58:58: d9:84:11:ef:ab:16:e8:1b:34:4d:dd:0f:20:f3:8d:3c:57:7a: b2:3f:74:e5:39:6b:65:d4:a8:63:6e:e7:d9:d6:02:13:1c:cc: 4b:79:fb:cd:90:d0:7d:e1:ea:35:fb:eb:0b:30:1d:1f:7b:36: 78:db:f9:7e:da:8b:6d:90:b8:6c:0f:08:53:f9:e5:b8:31:20: 69:17:43:39:72:8c:4a:52:b9:af:7c:80:34:7c:38:e0:53:e0: 95:22:0d:b7:fd:93:f3:8b:0a:5c:65:04:2f:10:d2:cf:8c:77: 1e:e8:c1:89:26:65:ca:b5:b5:52:59:10:0f:c7:c2:b9:24:05: 6e:63:61:33:dd:aa:ca:34:38:0d:a1:b2:66:3d:11:51:9a:2f: 6e:4b:7c:0b:72:36:e9:06:dd:72:c3:8f:49:bb:92:4b:ab:3a: c9:e3:b7:67:7e:2d:8b:23:a9:b9:ee:0f:5c:e6:f4:a9:ed:a5: cc:02:09:e5:a3:a5:c7:56:bd:40:08:b4:30:d0:4b:fe:34:79: a0:71:e8:ee -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEqaZjaHSguysl4688AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDE2NDc3MGUtMWY0OC00MjM5LTkyMWQtNzc1YjUxNTJm YTJlMB4XDTI1MDcyMjEzMDEwM1oXDTI1MTAyMDEzMDEwM1owLzEtMCsGA1UEAxMk NTk2ZGVjM2QtMWQ3Ny00MDQ3LWI2M2MtZGU3MjEwNWRiODg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6thCeYnj1EHKa4sEZGtWNChpo/heT3y5Xru lIRjO9WkdOK/HMU+MjMS+yWvHHBS7a2xxhYv4d0u1bX/lygUuGNO6sVPh5QDhcSM RNSMMFA7D7m7FIj3CzL/BPvfOUCpbsQPl6eNJmIWO17xOf4B8hxfnA7VQXXybL78 IH4g7Br3dRCsw4gCtLMaVpIPVdW9VQVKqyY414qdoMCwB6tVmSbfwKcQp9NKUKuq UHNbOSLoZaj0a0WMJqSUY0IaUNqqhc3zcvoWKlWX5XLIUCF83nxvJx5obyqWt94m IuoC+cei6iN73IKunOAn6ob9uQO8vR7X6H78hCBaAzhTYfpDHQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFCjlTeNTrf/IJQNwwm30p47qYXAHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80MTY0 NzcwZS0xZjQ4LTQyMzktOTIxZC03NzViNTE1MmZhMmUvNjAzYWFjNzEtNmY0Zi0z ZWJmLWJjNmQtNmFhMjQ5YzJmNDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDE2NDc3MGUtMWY0OC00MjM5LTky MWQtNzc1YjUxNTJmYTJlLzQxNjQ3NzBlLTFmNDgtNDIzOS05MjFkLTc3NWI1MTUy ZmEyZS5jcmwwHwYDVR0jBBgwFoAUg8uL64VN8heeNxr2999SBQR2tWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80MTY0NzcwZS0xZjQ4LTQyMzktOTIxZC03NzVi NTE1MmZhMmUuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4N4MA0E AgACMAcDBQAmBqzAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAB425iyFX7BIA/9J8PXW2BfFWfFCOynY+WX0 0XwdwK1fIml5YPYxAdOgcsjxoomsRnqs9D5YWNmEEe+rFugbNE3dDyDzjTxXerI/ dOU5a2XUqGNu59nWAhMczEt5+82Q0H3h6jX76wswHR97Nnjb+X7ai22QuGwPCFP5 5bgxIGkXQzlyjEpSua98gDR8OOBT4JUiDbf9k/OLClxlBC8Q0s+Mdx7owYkmZcq1 tVJZEA/HwrkkBW5jYTPdqso0OA2hsmY9EVGaL25LfAtyNukG3XLDj0m7kkurOsnj t2d+LYsjqbnuD1zm9KntpcwCCeWjpcdWvUAItDDQS/40eaBx6O4= -----END CERTIFICATE-----Generated at Mon Aug 4 19:16:58 2025 by rpki-client