$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/73e60fce-48ad-3cff-baaa-9c6c1d1d470d.roa File: 73e60fce-48ad-3cff-baaa-9c6c1d1d470d.roa (raw, json) Hash identifier: 8eFSR4dF6TbMgwfOeLTQ6MLfGOEA39jGBCQflHuzwL0= Subject key identifier: 4D:B0:34:F2:C3:9D:06:DD:AC:4A:DF:BB:D3:5E:BD:B6:5C:13:E6:B2 Certificate issuer: /CN=103e2c68-3cdd-47e4-bce0-07faaeba78e1 Certificate serial: 010D0C9F4328584AAB265E12C4BF9023B5F044C0 Authority key identifier: 90:4D:9C:1B:E6:96:A5:67:07:28:6B:32:12:80:86:30:8C:AB:D5:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/73e60fce-48ad-3cff-baaa-9c6c1d1d470d.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 400154 IP address blocks: 23.128.168.0/24 maxlen: 24 2606:8cc0::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/103e2c68-3cdd-47e4-bce0-07faaeba78e1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/103e2c68-3cdd-47e4-bce0-07faaeba78e1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:5e:12:c4:bf:90:23:b5:f0:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=103e2c68-3cdd-47e4-bce0-07faaeba78e1 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=886ca4e2-0ecf-4b46-8159-0752de570303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ca:16:78:39:3c:c5:81:cf:66:06:98:ec:f0: bc:fe:39:67:a3:62:b4:66:92:aa:3f:30:2a:3e:7e: 38:81:be:2a:ae:d3:74:fc:fb:c2:ed:47:40:dc:ae: 14:97:f0:1d:51:9f:5f:3b:8a:78:2d:02:cb:a8:a5: df:55:0f:32:64:b3:43:b1:e2:59:8a:08:98:71:ce: 65:0d:7b:bf:7a:e5:8c:26:50:d6:e2:be:fa:79:8b: b8:25:ba:c8:a7:71:e7:b3:a9:f7:b2:c3:46:d4:ac: 8d:ac:cb:78:27:93:c5:4a:d6:6b:ea:36:ce:9a:2c: ea:75:6e:c4:47:e7:f8:b4:ec:95:37:58:0b:2c:39: 59:3a:26:cc:11:c9:24:41:4f:2d:aa:4c:92:5c:c2: db:29:ea:37:a4:f8:e5:e2:bc:fd:46:fd:3a:01:34: ac:53:ad:4f:88:ad:21:88:25:22:08:26:ae:4c:c3: 41:e0:34:fc:09:c0:1d:ad:0c:b4:e8:d6:c3:be:7b: ad:c4:31:44:67:15:2d:b4:f8:83:5d:53:e5:0f:aa: 1e:b8:d7:46:85:2f:9e:9a:9b:7e:9a:04:ed:ba:83: 26:95:7d:96:60:b0:d2:8e:97:6f:87:06:ca:a3:85: d8:ed:17:0b:e9:8a:99:4c:5c:3f:4a:11:1c:6d:86: 8f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B0:34:F2:C3:9D:06:DD:AC:4A:DF:BB:D3:5E:BD:B6:5C:13:E6:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/73e60fce-48ad-3cff-baaa-9c6c1d1d470d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/103e2c68-3cdd-47e4-bce0-07faaeba78e1.crl X509v3 Authority Key Identifier: keyid:90:4D:9C:1B:E6:96:A5:67:07:28:6B:32:12:80:86:30:8C:AB:D5:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1.cer sbgp-ipAddrBlock: critical IPv4: 23.128.168.0/24 IPv6: 2606:8cc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:74:2a:dd:8e:a0:e8:42:0e:53:a5:2f:61:71:c6:25:c0:44: 67:e0:3b:e3:39:f4:60:d5:82:b9:5c:0b:17:1a:f4:50:fc:71: 01:8e:e9:0d:95:d6:8e:84:98:d3:4d:8f:a7:8f:db:b8:a3:ed: 89:a9:05:b8:82:3e:aa:5d:65:ab:f3:c5:63:db:d4:f8:9f:2f: fb:dd:ca:4b:63:54:23:45:2c:21:d4:47:5f:3a:91:c0:28:72: 7b:2a:d7:f6:20:d6:22:04:18:60:85:40:60:0a:8e:7e:3c:57: 21:8f:8a:a5:a6:32:b4:dc:f1:c8:5e:55:99:f9:94:23:98:e4: c4:50:86:b0:3d:71:58:ab:d1:b7:69:bc:13:7b:69:4c:71:1b: 26:fe:32:63:ae:69:97:67:49:45:9b:29:ed:8e:9b:d1:50:db: 7b:3e:21:54:33:82:6f:11:64:bc:b5:5f:4e:1a:14:e0:20:c9: bb:02:54:15:f5:61:c6:f5:dd:d1:a3:ab:57:ef:86:ff:0b:f9: 00:35:40:bf:6d:08:4a:00:66:bf:82:b5:30:2f:b0:6d:0d:b7: e1:a1:bd:c7:b0:77:e7:6c:81:31:61:28:84:c5:9d:8f:02:77: 76:d1:1c:9c:12:cd:fd:17:4d:66:bb:9d:19:66:45:77:2d:63: 2a:73:77:de -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEqrJl4SxL+QI7XwRMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTAzZTJjNjgtM2NkZC00N2U0LWJjZTAtMDdmYWFlYmE3 OGUxMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk ODg2Y2E0ZTItMGVjZi00YjQ2LTgxNTktMDc1MmRlNTcwMzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcoWeDk8xYHPZgaY7PC8/jlno2K0ZpKqPzAq Pn44gb4qrtN0/PvC7UdA3K4Ul/AdUZ9fO4p4LQLLqKXfVQ8yZLNDseJZigiYcc5l DXu/euWMJlDW4r76eYu4JbrIp3Hns6n3ssNG1KyNrMt4J5PFStZr6jbOmizqdW7E R+f4tOyVN1gLLDlZOibMEckkQU8tqkySXMLbKeo3pPjl4rz9Rv06ATSsU61PiK0h iCUiCCauTMNB4DT8CcAdrQy06NbDvnutxDFEZxUttPiDXVPlD6oeuNdGhS+empt+ mgTtuoMmlX2WYLDSjpdvhwbKo4XY7RcL6YqZTFw/ShEcbYaPFQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFE2wNPLDnQbdrErfu9NevbZcE+ayMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMDNl MmM2OC0zY2RkLTQ3ZTQtYmNlMC0wN2ZhYWViYTc4ZTEvNzNlNjBmY2UtNDhhZC0z Y2ZmLWJhYWEtOWM2YzFkMWQ0NzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTAzZTJjNjgtM2NkZC00N2U0LWJj ZTAtMDdmYWFlYmE3OGUxLzEwM2UyYzY4LTNjZGQtNDdlNC1iY2UwLTA3ZmFhZWJh NzhlMS5jcmwwHwYDVR0jBBgwFoAUkE2cG+aWpWcHKGsyEoCGMIyr1S0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMDNlMmM2OC0zY2RkLTQ3ZTQtYmNlMC0wN2Zh YWViYTc4ZTEuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4CoMA0E AgACMAcDBQAmBozAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAEN0Kt2OoOhCDlOlL2FxxiXARGfgO+M59GDV grlcCxca9FD8cQGO6Q2V1o6EmNNNj6eP27ij7YmpBbiCPqpdZavzxWPb1PifL/vd yktjVCNFLCHUR186kcAocnsq1/Yg1iIEGGCFQGAKjn48VyGPiqWmMrTc8cheVZn5 lCOY5MRQhrA9cVir0bdpvBN7aUxxGyb+MmOuaZdnSUWbKe2Om9FQ23s+IVQzgm8R ZLy1X04aFOAgybsCVBX1Ycb13dGjq1fvhv8L+QA1QL9tCEoAZr+CtTAvsG0Nt+Gh vcewd+dsgTFhKITFnY8Cd3bRHJwSzf0XTWa7nRlmRXctYypzd94= -----END CERTIFICATE-----Generated at Tue Aug 5 23:04:27 2025 by rpki-client