$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/4e651070-49d3-379c-9ddb-1c9815e02a76.roa File: 4e651070-49d3-379c-9ddb-1c9815e02a76.roa (raw, json) Hash identifier: 9FhQT+d23Xg49AqFrUILNkgu6b37qBDXHW857aRnmnU= Subject key identifier: 23:A0:74:BF:E1:14:BD:0E:EF:37:5D:87:64:45:43:AF:84:8D:B5:A6 Certificate issuer: /CN=9faf7a12-0176-44f9-9938-7bbccac3d238 Certificate serial: 010D0C9F4328584A2EEABF8E41B88965761BE000 Authority key identifier: 27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/4e651070-49d3-379c-9ddb-1c9815e02a76.roa Signing time: Sat 14 Jun 2025 01:00:49 +0000 ROA not before: Sat 14 Jun 2025 01:00:49 +0000 ROA not after: Fri 12 Sep 2025 01:00:49 +0000 asID: 30399 IP address blocks: 23.152.40.0/24 maxlen: 24 23.152.41.0/24 maxlen: 24 2602:fa82::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2e:ea:bf:8e:41:b8:89:65:76:1b:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9faf7a12-0176-44f9-9938-7bbccac3d238 Validity Not Before: Jun 14 01:00:49 2025 GMT Not After : Sep 12 01:00:49 2025 GMT Subject: CN=cb90e005-6003-430b-8d87-435dd49bda86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:48:2b:7b:21:6e:0c:a9:48:19:38:d6:26:7a: a1:2b:f0:f1:20:e8:fa:74:fd:16:70:45:7b:a8:08: 12:26:b3:1e:56:3a:c4:ee:96:90:64:b2:76:1e:47: 40:22:de:50:ce:15:f9:03:35:b0:bf:54:f2:ee:f6: 3f:74:1a:0d:9b:3c:1c:d2:57:a3:ad:7f:dd:da:4f: be:a0:8a:d3:bf:e6:ea:4c:4e:4b:36:7f:8c:ff:04: 52:74:f2:a8:c6:2e:8f:0c:eb:16:3a:69:3d:80:7b: 61:2b:4e:2f:f5:0c:ec:d4:f1:ab:96:7b:38:32:20: 29:78:27:c5:aa:34:bb:23:d7:ea:2b:62:e9:66:b6: 0f:ee:a7:bc:b4:29:97:b5:2e:e3:16:8d:3c:b7:85: 7f:bf:9b:46:e9:2a:6c:0a:50:84:26:c4:9d:93:9b: cf:b5:56:77:dc:2c:76:40:da:d6:03:6f:1e:64:26: 46:10:07:88:fd:d9:fc:45:37:a5:19:39:a8:22:c3: 6b:b9:7d:34:f2:df:03:5f:4d:86:0e:96:85:b6:18: 5f:14:bb:33:af:87:5d:03:b0:72:e4:ab:02:6f:71: 5e:19:47:b0:d7:c4:43:18:cd:e2:05:46:02:31:90: 4c:f5:18:0a:aa:6b:9f:ef:95:da:98:ae:d2:3a:29: 6b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A0:74:BF:E1:14:BD:0E:EF:37:5D:87:64:45:43:AF:84:8D:B5:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/4e651070-49d3-379c-9ddb-1c9815e02a76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl X509v3 Authority Key Identifier: keyid:27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer sbgp-ipAddrBlock: critical IPv4: 23.152.40.0/23 IPv6: 2602:fa82::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:1d:e6:22:9b:f3:dd:ab:f7:df:d1:ef:ee:ef:42:8f:c8:42: 9f:db:8f:61:e7:2d:be:84:55:48:99:01:b0:f9:12:58:65:1c: c7:76:2b:48:0f:05:cc:13:fe:e3:b2:21:11:23:a7:8d:00:a8: eb:a4:3c:21:71:ef:d8:74:40:ac:c1:51:cb:f3:ac:53:76:52: c2:86:28:5c:64:0c:42:fe:bc:04:25:27:6d:4b:83:ed:fe:b8: 7a:49:a0:8c:b6:95:48:46:ea:75:e3:f1:fe:be:b9:b5:60:56: eb:47:0a:80:4c:ac:d4:0e:c7:51:54:19:43:b4:57:79:c3:db: 07:ec:7b:7c:69:16:1f:9b:27:70:a1:18:fb:84:78:98:b0:dc: 46:8a:62:f6:01:56:e6:a3:06:93:48:5b:22:f2:26:17:05:9a: 3e:ef:2c:a9:2e:c9:6c:dc:5e:ba:e6:e6:2b:5d:04:69:4b:47: 97:44:ac:31:a5:16:86:7c:a2:ed:b1:f1:0f:8a:57:68:b5:03: c0:83:ba:7c:98:84:c2:3e:e7:4e:7b:93:44:5a:03:4c:37:03: ad:6d:1a:56:04:ff:fe:46:c3:e1:a2:63:96:b3:84:ee:47:be: 51:dd:ae:e1:10:4e:f7:52:b7:24:29:70:86:82:ce:3c:0c:7b: 93:9b:ac:d9 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEou6r+OQbiJZXYb4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWZhZjdhMTItMDE3Ni00NGY5LTk5MzgtN2JiY2NhYzNk MjM4MB4XDTI1MDYxNDAxMDA0OVoXDTI1MDkxMjAxMDA0OVowLzEtMCsGA1UEAxMk Y2I5MGUwMDUtNjAwMy00MzBiLThkODctNDM1ZGQ0OWJkYTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkgreyFuDKlIGTjWJnqhK/DxIOj6dP0WcEV7 qAgSJrMeVjrE7paQZLJ2HkdAIt5QzhX5AzWwv1Ty7vY/dBoNmzwc0lejrX/d2k++ oIrTv+bqTE5LNn+M/wRSdPKoxi6PDOsWOmk9gHthK04v9Qzs1PGrlns4MiApeCfF qjS7I9fqK2LpZrYP7qe8tCmXtS7jFo08t4V/v5tG6SpsClCEJsSdk5vPtVZ33Cx2 QNrWA28eZCZGEAeI/dn8RTelGTmoIsNruX008t8DX02GDpaFthhfFLszr4ddA7By 5KsCb3FeGUew18RDGM3iBUYCMZBM9RgKqmuf75XamK7SOilr9QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFCOgdL/hFL0O7zddh2RFQ6+EjbWmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ZmFm N2ExMi0wMTc2LTQ0ZjktOTkzOC03YmJjY2FjM2QyMzgvNGU2NTEwNzAtNDlkMy0z NzljLTlkZGItMWM5ODE1ZTAyYTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWZhZjdhMTItMDE3Ni00NGY5LTk5 MzgtN2JiY2NhYzNkMjM4LzlmYWY3YTEyLTAxNzYtNDRmOS05OTM4LTdiYmNjYWMz ZDIzOC5jcmwwHwYDVR0jBBgwFoAUJ/U0n4yx/TMHVZN2zLxFmMEutRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ZmFmN2ExMi0wMTc2LTQ0ZjktOTkzOC03YmJj Y2FjM2QyMzguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBF5goMA4E AgACMAgDBgQmAvqCADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBbHeYim/Pdq/ff0e/u70KPyEKf249h5y2+ hFVImQGw+RJYZRzHditIDwXME/7jsiERI6eNAKjrpDwhce/YdECswVHL86xTdlLC hihcZAxC/rwEJSdtS4Pt/rh6SaCMtpVIRup14/H+vrm1YFbrRwqATKzUDsdRVBlD tFd5w9sH7Ht8aRYfmydwoRj7hHiYsNxGimL2AVbmowaTSFsi8iYXBZo+7yypLsls 3F665uYrXQRpS0eXRKwxpRaGfKLtsfEPildotQPAg7p8mITCPudOe5NEWgNMNwOt bRpWBP/+RsPhomOWs4TuR75R3a7hEE73UrckKXCGgs48DHuTm6zZ -----END CERTIFICATE-----Generated at Mon Jun 16 03:33:07 2025 by rpki-client