$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/4775f2f1-0661-3006-a1eb-a486c369f840.roa File: 4775f2f1-0661-3006-a1eb-a486c369f840.roa (raw, json) Hash identifier: q3UJComcPIKb5pR7GLiwp5EQ/jpqMGbvh2i1CjnIob4= Subject key identifier: F6:D4:3A:10:E2:71:BC:B7:82:77:FE:02:71:D1:F9:D4:01:64:D1:A8 Certificate issuer: /CN=704595c3-6d92-4fc1-b7a8-d8e81a04aa7a Certificate serial: 010D0C9F4328584A2EEAB97F4FE856F170678380 Authority key identifier: 45:56:08:A9:4F:3E:2E:30:2D:6A:A5:5C:A2:E8:E5:50:FD:5B:04:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/4775f2f1-0661-3006-a1eb-a486c369f840.roa Signing time: Sat 14 Jun 2025 01:00:49 +0000 ROA not before: Sat 14 Jun 2025 01:00:49 +0000 ROA not after: Fri 12 Sep 2025 01:00:49 +0000 asID: 203939 IP address blocks: 23.136.116.0/24 maxlen: 24 2602:f6a7::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2e:ea:b9:7f:4f:e8:56:f1:70:67:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=704595c3-6d92-4fc1-b7a8-d8e81a04aa7a Validity Not Before: Jun 14 01:00:49 2025 GMT Not After : Sep 12 01:00:49 2025 GMT Subject: CN=60462743-e507-49ca-baa6-2062df79723d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9f:5c:a8:ce:c6:f0:02:00:68:92:63:7f:94: 0d:af:1b:6d:fd:15:69:f8:81:cd:ef:62:87:8a:5e: 65:cc:eb:3f:d6:4e:f9:11:cf:5d:e0:4e:7e:10:98: b3:d4:97:09:b3:12:6a:63:b5:a0:02:54:db:f1:1e: 10:20:72:3f:3d:de:17:3a:45:cb:ab:dd:ec:c7:34: 9c:df:84:af:7c:c5:bb:7d:1d:eb:33:2e:9f:06:fb: a5:b7:19:32:0f:9f:a7:6a:bc:5e:51:89:6a:66:8b: 5d:45:68:fb:30:ce:6a:78:cb:db:b5:40:ab:f4:d2: dd:ff:12:71:ac:17:3b:9f:2e:7b:24:9e:17:a4:f0: 76:df:23:6f:95:36:7c:f6:2c:be:ca:de:00:29:18: 9a:cc:c8:2a:c6:f7:28:0c:3e:53:51:58:ea:91:13: 1c:99:99:d4:54:ce:43:a5:ae:ff:3e:a9:37:03:06: e4:b6:38:78:48:93:6b:48:4f:b3:94:e0:e5:c3:47: 93:ca:dd:8b:87:a8:c7:a2:c5:e2:17:cc:41:b5:47: 17:b3:f9:7b:0e:31:04:c9:e6:1a:c5:30:f0:de:b7: 67:01:f6:23:b8:65:9e:f2:5d:db:e0:40:57:55:9e: e8:97:c2:c5:af:02:eb:e5:11:17:f2:91:c8:15:bc: af:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D4:3A:10:E2:71:BC:B7:82:77:FE:02:71:D1:F9:D4:01:64:D1:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/4775f2f1-0661-3006-a1eb-a486c369f840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.crl X509v3 Authority Key Identifier: keyid:45:56:08:A9:4F:3E:2E:30:2D:6A:A5:5C:A2:E8:E5:50:FD:5B:04:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.cer sbgp-ipAddrBlock: critical IPv4: 23.136.116.0/24 IPv6: 2602:f6a7::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:bb:92:a5:50:87:9e:33:c2:71:d8:9b:34:e3:8a:40:51:d0: f4:f7:06:37:0f:fe:27:4f:35:3f:8e:ee:37:f1:95:93:b2:93: f1:91:06:ee:9d:4f:e3:b3:81:f5:45:02:51:a7:6b:25:c5:78: 34:90:f4:d1:8e:df:3a:e8:37:b8:94:41:5f:e9:93:b2:b6:43: 5f:30:e5:71:bb:94:d6:66:56:94:e7:33:d5:e1:c0:ba:66:eb: a2:b5:99:f5:4f:a5:1a:32:1c:5e:82:34:b6:0e:65:7e:58:fd: 2c:3c:14:62:ca:86:38:e7:85:c0:72:09:87:10:2f:3e:69:51: 72:ea:b5:6d:8c:2e:ed:51:a9:d1:22:bb:3b:36:e2:36:aa:8f: d1:48:b0:be:a1:67:f1:6d:f0:9a:60:81:4d:f8:2a:59:ed:66: ef:d5:e5:ab:41:e7:a9:9d:aa:e8:f7:79:79:43:7f:6b:9a:64: c6:15:23:f4:12:b2:39:b8:67:c6:a6:85:06:c7:5d:5d:2f:56: fa:a5:c5:93:5c:b5:30:9c:6e:97:eb:d0:db:47:02:9d:70:8b: fc:56:83:d8:c6:d1:27:0c:c4:d5:59:70:a3:e6:15:bc:f4:1c: d3:b6:8f:af:aa:5a:4a:b4:74:bb:9f:65:6e:7d:64:0a:18:f1: df:b8:09:85 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEou6rl/T+hW8XBng4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA0NTk1YzMtNmQ5Mi00ZmMxLWI3YTgtZDhlODFhMDRh YTdhMB4XDTI1MDYxNDAxMDA0OVoXDTI1MDkxMjAxMDA0OVowLzEtMCsGA1UEAxMk NjA0NjI3NDMtZTUwNy00OWNhLWJhYTYtMjA2MmRmNzk3MjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp9cqM7G8AIAaJJjf5QNrxtt/RVp+IHN72KH il5lzOs/1k75Ec9d4E5+EJiz1JcJsxJqY7WgAlTb8R4QIHI/Pd4XOkXLq93sxzSc 34SvfMW7fR3rMy6fBvultxkyD5+narxeUYlqZotdRWj7MM5qeMvbtUCr9NLd/xJx rBc7ny57JJ4XpPB23yNvlTZ89iy+yt4AKRiazMgqxvcoDD5TUVjqkRMcmZnUVM5D pa7/Pqk3Awbktjh4SJNrSE+zlODlw0eTyt2Lh6jHosXiF8xBtUcXs/l7DjEEyeYa xTDw3rdnAfYjuGWe8l3b4EBXVZ7ol8LFrwLr5REX8pHIFbyvfQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFPbUOhDicby3gnf+AnHR+dQBZNGoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83MDQ1 OTVjMy02ZDkyLTRmYzEtYjdhOC1kOGU4MWEwNGFhN2EvNDc3NWYyZjEtMDY2MS0z MDA2LWExZWItYTQ4NmMzNjlmODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNzA0NTk1YzMtNmQ5Mi00ZmMxLWI3 YTgtZDhlODFhMDRhYTdhLzcwNDU5NWMzLTZkOTItNGZjMS1iN2E4LWQ4ZTgxYTA0 YWE3YS5jcmwwHwYDVR0jBBgwFoAURVYIqU8+LjAtaqVcoujlUP1bBBkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy83MDQ1OTVjMy02ZDkyLTRmYzEtYjdhOC1kOGU4 MWEwNGFhN2EuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4h0MA4E AgACMAgDBgQmAvanADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA0u5KlUIeeM8Jx2Js044pAUdD09wY3D/4n TzU/ju438ZWTspPxkQbunU/js4H1RQJRp2slxXg0kPTRjt866De4lEFf6ZOytkNf MOVxu5TWZlaU5zPV4cC6ZuuitZn1T6UaMhxegjS2DmV+WP0sPBRiyoY454XAcgmH EC8+aVFy6rVtjC7tUanRIrs7NuI2qo/RSLC+oWfxbfCaYIFN+CpZ7Wbv1eWrQeep naro93l5Q39rmmTGFSP0ErI5uGfGpoUGx11dL1b6pcWTXLUwnG6X69DbRwKdcIv8 VoPYxtEnDMTVWXCj5hW89BzTto+vqlpKtHS7n2VufWQKGPHfuAmF -----END CERTIFICATE-----Generated at Thu Jun 19 04:06:21 2025 by rpki-client