$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82/6bb560ec-aa19-3633-98be-a5a2e7708fd6.roa File: 6bb560ec-aa19-3633-98be-a5a2e7708fd6.roa (raw, json) Hash identifier: MSuub96A1DqjW/gM90zyYgMGaHxWLuavN/CnxTgojtY= Subject key identifier: 73:35:A0:5A:5E:6B:88:AD:41:A4:EC:1A:7D:BB:68:16:9C:9F:EC:09 Certificate issuer: /CN=8792fa78-8f07-41ad-aaa5-9b445516bf82 Certificate serial: 010D0C9F4328584A9D30D55F19D6A27A606FB800 Authority key identifier: DE:A7:FE:B2:9E:14:63:F6:09:E5:68:DE:A8:F6:01:5B:6C:92:69:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82/6bb560ec-aa19-3633-98be-a5a2e7708fd6.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 26286 IP address blocks: 23.138.156.0/24 maxlen: 24 2602:f661::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82/8792fa78-8f07-41ad-aaa5-9b445516bf82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82/8792fa78-8f07-41ad-aaa5-9b445516bf82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:d5:5f:19:d6:a2:7a:60:6f:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8792fa78-8f07-41ad-aaa5-9b445516bf82 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=a78e6b8b-6d11-401b-b87e-9a0407dec52e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a2:9f:9e:e5:8d:d7:a9:08:5f:23:2a:ad:cc: 3c:4c:3e:c0:7e:b5:70:94:75:c0:3f:b3:a0:59:ff: af:bf:cb:9c:4f:a0:6c:4e:13:af:12:bc:b9:70:06: 8c:c5:73:e1:53:cd:25:be:ee:97:1a:1b:1e:35:86: b9:92:0c:b2:1e:d1:90:ac:77:36:db:ca:3f:74:13: 7e:46:55:fc:2f:fd:af:fb:32:3c:bc:2f:e4:18:45: 3d:5a:9b:7a:60:f4:a7:0a:d2:d5:40:12:9e:44:ca: c3:cd:8d:8f:b2:ee:a2:c8:45:42:a6:a0:0e:fa:23: 78:78:8b:91:ec:6a:48:6d:fa:d0:ed:97:3f:26:be: e1:f8:86:0f:bf:a9:5d:33:08:d4:3c:67:aa:4e:eb: 8c:46:1e:1f:23:82:1e:78:63:f5:ef:ec:6e:b7:75: 8e:9c:bd:30:c8:b1:fa:d8:52:e0:68:22:de:74:86: 34:1f:c7:df:9b:89:bc:c3:9a:4e:73:95:6e:d0:15: 82:ec:18:cb:fc:04:1e:70:7e:48:45:34:d4:89:37: 3e:2a:a4:1d:4c:88:65:be:0e:e8:98:ab:85:11:8f: 5a:9f:33:4e:ac:82:b1:e3:89:ae:8a:4d:87:6d:7a: 41:0c:4b:6e:d0:07:a4:84:b0:21:93:fb:4f:97:8f: 3f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:35:A0:5A:5E:6B:88:AD:41:A4:EC:1A:7D:BB:68:16:9C:9F:EC:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82/6bb560ec-aa19-3633-98be-a5a2e7708fd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82/8792fa78-8f07-41ad-aaa5-9b445516bf82.crl X509v3 Authority Key Identifier: keyid:DE:A7:FE:B2:9E:14:63:F6:09:E5:68:DE:A8:F6:01:5B:6C:92:69:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82.cer sbgp-ipAddrBlock: critical IPv4: 23.138.156.0/24 IPv6: 2602:f661::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:52:29:62:df:c9:7b:16:2a:f4:97:0c:df:a1:d5:b2:e7:96: a6:97:6d:98:4f:d6:c0:b4:07:17:b2:f5:73:7f:c3:c4:d5:0e: d1:6a:8c:71:7d:0c:18:bd:12:96:9a:38:81:12:44:15:59:d9: bf:9b:7b:b9:e3:dd:cf:e6:28:ef:4c:52:28:e8:04:45:88:44: 88:19:10:55:73:e7:84:f8:6c:0d:f9:a6:8f:25:a3:4b:a8:ef: 7c:96:c4:9a:dd:82:9a:32:a6:8f:3b:be:e0:1f:c1:92:bd:39: 61:6a:31:24:c1:be:42:3d:a3:62:86:ec:ff:e9:eb:e3:00:d5: 4c:d2:c5:2a:3d:ba:60:84:e0:73:43:01:63:32:b9:2f:07:98: 96:a1:06:23:27:54:f3:70:3f:5c:0e:69:3d:02:b4:12:38:12: f6:d6:2d:08:1c:08:ab:98:5b:02:2f:5f:b2:f8:50:99:22:21: ee:5f:fb:7d:1a:af:59:d8:6b:38:90:e2:e4:33:22:1a:fc:64: ef:a8:59:42:4e:cb:1d:a6:b4:99:89:eb:0b:d8:1d:9c:d7:46: fd:a1:ad:40:3b:67:b5:e3:30:ce:27:f7:2b:96:d2:84:79:96: 5d:29:eb:d8:de:83:b8:ca:e1:d8:95:3c:14:6d:22:1a:1e:cc: b2:c2:f9:e0 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEqdMNVfGdaiemBvuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODc5MmZhNzgtOGYwNy00MWFkLWFhYTUtOWI0NDU1MTZi ZjgyMB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk YTc4ZTZiOGItNmQxMS00MDFiLWI4N2UtOWEwNDA3ZGVjNTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KKfnuWN16kIXyMqrcw8TD7AfrVwlHXAP7Og Wf+vv8ucT6BsThOvEry5cAaMxXPhU80lvu6XGhseNYa5kgyyHtGQrHc228o/dBN+ RlX8L/2v+zI8vC/kGEU9Wpt6YPSnCtLVQBKeRMrDzY2Psu6iyEVCpqAO+iN4eIuR 7GpIbfrQ7Zc/Jr7h+IYPv6ldMwjUPGeqTuuMRh4fI4IeeGP17+xut3WOnL0wyLH6 2FLgaCLedIY0H8ffm4m8w5pOc5Vu0BWC7BjL/AQecH5IRTTUiTc+KqQdTIhlvg7o mKuFEY9anzNOrIKx44muik2HbXpBDEtu0AekhLAhk/tPl48/xwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFHM1oFpea4itQaTsGn27aBacn+wJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84Nzky ZmE3OC04ZjA3LTQxYWQtYWFhNS05YjQ0NTUxNmJmODIvNmJiNTYwZWMtYWExOS0z NjMzLTk4YmUtYTVhMmU3NzA4ZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODc5MmZhNzgtOGYwNy00MWFkLWFh YTUtOWI0NDU1MTZiZjgyLzg3OTJmYTc4LThmMDctNDFhZC1hYWE1LTliNDQ1NTE2 YmY4Mi5jcmwwHwYDVR0jBBgwFoAU3qf+sp4UY/YJ5WjeqPYBW2ySadowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84NzkyZmE3OC04ZjA3LTQxYWQtYWFhNS05YjQ0 NTUxNmJmODIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4qcMA4E AgACMAgDBgAmAvZhADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAlUili38l7Fir0lwzfodWy55aml22YT9bA tAcXsvVzf8PE1Q7RaoxxfQwYvRKWmjiBEkQVWdm/m3u5493P5ijvTFIo6ARFiESI GRBVc+eE+GwN+aaPJaNLqO98lsSa3YKaMqaPO77gH8GSvTlhajEkwb5CPaNihuz/ 6evjANVM0sUqPbpghOBzQwFjMrkvB5iWoQYjJ1TzcD9cDmk9ArQSOBL21i0IHAir mFsCL1+y+FCZIiHuX/t9Gq9Z2Gs4kOLkMyIa/GTvqFlCTssdprSZiesL2B2c10b9 oa1AO2e14zDOJ/crltKEeZZdKevY3oO4yuHYlTwUbSIaHsyywvng -----END CERTIFICATE-----Generated at Sat Aug 9 05:40:11 2025 by rpki-client