$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d/e767ba04-e729-36a9-ad2e-ac12e7d8c5b7.roa File: e767ba04-e729-36a9-ad2e-ac12e7d8c5b7.roa (raw, json) Hash identifier: hWKzp1WVbvrGYwDRjdZzOYVDqJDafHoqWiHub/u4bqs= Subject key identifier: 3C:38:E5:D8:23:A1:36:F5:92:9C:49:23:B4:C9:96:2B:DB:00:A5:1E Certificate issuer: /CN=a3f67b12-458f-4257-bdb1-de84b1b8d40d Certificate serial: 010D0C9F43285849F35249E6C337C2947686C5B8 Authority key identifier: 7A:EB:13:35:A4:FA:B0:E7:B6:3E:6C:30:CD:BE:44:51:4D:8D:08:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d/e767ba04-e729-36a9-ad2e-ac12e7d8c5b7.roa Signing time: Fri 23 May 2025 16:41:03 +0000 ROA not before: Fri 23 May 2025 16:41:03 +0000 ROA not after: Thu 21 Aug 2025 16:41:03 +0000 asID: 401139 IP address blocks: 23.181.168.0/24 maxlen: 24 2602:f8b1::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d/a3f67b12-458f-4257-bdb1-de84b1b8d40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d/a3f67b12-458f-4257-bdb1-de84b1b8d40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f3:52:49:e6:c3:37:c2:94:76:86:c5:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3f67b12-458f-4257-bdb1-de84b1b8d40d Validity Not Before: May 23 16:41:03 2025 GMT Not After : Aug 21 16:41:03 2025 GMT Subject: CN=ff92e0af-98c1-44b3-8c32-5237a424968c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:82:5d:48:65:81:42:48:87:8b:10:5f:b7:6e: 72:c7:10:f1:67:e0:10:e3:d2:0a:5a:a7:5f:46:e4: 76:6a:54:8a:9c:3e:97:e0:9b:e6:5c:ed:72:2a:5d: 09:ab:2c:b4:4b:f3:d0:3e:d4:b3:5b:61:21:8c:f9: 2d:1e:2d:6d:bc:92:28:c7:55:1a:79:4c:20:8f:47: 43:4d:09:a4:91:4c:32:f7:b6:6f:49:61:94:2b:30: 67:32:38:39:fd:12:a3:a2:bc:70:8c:55:65:b9:32: e1:55:14:7c:56:f2:99:71:0b:63:ca:8e:82:38:83: 63:b1:e5:fc:42:fe:96:b6:c6:b1:2e:46:64:18:33: 61:b5:c8:50:18:b9:c7:a4:79:27:d2:94:19:be:b5: 79:4e:c5:ca:8b:e8:ff:55:75:39:de:89:8e:c9:e0: 49:84:98:f2:a5:8c:c9:98:f7:91:5a:46:6e:14:3f: 1d:cb:26:c5:00:c5:64:21:ad:41:61:4c:fe:cc:5e: 27:f8:bc:c8:13:cc:22:c6:70:c9:8e:83:92:e7:84: 76:3b:40:c6:47:0f:9d:aa:b7:83:f6:77:f4:b4:70: 6b:ba:7d:55:56:be:a6:e1:9d:f9:24:6a:4d:2e:20: 48:9c:0b:fe:be:08:a1:74:49:64:57:bb:8a:f1:24: 50:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:38:E5:D8:23:A1:36:F5:92:9C:49:23:B4:C9:96:2B:DB:00:A5:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d/e767ba04-e729-36a9-ad2e-ac12e7d8c5b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d/a3f67b12-458f-4257-bdb1-de84b1b8d40d.crl X509v3 Authority Key Identifier: keyid:7A:EB:13:35:A4:FA:B0:E7:B6:3E:6C:30:CD:BE:44:51:4D:8D:08:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d.cer sbgp-ipAddrBlock: critical IPv4: 23.181.168.0/24 IPv6: 2602:f8b1::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:96:e1:aa:34:82:8f:94:17:12:ed:d3:e7:e8:9e:0b:58:5b: 18:ca:60:47:8f:d3:fa:e7:5c:cc:4f:0f:51:8d:5c:4c:87:d6: 5d:08:5f:26:ed:26:ce:4c:f7:86:35:c9:3b:2c:ca:4b:d1:17: a5:bb:36:fa:b3:4c:d3:66:96:0a:9e:71:02:b5:94:19:ad:cb: ed:b2:1c:02:68:80:27:32:c1:6f:19:14:05:a0:72:71:af:12: 21:96:a7:f6:9d:31:3e:f9:dc:db:ec:1d:14:6d:37:b8:75:53: b8:8a:50:7d:a3:de:13:4c:18:29:6e:bf:87:b1:5e:10:88:29: f2:3b:c5:b1:d8:7d:ef:a5:1f:18:80:0f:1c:09:36:e0:01:b5: bf:12:07:a2:49:5a:ae:c5:11:fd:ea:5c:96:d5:4c:bb:c8:65: a9:d6:b3:e9:30:8d:ac:ab:41:65:f1:ac:91:f4:17:b8:81:ea: bf:78:d0:52:52:0c:4f:a5:89:4b:a8:d9:cc:8c:17:d3:54:67: 35:e9:05:a8:df:e7:80:a6:1e:1f:01:e7:ee:b0:e4:73:e6:0c: b1:8a:be:ca:62:4d:55:28:5d:d5:c6:97:cd:1e:e4:6b:d6:bb: e1:96:59:13:c2:eb:d6:46:92:f7:77:e2:fc:c1:c4:4e:3d:55: e1:f3:c2:b4 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEnzUknmwzfClHaGxbgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNmNjdiMTItNDU4Zi00MjU3LWJkYjEtZGU4NGIxYjhk NDBkMB4XDTI1MDUyMzE2NDEwM1oXDTI1MDgyMTE2NDEwM1owLzEtMCsGA1UEAxMk ZmY5MmUwYWYtOThjMS00NGIzLThjMzItNTIzN2E0MjQ5NjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYJdSGWBQkiHixBft25yxxDxZ+AQ49IKWqdf RuR2alSKnD6X4JvmXO1yKl0Jqyy0S/PQPtSzW2EhjPktHi1tvJIox1UaeUwgj0dD TQmkkUwy97ZvSWGUKzBnMjg5/RKjorxwjFVluTLhVRR8VvKZcQtjyo6COINjseX8 Qv6WtsaxLkZkGDNhtchQGLnHpHkn0pQZvrV5TsXKi+j/VXU53omOyeBJhJjypYzJ mPeRWkZuFD8dyybFAMVkIa1BYUz+zF4n+LzIE8wixnDJjoOS54R2O0DGRw+dqreD 9nf0tHBrun1VVr6m4Z35JGpNLiBInAv+vgihdElkV7uK8SRQfwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDw45dgjoTb1kpxJI7TJlivbAKUeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hM2Y2 N2IxMi00NThmLTQyNTctYmRiMS1kZTg0YjFiOGQ0MGQvZTc2N2JhMDQtZTcyOS0z NmE5LWFkMmUtYWMxMmU3ZDhjNWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTNmNjdiMTItNDU4Zi00MjU3LWJk YjEtZGU4NGIxYjhkNDBkL2EzZjY3YjEyLTQ1OGYtNDI1Ny1iZGIxLWRlODRiMWI4 ZDQwZC5jcmwwHwYDVR0jBBgwFoAUeusTNaT6sOe2Pmwwzb5EUU2NCOwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hM2Y2N2IxMi00NThmLTQyNTctYmRiMS1kZTg0 YjFiOGQ0MGQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7WoMA4E AgACMAgDBgQmAvixADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZluGqNIKPlBcS7dPn6J4LWFsYymBHj9P6 51zMTw9RjVxMh9ZdCF8m7SbOTPeGNck7LMpL0Reluzb6s0zTZpYKnnECtZQZrcvt shwCaIAnMsFvGRQFoHJxrxIhlqf2nTE++dzb7B0UbTe4dVO4ilB9o94TTBgpbr+H sV4QiCnyO8Wx2H3vpR8YgA8cCTbgAbW/EgeiSVquxRH96lyW1Uy7yGWp1rPpMI2s q0Fl8ayR9Be4geq/eNBSUgxPpYlLqNnMjBfTVGc16QWo3+eAph4fAefusORz5gyx ir7KYk1VKF3VxpfNHuRr1rvhllkTwuvWRpL3d+L8wcROPVXh88K0 -----END CERTIFICATE-----Generated at Thu Jun 19 12:38:04 2025 by rpki-client