$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b488e71-24cf-4f65-b75b-178c0739ead9/9c707ed3-53fd-3946-83b1-61845f5db5c4.roa File: 9c707ed3-53fd-3946-83b1-61845f5db5c4.roa (raw, json) Hash identifier: yCDYP02/a+FvbBdrMavcPLa8DJzOYfKwHFBR5S7SK9I= Subject key identifier: D9:7A:B4:50:86:FA:08:7E:BE:C8:CF:5B:89:4F:58:82:0A:EC:A8:4F Certificate issuer: /CN=6b488e71-24cf-4f65-b75b-178c0739ead9 Certificate serial: 010D0C9F4328584AA42B74B65935319EE5B6DF00 Authority key identifier: 6E:37:FF:26:81:A2:A8:EB:02:DE:AF:AF:39:E5:C2:03:AD:E6:04:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b488e71-24cf-4f65-b75b-178c0739ead9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b488e71-24cf-4f65-b75b-178c0739ead9/9c707ed3-53fd-3946-83b1-61845f5db5c4.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 401619 IP address blocks: 23.132.108.0/24 maxlen: 24 2602:f736::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b488e71-24cf-4f65-b75b-178c0739ead9/6b488e71-24cf-4f65-b75b-178c0739ead9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b488e71-24cf-4f65-b75b-178c0739ead9/6b488e71-24cf-4f65-b75b-178c0739ead9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b488e71-24cf-4f65-b75b-178c0739ead9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:74:b6:59:35:31:9e:e5:b6:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b488e71-24cf-4f65-b75b-178c0739ead9 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=a937a7e6-bd98-4819-9ac4-f63e92451a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e9:4c:4b:49:c5:53:f7:cb:f2:93:67:6a:fe: 13:db:50:03:6a:ba:d8:34:a6:b8:f5:53:61:c4:ae: 07:46:bb:25:98:0f:97:38:e2:cb:80:66:e0:eb:e6: 75:25:d2:55:63:ba:ea:28:00:d4:41:f8:30:28:7e: dc:12:7c:49:62:93:c5:f2:14:0a:23:86:ef:53:dd: d0:17:ec:36:25:31:03:00:eb:6a:5a:37:e2:83:8b: d3:18:04:85:48:42:8c:2b:32:de:1f:99:b7:04:e3: ce:9a:b1:01:a6:a9:74:90:a5:c6:52:af:14:f7:0b: 67:92:4c:47:7d:e1:bf:44:9b:5b:e7:27:8c:22:ea: 92:1c:21:e8:cd:fe:0b:4b:49:03:87:ee:9f:68:bb: 79:93:c8:08:fe:a6:da:ed:ed:60:eb:8b:00:c6:ea: 87:d9:ab:ec:1d:46:f8:cf:70:12:5d:38:2d:f9:72: 40:99:7a:6c:af:4f:d6:2e:50:66:8d:ec:c0:68:73: dc:d7:88:5f:97:d2:d3:00:52:68:1a:57:90:eb:74: 7f:9c:67:1b:df:cf:2b:85:23:94:c1:2f:23:6e:ac: 01:e2:cc:bf:92:1f:42:a4:33:52:d2:1d:60:d5:67: 8d:c9:da:77:96:31:cf:45:da:ca:fc:44:dc:88:22: 37:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:7A:B4:50:86:FA:08:7E:BE:C8:CF:5B:89:4F:58:82:0A:EC:A8:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b488e71-24cf-4f65-b75b-178c0739ead9/9c707ed3-53fd-3946-83b1-61845f5db5c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b488e71-24cf-4f65-b75b-178c0739ead9/6b488e71-24cf-4f65-b75b-178c0739ead9.crl X509v3 Authority Key Identifier: keyid:6E:37:FF:26:81:A2:A8:EB:02:DE:AF:AF:39:E5:C2:03:AD:E6:04:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b488e71-24cf-4f65-b75b-178c0739ead9.cer sbgp-ipAddrBlock: critical IPv4: 23.132.108.0/24 IPv6: 2602:f736::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:73:49:1f:db:51:81:c2:11:7d:32:40:c9:65:2c:be:56:9c: 64:b0:fe:cb:60:2b:94:81:a4:b2:09:72:07:64:23:4d:12:71: 8d:d4:25:ce:ab:22:d0:d3:5b:40:f0:a9:74:0e:bc:54:e5:2c: 58:7d:99:9b:a2:a2:45:c7:2e:b3:03:25:e3:c5:00:f6:5f:b9: b1:34:1f:cc:35:1d:7f:3e:10:75:94:b6:b7:2d:ec:47:b6:63: 08:d0:21:59:ec:67:10:61:39:43:57:3b:7d:78:30:69:5e:d2: e6:74:61:1f:f1:82:dc:5c:20:f1:7a:1d:6e:1d:13:ca:e0:d1: d1:f8:b0:b5:52:d1:c7:51:3b:5c:3d:01:8e:56:51:e7:7d:50: fd:2d:2b:01:7d:7a:c0:7a:41:88:8d:d5:3c:2d:e9:81:2d:fc: 99:e1:6d:63:d4:7f:e7:07:7c:fa:92:81:65:d5:16:42:ad:95: d3:40:18:86:d1:99:4c:7c:4b:c4:c2:55:79:7f:2a:de:27:81: e8:b0:31:8b:22:0e:06:40:d7:f2:13:fe:71:27:2e:94:d2:c7: f0:91:06:31:75:db:28:5a:86:26:dc:c4:7a:1d:1d:25:44:c6: 10:3a:ed:f3:cb:84:59:f5:32:06:12:e6:8a:df:09:cd:b7:97: c7:c6:b2:4f -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEqkK3S2WTUxnuW23wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmI0ODhlNzEtMjRjZi00ZjY1LWI3NWItMTc4YzA3Mzll YWQ5MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk YTkzN2E3ZTYtYmQ5OC00ODE5LTlhYzQtZjYzZTkyNDUxYTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOlMS0nFU/fL8pNnav4T21ADarrYNKa49VNh xK4HRrslmA+XOOLLgGbg6+Z1JdJVY7rqKADUQfgwKH7cEnxJYpPF8hQKI4bvU93Q F+w2JTEDAOtqWjfig4vTGASFSEKMKzLeH5m3BOPOmrEBpql0kKXGUq8U9wtnkkxH feG/RJtb5yeMIuqSHCHozf4LS0kDh+6faLt5k8gI/qba7e1g64sAxuqH2avsHUb4 z3ASXTgt+XJAmXpsr0/WLlBmjezAaHPc14hfl9LTAFJoGleQ63R/nGcb388rhSOU wS8jbqwB4sy/kh9CpDNS0h1g1WeNydp3ljHPRdrK/ETciCI3/wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFNl6tFCG+gh+vsjPW4lPWIIK7KhPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82YjQ4 OGU3MS0yNGNmLTRmNjUtYjc1Yi0xNzhjMDczOWVhZDkvOWM3MDdlZDMtNTNmZC0z OTQ2LTgzYjEtNjE4NDVmNWRiNWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNmI0ODhlNzEtMjRjZi00ZjY1LWI3 NWItMTc4YzA3MzllYWQ5LzZiNDg4ZTcxLTI0Y2YtNGY2NS1iNzViLTE3OGMwNzM5 ZWFkOS5jcmwwHwYDVR0jBBgwFoAUbjf/JoGiqOsC3q+vOeXCA63mBHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi82YjQ4OGU3MS0yNGNmLTRmNjUtYjc1Yi0xNzhj MDczOWVhZDkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF4RsMA8E AgACMAkDBwAmAvc2AAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPHNJH9tRgcIRfTJAyWUsvlacZLD+y2Ar lIGksglyB2QjTRJxjdQlzqsi0NNbQPCpdA68VOUsWH2Zm6KiRccuswMl48UA9l+5 sTQfzDUdfz4QdZS2ty3sR7ZjCNAhWexnEGE5Q1c7fXgwaV7S5nRhH/GC3Fwg8Xod bh0TyuDR0fiwtVLRx1E7XD0BjlZR531Q/S0rAX16wHpBiI3VPC3pgS38meFtY9R/ 5wd8+pKBZdUWQq2V00AYhtGZTHxLxMJVeX8q3ieB6LAxiyIOBkDX8hP+cSculNLH 8JEGMXXbKFqGJtzEeh0dJUTGEDrt88uEWfUyBhLmit8JzbeXx8ayTw== -----END CERTIFICATE-----Generated at Thu Aug 7 17:39:48 2025 by rpki-client