$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d62d30fc-63d0-466b-a17e-056470f3c113/6f5369cd-e2a5-3b91-a23a-0a9d8308aba6.roa File: 6f5369cd-e2a5-3b91-a23a-0a9d8308aba6.roa (raw, json) Hash identifier: Ldq0vfE4KLLIXlBkHxEzuqO7Nglk9RZEqPRPs0XvXwQ= Subject key identifier: 54:6A:E9:67:2D:5C:1A:89:CE:85:3B:1D:E0:FB:7B:59:05:74:14:FE Certificate issuer: /CN=d62d30fc-63d0-466b-a17e-056470f3c113 Certificate serial: 010D0C9F4328584A2C2017DE13CB8D3F2BDFDA40 Authority key identifier: 3C:82:71:C7:7B:4C:5F:D1:3A:D1:2F:89:C3:56:96:F2:80:31:66:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d62d30fc-63d0-466b-a17e-056470f3c113.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d62d30fc-63d0-466b-a17e-056470f3c113/6f5369cd-e2a5-3b91-a23a-0a9d8308aba6.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 401556 IP address blocks: 23.131.228.0/24 maxlen: 24 2602:f74f::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d62d30fc-63d0-466b-a17e-056470f3c113/d62d30fc-63d0-466b-a17e-056470f3c113.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d62d30fc-63d0-466b-a17e-056470f3c113/d62d30fc-63d0-466b-a17e-056470f3c113.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d62d30fc-63d0-466b-a17e-056470f3c113.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:17:de:13:cb:8d:3f:2b:df:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d62d30fc-63d0-466b-a17e-056470f3c113 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=229398ad-013e-43bf-9187-67ee293fef7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:aa:3a:25:f0:ad:e6:3e:f5:f4:81:7b:47:9f: e2:14:e6:c4:75:c9:d1:0d:5f:e3:9a:43:b5:d9:5b: 6a:f7:fe:57:e4:68:56:a9:b2:ad:9f:8c:02:0c:5b: 82:e7:f7:4b:97:13:a3:66:fe:b8:f8:59:bb:08:29: 04:17:97:11:0d:0f:d9:a5:f3:53:72:5d:f0:c2:2a: 5c:02:7c:f0:04:d7:54:65:06:06:b8:01:40:34:98: df:6c:e9:82:06:84:fa:30:b2:df:0f:f1:b2:fb:2d: 5b:23:30:85:c7:f2:e5:53:c4:19:03:3a:c9:ce:70: a5:8e:bc:ff:e1:1d:f2:a4:c6:b8:28:c9:aa:8a:56: 57:69:67:a8:c5:eb:dc:f7:ce:75:3b:d6:dd:13:ad: d1:fe:e5:70:4d:1f:7a:6a:3a:8c:b9:d0:50:f3:8b: c9:d6:9f:5c:f3:65:a5:90:5e:3c:1f:46:d2:e3:4a: cd:83:55:51:cf:ba:ac:78:b7:df:5b:24:a9:56:91: 0a:fd:c4:97:15:2a:5f:21:fa:24:e3:24:1a:0e:97: b7:0a:c0:e0:6a:48:b7:89:f1:50:eb:22:e5:76:a7: 5d:2a:d7:75:19:89:1e:b0:9d:92:17:75:a7:e4:d3: ef:d0:2f:b8:45:a9:f1:cb:61:d1:e4:51:7d:88:5c: 05:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:6A:E9:67:2D:5C:1A:89:CE:85:3B:1D:E0:FB:7B:59:05:74:14:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d62d30fc-63d0-466b-a17e-056470f3c113/6f5369cd-e2a5-3b91-a23a-0a9d8308aba6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d62d30fc-63d0-466b-a17e-056470f3c113/d62d30fc-63d0-466b-a17e-056470f3c113.crl X509v3 Authority Key Identifier: keyid:3C:82:71:C7:7B:4C:5F:D1:3A:D1:2F:89:C3:56:96:F2:80:31:66:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d62d30fc-63d0-466b-a17e-056470f3c113.cer sbgp-ipAddrBlock: critical IPv4: 23.131.228.0/24 IPv6: 2602:f74f::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:46:4b:fd:f4:48:78:0a:09:c6:85:0c:4b:b4:78:9c:ee:88: ab:48:8c:1a:12:50:40:24:93:e6:6d:d7:38:53:76:bf:78:3b: da:2a:67:2e:11:06:4b:b9:fd:b0:25:70:a0:6f:c6:29:18:17: 4b:af:2f:e1:0f:e3:0c:f6:a8:ee:a6:9e:02:c1:9c:db:e4:af: 1d:74:f6:bd:d5:6e:b2:3e:af:08:43:7c:f3:41:f1:d5:fc:b6: 04:c2:a9:5d:d3:7a:80:e8:d8:22:9f:08:38:de:3a:12:7c:de: fa:38:48:35:cb:67:18:2f:89:2f:83:92:19:69:27:cc:7c:4f: 28:e1:2b:47:8f:aa:b4:a7:87:85:6f:ea:03:a1:e0:50:e0:8b: f0:06:af:e7:e7:68:72:14:8d:e7:b8:34:e4:c7:bb:e5:21:c7: ba:35:8c:e9:a4:6f:5d:b2:cf:f3:36:cd:bf:12:12:0a:92:7e: 10:9e:cc:2a:19:21:82:62:b1:cd:7b:e3:b4:f0:5a:a1:51:f6: bc:78:db:53:45:86:e1:d0:4f:70:89:88:7f:64:5a:1c:82:ef: d0:9d:06:b8:75:50:fd:60:18:96:2c:b6:17:80:b8:2b:b6:d1: 32:53:c2:fc:65:22:67:d6:c2:2c:98:48:25:ca:9e:c0:01:4d: 9a:7a:ed:e4 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEosIBfeE8uNPyvf2kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDYyZDMwZmMtNjNkMC00NjZiLWExN2UtMDU2NDcwZjNj MTEzMB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk MjI5Mzk4YWQtMDEzZS00M2JmLTkxODctNjdlZTI5M2ZlZjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6o6JfCt5j719IF7R5/iFObEdcnRDV/jmkO1 2Vtq9/5X5GhWqbKtn4wCDFuC5/dLlxOjZv64+Fm7CCkEF5cRDQ/ZpfNTcl3wwipc AnzwBNdUZQYGuAFANJjfbOmCBoT6MLLfD/Gy+y1bIzCFx/LlU8QZAzrJznCljrz/ 4R3ypMa4KMmqilZXaWeoxevc9851O9bdE63R/uVwTR96ajqMudBQ84vJ1p9c82Wl kF48H0bS40rNg1VRz7qseLffWySpVpEK/cSXFSpfIfok4yQaDpe3CsDgaki3ifFQ 6yLldqddKtd1GYkesJ2SF3Wn5NPv0C+4Ranxy2HR5FF9iFwFdwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFFRq6WctXBqJzoU7HeD7e1kFdBT+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNjJk MzBmYy02M2QwLTQ2NmItYTE3ZS0wNTY0NzBmM2MxMTMvNmY1MzY5Y2QtZTJhNS0z YjkxLWEyM2EtMGE5ZDgzMDhhYmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDYyZDMwZmMtNjNkMC00NjZiLWEx N2UtMDU2NDcwZjNjMTEzL2Q2MmQzMGZjLTYzZDAtNDY2Yi1hMTdlLTA1NjQ3MGYz YzExMy5jcmwwHwYDVR0jBBgwFoAUPIJxx3tMX9E60S+Jw1aW8oAxZs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNjJkMzBmYy02M2QwLTQ2NmItYTE3ZS0wNTY0 NzBmM2MxMTMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4PkMA4E AgACMAgDBgQmAvdPADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBxRkv99Eh4CgnGhQxLtHic7oirSIwaElBA JJPmbdc4U3a/eDvaKmcuEQZLuf2wJXCgb8YpGBdLry/hD+MM9qjupp4CwZzb5K8d dPa91W6yPq8IQ3zzQfHV/LYEwqld03qA6Nginwg43joSfN76OEg1y2cYL4kvg5IZ aSfMfE8o4StHj6q0p4eFb+oDoeBQ4IvwBq/n52hyFI3nuDTkx7vlIce6NYzppG9d ss/zNs2/EhIKkn4QnswqGSGCYrHNe+O08FqhUfa8eNtTRYbh0E9wiYh/ZFocgu/Q nQa4dVD9YBiWLLYXgLgrttEyU8L8ZSJn1sIsmEglyp7AAU2aeu3k -----END CERTIFICATE-----Generated at Sun Jun 15 15:44:02 2025 by rpki-client