$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871/9cddb93c-d15f-368f-b4c7-9146332ae632.roa File: 9cddb93c-d15f-368f-b4c7-9146332ae632.roa (raw, json) Hash identifier: aknmgTbEAWQdSDdYv5jfH3xvUe3Mh0AFrFTeP1ZIxIo= Subject key identifier: 4A:EF:25:C2:42:42:AE:8D:61:A0:06:1D:FF:59:58:D6:27:CC:A5:B3 Certificate issuer: /CN=2c2d2b6e-86ad-42ce-9f37-1c1f69efa871 Certificate serial: 010D0C9F4328584A86B91A710AFBF67A21132340 Authority key identifier: 31:62:ED:F7:A2:34:9C:95:C9:82:09:B9:68:A6:96:16:A4:85:2A:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871/9cddb93c-d15f-368f-b4c7-9146332ae632.roa Signing time: Tue 15 Jul 2025 11:52:02 +0000 ROA not before: Tue 15 Jul 2025 11:52:02 +0000 ROA not after: Mon 13 Oct 2025 11:52:02 +0000 asID: 401805 IP address blocks: 23.141.108.0/24 maxlen: 24 2602:f5f7::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:b9:1a:71:0a:fb:f6:7a:21:13:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c2d2b6e-86ad-42ce-9f37-1c1f69efa871 Validity Not Before: Jul 15 11:52:02 2025 GMT Not After : Oct 13 11:52:02 2025 GMT Subject: CN=b4bc374b-ba4b-4558-b133-513ce2780450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:db:5c:c4:ae:5e:c4:73:20:87:a0:57:17:84: 79:19:10:7c:94:09:60:f4:98:83:cd:cb:17:c3:97: 16:0c:32:c4:dd:75:cd:d2:a7:ac:c3:2e:53:e8:2d: 6b:17:14:29:1d:e9:97:e9:6b:29:b2:50:9b:cf:77: 89:9e:88:4e:f0:02:a2:b7:a8:2f:f3:db:8a:fb:46: c6:ce:03:c7:f4:df:f4:b8:f9:c0:ff:2f:b5:26:86: f7:47:18:f2:ee:6c:53:a0:03:d5:df:27:5c:e7:e7: 97:f0:df:09:3b:03:b8:53:9a:75:d3:80:87:51:b5: c4:b6:12:83:57:70:9e:93:e3:86:8f:dd:1a:c8:f7: 50:7a:89:1d:b2:eb:49:75:b7:c1:a4:cb:32:ed:3f: 8e:1f:34:bc:9a:9f:f6:1c:8b:ae:be:31:0d:0d:f1: 00:90:81:b3:25:2b:fd:23:ca:25:60:17:d1:c9:bb: eb:ab:09:c2:b2:a8:a9:e1:5c:2c:c6:83:b2:91:a8: 25:de:76:f3:bf:75:05:1a:97:51:ac:89:49:df:f5: c3:8e:e1:97:9b:49:4e:b9:d4:b0:23:26:d6:cb:48: 4c:eb:2f:de:d0:5a:64:6b:8f:6d:1c:4b:2c:45:e1: fd:2e:35:c9:12:4d:55:c2:6b:18:71:50:07:15:df: 24:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:EF:25:C2:42:42:AE:8D:61:A0:06:1D:FF:59:58:D6:27:CC:A5:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871/9cddb93c-d15f-368f-b4c7-9146332ae632.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871.crl X509v3 Authority Key Identifier: keyid:31:62:ED:F7:A2:34:9C:95:C9:82:09:B9:68:A6:96:16:A4:85:2A:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871.cer sbgp-ipAddrBlock: critical IPv4: 23.141.108.0/24 IPv6: 2602:f5f7::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:e8:e0:c3:79:22:e1:b2:3b:95:c6:9b:6b:4d:d2:60:cf:bb: c6:e1:39:33:91:9c:89:e1:b0:e4:7d:53:90:5b:50:32:0e:c0: b6:21:17:01:27:1d:79:12:41:64:b7:3f:8f:c6:9b:24:ac:12: 1c:55:ef:d5:c5:52:11:16:72:a7:16:27:c9:0e:30:f6:ad:0b: 65:8e:01:3b:07:34:bd:a1:61:d6:54:d0:60:c9:39:4f:a3:ea: 06:41:8b:23:7d:25:e9:84:1a:04:e4:55:21:a3:99:d2:e2:c9: 75:88:cd:4a:16:28:52:e7:56:e1:59:ea:1e:81:52:41:5e:99: 8f:fe:1f:cf:06:81:05:6d:0d:d7:bb:84:46:92:16:c6:dc:70: 45:63:14:00:dd:07:e4:8a:62:fe:31:70:58:cb:8d:0b:f9:9a: 01:0d:90:d9:66:1b:33:73:ec:53:cc:73:ae:b8:e5:79:63:89: bc:25:d2:92:17:6c:81:70:49:e0:2b:97:cd:69:e8:be:10:ff: 74:f2:e9:b9:7e:ff:f8:e5:3c:ab:ea:de:dd:09:fb:f8:4a:e3: 3c:ce:97:1b:01:cb:0d:2a:1b:f3:13:cf:19:a1:96:9b:e5:8b: 46:23:e5:27:99:3e:0c:9b:ae:9b:46:a6:1f:dd:28:da:26:30: 40:4c:85:f6 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEqGuRpxCvv2eiETI0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmMyZDJiNmUtODZhZC00MmNlLTlmMzctMWMxZjY5ZWZh ODcxMB4XDTI1MDcxNTExNTIwMloXDTI1MTAxMzExNTIwMlowLzEtMCsGA1UEAxMk YjRiYzM3NGItYmE0Yi00NTU4LWIxMzMtNTEzY2UyNzgwNDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNtcxK5exHMgh6BXF4R5GRB8lAlg9JiDzcsX w5cWDDLE3XXN0qeswy5T6C1rFxQpHemX6WspslCbz3eJnohO8AKit6gv89uK+0bG zgPH9N/0uPnA/y+1Job3Rxjy7mxToAPV3ydc5+eX8N8JOwO4U5p104CHUbXEthKD V3Cek+OGj90ayPdQeokdsutJdbfBpMsy7T+OHzS8mp/2HIuuvjENDfEAkIGzJSv9 I8olYBfRybvrqwnCsqip4VwsxoOykagl3nbzv3UFGpdRrIlJ3/XDjuGXm0lOudSw IybWy0hM6y/e0Fpka49tHEssReH9LjXJEk1VwmsYcVAHFd8kZQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFErvJcJCQq6NYaAGHf9ZWNYnzKWzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yYzJk MmI2ZS04NmFkLTQyY2UtOWYzNy0xYzFmNjllZmE4NzEvOWNkZGI5M2MtZDE1Zi0z NjhmLWI0YzctOTE0NjMzMmFlNjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmMyZDJiNmUtODZhZC00MmNlLTlm MzctMWMxZjY5ZWZhODcxLzJjMmQyYjZlLTg2YWQtNDJjZS05ZjM3LTFjMWY2OWVm YTg3MS5jcmwwHwYDVR0jBBgwFoAUMWLt96I0nJXJggm5aKaWFqSFKocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yYzJkMmI2ZS04NmFkLTQyY2UtOWYzNy0xYzFm NjllZmE4NzEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF41sMA4E AgACMAgDBgAmAvX3ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA16ODDeSLhsjuVxptrTdJgz7vG4TkzkZyJ 4bDkfVOQW1AyDsC2IRcBJx15EkFktz+PxpskrBIcVe/VxVIRFnKnFifJDjD2rQtl jgE7BzS9oWHWVNBgyTlPo+oGQYsjfSXphBoE5FUho5nS4sl1iM1KFihS51bhWeoe gVJBXpmP/h/PBoEFbQ3Xu4RGkhbG3HBFYxQA3QfkimL+MXBYy40L+ZoBDZDZZhsz c+xTzHOuuOV5Y4m8JdKSF2yBcEngK5fNaei+EP908um5fv/45Tyr6t7dCfv4SuM8 zpcbAcsNKhvzE88ZoZab5YtGI+UnmT4Mm66bRqYf3SjaJjBATIX2 -----END CERTIFICATE-----Generated at Sun Aug 10 10:42:22 2025 by rpki-client