$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/e604780b-4bf4-362f-9661-294a2090b35c.roa File: e604780b-4bf4-362f-9661-294a2090b35c.roa (raw, json) Hash identifier: C3ZBSDadFYyTMRy5wmHCh+w57sd/2K5wD7qDQOb3xUc= Subject key identifier: 50:C7:7E:09:44:DA:2F:1F:10:CF:20:37:7A:A9:77:FA:5E:09:F5:2E Certificate issuer: /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Certificate serial: 010D0C9F4328584A3B7B03EA97BA0B1B41AC0E80 Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/e604780b-4bf4-362f-9661-294a2090b35c.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 33039 IP address blocks: 23.173.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:03:ea:97:ba:0b:1b:41:ac:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=7eb7bb00-62e6-4245-93f7-476ab0c4f1c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b7:15:6d:29:71:05:9e:44:03:44:87:f0:d7: 1e:6f:11:d8:d5:7a:6a:55:99:e5:bf:3b:25:1f:39: e0:89:06:f6:0f:4a:2c:c4:53:d0:19:fe:61:d6:15: 6d:7d:56:96:55:9c:7a:8f:74:0c:00:a3:15:4f:a8: 69:a1:53:97:36:e8:f9:52:7a:0d:05:e3:a8:40:90: a0:0a:28:a2:c9:6a:19:71:7a:1c:3e:12:5b:9c:e3: 18:e1:6c:87:f6:ef:a8:7a:af:9e:7f:86:e8:89:9e: 46:26:b9:0c:19:d8:76:3d:83:90:de:21:e5:d1:8d: ac:24:aa:dd:05:cc:b0:45:0b:6e:d1:08:b9:d9:7a: 35:66:5b:95:f6:e4:35:3d:30:34:c4:5f:54:46:cc: f0:69:56:a0:13:77:95:c5:fb:a8:7d:da:e0:2b:d0: b1:7e:93:3b:f4:a5:42:f5:76:90:ad:82:4f:7c:21: f3:a1:d7:42:98:dc:62:f3:43:c6:aa:a7:98:ae:cc: 67:f3:77:14:17:65:88:9d:81:c2:c2:2f:d0:dc:77: ce:3c:22:e0:e8:e0:db:58:4d:e2:b2:f3:0f:34:af: 32:67:87:4b:c4:e7:16:a9:05:df:05:fc:cf:ef:19: 68:5f:06:b9:2b:91:ed:0d:b3:9d:ef:12:76:30:28: d2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C7:7E:09:44:DA:2F:1F:10:CF:20:37:7A:A9:77:FA:5E:09:F5:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/e604780b-4bf4-362f-9661-294a2090b35c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl X509v3 Authority Key Identifier: keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer sbgp-ipAddrBlock: critical IPv4: 23.173.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:68:e9:b9:b4:09:a6:4a:52:09:db:4d:4b:af:d6:5b:23:2e: bf:4b:41:99:e0:21:6d:d2:c5:8e:88:a1:88:d9:cf:da:b8:1e: 86:1a:c4:f3:2b:33:f9:9f:ad:f7:aa:56:6d:0e:61:60:63:72: b4:18:ef:7e:62:53:e4:a0:fb:a7:33:6a:8e:e9:3b:db:42:c5: 03:1f:3a:9d:46:d6:ab:38:4b:b7:3e:31:7e:b0:d4:e4:85:82: cb:6f:0f:c3:3e:9b:04:c4:b5:72:7a:e1:f0:ae:b8:b7:f4:27: c3:e2:95:ae:52:3b:91:ea:f7:a6:b5:86:88:1d:33:2e:1b:34: fd:e1:fa:af:88:ab:9b:ab:d3:b7:c8:6b:5f:42:9c:ff:5f:77: d1:cf:2c:86:79:4b:08:e5:aa:c8:88:84:f3:d1:e5:f6:e6:18: a2:b1:5c:75:11:ed:15:74:02:63:d8:bf:3e:39:bc:d3:58:6f: c6:0a:e4:d6:49:21:0c:de:75:90:b5:8a:f2:1d:3d:23:8a:eb: d6:89:85:2c:09:5b:da:96:93:b5:e5:82:92:9a:49:18:82:9e: ba:59:9d:12:16:b0:b1:dd:16:45:75:39:35:05:9b:0e:c8:3c: e2:34:11:e3:36:66:73:b5:07:bd:9b:0f:6c:9c:fd:3c:37:8e: 8b:cb:f4:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ewPql7oLG0GsDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNjNzhkNjAtMzRlYi00ZmVkLThlMjUtOTI1Yjk1YTMw YzhlMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk N2ViN2JiMDAtNjJlNi00MjQ1LTkzZjctNDc2YWIwYzRmMWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbcVbSlxBZ5EA0SH8NcebxHY1XpqVZnlvzsl HzngiQb2D0osxFPQGf5h1hVtfVaWVZx6j3QMAKMVT6hpoVOXNuj5UnoNBeOoQJCg CiiiyWoZcXocPhJbnOMY4WyH9u+oeq+ef4boiZ5GJrkMGdh2PYOQ3iHl0Y2sJKrd BcywRQtu0Qi52Xo1ZluV9uQ1PTA0xF9URszwaVagE3eVxfuofdrgK9CxfpM79KVC 9XaQrYJPfCHzoddCmNxi80PGqqeYrsxn83cUF2WInYHCwi/Q3HfOPCLg6ODbWE3i svMPNK8yZ4dLxOcWqQXfBfzP7xloXwa5K5HtDbOd7xJ2MCjSQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDHfglE2i8fEM8gN3qpd/peCfUuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zM2M3 OGQ2MC0zNGViLTRmZWQtOGUyNS05MjViOTVhMzBjOGUvZTYwNDc4MGItNGJmNC0z NjJmLTk2NjEtMjk0YTIwOTBiMzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzNjNzhkNjAtMzRlYi00ZmVkLThl MjUtOTI1Yjk1YTMwYzhlLzMzYzc4ZDYwLTM0ZWItNGZlZC04ZTI1LTkyNWI5NWEz MGM4ZS5jcmwwHwYDVR0jBBgwFoAUX2UlsGmXIYLm4tORRne6XDPT4EEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zM2M3OGQ2MC0zNGViLTRmZWQtOGUyNS05MjVi OTVhMzBjOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF61oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEto6bm0CaZKUgnbTUuv1lsjLr9LQZngIW3SxY6IoYjZz9q4HoYaxPMr M/mfrfeqVm0OYWBjcrQY735iU+Sg+6czao7pO9tCxQMfOp1G1qs4S7c+MX6w1OSF gstvD8M+mwTEtXJ64fCuuLf0J8Pila5SO5Hq96a1hogdMy4bNP3h+q+Iq5ur07fI a19CnP9fd9HPLIZ5SwjlqsiIhPPR5fbmGKKxXHUR7RV0AmPYvz45vNNYb8YK5NZJ IQzedZC1ivIdPSOK69aJhSwJW9qWk7XlgpKaSRiCnrpZnRIWsLHdFkV1OTUFmw7I POI0EeM2ZnO1B72bD2yc/Tw3jovL9JA= -----END CERTIFICATE-----Generated at Wed Jul 2 04:28:27 2025 by rpki-client