$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/c6afc596-0b9b-3e43-b3b3-f7b83df310c2.roa File: c6afc596-0b9b-3e43-b3b3-f7b83df310c2.roa (raw, json) Hash identifier: gh4RSheZ/Iu9ArAMsRo1r102JBtfiHk3N773vD2A124= Subject key identifier: A6:34:7D:85:98:AC:FE:7A:C1:AA:E2:B5:B3:B3:CC:CC:47:BA:41:1C Certificate issuer: /CN=3e97ddc1-e605-46cf-bcf5-048f8d8eb41a Certificate serial: 010D0C9F4328584A56004FC057E133D7882FEC80 Authority key identifier: 52:1A:57:8E:2A:C7:61:B5:E3:66:CB:74:74:61:80:E0:B1:16:4A:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/c6afc596-0b9b-3e43-b3b3-f7b83df310c2.roa Signing time: Sat 28 Jun 2025 01:00:48 +0000 ROA not before: Sat 28 Jun 2025 01:00:48 +0000 ROA not after: Fri 26 Sep 2025 01:00:48 +0000 asID: 11655 IP address blocks: 23.128.92.0/24 maxlen: 24 2602:f979::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:56:00:4f:c0:57:e1:33:d7:88:2f:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e97ddc1-e605-46cf-bcf5-048f8d8eb41a Validity Not Before: Jun 28 01:00:48 2025 GMT Not After : Sep 26 01:00:48 2025 GMT Subject: CN=125c07b0-2b9e-4527-afb0-445e5ac10427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3a:e9:c1:3f:40:b4:24:a3:5b:3a:4b:9f:0b: 8a:85:99:4a:23:1f:a9:4b:d4:b5:bf:ad:9f:64:26: 21:0c:62:65:07:8c:ac:7f:1e:b5:96:fd:21:cf:e8: 7b:3f:14:a2:c4:8c:c1:46:77:f3:19:ca:df:b3:2e: 1f:60:39:3a:30:99:21:5d:1d:9d:33:a6:1e:d4:55: 19:b9:19:02:cf:ac:4f:55:c7:e8:50:b7:93:ab:a1: 70:5d:b5:ab:54:94:eb:8a:5c:14:b6:23:bc:73:55: aa:83:c0:b5:cf:8c:99:1c:e9:12:41:5d:cd:92:87: eb:90:53:ab:f0:9c:18:83:d9:33:19:ff:1e:a8:d7: 24:ea:ff:95:8d:f1:9b:94:77:c1:48:27:a6:2c:2b: f2:50:51:59:48:6b:bc:7f:6f:50:15:35:4f:ee:65: 98:1b:43:94:c4:bb:8a:9b:08:80:6e:e9:41:32:b9: 1f:e6:96:aa:7b:e7:42:a9:eb:10:13:5e:7d:01:51: fc:98:74:8f:9e:0c:aa:39:e9:27:ab:95:3f:85:86: 14:bc:5a:6b:42:f1:83:1e:07:47:04:75:ee:d8:de: ca:df:e9:a4:0a:95:44:e1:4e:da:5f:7c:23:a8:35: cd:22:d1:25:7d:4b:28:22:c6:06:7e:a7:70:83:64: bc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:34:7D:85:98:AC:FE:7A:C1:AA:E2:B5:B3:B3:CC:CC:47:BA:41:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/c6afc596-0b9b-3e43-b3b3-f7b83df310c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.crl X509v3 Authority Key Identifier: keyid:52:1A:57:8E:2A:C7:61:B5:E3:66:CB:74:74:61:80:E0:B1:16:4A:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.cer sbgp-ipAddrBlock: critical IPv4: 23.128.92.0/24 IPv6: 2602:f979::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:ef:ac:ed:39:fa:63:12:a0:34:64:54:71:bd:5e:74:59:5b: 1a:e9:9f:e1:32:a4:e4:e8:85:eb:84:34:08:75:99:8f:e5:ef: d9:1f:17:b2:c0:a2:1c:84:cc:0a:02:ab:48:57:b6:c4:e7:b8: c9:db:3d:5b:5d:93:2d:e5:3e:3b:de:14:a4:64:20:35:fc:31: 3a:6a:bb:1b:3b:e9:59:85:57:52:e4:f7:4b:de:32:49:5e:da: 22:d0:0a:1e:ef:2d:ff:76:40:78:cd:54:3a:1e:da:d4:80:ee: 07:4b:a2:34:e5:a2:f5:85:8b:63:b1:17:cf:33:f3:32:e4:48: 84:ec:d3:73:5b:a6:ca:05:06:08:05:00:05:96:ae:4e:3c:8e: 42:6d:d9:18:17:aa:3c:7a:f0:8d:84:5a:06:dc:3e:25:8d:72: a4:c5:03:40:20:11:2c:e3:05:4f:55:9e:06:88:a9:7e:40:e1: b7:f0:92:b9:7b:3a:07:92:9f:aa:e0:7e:95:6f:c5:39:d4:af: 72:fa:c0:5b:35:4e:51:ff:2e:3f:e6:31:9c:36:70:d0:54:b2: 60:4c:21:20:6b:d7:3f:1f:11:2a:21:22:cb:93:fb:69:08:6c: e7:09:1b:ae:44:b6:66:28:b7:25:b1:74:27:b0:9b:ee:76:ae: 7f:34:9f:0f -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEpWAE/AV+Ez14gv7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U5N2RkYzEtZTYwNS00NmNmLWJjZjUtMDQ4ZjhkOGVi NDFhMB4XDTI1MDYyODAxMDA0OFoXDTI1MDkyNjAxMDA0OFowLzEtMCsGA1UEAxMk MTI1YzA3YjAtMmI5ZS00NTI3LWFmYjAtNDQ1ZTVhYzEwNDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTrpwT9AtCSjWzpLnwuKhZlKIx+pS9S1v62f ZCYhDGJlB4ysfx61lv0hz+h7PxSixIzBRnfzGcrfsy4fYDk6MJkhXR2dM6Ye1FUZ uRkCz6xPVcfoULeTq6FwXbWrVJTrilwUtiO8c1Wqg8C1z4yZHOkSQV3NkofrkFOr 8JwYg9kzGf8eqNck6v+VjfGblHfBSCemLCvyUFFZSGu8f29QFTVP7mWYG0OUxLuK mwiAbulBMrkf5paqe+dCqesQE159AVH8mHSPngyqOeknq5U/hYYUvFprQvGDHgdH BHXu2N7K3+mkCpVE4U7aX3wjqDXNItElfUsoIsYGfqdwg2S88wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKY0fYWYrP56waritbOzzMxHukEcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZTk3 ZGRjMS1lNjA1LTQ2Y2YtYmNmNS0wNDhmOGQ4ZWI0MWEvYzZhZmM1OTYtMGI5Yi0z ZTQzLWIzYjMtZjdiODNkZjMxMGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2U5N2RkYzEtZTYwNS00NmNmLWJj ZjUtMDQ4ZjhkOGViNDFhLzNlOTdkZGMxLWU2MDUtNDZjZi1iY2Y1LTA0OGY4ZDhl YjQxYS5jcmwwHwYDVR0jBBgwFoAUUhpXjirHYbXjZst0dGGA4LEWSv8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZTk3ZGRjMS1lNjA1LTQ2Y2YtYmNmNS0wNDhm OGQ4ZWI0MWEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4BcMA4E AgACMAgDBgAmAvl5ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAV76ztOfpjEqA0ZFRxvV50WVsa6Z/hMqTk 6IXrhDQIdZmP5e/ZHxeywKIchMwKAqtIV7bE57jJ2z1bXZMt5T473hSkZCA1/DE6 arsbO+lZhVdS5PdL3jJJXtoi0Aoe7y3/dkB4zVQ6HtrUgO4HS6I05aL1hYtjsRfP M/My5EiE7NNzW6bKBQYIBQAFlq5OPI5CbdkYF6o8evCNhFoG3D4ljXKkxQNAIBEs 4wVPVZ4GiKl+QOG38JK5ezoHkp+q4H6Vb8U51K9y+sBbNU5R/y4/5jGcNnDQVLJg TCEga9c/HxEqISLLk/tpCGznCRuuRLZmKLclsXQnsJvudq5/NJ8P -----END CERTIFICATE-----Generated at Mon Jun 30 16:41:03 2025 by rpki-client