$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/fc89a642-5803-37de-88d2-fbe8648bdde9.roa File: fc89a642-5803-37de-88d2-fbe8648bdde9.roa (raw, json) Hash identifier: NoEz5lOOZlDcTBR3IcR10wZOoc5q/ZXVMu/eaxgB2GU= Subject key identifier: 1D:97:BF:91:F3:64:80:0D:C6:EF:82:38:46:60:25:F0:E8:B2:BB:53 Certificate issuer: /CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Certificate serial: 010D0C9F4328584A0D6A8B5FB8354BC61C01D880 Authority key identifier: EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/fc89a642-5803-37de-88d2-fbe8648bdde9.roa Signing time: Mon 02 Jun 2025 01:00:49 +0000 ROA not before: Mon 02 Jun 2025 01:00:49 +0000 ROA not after: Sun 31 Aug 2025 01:00:49 +0000 asID: 397646 IP address blocks: 23.137.208.0/24 maxlen: 24 2602:fdcb::/36 maxlen: 37 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:6a:8b:5f:b8:35:4b:c6:1c:01:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Validity Not Before: Jun 2 01:00:49 2025 GMT Not After : Aug 31 01:00:49 2025 GMT Subject: CN=de50f1b1-e149-400d-891b-fe4754d01b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b7:4f:09:24:e3:94:ba:f6:2b:a0:33:e0:a7: ee:c8:5d:4f:20:ba:c4:19:5a:50:0b:70:7f:32:a8: 63:91:b2:3e:4e:e7:74:9f:a3:57:2f:38:d3:b2:f3: 86:94:5e:02:a8:ea:f1:34:d5:03:72:66:ec:28:8d: 47:cf:58:f9:91:16:8b:3f:03:02:1c:a7:16:c5:10: 73:9e:01:cd:42:d4:e1:ab:26:2a:5e:ec:a0:af:16: e2:5c:56:65:8e:2a:ec:81:41:73:f7:cd:0e:c0:de: fe:74:5a:4a:c2:b5:97:d5:dd:71:4f:2a:8c:56:7a: 5d:f7:ee:d5:6f:38:d1:0d:1a:44:d2:df:f8:f2:5b: 7c:d3:a3:53:06:2f:09:7d:f3:8e:86:d1:a3:fe:75: 9a:06:ea:5d:15:b3:d4:10:d0:8e:20:62:0a:0a:3f: 49:c8:3a:13:17:16:2f:53:35:55:10:84:60:69:ec: b1:7e:6b:f3:95:47:08:ef:e4:aa:b9:f0:7d:2e:9f: 52:26:97:cb:6c:7e:38:e5:06:8b:10:4f:b6:9b:47: 44:3e:0b:e2:75:8e:c6:44:95:29:8d:d2:df:1c:fd: 33:85:7f:0e:9c:d0:49:91:8b:14:0a:f7:2c:ab:98: 59:eb:e6:c2:bc:ed:a8:31:e3:7e:66:66:5a:5d:2e: c1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:97:BF:91:F3:64:80:0D:C6:EF:82:38:46:60:25:F0:E8:B2:BB:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/fc89a642-5803-37de-88d2-fbe8648bdde9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl X509v3 Authority Key Identifier: keyid:EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer sbgp-ipAddrBlock: critical IPv4: 23.137.208.0/24 IPv6: 2602:fdcb::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:70:1e:19:02:12:34:de:8b:c5:db:b1:11:3b:66:04:70:b8: 74:af:c6:da:37:13:15:a8:6b:b5:c2:91:0b:11:f0:80:72:40: 88:1d:c9:2b:8c:ab:4b:e7:b3:a1:b4:36:61:19:6f:36:0e:c4: 58:98:0e:7b:11:dd:66:fa:5e:79:56:3c:9f:0a:be:98:2b:47: 13:f4:4c:6a:b2:cb:45:33:af:8e:ed:21:4c:bf:f0:70:fa:1c: 79:f4:2c:6d:66:ba:71:6a:15:93:54:3e:cd:b9:9a:14:e7:3c: 83:fa:f2:8f:26:e6:da:f6:ae:c0:cb:e2:35:e4:e5:23:38:49: 4f:72:0a:98:d2:eb:1a:0a:88:96:2b:6a:31:25:0c:6d:39:63: d2:d3:1c:e7:14:e6:d6:c7:c5:5d:66:8e:d3:e6:3f:51:a7:94: ac:e6:c2:0c:fa:ac:62:6a:a7:62:3a:ea:50:28:d0:e8:75:17: 98:04:e0:7f:e6:02:aa:df:a0:bb:93:7b:fd:5a:50:a5:f6:9b: f2:18:16:35:44:32:16:57:d5:4b:be:50:5d:77:24:66:d2:f1: 8f:ec:7e:a5:7d:27:ac:be:55:98:0e:2e:2b:ab:ec:96:7a:83: a2:dd:d3:9b:a5:2f:92:e2:27:60:ad:27:69:50:bb:3e:14:4b: 80:98:40:f1 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEoNaotfuDVLxhwB2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFhMWJiZGUtODdjMi00OWFmLTk4MDMtZDc5MzRkNjU2 ZmYzMB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk ZGU1MGYxYjEtZTE0OS00MDBkLTg5MWItZmU0NzU0ZDAxYjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrdPCSTjlLr2K6Az4KfuyF1PILrEGVpQC3B/ MqhjkbI+Tud0n6NXLzjTsvOGlF4CqOrxNNUDcmbsKI1Hz1j5kRaLPwMCHKcWxRBz ngHNQtThqyYqXuygrxbiXFZljirsgUFz980OwN7+dFpKwrWX1d1xTyqMVnpd9+7V bzjRDRpE0t/48lt806NTBi8JffOOhtGj/nWaBupdFbPUENCOIGIKCj9JyDoTFxYv UzVVEIRgaeyxfmvzlUcI7+SqufB9Lp9SJpfLbH445QaLEE+2m0dEPgvidY7GRJUp jdLfHP0zhX8OnNBJkYsUCvcsq5hZ6+bCvO2oMeN+ZmZaXS7BXQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFB2Xv5HzZIANxu+COEZgJfDosrtTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YWEx YmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkzNGQ2NTZmZjMvZmM4OWE2NDItNTgwMy0z N2RlLTg4ZDItZmJlODY0OGJkZGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGFhMWJiZGUtODdjMi00OWFmLTk4 MDMtZDc5MzRkNjU2ZmYzLzRhYTFiYmRlLTg3YzItNDlhZi05ODAzLWQ3OTM0ZDY1 NmZmMy5jcmwwHwYDVR0jBBgwFoAU7IwDMQPcaohbK3cbnS78eZrakOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YWExYmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkz NGQ2NTZmZjMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4nQMA4E AgACMAgDBgQmAv3LADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAocB4ZAhI03ovF27ERO2YEcLh0r8baNxMV qGu1wpELEfCAckCIHckrjKtL57OhtDZhGW82DsRYmA57Ed1m+l55VjyfCr6YK0cT 9ExqsstFM6+O7SFMv/Bw+hx59CxtZrpxahWTVD7NuZoU5zyD+vKPJuba9q7Ay+I1 5OUjOElPcgqY0usaCoiWK2oxJQxtOWPS0xznFObWx8VdZo7T5j9Rp5Ss5sIM+qxi aqdiOupQKNDodReYBOB/5gKq36C7k3v9WlCl9pvyGBY1RDIWV9VLvlBddyRm0vGP 7H6lfSesvlWYDi4rq+yWeoOi3dObpS+S4idgrSdpULs+FEuAmEDx -----END CERTIFICATE-----Generated at Wed Jul 2 11:38:39 2025 by rpki-client