$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/bf6183cf-17c2-3a63-b9d8-a8c4e69f4a1c.roa File: bf6183cf-17c2-3a63-b9d8-a8c4e69f4a1c.roa (raw, json) Hash identifier: 6uuYXChmlkkqvHP+6M+9LlMDE/BDekm0iscw0pAGuUU= Subject key identifier: 3C:1D:84:B0:54:BA:CD:D7:50:F3:48:5B:38:39:03:6A:8B:AC:61:38 Certificate issuer: /CN=687d1923-22fe-4744-9984-8ca387a57cf3 Certificate serial: 010D0C9F4328584A0D6A869A630371274F6A4940 Authority key identifier: BA:10:F7:66:FC:74:E2:12:13:9F:EC:D5:B8:24:38:8E:23:B6:46:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/bf6183cf-17c2-3a63-b9d8-a8c4e69f4a1c.roa Signing time: Mon 02 Jun 2025 01:00:49 +0000 ROA not before: Mon 02 Jun 2025 01:00:49 +0000 ROA not after: Sun 31 Aug 2025 01:00:49 +0000 asID: 400495 IP address blocks: 23.133.104.0/24 maxlen: 24 2602:fbae::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/687d1923-22fe-4744-9984-8ca387a57cf3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/687d1923-22fe-4744-9984-8ca387a57cf3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:6a:86:9a:63:03:71:27:4f:6a:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687d1923-22fe-4744-9984-8ca387a57cf3 Validity Not Before: Jun 2 01:00:49 2025 GMT Not After : Aug 31 01:00:49 2025 GMT Subject: CN=0ab14ad8-fe48-42be-b3eb-d2e6e7b47936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:58:ca:3d:73:32:d8:04:c2:4b:d1:7c:54:49: c4:f5:ed:63:0a:0d:a6:68:71:ac:31:3e:30:50:19: fa:a2:03:3b:b3:5c:6d:b9:26:b0:57:ae:11:c7:28: 9f:bf:1e:ea:39:41:3d:8d:d9:44:00:d4:e3:ad:26: 29:f1:df:d2:7f:9a:09:d4:41:f3:65:e2:9d:bf:32: 53:07:e8:74:8d:5a:07:08:b1:be:2c:b7:80:a6:fd: 4b:2f:ab:61:e5:7c:0e:14:e8:4a:0b:74:38:b7:7f: 95:77:a1:36:dd:3c:1a:95:73:f6:5f:47:5d:8c:c1: 4d:23:0d:ba:0f:a3:21:fd:4e:45:e8:74:14:89:0b: 78:d0:13:f3:1d:ec:61:69:53:40:78:c8:1e:22:b1: d8:fd:be:9b:d9:ed:e9:cc:57:e9:37:d0:f3:7d:63: 0f:95:30:3a:9b:10:0d:6b:56:9c:bc:8b:fd:76:f1: 36:52:cb:37:de:9b:cc:6a:18:27:c2:33:fe:9a:68: 63:97:ca:e8:75:fb:e5:28:c2:83:70:74:97:12:fa: ab:fb:6c:56:95:61:c5:e0:42:45:12:20:b7:c4:fd: 0c:f6:e0:70:bc:ad:91:f9:f8:4e:ce:21:01:d3:0e: 6a:25:01:a1:24:90:60:2f:e9:f8:f0:7a:83:f8:76: d7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:1D:84:B0:54:BA:CD:D7:50:F3:48:5B:38:39:03:6A:8B:AC:61:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/bf6183cf-17c2-3a63-b9d8-a8c4e69f4a1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/687d1923-22fe-4744-9984-8ca387a57cf3.crl X509v3 Authority Key Identifier: keyid:BA:10:F7:66:FC:74:E2:12:13:9F:EC:D5:B8:24:38:8E:23:B6:46:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3.cer sbgp-ipAddrBlock: critical IPv4: 23.133.104.0/24 IPv6: 2602:fbae::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ee:f3:36:6a:6c:0a:c0:cc:eb:d4:82:bf:b8:1b:d3:a5:f0: 16:c8:9f:9a:dc:0c:ef:8a:12:fa:5e:55:03:0e:66:bd:1a:41: 9e:5e:3e:35:bb:a2:ff:02:ca:b4:95:f1:99:8a:bf:52:cd:93: 39:a5:53:17:36:fc:4f:f3:08:2f:df:5c:76:71:69:af:09:76: 1d:eb:93:25:82:36:07:93:92:df:d3:72:61:50:7f:9f:32:bd: 09:47:b9:a6:81:fa:c9:04:44:04:b7:1c:1c:34:85:e4:1b:ef: 52:f9:02:df:43:0a:72:d3:eb:14:c0:9a:db:8d:5e:74:5f:f8: f5:82:19:63:da:e5:01:9f:f8:fb:49:04:ca:bd:94:55:b5:35: 8f:5a:4d:7f:26:31:df:1c:fa:5c:72:05:24:87:c1:63:64:60: 67:9e:cc:82:05:4d:7f:59:49:b2:72:dc:ef:0a:9a:e6:45:c0: 7a:7b:af:79:3d:71:06:58:fe:ce:0f:ea:6f:48:ee:04:71:ba: f5:a4:c8:ef:e4:b4:9d:4d:b3:a8:bc:ba:41:62:d8:ae:47:51: 83:d0:68:0b:32:2f:80:91:07:62:58:63:50:66:7c:ca:52:40: cc:28:12:9b:3f:4c:6a:a1:f3:f3:44:b5:41:6b:4d:96:a8:b6: c1:9c:f6:db -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEoNaoaaYwNxJ09qSUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg3ZDE5MjMtMjJmZS00NzQ0LTk5ODQtOGNhMzg3YTU3 Y2YzMB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk MGFiMTRhZDgtZmU0OC00MmJlLWIzZWItZDJlNmU3YjQ3OTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFjKPXMy2ATCS9F8VEnE9e1jCg2maHGsMT4w UBn6ogM7s1xtuSawV64Rxyifvx7qOUE9jdlEANTjrSYp8d/Sf5oJ1EHzZeKdvzJT B+h0jVoHCLG+LLeApv1LL6th5XwOFOhKC3Q4t3+Vd6E23TwalXP2X0ddjMFNIw26 D6Mh/U5F6HQUiQt40BPzHexhaVNAeMgeIrHY/b6b2e3pzFfpN9DzfWMPlTA6mxAN a1acvIv9dvE2Uss33pvMahgnwjP+mmhjl8rodfvlKMKDcHSXEvqr+2xWlWHF4EJF EiC3xP0M9uBwvK2R+fhOziEB0w5qJQGhJJBgL+n48HqD+HbXAQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDwdhLBUus3XUPNIWzg5A2qLrGE4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82ODdk MTkyMy0yMmZlLTQ3NDQtOTk4NC04Y2EzODdhNTdjZjMvYmY2MTgzY2YtMTdjMi0z YTYzLWI5ZDgtYThjNGU2OWY0YTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjg3ZDE5MjMtMjJmZS00NzQ0LTk5 ODQtOGNhMzg3YTU3Y2YzLzY4N2QxOTIzLTIyZmUtNDc0NC05OTg0LThjYTM4N2E1 N2NmMy5jcmwwHwYDVR0jBBgwFoAUuhD3Zvx04hITn+zVuCQ4jiO2RpEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82ODdkMTkyMy0yMmZlLTQ3NDQtOTk4NC04Y2Ez ODdhNTdjZjMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4VoMA4E AgACMAgDBgAmAvuuADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBe7vM2amwKwMzr1IK/uBvTpfAWyJ+a3Azv ihL6XlUDDma9GkGeXj41u6L/Asq0lfGZir9SzZM5pVMXNvxP8wgv31x2cWmvCXYd 65MlgjYHk5Lf03JhUH+fMr0JR7mmgfrJBEQEtxwcNIXkG+9S+QLfQwpy0+sUwJrb jV50X/j1ghlj2uUBn/j7SQTKvZRVtTWPWk1/JjHfHPpccgUkh8FjZGBnnsyCBU1/ WUmyctzvCprmRcB6e695PXEGWP7OD+pvSO4Ecbr1pMjv5LSdTbOovLpBYtiuR1GD 0GgLMi+AkQdiWGNQZnzKUkDMKBKbP0xqofPzRLVBa02WqLbBnPbb -----END CERTIFICATE-----Generated at Thu Jul 3 06:49:25 2025 by rpki-client