$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/0e0fc866-45da-33ff-bcd7-998937e25816.roa File: 0e0fc866-45da-33ff-bcd7-998937e25816.roa (raw, json) Hash identifier: RqUbO3sIYlwdRJLp2NIYVGh9VQKMWfWBBzOQ+iQKNTs= Subject key identifier: AA:40:35:0C:FF:CC:C8:ED:EE:03:18:B5:94:4A:F1:02:71:08:91:1A Certificate issuer: /CN=9227887c-706f-46d5-a5a6-f0db08bf46a0 Certificate serial: 010D0C9F4328584A51D06DC0C229B1EE58F7C200 Authority key identifier: 69:69:5A:17:AD:83:C2:A9:94:79:43:7F:05:57:28:00:0D:3A:80:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/0e0fc866-45da-33ff-bcd7-998937e25816.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 395648 IP address blocks: 23.132.8.0/24 maxlen: 24 2602:fcea::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:6d:c0:c2:29:b1:ee:58:f7:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9227887c-706f-46d5-a5a6-f0db08bf46a0 Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=f6fa9470-683c-43cf-ab8e-912c5b9f5481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:13:c8:68:2a:c6:1b:be:bb:44:db:18:07:a7: a7:bd:9c:7b:6b:b9:fc:57:83:fe:14:b2:14:95:d2: 51:53:0a:48:dc:da:49:d8:95:54:c3:f3:ac:d7:eb: 2d:6a:5d:89:6a:3b:86:39:6b:48:89:4b:e2:fe:91: 57:a5:61:33:87:60:48:9c:20:7b:b3:bd:1e:32:37: 9b:d2:24:f2:20:4f:21:de:a7:e6:04:7a:7a:a8:6c: d5:d1:4b:ea:63:c3:cc:d4:48:9f:42:2f:0b:da:42: 90:f9:91:86:0d:c0:58:2a:9d:a8:36:f2:50:ed:a5: 29:9c:98:f9:dc:a8:72:88:f9:30:d7:e8:0b:8c:88: af:a3:4e:90:91:4d:fb:7b:bd:da:dc:a6:8c:fa:12: 56:aa:f0:1f:28:3d:72:65:86:9a:11:70:51:f4:e9: 65:fb:0a:c8:9b:10:97:21:11:b4:06:c3:ad:1a:de: bf:d7:64:d3:c4:42:e2:8f:d3:3c:60:3c:ad:7e:a7: 6d:99:94:31:39:b4:b4:30:d9:03:0f:7d:38:b9:42: 13:4c:ad:16:74:9c:e8:4e:74:64:41:57:61:c9:d7: c9:87:15:7c:5b:9d:8a:78:ef:de:a0:08:a3:1e:b3: ef:fa:2c:ad:fb:0c:09:86:a9:1d:c3:48:02:28:f4: be:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:40:35:0C:FF:CC:C8:ED:EE:03:18:B5:94:4A:F1:02:71:08:91:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/0e0fc866-45da-33ff-bcd7-998937e25816.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.crl X509v3 Authority Key Identifier: keyid:69:69:5A:17:AD:83:C2:A9:94:79:43:7F:05:57:28:00:0D:3A:80:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer sbgp-ipAddrBlock: critical IPv4: 23.132.8.0/24 IPv6: 2602:fcea::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:66:51:2e:2a:9e:6d:58:9d:14:90:90:9b:c0:de:2f:7c:2c: 41:08:e7:34:9b:44:89:62:9b:f3:bc:23:ec:ff:c1:e1:26:4e: b1:c2:29:1b:3c:29:8a:99:56:2c:2d:40:d3:3b:b8:71:8e:9b: ec:75:ec:a8:5e:f1:0a:6a:31:06:19:90:42:1e:8e:f3:57:75: 6d:ba:d9:a8:3a:c5:d9:c0:89:67:13:69:d2:20:06:3e:1a:52: 9d:cd:d0:3c:f1:70:08:65:f7:32:9a:f5:3d:06:2e:84:ad:a7: f3:1e:a8:1e:c3:a1:f8:74:be:3b:42:b0:00:fe:fb:e8:be:91: 84:09:da:f3:0c:78:0e:c4:81:5a:58:f2:b6:b3:92:33:f4:74: 0b:2e:95:dc:19:5e:19:24:06:47:68:90:56:2d:7a:38:b9:81: d1:19:84:81:d5:2a:17:a7:81:d6:34:17:2d:37:b7:fc:5a:85: 1d:83:a3:19:24:74:28:3b:a4:50:90:aa:68:3a:99:4f:3f:6b: 9a:6c:e6:08:aa:2d:55:b5:aa:b3:ee:71:44:50:5c:87:d5:75: a3:5d:cc:2b:2c:3f:a2:e6:73:a9:e2:b0:b8:3d:33:5a:51:93: f0:48:08:4b:f9:1a:32:cc:e3:e6:d4:04:74:b1:52:ea:d8:f2: db:32:eb:a0 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEpR0G3Awimx7lj3wgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTIyNzg4N2MtNzA2Zi00NmQ1LWE1YTYtZjBkYjA4YmY0 NmEwMB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk ZjZmYTk0NzAtNjgzYy00M2NmLWFiOGUtOTEyYzViOWY1NDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxPIaCrGG767RNsYB6envZx7a7n8V4P+FLIU ldJRUwpI3NpJ2JVUw/Os1+stal2JajuGOWtIiUvi/pFXpWEzh2BInCB7s70eMjeb 0iTyIE8h3qfmBHp6qGzV0UvqY8PM1EifQi8L2kKQ+ZGGDcBYKp2oNvJQ7aUpnJj5 3KhyiPkw1+gLjIivo06QkU37e73a3KaM+hJWqvAfKD1yZYaaEXBR9Oll+wrImxCX IRG0BsOtGt6/12TTxELij9M8YDytfqdtmZQxObS0MNkDD304uUITTK0WdJzoTnRk QVdhydfJhxV8W52KeO/eoAijHrPv+iyt+wwJhqkdw0gCKPS+fwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKpANQz/zMjt7gMYtZRK8QJxCJEaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MjI3 ODg3Yy03MDZmLTQ2ZDUtYTVhNi1mMGRiMDhiZjQ2YTAvMGUwZmM4NjYtNDVkYS0z M2ZmLWJjZDctOTk4OTM3ZTI1ODE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTIyNzg4N2MtNzA2Zi00NmQ1LWE1 YTYtZjBkYjA4YmY0NmEwLzkyMjc4ODdjLTcwNmYtNDZkNS1hNWE2LWYwZGIwOGJm NDZhMC5jcmwwHwYDVR0jBBgwFoAUaWlaF62DwqmUeUN/BVcoAA06gKQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MjI3ODg3Yy03MDZmLTQ2ZDUtYTVhNi1mMGRi MDhiZjQ2YTAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4QIMA4E AgACMAgDBgQmAvzqADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAPZlEuKp5tWJ0UkJCbwN4vfCxBCOc0m0SJ YpvzvCPs/8HhJk6xwikbPCmKmVYsLUDTO7hxjpvsdeyoXvEKajEGGZBCHo7zV3Vt utmoOsXZwIlnE2nSIAY+GlKdzdA88XAIZfcymvU9Bi6ErafzHqgew6H4dL47QrAA /vvovpGECdrzDHgOxIFaWPK2s5Iz9HQLLpXcGV4ZJAZHaJBWLXo4uYHRGYSB1SoX p4HWNBctN7f8WoUdg6MZJHQoO6RQkKpoOplPP2uabOYIqi1Vtaqz7nFEUFyH1XWj XcwrLD+i5nOp4rC4PTNaUZPwSAhL+RoyzOPm1AR0sVLq2PLbMuug -----END CERTIFICATE-----Generated at Tue Jul 1 15:06:42 2025 by rpki-client