$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a/41ce957e-b668-3ae7-a767-7566a25b32f3.roa File: 41ce957e-b668-3ae7-a767-7566a25b32f3.roa (raw, json) Hash identifier: vl7QJfz4Mp9onR2ZNveX7INULdRnQvMlGy0GU5FDV30= Subject key identifier: 85:EF:45:71:B8:54:31:91:10:BD:83:C6:1E:B1:EB:7C:42:FE:B2:3B Certificate issuer: /CN=eb3e61fb-eee2-4438-a37d-23139bbc427a Certificate serial: 010D0C9F4328584A549B20700879CC9AE2E11A00 Authority key identifier: 45:03:34:E5:3F:EE:A8:32:0D:29:26:EA:4C:60:57:01:92:7D:46:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a/41ce957e-b668-3ae7-a767-7566a25b32f3.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 400992 IP address blocks: 23.177.184.0/24 maxlen: 24 2602:f909::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a/eb3e61fb-eee2-4438-a37d-23139bbc427a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a/eb3e61fb-eee2-4438-a37d-23139bbc427a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:20:70:08:79:cc:9a:e2:e1:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb3e61fb-eee2-4438-a37d-23139bbc427a Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=3d42f98b-7858-423a-963c-209bb541978b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1f:08:54:66:b8:0e:9a:29:07:71:18:3c:3f: 2c:58:af:a9:c8:2f:4d:de:32:84:02:2b:91:6c:2a: 37:9d:ad:bc:0b:92:7d:6f:f1:f6:52:2b:a3:63:af: 88:73:2a:ff:79:35:0c:53:c4:c2:29:4c:ba:9b:12: c7:8c:a8:dc:43:e0:65:72:bb:ab:79:77:ab:07:84: 9c:70:47:63:d4:0b:ab:87:9a:e7:20:c3:2c:09:55: a5:fc:ef:75:df:0f:ff:b4:c2:36:b4:06:4e:0a:61: 83:60:80:1a:2d:fc:17:ac:26:6f:dd:bc:8e:5a:eb: 07:f4:27:08:eb:e3:29:37:55:b4:93:b2:b3:ac:a7: b4:e2:8f:0c:bb:3d:87:6d:bf:ac:cd:8d:2a:3f:df: 34:2b:03:17:bd:7e:e6:58:86:13:72:ec:bc:94:d6: 37:80:10:0d:54:d8:86:aa:6f:17:57:a2:59:76:81: a2:13:6c:5c:d1:2f:ba:e6:cd:ba:c0:ae:12:1b:29: af:bc:0f:80:c8:f1:e2:e1:e8:c3:b1:b6:a7:67:79: e8:a9:96:ca:15:ac:f2:3d:25:34:40:40:db:8a:03: 8e:a5:9d:44:0f:d6:c4:03:8d:77:7c:60:09:e0:99: e9:72:19:2d:b0:aa:e7:a2:1e:70:36:bb:06:68:70: 83:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EF:45:71:B8:54:31:91:10:BD:83:C6:1E:B1:EB:7C:42:FE:B2:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a/41ce957e-b668-3ae7-a767-7566a25b32f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a/eb3e61fb-eee2-4438-a37d-23139bbc427a.crl X509v3 Authority Key Identifier: keyid:45:03:34:E5:3F:EE:A8:32:0D:29:26:EA:4C:60:57:01:92:7D:46:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a.cer sbgp-ipAddrBlock: critical IPv4: 23.177.184.0/24 IPv6: 2602:f909::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:72:a6:b1:9f:9e:f1:ba:2a:ec:bb:73:96:59:fd:42:0f:28: 99:7b:75:9c:18:07:82:23:4a:99:f9:7a:47:ac:31:9d:da:07: c5:61:cc:84:46:a0:66:5f:40:02:76:8b:2b:30:a3:d9:f3:fa: 6b:c5:b4:1d:4c:0c:93:fb:41:1a:16:09:34:67:f9:1a:c2:49: d4:43:3b:56:5f:40:76:fa:06:c8:70:0a:37:f8:71:9d:b2:00: 14:f3:5c:c9:59:3b:66:76:bf:b8:e3:b4:fa:40:0c:96:a6:91: b4:87:0f:e6:c8:12:61:d7:94:71:59:46:f1:e5:15:99:2d:e9: 92:9d:04:cc:78:23:75:20:f3:d7:24:0a:71:a6:14:7e:4a:6d: 07:c0:43:70:40:60:6d:d9:71:7c:5e:d4:7d:78:73:8a:79:c7: 5d:1b:ac:b6:fe:12:da:5f:e4:be:09:72:b1:72:e6:6b:82:0b: a7:47:db:0b:6c:98:df:7e:5a:d6:04:17:57:3a:05:76:83:50: 1b:84:a8:98:27:c3:6d:a9:4d:48:f8:00:4d:2a:7e:49:b5:ce: c2:42:35:4f:c2:45:d7:52:e2:fc:1b:4e:40:23:20:36:74:53: d5:4e:50:56:15:0c:67:81:2f:2c:1f:0f:0e:03:e5:4b:aa:9a: 1a:e1:51:ca -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEpUmyBwCHnMmuLhGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIzZTYxZmItZWVlMi00NDM4LWEzN2QtMjMxMzliYmM0 MjdhMB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk M2Q0MmY5OGItNzg1OC00MjNhLTk2M2MtMjA5YmI1NDE5NzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR8IVGa4DpopB3EYPD8sWK+pyC9N3jKEAiuR bCo3na28C5J9b/H2UiujY6+Icyr/eTUMU8TCKUy6mxLHjKjcQ+BlcrureXerB4Sc cEdj1Aurh5rnIMMsCVWl/O913w//tMI2tAZOCmGDYIAaLfwXrCZv3byOWusH9CcI 6+MpN1W0k7KzrKe04o8Muz2Hbb+szY0qP980KwMXvX7mWIYTcuy8lNY3gBANVNiG qm8XV6JZdoGiE2xc0S+65s26wK4SGymvvA+AyPHi4ejDsbanZ3noqZbKFazyPSU0 QEDbigOOpZ1ED9bEA413fGAJ4JnpchktsKrnoh5wNrsGaHCDhwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFIXvRXG4VDGREL2Dxh6x63xC/rI7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lYjNl NjFmYi1lZWUyLTQ0MzgtYTM3ZC0yMzEzOWJiYzQyN2EvNDFjZTk1N2UtYjY2OC0z YWU3LWE3NjctNzU2NmEyNWIzMmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZWIzZTYxZmItZWVlMi00NDM4LWEz N2QtMjMxMzliYmM0MjdhL2ViM2U2MWZiLWVlZTItNDQzOC1hMzdkLTIzMTM5YmJj NDI3YS5jcmwwHwYDVR0jBBgwFoAURQM05T/uqDINKSbqTGBXAZJ9RjYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lYjNlNjFmYi1lZWUyLTQ0MzgtYTM3ZC0yMzEz OWJiYzQyN2EuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7G4MA4E AgACMAgDBgAmAvkJADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB7cqaxn57xuirsu3OWWf1CDyiZe3WcGAeC I0qZ+XpHrDGd2gfFYcyERqBmX0ACdosrMKPZ8/prxbQdTAyT+0EaFgk0Z/kawknU QztWX0B2+gbIcAo3+HGdsgAU81zJWTtmdr+447T6QAyWppG0hw/myBJh15RxWUbx 5RWZLemSnQTMeCN1IPPXJApxphR+Sm0HwENwQGBt2XF8XtR9eHOKecddG6y2/hLa X+S+CXKxcuZrggunR9sLbJjfflrWBBdXOgV2g1AbhKiYJ8NtqU1I+ABNKn5Jtc7C QjVPwkXXUuL8G05AIyA2dFPVTlBWFQxngS8sHw8OA+VLqpoa4VHK -----END CERTIFICATE-----Generated at Mon Jun 30 00:14:41 2025 by rpki-client