$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/e5cfc55d-0fc5-3a20-aed5-2cbe2dc63b51.roa File: e5cfc55d-0fc5-3a20-aed5-2cbe2dc63b51.roa (raw, json) Hash identifier: AJdR6GiniHhgYHgPOwdiOIaGeVTjKrOR29HTWdiX8RU= Subject key identifier: 05:4D:0D:DA:9A:2C:EC:F1:50:31:B2:88:10:94:39:2B:C4:95:B4:F4 Certificate issuer: /CN=42c8c6f3-4a22-4b09-90b8-6f74ee90beb5 Certificate serial: 010D0C9F4328584A43DB0C373B51544DF349B380 Authority key identifier: CB:58:6C:B4:1F:C7:2C:0C:FE:27:FB:97:2D:BF:0B:EB:05:46:FB:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/e5cfc55d-0fc5-3a20-aed5-2cbe2dc63b51.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 400458 IP address blocks: 23.148.104.0/24 maxlen: 24 2602:fbc0::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:0c:37:3b:51:54:4d:f3:49:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42c8c6f3-4a22-4b09-90b8-6f74ee90beb5 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=23ec023e-0a2f-49d4-b82b-fc8ee35907f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:99:c5:ad:22:1f:8f:f3:03:99:20:7b:b6:57: b6:6c:b6:b6:80:04:85:3b:6d:89:4e:04:03:21:18: b3:fe:01:cd:66:07:2f:72:73:c1:6d:54:f5:53:fa: 01:51:f8:d5:ca:ed:03:82:80:24:76:88:97:e3:5b: 0c:69:25:08:a8:ba:31:15:00:04:35:3e:4c:12:b9: f0:e8:f0:b3:32:ba:c9:da:53:88:87:ff:cb:5c:77: b7:dd:77:e0:40:be:4f:20:da:cf:40:3c:59:d0:37: 7e:28:a0:2f:ab:cf:3a:9a:5c:c8:53:a2:7d:9c:0d: 11:c4:f5:94:60:8c:6b:4b:56:1a:47:9b:9d:41:53: e3:50:fc:da:2c:6d:4b:76:45:d7:8d:ad:d0:26:f9: 43:34:1d:3f:fe:0b:e0:2d:28:aa:c1:c7:1e:32:1c: 5f:75:d8:c1:9c:8b:4e:f0:f6:66:2c:e1:60:f4:a2: dc:c0:e9:76:13:bd:e8:df:db:6c:1d:cd:85:35:28: d3:a0:8d:b2:ea:2a:12:f7:fa:6a:ce:6b:66:9d:59: 63:f7:2e:02:6c:fc:ab:de:34:2d:31:ea:25:f8:c7: be:15:a8:1e:0a:83:ca:f4:81:ed:82:99:35:64:f4: c5:8a:da:26:7e:b1:d9:db:aa:b1:8a:f6:14:76:22: 3f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:4D:0D:DA:9A:2C:EC:F1:50:31:B2:88:10:94:39:2B:C4:95:B4:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/e5cfc55d-0fc5-3a20-aed5-2cbe2dc63b51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.crl X509v3 Authority Key Identifier: keyid:CB:58:6C:B4:1F:C7:2C:0C:FE:27:FB:97:2D:BF:0B:EB:05:46:FB:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/42c8c6f3-4a22-4b09-90b8-6f74ee90beb5.cer sbgp-ipAddrBlock: critical IPv4: 23.148.104.0/24 IPv6: 2602:fbc0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:3a:57:c2:59:6a:35:f9:35:1c:11:d7:bc:75:53:5e:fa:1c: 5a:34:c4:ce:f1:c0:4e:d5:6d:c2:eb:9d:08:aa:0e:01:8f:09: bb:9d:4a:a5:e2:15:5e:04:59:95:2f:b6:35:b2:fd:32:c5:3e: 35:f8:29:4d:24:3f:16:be:2c:a5:6d:d6:c9:2e:62:7c:69:74: 7d:f0:80:ed:b3:88:a3:1a:d3:ae:98:3e:ac:96:34:0e:9b:fa: b7:98:39:0e:05:bd:87:23:c4:6f:ed:b5:a1:6a:7f:f8:36:69: 1c:d1:d2:fa:d7:ee:a1:56:48:f3:b0:3c:aa:f0:d4:76:62:ef: 41:fa:00:31:a4:ca:db:e5:2d:18:2d:2e:fa:6b:26:0c:bd:5c: ed:b9:4c:06:ae:7c:0a:95:35:8e:ff:ce:88:d9:91:ac:eb:04: 4f:7d:5c:57:c3:e6:93:71:11:41:90:e1:4d:f8:d1:3b:c6:4d: aa:95:5b:17:58:96:fa:77:7f:7b:df:b4:e3:a9:ec:c3:43:dd: 61:ae:5a:e8:c7:56:ab:bf:62:27:39:8a:ec:06:4f:4b:99:75: 01:6b:b0:85:3d:29:98:f6:68:d7:c9:c4:c6:49:cf:a8:58:15: 17:6b:21:9d:2c:3f:c9:53:c2:20:8a:a6:21:3b:6e:0f:93:ed: 81:23:38:8e -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEpD2ww3O1FUTfNJs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJjOGM2ZjMtNGEyMi00YjA5LTkwYjgtNmY3NGVlOTBi ZWI1MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk MjNlYzAyM2UtMGEyZi00OWQ0LWI4MmItZmM4ZWUzNTkwN2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpnFrSIfj/MDmSB7tle2bLa2gASFO22JTgQD IRiz/gHNZgcvcnPBbVT1U/oBUfjVyu0DgoAkdoiX41sMaSUIqLoxFQAENT5MErnw 6PCzMrrJ2lOIh//LXHe33XfgQL5PINrPQDxZ0Dd+KKAvq886mlzIU6J9nA0RxPWU YIxrS1YaR5udQVPjUPzaLG1LdkXXja3QJvlDNB0//gvgLSiqwcceMhxfddjBnItO 8PZmLOFg9KLcwOl2E73o39tsHc2FNSjToI2y6ioS9/pqzmtmnVlj9y4CbPyr3jQt Meol+Me+FageCoPK9IHtgpk1ZPTFitomfrHZ26qxivYUdiI/3wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFAVNDdqaLOzxUDGyiBCUOSvElbT0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80MmM4 YzZmMy00YTIyLTRiMDktOTBiOC02Zjc0ZWU5MGJlYjUvZTVjZmM1NWQtMGZjNS0z YTIwLWFlZDUtMmNiZTJkYzYzYjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDJjOGM2ZjMtNGEyMi00YjA5LTkw YjgtNmY3NGVlOTBiZWI1LzQyYzhjNmYzLTRhMjItNGIwOS05MGI4LTZmNzRlZTkw YmViNS5jcmwwHwYDVR0jBBgwFoAUy1hstB/HLAz+J/uXLb8L6wVG+14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80MmM4YzZmMy00YTIyLTRiMDktOTBiOC02Zjc0 ZWU5MGJlYjUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5RoMA4E AgACMAgDBgAmAvvAADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBrOlfCWWo1+TUcEde8dVNe+hxaNMTO8cBO 1W3C650Iqg4Bjwm7nUql4hVeBFmVL7Y1sv0yxT41+ClNJD8WviylbdbJLmJ8aXR9 8IDts4ijGtOumD6sljQOm/q3mDkOBb2HI8Rv7bWhan/4Nmkc0dL61+6hVkjzsDyq 8NR2Yu9B+gAxpMrb5S0YLS76ayYMvVztuUwGrnwKlTWO/86I2ZGs6wRPfVxXw+aT cRFBkOFN+NE7xk2qlVsXWJb6d39737TjqezDQ91hrlrox1arv2InOYrsBk9LmXUB a7CFPSmY9mjXycTGSc+oWBUXayGdLD/JU8IgiqYhO24Pk+2BIziO -----END CERTIFICATE-----Generated at Mon Jun 30 03:44:23 2025 by rpki-client