$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/989d0448-cf0d-3fdf-a782-65bf875466d4.roa File: 989d0448-cf0d-3fdf-a782-65bf875466d4.roa (raw, json) Hash identifier: IRP1Z0IyZzkkLsW6ySNYVV7CSJFUwbfTpZdfOh/kwrk= Subject key identifier: 76:17:22:52:DE:45:12:A4:DB:68:77:61:A1:4B:2B:71:7B:68:88:45 Certificate issuer: /CN=abb60fa2-8c1d-4a38-bdcf-15f53f276c5a Certificate serial: 010D0C9F4328584A30503F23F4361B05BB6F9DE0 Authority key identifier: 10:65:EA:40:A0:AB:FC:06:15:35:EE:D5:53:3B:69:77:9F:5C:DB:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/989d0448-cf0d-3fdf-a782-65bf875466d4.roa Signing time: Sat 14 Jun 2025 13:01:04 +0000 ROA not before: Sat 14 Jun 2025 13:01:04 +0000 ROA not after: Fri 12 Sep 2025 13:01:04 +0000 asID: 395497 IP address blocks: 23.166.152.0/24 maxlen: 32 2602:f9d6::/40 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:30:50:3f:23:f4:36:1b:05:bb:6f:9d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abb60fa2-8c1d-4a38-bdcf-15f53f276c5a Validity Not Before: Jun 14 13:01:04 2025 GMT Not After : Sep 12 13:01:04 2025 GMT Subject: CN=f43e4aba-3ac4-4adf-a02d-03316e459c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c0:93:b5:0b:4c:df:83:5b:08:f7:4c:f3:f9: b4:31:70:08:7d:2d:37:89:c4:bc:5a:65:29:9a:d3: 6f:85:8d:d5:b9:2f:53:a5:e3:a6:24:52:0b:0c:6d: a7:19:2e:fa:7d:73:57:f0:49:e1:59:4b:3a:48:19: 94:c3:ae:fa:d9:a1:74:b6:e5:8a:57:8f:45:fa:0e: 02:77:d6:8c:d2:0f:a6:4b:18:1f:32:35:99:ba:a7: 2c:10:f7:65:e0:0e:ff:cd:22:f9:4f:38:34:bd:6e: f7:95:94:e1:ce:49:cb:46:aa:d5:b1:24:5d:0f:5e: 68:5f:ad:3d:dd:a4:32:aa:1c:89:b8:54:65:a2:40: 1c:a5:04:40:50:ce:29:62:55:bb:ff:ff:c8:0e:55: 98:df:ac:79:5c:5d:21:6c:b4:30:74:99:a1:f9:d6: 40:dd:57:6b:0b:ce:b0:5a:0a:ed:8f:e3:79:f6:ef: 61:89:b1:10:49:04:34:86:47:53:29:05:b2:69:95: 6f:6a:c7:69:7a:8e:42:c5:07:d7:6c:22:25:3a:f7: ae:b4:95:b7:03:b3:43:70:e0:7c:f4:74:0a:88:61: 7f:5f:e4:67:e0:77:68:f6:63:8d:32:01:28:fd:13: b7:81:08:78:d2:c5:98:0c:a7:38:4c:7e:df:6f:99: 28:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:17:22:52:DE:45:12:A4:DB:68:77:61:A1:4B:2B:71:7B:68:88:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/989d0448-cf0d-3fdf-a782-65bf875466d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.crl X509v3 Authority Key Identifier: keyid:10:65:EA:40:A0:AB:FC:06:15:35:EE:D5:53:3B:69:77:9F:5C:DB:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.cer sbgp-ipAddrBlock: critical IPv4: 23.166.152.0/24 IPv6: 2602:f9d6::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:e5:03:6e:1f:52:77:e3:8f:2e:7a:6f:be:30:63:6a:78:a6: 83:93:25:13:15:36:e2:a2:f7:32:a5:0b:99:45:99:a1:d8:25: 57:1e:78:97:32:54:7f:cd:e8:da:4f:87:04:a4:89:f2:2f:18: 5a:d7:f8:9f:d7:4f:69:ac:fc:3a:79:f8:59:94:6f:2f:6e:a0: de:0f:e0:cc:5e:8e:5a:31:54:4b:79:5b:40:69:56:83:10:26: d1:eb:df:ac:93:61:d6:97:94:a6:4c:4e:d0:4a:3c:95:c9:5c: f9:40:e6:52:08:25:ae:8a:0e:ee:23:e1:99:32:97:a6:89:6e: 11:34:ff:c7:d5:23:25:97:06:0f:ef:46:ce:73:e2:58:a8:f6: 1d:51:60:d9:9e:61:97:2f:ce:58:e2:1f:df:d3:b1:65:f4:4f: 93:e8:20:9d:b2:6a:6a:63:3f:88:0f:e4:b3:4c:18:81:42:47: 19:c4:02:27:bc:12:7d:38:89:30:6d:20:d0:9a:30:3a:3e:7a: 3a:56:6e:ad:2c:03:53:e6:79:ab:68:26:fe:00:d6:6d:94:50: af:4d:42:ff:f5:14:93:d2:5d:31:33:76:ff:28:f6:b5:c6:ad: 25:55:39:4e:80:b4:4f:c8:52:0b:53:b4:db:e8:1f:ec:47:67: c3:a1:f6:2b -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEowUD8j9DYbBbtvneAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJiNjBmYTItOGMxZC00YTM4LWJkY2YtMTVmNTNmMjc2 YzVhMB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZjQzZTRhYmEtM2FjNC00YWRmLWEwMmQtMDMzMTZlNDU5YzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMCTtQtM34NbCPdM8/m0MXAIfS03icS8WmUp mtNvhY3VuS9TpeOmJFILDG2nGS76fXNX8EnhWUs6SBmUw6762aF0tuWKV49F+g4C d9aM0g+mSxgfMjWZuqcsEPdl4A7/zSL5Tzg0vW73lZThzknLRqrVsSRdD15oX609 3aQyqhyJuFRlokAcpQRAUM4pYlW7///IDlWY36x5XF0hbLQwdJmh+dZA3VdrC86w Wgrtj+N59u9hibEQSQQ0hkdTKQWyaZVvasdpeo5CxQfXbCIlOveutJW3A7NDcOB8 9HQKiGF/X+Rn4Hdo9mONMgEo/RO3gQh40sWYDKc4TH7fb5kobwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFHYXIlLeRRKk22h3YaFLK3F7aIhFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hYmI2 MGZhMi04YzFkLTRhMzgtYmRjZi0xNWY1M2YyNzZjNWEvOTg5ZDA0NDgtY2YwZC0z ZmRmLWE3ODItNjViZjg3NTQ2NmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWJiNjBmYTItOGMxZC00YTM4LWJk Y2YtMTVmNTNmMjc2YzVhL2FiYjYwZmEyLThjMWQtNGEzOC1iZGNmLTE1ZjUzZjI3 NmM1YS5jcmwwHwYDVR0jBBgwFoAUEGXqQKCr/AYVNe7VUztpd59c24EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hYmI2MGZhMi04YzFkLTRhMzgtYmRjZi0xNWY1 M2YyNzZjNWEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6aYMA4E AgACMAgDBgAmAvnWADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB25QNuH1J3448uem++MGNqeKaDkyUTFTbi ovcypQuZRZmh2CVXHniXMlR/zejaT4cEpInyLxha1/if109prPw6efhZlG8vbqDe D+DMXo5aMVRLeVtAaVaDECbR69+sk2HWl5SmTE7QSjyVyVz5QOZSCCWuig7uI+GZ MpemiW4RNP/H1SMllwYP70bOc+JYqPYdUWDZnmGXL85Y4h/f07Fl9E+T6CCdsmpq Yz+ID+SzTBiBQkcZxAInvBJ9OIkwbSDQmjA6Pno6Vm6tLANT5nmraCb+ANZtlFCv TUL/9RST0l0xM3b/KPa1xq0lVTlOgLRPyFILU7Tb6B/sR2fDofYr -----END CERTIFICATE-----Generated at Mon Jun 30 10:47:26 2025 by rpki-client