$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/8c7d3e4b-0e86-348a-b4fd-f390c6d57d5a.roa File: 8c7d3e4b-0e86-348a-b4fd-f390c6d57d5a.roa (raw, json) Hash identifier: nwj4alsEq+tvs6BdVCkEJ7dDK8g5BKKEOn3O+b5WuUk= Subject key identifier: AB:55:8A:64:0A:1E:28:0C:5D:65:1E:CD:1C:15:11:59:81:E3:34:ED Certificate issuer: /CN=3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f Certificate serial: 010D0C9F4328584A4970708C27C1CD0FD744DDE0 Authority key identifier: B8:F6:EB:89:EB:99:E9:DA:77:78:CD:50:4D:57:27:9C:52:0F:90:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/8c7d3e4b-0e86-348a-b4fd-f390c6d57d5a.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 23470 IP address blocks: 23.147.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:70:8c:27:c1:cd:0f:d7:44:dd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=951001a2-4794-46fe-b879-b8cb8720ed6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:52:24:e6:c3:76:0e:8d:21:c7:95:66:21:58: 2b:ef:90:4f:d7:a4:52:12:e5:cf:9e:53:83:87:62: a5:86:2a:f5:b3:68:9d:81:f9:f8:cb:66:fe:84:26: 10:ce:25:ce:df:6a:32:33:8e:40:70:3d:1c:be:74: 96:32:19:49:31:a8:f7:aa:7e:97:c5:09:01:a0:2f: 92:66:7a:e1:b3:14:0b:9c:9f:2a:02:17:aa:8b:a7: d6:39:32:78:0f:b2:bf:9e:1c:48:0a:6f:06:24:83: 94:41:76:1e:19:c0:4b:73:64:a7:03:e4:13:30:4b: c2:f9:8c:e3:89:42:89:cb:bb:6f:b7:7d:61:5e:05: 0e:e6:c2:8a:93:1f:0d:76:4b:04:32:4a:25:0a:62: c7:c1:ed:23:71:15:cb:62:fb:23:17:40:29:55:10: ac:06:49:18:3a:55:26:07:58:fd:dc:9d:33:cf:42: ac:7e:9e:81:4d:ca:ae:6b:16:8d:2e:a8:2a:44:5c: dc:6e:a8:0d:44:05:8c:56:77:40:ad:d1:6b:06:09: 52:ae:a7:5a:14:eb:a2:0c:f1:f6:db:66:a0:68:2b: 47:12:f3:02:31:52:90:ca:c3:96:8d:63:25:ec:fe: 77:bf:fc:f5:24:32:d6:33:05:da:23:61:3a:c9:c1: 26:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:55:8A:64:0A:1E:28:0C:5D:65:1E:CD:1C:15:11:59:81:E3:34:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/8c7d3e4b-0e86-348a-b4fd-f390c6d57d5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.crl X509v3 Authority Key Identifier: keyid:B8:F6:EB:89:EB:99:E9:DA:77:78:CD:50:4D:57:27:9C:52:0F:90:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer sbgp-ipAddrBlock: critical IPv4: 23.147.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:aa:34:30:74:f2:03:85:53:fd:75:bf:e8:0b:e3:84:f3:e7: 09:36:63:ef:b8:23:db:ef:84:66:a9:6f:12:6f:2f:dc:ef:75: 61:1b:62:d5:28:8b:95:7d:31:d7:f9:5f:91:1d:ff:aa:22:a4: 77:7e:27:6d:33:c7:6b:6b:49:95:a4:9a:f5:63:aa:9b:e5:37: ff:18:3b:05:a2:47:0a:75:73:95:69:2b:59:f4:00:de:89:0b: 14:63:01:6c:d2:27:aa:54:ac:e8:3d:cf:30:1a:0c:ed:25:e8: 15:00:d8:5b:97:07:d5:df:38:ce:e2:2e:17:5f:e5:15:a5:78: 92:da:f2:b0:f1:7c:1e:d9:e3:7e:e9:52:b6:9e:6e:30:e9:9c: c3:60:fa:a0:4a:53:5a:10:8f:c6:3e:63:0f:74:12:cc:66:11: 83:58:bb:3c:4e:3c:6e:f1:4a:17:d5:13:4b:e5:07:db:be:4d: 3e:0f:be:f6:a2:cc:26:30:b9:e1:a6:35:5c:0e:4a:7c:82:b7: d5:38:d2:b9:b7:31:09:ee:3a:28:84:40:7e:de:24:a8:ed:e5: 1d:0e:e9:82:81:07:1e:2a:8d:0a:dc:ff:65:8a:4e:50:75:d3: c2:4c:3a:39:d2:05:6a:77:c7:bd:46:0c:96:2e:f8:5a:ea:4b: a8:21:4b:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHCMJ8HND9dE3eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M5ZGQ4OGMtNmNkYy00ODc1LThjZGQtYTNjNjUzZTJm ZDdmMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk OTUxMDAxYTItNDc5NC00NmZlLWI4NzktYjhjYjg3MjBlZDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1Ik5sN2Do0hx5VmIVgr75BP16RSEuXPnlOD h2Klhir1s2idgfn4y2b+hCYQziXO32oyM45AcD0cvnSWMhlJMaj3qn6XxQkBoC+S ZnrhsxQLnJ8qAheqi6fWOTJ4D7K/nhxICm8GJIOUQXYeGcBLc2SnA+QTMEvC+Yzj iUKJy7tvt31hXgUO5sKKkx8NdksEMkolCmLHwe0jcRXLYvsjF0ApVRCsBkkYOlUm B1j93J0zz0Ksfp6BTcquaxaNLqgqRFzcbqgNRAWMVndArdFrBglSrqdaFOuiDPH2 22agaCtHEvMCMVKQysOWjWMl7P53v/z1JDLWMwXaI2E6ycEmMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtVimQKHigMXWUezRwVEVmB4zTtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zYzlk ZDg4Yy02Y2RjLTQ4NzUtOGNkZC1hM2M2NTNlMmZkN2YvOGM3ZDNlNGItMGU4Ni0z NDhhLWI0ZmQtZjM5MGM2ZDU3ZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2M5ZGQ4OGMtNmNkYy00ODc1LThj ZGQtYTNjNjUzZTJmZDdmLzNjOWRkODhjLTZjZGMtNDg3NS04Y2RkLWEzYzY1M2Uy ZmQ3Zi5jcmwwHwYDVR0jBBgwFoAUuPbrieuZ6dp3eM1QTVcnnFIPkG0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zYzlkZDg4Yy02Y2RjLTQ4NzUtOGNkZC1hM2M2 NTNlMmZkN2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5MoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOqNDB08gOFU/11v+gL44Tz5wk2Y++4I9vvhGapbxJvL9zvdWEbYtUo i5V9Mdf5X5Ed/6oipHd+J20zx2trSZWkmvVjqpvlN/8YOwWiRwp1c5VpK1n0AN6J CxRjAWzSJ6pUrOg9zzAaDO0l6BUA2FuXB9XfOM7iLhdf5RWleJLa8rDxfB7Z437p UraebjDpnMNg+qBKU1oQj8Y+Yw90EsxmEYNYuzxOPG7xShfVE0vlB9u+TT4Pvvai zCYwueGmNVwOSnyCt9U40rm3MQnuOiiEQH7eJKjt5R0O6YKBBx4qjQrc/2WKTlB1 08JMOjnSBWp3x71GDJYu+FrqS6ghS9g= -----END CERTIFICATE-----Generated at Sun Jun 29 09:59:03 2025 by rpki-client