$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/db0d49c2-07c6-353f-b407-3be87c24ae90.roa File: db0d49c2-07c6-353f-b407-3be87c24ae90.roa (raw, json) Hash identifier: MC0zHXwUcpwGHm497ixyWRh03tzI4vOclr4/0gBEEfU= Subject key identifier: 39:F3:EB:26:96:2A:39:A2:54:64:F6:6E:8B:86:9E:67:77:2B:3C:F9 Certificate issuer: /CN=5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2 Certificate serial: 010D0C9F4328584A51D069C73F136D3BCD28A300 Authority key identifier: 39:D3:61:6C:A3:A6:88:D3:24:01:A4:C3:A6:95:84:4E:B3:2C:25:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/db0d49c2-07c6-353f-b407-3be87c24ae90.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 400477 IP address blocks: 23.132.56.0/24 maxlen: 24 2602:fbc1::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:69:c7:3f:13:6d:3b:cd:28:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2 Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=e4906a3f-d35d-46b8-b63d-464c2c7d30cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ee:a3:58:50:05:bb:06:e6:37:47:ce:ed:69: 30:bc:ce:6b:5b:00:8b:c8:63:f3:f7:aa:cb:ab:a7: 14:98:47:a1:d4:e3:ac:e9:b9:74:03:1c:28:ee:d5: 7c:08:6e:74:86:f1:4b:cc:a0:95:91:56:0c:32:a9: 96:e1:31:37:5f:14:56:75:d6:db:31:56:10:77:b6: 20:8d:e3:1d:8a:ea:45:50:db:80:e3:42:a6:9a:e4: 08:61:8d:40:ba:4a:1a:7b:f9:84:76:bd:5f:07:6e: d4:1c:21:cb:77:9e:c6:64:bb:d1:c6:de:ea:aa:a9: 8d:21:a5:7a:cf:ab:bd:b3:09:9b:cc:f1:9d:a7:0c: 7f:7a:8c:74:a4:72:d5:da:9e:3e:7e:d5:56:e4:72: 3f:48:81:91:3f:78:b2:12:17:fd:18:70:cf:c2:75: 2b:5e:9b:fb:8c:c5:18:02:f4:90:7a:69:c2:2f:26: 0b:6a:1f:a9:87:61:6f:ae:10:ba:21:0b:54:93:6b: 73:8f:0d:cb:72:8c:7d:80:ad:98:77:99:63:17:0c: ed:4f:0e:df:5e:bd:c8:3c:d0:ee:30:b3:6c:eb:59: cf:fd:c5:3b:23:5b:25:12:81:3c:e1:99:01:5d:92: 19:b6:d5:ac:47:b7:0c:cb:40:6f:82:1e:2d:2e:ba: 5d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F3:EB:26:96:2A:39:A2:54:64:F6:6E:8B:86:9E:67:77:2B:3C:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/db0d49c2-07c6-353f-b407-3be87c24ae90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.crl X509v3 Authority Key Identifier: keyid:39:D3:61:6C:A3:A6:88:D3:24:01:A4:C3:A6:95:84:4E:B3:2C:25:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.cer sbgp-ipAddrBlock: critical IPv4: 23.132.56.0/24 IPv6: 2602:fbc1::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:14:20:86:f4:6d:c8:25:41:cd:50:b4:df:24:f6:3b:cf:a4: 7e:68:67:b2:51:aa:5f:ad:03:53:6c:d8:60:b7:d6:b3:4f:57: 8a:4b:68:68:28:a6:d2:58:5e:07:6b:d7:8a:03:df:60:fa:89: aa:84:83:23:a6:ad:7c:df:87:e2:18:95:1f:82:e7:13:2c:05: 87:70:00:96:24:39:85:98:ab:36:11:ad:f4:4c:f3:5d:2a:0c: 45:a3:b8:89:12:36:88:fa:23:91:55:ff:a3:c0:99:5a:83:9c: d6:e6:89:c8:ff:41:fc:80:4a:c0:8b:a0:c5:09:6f:57:41:63: 67:81:ff:e8:a2:f1:75:58:e8:63:fb:5c:2e:1a:05:a5:43:02: 91:e0:e5:c9:25:b5:84:62:4e:27:a0:a4:f2:47:9d:94:f1:b7: 3a:92:6d:fe:97:61:b7:a7:9a:a3:b6:ff:ed:cc:34:59:f5:11: 58:6b:1d:18:63:8d:c6:40:bb:6e:bc:06:d4:3a:b4:f6:3e:64: 8b:da:63:ec:d3:d5:b6:f6:cd:f5:93:de:5e:48:95:08:08:5d: 95:5b:d6:8a:dc:ae:aa:b2:91:17:76:d1:d3:8b:1c:7f:6e:c4: e1:d2:5d:51:a9:11:4b:4e:64:ed:30:22:fd:6e:8e:62:0d:a8: b9:f5:08:88 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEpR0GnHPxNtO80oowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWExYzNiMWEtZDExZS00NmYyLWI4YmEtMTk3NGI0NGM4 NGIyMB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk ZTQ5MDZhM2YtZDM1ZC00NmI4LWI2M2QtNDY0YzJjN2QzMGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+6jWFAFuwbmN0fO7WkwvM5rWwCLyGPz96rL q6cUmEeh1OOs6bl0Axwo7tV8CG50hvFLzKCVkVYMMqmW4TE3XxRWddbbMVYQd7Yg jeMdiupFUNuA40KmmuQIYY1Aukoae/mEdr1fB27UHCHLd57GZLvRxt7qqqmNIaV6 z6u9swmbzPGdpwx/eox0pHLV2p4+ftVW5HI/SIGRP3iyEhf9GHDPwnUrXpv7jMUY AvSQemnCLyYLah+ph2FvrhC6IQtUk2tzjw3Lcox9gK2Yd5ljFwztTw7fXr3IPNDu MLNs61nP/cU7I1slEoE84ZkBXZIZttWsR7cMy0Bvgh4tLrpdywIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDnz6yaWKjmiVGT2bouGnmd3Kzz5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YTFj M2IxYS1kMTFlLTQ2ZjItYjhiYS0xOTc0YjQ0Yzg0YjIvZGIwZDQ5YzItMDdjNi0z NTNmLWI0MDctM2JlODdjMjRhZTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWExYzNiMWEtZDExZS00NmYyLWI4 YmEtMTk3NGI0NGM4NGIyLzVhMWMzYjFhLWQxMWUtNDZmMi1iOGJhLTE5NzRiNDRj ODRiMi5jcmwwHwYDVR0jBBgwFoAUOdNhbKOmiNMkAaTDppWETrMsJVMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YTFjM2IxYS1kMTFlLTQ2ZjItYjhiYS0xOTc0 YjQ0Yzg0YjIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4Q4MA4E AgACMAgDBgQmAvvBADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAHFCCG9G3IJUHNULTfJPY7z6R+aGeyUapf rQNTbNhgt9azT1eKS2hoKKbSWF4Ha9eKA99g+omqhIMjpq1834fiGJUfgucTLAWH cACWJDmFmKs2Ea30TPNdKgxFo7iJEjaI+iORVf+jwJlag5zW5onI/0H8gErAi6DF CW9XQWNngf/oovF1WOhj+1wuGgWlQwKR4OXJJbWEYk4noKTyR52U8bc6km3+l2G3 p5qjtv/tzDRZ9RFYax0YY43GQLtuvAbUOrT2PmSL2mPs09W29s31k95eSJUICF2V W9aK3K6qspEXdtHTixx/bsTh0l1RqRFLTmTtMCL9bo5iDai59QiI -----END CERTIFICATE-----Generated at Mon Jun 30 01:22:19 2025 by rpki-client