$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a9736c2d-b353-3032-be0f-62272540e0ac.roa File: a9736c2d-b353-3032-be0f-62272540e0ac.roa (raw, json) Hash identifier: CkJsmEfmwE31JGajD2RSRQtkvtjdmT0UWMfGIuIXhQU= Subject key identifier: EF:AD:E7:34:3E:6A:D2:B3:D2:41:50:CE:3D:1A:AF:C1:1A:86:76:34 Certificate issuer: /CN=a987c446-5fc2-44b0-9a41-65296d90d0c2 Certificate serial: 010D0C9F4328584A4540346DD3495EB76D38DE68 Authority key identifier: C4:91:C7:5F:29:DA:52:AA:C5:B2:03:91:DE:44:94:44:E4:EC:34:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a9736c2d-b353-3032-be0f-62272540e0ac.roa Signing time: Sun 22 Jun 2025 01:00:50 +0000 ROA not before: Sun 22 Jun 2025 01:00:50 +0000 ROA not after: Sat 20 Sep 2025 01:00:50 +0000 asID: 393373 IP address blocks: 23.136.180.0/24 maxlen: 24 2602:f69c::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:40:34:6d:d3:49:5e:b7:6d:38:de:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a987c446-5fc2-44b0-9a41-65296d90d0c2 Validity Not Before: Jun 22 01:00:50 2025 GMT Not After : Sep 20 01:00:50 2025 GMT Subject: CN=2bf85a63-53bd-4af4-a1e0-271c2791b358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f7:25:fc:30:5f:c2:ce:16:21:a3:b6:09:ab: a4:6f:56:06:1e:34:7c:da:ee:76:56:1e:12:8b:fb: f3:55:6c:53:89:51:76:c1:1a:9a:54:8b:1c:d8:19: c2:18:ca:a8:a4:47:6d:e4:35:5c:c7:32:76:e0:a2: 6f:35:78:52:66:8a:1e:bc:92:77:52:9c:27:f1:33: 9b:ee:48:a8:60:03:9a:40:71:69:04:cd:28:ff:3a: 86:3f:a7:c5:18:f2:95:03:49:3b:e2:3f:89:b9:35: 9b:5d:d3:e4:92:d8:c7:2c:69:85:73:d1:0a:5b:53: 56:43:f1:62:4c:32:6d:af:b5:c8:8a:a8:1c:15:ab: 23:89:2e:b1:05:4c:16:24:75:11:06:2b:36:c2:7a: 20:84:a6:fa:d3:ea:8c:80:a8:96:48:8b:39:50:02: b5:4f:a3:2a:b6:49:12:0a:72:01:b8:b6:59:df:4f: b5:4b:f7:15:cc:ec:2d:c6:d6:f1:16:d5:b8:41:65: 17:70:42:a5:34:93:34:0e:82:5e:3c:b3:59:fc:1e: 62:fa:b2:28:30:ff:3a:3d:69:35:dc:e2:9a:4f:f6: 83:eb:c4:10:78:d0:b0:24:c2:84:ac:8c:34:72:00: 81:65:45:b9:40:b2:41:f6:fb:c8:d6:28:42:64:37: 62:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:AD:E7:34:3E:6A:D2:B3:D2:41:50:CE:3D:1A:AF:C1:1A:86:76:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a9736c2d-b353-3032-be0f-62272540e0ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.crl X509v3 Authority Key Identifier: keyid:C4:91:C7:5F:29:DA:52:AA:C5:B2:03:91:DE:44:94:44:E4:EC:34:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2.cer sbgp-ipAddrBlock: critical IPv4: 23.136.180.0/24 IPv6: 2602:f69c::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:dd:66:3a:32:0e:b6:5f:df:0f:f8:1e:df:c3:26:00:e9:45: e7:50:2f:1f:5b:c7:2c:a0:e8:dc:92:63:02:86:8f:d1:f3:87: c8:71:e2:91:b4:96:c0:da:65:fe:02:b3:bd:88:e0:43:ae:41: 05:34:73:9c:91:17:6a:36:c2:94:ed:36:60:a3:08:40:31:29: db:88:38:f4:21:47:3c:03:8e:24:33:d7:a5:50:e1:0d:6d:d3: 5c:b4:42:24:53:8a:d4:c3:de:f2:38:bf:d3:2f:6c:ba:da:d1: c8:4b:b2:da:45:55:da:36:87:2a:60:51:d4:a7:e6:9a:78:70: 2c:7a:83:43:75:95:da:b1:1d:a3:4c:ab:33:64:0b:8a:5d:33: bf:33:be:d4:28:c2:2e:23:55:f1:65:29:3d:5c:14:1c:d5:a8: ce:2c:71:02:6d:52:95:a0:5c:67:db:81:d1:02:19:5f:f7:5e: e7:69:a9:84:c3:80:82:fc:a3:9d:ad:26:4e:0f:be:2a:c0:7d: 40:f2:4f:96:0f:c5:a1:7c:6c:35:ce:f9:a2:24:3a:da:0c:5f: 78:e3:f3:89:c4:0b:17:fc:ff:9e:a2:63:52:77:12:42:98:af: 9b:7f:a5:7e:43:6e:6c:f5:60:a7:d0:7e:34:52:59:6a:77:7d: 43:21:8e:d4 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEpFQDRt00let2043mgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk4N2M0NDYtNWZjMi00NGIwLTlhNDEtNjUyOTZkOTBk MGMyMB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk MmJmODVhNjMtNTNiZC00YWY0LWExZTAtMjcxYzI3OTFiMzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/cl/DBfws4WIaO2Caukb1YGHjR82u52Vh4S i/vzVWxTiVF2wRqaVIsc2BnCGMqopEdt5DVcxzJ24KJvNXhSZooevJJ3Upwn8TOb 7kioYAOaQHFpBM0o/zqGP6fFGPKVA0k74j+JuTWbXdPkktjHLGmFc9EKW1NWQ/Fi TDJtr7XIiqgcFasjiS6xBUwWJHURBis2wnoghKb60+qMgKiWSIs5UAK1T6MqtkkS CnIBuLZZ30+1S/cVzOwtxtbxFtW4QWUXcEKlNJM0DoJePLNZ/B5i+rIoMP86PWk1 3OKaT/aD68QQeNCwJMKErIw0cgCBZUW5QLJB9vvI1ihCZDdixQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFO+t5zQ+atKz0kFQzj0ar8EahnY0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hOTg3 YzQ0Ni01ZmMyLTQ0YjAtOWE0MS02NTI5NmQ5MGQwYzIvYTk3MzZjMmQtYjM1My0z MDMyLWJlMGYtNjIyNzI1NDBlMGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTk4N2M0NDYtNWZjMi00NGIwLTlh NDEtNjUyOTZkOTBkMGMyL2E5ODdjNDQ2LTVmYzItNDRiMC05YTQxLTY1Mjk2ZDkw ZDBjMi5jcmwwHwYDVR0jBBgwFoAUxJHHXynaUqrFsgOR3kSUROTsNNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hOTg3YzQ0Ni01ZmMyLTQ0YjAtOWE0MS02NTI5 NmQ5MGQwYzIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4i0MA4E AgACMAgDBgAmAvacADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBx3WY6Mg62X98P+B7fwyYA6UXnUC8fW8cs oOjckmMCho/R84fIceKRtJbA2mX+ArO9iOBDrkEFNHOckRdqNsKU7TZgowhAMSnb iDj0IUc8A44kM9elUOENbdNctEIkU4rUw97yOL/TL2y62tHIS7LaRVXaNocqYFHU p+aaeHAseoNDdZXasR2jTKszZAuKXTO/M77UKMIuI1XxZSk9XBQc1ajOLHECbVKV oFxn24HRAhlf917naamEw4CC/KOdrSZOD74qwH1A8k+WD8WhfGw1zvmiJDraDF94 4/OJxAsX/P+eomNSdxJCmK+bf6V+Q25s9WCn0H40Ullqd31DIY7U -----END CERTIFICATE-----Generated at Thu Jul 3 23:22:38 2025 by rpki-client