$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108/b1573bdb-5902-3ac6-9c53-69941ae15029.roa File: b1573bdb-5902-3ac6-9c53-69941ae15029.roa (raw, json) Hash identifier: 3QPHS0QnDwH4uLfMvyBoWZ7WqwUjfxMnAFVTDn+m7eM= Subject key identifier: 6C:A6:3A:70:B1:30:72:92:F8:85:69:B9:D1:DD:8A:3B:D8:9C:FF:70 Certificate issuer: /CN=ac21a503-f3b0-48ad-b925-50edbd303108 Certificate serial: 010D0C9F4328584B36BC570F74E1D343847D8280 Authority key identifier: DF:3F:C9:5D:28:C8:1E:12:25:AA:6C:A1:B6:E3:F8:3A:22:3B:B0:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108/b1573bdb-5902-3ac6-9c53-69941ae15029.roa Signing time: Tue 16 Sep 2025 13:00:41 +0000 ROA not before: Tue 16 Sep 2025 13:00:41 +0000 ROA not after: Mon 15 Dec 2025 14:00:41 +0000 asID: 32561 IP address blocks: 23.153.104.0/24 maxlen: 32 2602:faa0::/40 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108/ac21a503-f3b0-48ad-b925-50edbd303108.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108/ac21a503-f3b0-48ad-b925-50edbd303108.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:bc:57:0f:74:e1:d3:43:84:7d:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac21a503-f3b0-48ad-b925-50edbd303108 Validity Not Before: Sep 16 13:00:41 2025 GMT Not After : Dec 15 14:00:41 2025 GMT Subject: CN=fc2e3c9b-f706-46b7-aeb8-7984cca11cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1c:da:58:39:0d:89:58:b0:ae:f4:3d:cd:35: 6b:d8:4e:cb:3e:53:26:50:0a:77:70:2f:81:dc:b7: 00:3e:f6:28:37:ca:4f:45:16:75:ec:66:5a:5d:74: 80:8c:6d:d0:a0:18:27:6c:f5:0e:5e:5f:f9:23:4e: 87:f5:36:41:dc:0c:35:04:08:0d:93:3c:a7:5b:67: 2d:14:87:10:13:9e:c0:ce:76:a7:53:41:84:35:69: 65:83:cd:0c:bc:e0:43:28:99:1c:09:89:ef:ac:e3: bf:66:40:5f:fb:3c:24:a2:92:56:9b:d6:ee:46:e0: 5e:b2:e2:d0:47:f1:6d:62:ac:42:f2:0d:1b:d5:1e: 10:9e:c5:e0:19:6f:e3:0d:7b:10:be:12:ab:14:d2: 87:6f:cc:ec:c1:de:c1:70:50:2e:38:5c:2f:f5:0a: e2:ed:df:fe:e6:5c:7c:cb:cc:26:c2:af:b0:f1:86: e2:e4:41:fe:50:f5:5d:cd:bd:76:d9:7b:36:aa:7f: 06:46:1c:7b:c5:da:18:ab:1d:93:2c:a6:77:d7:a1: a3:e6:1b:84:a9:13:3d:06:d9:d3:ee:9c:85:51:72: c9:39:89:e7:1e:2c:b7:b5:d2:c5:10:86:9d:61:41: c6:2d:0f:7d:91:d9:8a:e3:2b:f4:a3:48:03:97:67: 05:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A6:3A:70:B1:30:72:92:F8:85:69:B9:D1:DD:8A:3B:D8:9C:FF:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108/b1573bdb-5902-3ac6-9c53-69941ae15029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108/ac21a503-f3b0-48ad-b925-50edbd303108.crl X509v3 Authority Key Identifier: keyid:DF:3F:C9:5D:28:C8:1E:12:25:AA:6C:A1:B6:E3:F8:3A:22:3B:B0:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108.cer sbgp-ipAddrBlock: critical IPv4: 23.153.104.0/24 IPv6: 2602:faa0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:44:72:2a:a5:b8:cf:2b:03:ed:9e:c5:54:9f:11:34:a6:1a: dc:94:a3:d0:4d:46:e6:68:12:bf:82:92:67:6e:e2:f2:2b:08: 67:00:3f:39:30:9e:88:07:06:09:d9:2d:51:e2:24:61:b8:70: cc:80:ec:3f:15:2e:01:87:15:e1:93:4d:57:e4:bc:80:00:21: d2:66:20:f2:94:55:84:69:5e:ed:34:d6:cf:73:41:2c:51:52: 97:3f:b4:ef:f9:73:f7:e5:b5:31:bf:bc:77:2b:e4:3b:89:88: e3:76:3d:7f:76:06:2f:7b:05:97:ce:dc:a6:ee:8f:fc:ef:7c: 51:6f:77:15:3c:da:1a:46:bd:68:d1:ef:47:e3:f3:3f:23:db: 93:2a:7b:2d:34:b2:0c:35:8e:48:82:af:fd:5c:bf:46:f8:1b: c4:26:65:42:50:bf:e0:87:9d:b6:38:6c:f2:e2:70:73:55:46: e4:2b:44:6a:73:6d:e7:d5:3e:d0:e1:21:a4:31:c7:0f:16:ba: d1:5b:4d:84:77:e9:e0:22:84:33:e8:05:f0:63:df:de:57:a3: 26:45:80:c2:15:a0:56:15:c2:42:68:e5:00:9f:99:ca:72:d4: ef:cc:7d:e9:55:17:5c:67:4d:f1:76:45:cb:fc:4b:bb:5e:4f: d0:2e:13:87 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEs2vFcPdOHTQ4R9goAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyMWE1MDMtZjNiMC00OGFkLWI5MjUtNTBlZGJkMzAz MTA4MB4XDTI1MDkxNjEzMDA0MVoXDTI1MTIxNTE0MDA0MVowLzEtMCsGA1UEAxMk ZmMyZTNjOWItZjcwNi00NmI3LWFlYjgtNzk4NGNjYTExY2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBzaWDkNiViwrvQ9zTVr2E7LPlMmUAp3cC+B 3LcAPvYoN8pPRRZ17GZaXXSAjG3QoBgnbPUOXl/5I06H9TZB3Aw1BAgNkzynW2ct FIcQE57AznanU0GENWllg80MvOBDKJkcCYnvrOO/ZkBf+zwkopJWm9buRuBesuLQ R/FtYqxC8g0b1R4QnsXgGW/jDXsQvhKrFNKHb8zswd7BcFAuOFwv9Qri7d/+5lx8 y8wmwq+w8Ybi5EH+UPVdzb122Xs2qn8GRhx7xdoYqx2TLKZ316Gj5huEqRM9BtnT 7pyFUXLJOYnnHiy3tdLFEIadYUHGLQ99kdmK4yv0o0gDl2cFkQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGymOnCxMHKS+IVpudHdijvYnP9wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hYzIx YTUwMy1mM2IwLTQ4YWQtYjkyNS01MGVkYmQzMDMxMDgvYjE1NzNiZGItNTkwMi0z YWM2LTljNTMtNjk5NDFhZTE1MDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWMyMWE1MDMtZjNiMC00OGFkLWI5 MjUtNTBlZGJkMzAzMTA4L2FjMjFhNTAzLWYzYjAtNDhhZC1iOTI1LTUwZWRiZDMw MzEwOC5jcmwwHwYDVR0jBBgwFoAU3z/JXSjIHhIlqmyhtuP4OiI7sN8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hYzIxYTUwMy1mM2IwLTQ4YWQtYjkyNS01MGVk YmQzMDMxMDguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5loMA4E AgACMAgDBgAmAvqgADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAyRHIqpbjPKwPtnsVUnxE0phrclKPQTUbm aBK/gpJnbuLyKwhnAD85MJ6IBwYJ2S1R4iRhuHDMgOw/FS4BhxXhk01X5LyAACHS ZiDylFWEaV7tNNbPc0EsUVKXP7Tv+XP35bUxv7x3K+Q7iYjjdj1/dgYvewWXztym 7o/873xRb3cVPNoaRr1o0e9H4/M/I9uTKnstNLIMNY5Igq/9XL9G+BvEJmVCUL/g h522OGzy4nBzVUbkK0Rqc23n1T7Q4SGkMccPFrrRW02Ed+ngIoQz6AXwY9/eV6Mm RYDCFaBWFcJCaOUAn5nKctTvzH3pVRdcZ03xdkXL/Eu7Xk/QLhOH -----END CERTIFICATE-----Generated at Tue Oct 21 00:08:03 2025 by rpki-client