$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108/b1573bdb-5902-3ac6-9c53-69941ae15029.roa File: b1573bdb-5902-3ac6-9c53-69941ae15029.roa (raw, json) Hash identifier: 4b7AO7XJ2mBIktjdXu1sM9MBrxOtgSM5oWxzxYchpZE= Subject key identifier: D6:C6:00:77:BA:9D:3B:27:CC:A2:56:ED:0A:F5:B9:09:69:A5:3B:26 Certificate issuer: /CN=ac21a503-f3b0-48ad-b925-50edbd303108 Certificate serial: 010D0C9F4328584A56004BC0DC268CA66524EC00 Authority key identifier: DF:3F:C9:5D:28:C8:1E:12:25:AA:6C:A1:B6:E3:F8:3A:22:3B:B0:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108/b1573bdb-5902-3ac6-9c53-69941ae15029.roa Signing time: Sat 28 Jun 2025 01:00:48 +0000 ROA not before: Sat 28 Jun 2025 01:00:48 +0000 ROA not after: Fri 26 Sep 2025 01:00:48 +0000 asID: 32561 IP address blocks: 23.153.104.0/24 maxlen: 32 2602:faa0::/40 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108/ac21a503-f3b0-48ad-b925-50edbd303108.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108/ac21a503-f3b0-48ad-b925-50edbd303108.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:56:00:4b:c0:dc:26:8c:a6:65:24:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac21a503-f3b0-48ad-b925-50edbd303108 Validity Not Before: Jun 28 01:00:48 2025 GMT Not After : Sep 26 01:00:48 2025 GMT Subject: CN=994863ea-c78f-464c-a78d-8af804fd2b80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c6:7c:5b:24:82:68:13:4f:63:f3:a8:e7:59: c5:3a:61:1d:3e:23:fd:e5:16:2a:ec:13:83:05:3b: 83:7d:bc:4e:27:10:da:83:04:e2:69:1e:20:f4:f0: 81:62:24:da:05:64:08:bc:d8:0d:38:f8:82:ad:ea: d2:41:cb:f5:a2:65:a0:48:48:dd:0e:74:a9:36:a0: bb:98:c0:87:d3:d3:b9:d1:e9:53:90:fe:1c:02:8d: 98:3a:2d:d1:38:16:ed:67:66:93:52:85:75:e4:94: 95:8f:15:79:5b:7f:8e:e2:1d:5f:1a:f6:cb:af:c2: a6:44:8c:60:11:5a:3c:1a:1e:fe:a7:c2:13:ce:3a: 0f:83:78:0b:e0:c5:fa:c3:53:16:8f:47:c0:fd:4a: a1:45:dc:71:f8:ef:72:de:4a:2f:d3:24:26:2d:27: c6:1c:9d:c8:be:38:4b:12:de:95:6a:a0:ba:3f:b8: 5c:26:91:0e:a6:a4:e7:6c:80:08:7d:32:c3:c4:32: 57:cb:11:43:bf:83:4c:0d:69:78:4c:4c:f3:53:80: c6:06:95:66:d8:62:ba:73:10:8f:e5:b6:8f:b5:f1: c9:d9:7a:3e:90:96:e3:c6:a7:e0:f7:c9:e1:2a:d4: 23:9c:55:92:b2:9f:b7:ee:ec:4a:df:fa:a0:60:bd: 4c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C6:00:77:BA:9D:3B:27:CC:A2:56:ED:0A:F5:B9:09:69:A5:3B:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108/b1573bdb-5902-3ac6-9c53-69941ae15029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108/ac21a503-f3b0-48ad-b925-50edbd303108.crl X509v3 Authority Key Identifier: keyid:DF:3F:C9:5D:28:C8:1E:12:25:AA:6C:A1:B6:E3:F8:3A:22:3B:B0:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108.cer sbgp-ipAddrBlock: critical IPv4: 23.153.104.0/24 IPv6: 2602:faa0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:81:89:11:81:27:42:3a:50:b4:df:10:13:2a:b7:eb:5e:00: c0:9a:57:a6:e4:1d:2b:2a:54:9c:5f:44:2d:54:fe:a3:22:11: 66:70:6f:63:fa:3c:a3:d3:e7:67:04:9f:75:a6:19:da:81:da: 08:d8:e5:80:00:0e:ca:57:23:3d:69:31:65:91:29:32:fe:29: de:e1:56:fa:14:4a:a4:fa:2b:46:29:85:f1:54:38:b6:c7:1c: 06:f1:21:3b:71:b5:33:34:ce:3e:b4:96:72:c2:09:ec:ba:5c: 52:11:dc:87:58:64:58:8b:d0:ff:a2:b3:eb:dc:bf:c0:16:5c: cf:0a:a8:b9:d5:0a:c1:d9:a1:e6:8c:6d:6d:22:d3:a4:10:2a: 5a:0d:21:5f:96:51:4a:51:12:2a:1c:30:c6:8a:dc:e3:14:60: c6:32:23:6e:25:eb:39:d6:17:92:e4:f7:54:ac:ef:ad:a8:15: fe:05:6e:a6:42:2d:56:be:8d:f4:f4:07:af:5c:ae:18:d1:e0: 8a:64:a7:69:00:ea:60:3e:41:f7:4f:28:c7:ab:65:dc:e4:1d: ed:e6:1b:fb:24:c5:2c:06:00:96:4c:2f:6e:7b:be:84:1c:88: 83:58:a8:cf:b2:67:f7:a4:50:f5:53:3f:fe:3b:40:09:53:c4: 2c:7f:cf:41 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEpWAEvA3CaMpmUk7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyMWE1MDMtZjNiMC00OGFkLWI5MjUtNTBlZGJkMzAz MTA4MB4XDTI1MDYyODAxMDA0OFoXDTI1MDkyNjAxMDA0OFowLzEtMCsGA1UEAxMk OTk0ODYzZWEtYzc4Zi00NjRjLWE3OGQtOGFmODA0ZmQyYjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8Z8WySCaBNPY/Oo51nFOmEdPiP95RYq7BOD BTuDfbxOJxDagwTiaR4g9PCBYiTaBWQIvNgNOPiCrerSQcv1omWgSEjdDnSpNqC7 mMCH09O50elTkP4cAo2YOi3ROBbtZ2aTUoV15JSVjxV5W3+O4h1fGvbLr8KmRIxg EVo8Gh7+p8ITzjoPg3gL4MX6w1MWj0fA/UqhRdxx+O9y3kov0yQmLSfGHJ3IvjhL Et6VaqC6P7hcJpEOpqTnbIAIfTLDxDJXyxFDv4NMDWl4TEzzU4DGBpVm2GK6cxCP 5baPtfHJ2Xo+kJbjxqfg98nhKtQjnFWSsp+37uxK3/qgYL1MJwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFNbGAHe6nTsnzKJW7Qr1uQlppTsmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hYzIx YTUwMy1mM2IwLTQ4YWQtYjkyNS01MGVkYmQzMDMxMDgvYjE1NzNiZGItNTkwMi0z YWM2LTljNTMtNjk5NDFhZTE1MDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWMyMWE1MDMtZjNiMC00OGFkLWI5 MjUtNTBlZGJkMzAzMTA4L2FjMjFhNTAzLWYzYjAtNDhhZC1iOTI1LTUwZWRiZDMw MzEwOC5jcmwwHwYDVR0jBBgwFoAU3z/JXSjIHhIlqmyhtuP4OiI7sN8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hYzIxYTUwMy1mM2IwLTQ4YWQtYjkyNS01MGVk YmQzMDMxMDguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5loMA4E AgACMAgDBgAmAvqgADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBwgYkRgSdCOlC03xATKrfrXgDAmlem5B0r KlScX0QtVP6jIhFmcG9j+jyj0+dnBJ91phnagdoI2OWAAA7KVyM9aTFlkSky/ine 4Vb6FEqk+itGKYXxVDi2xxwG8SE7cbUzNM4+tJZywgnsulxSEdyHWGRYi9D/orPr 3L/AFlzPCqi51QrB2aHmjG1tItOkECpaDSFfllFKURIqHDDGitzjFGDGMiNuJes5 1heS5PdUrO+tqBX+BW6mQi1Wvo309AevXK4Y0eCKZKdpAOpgPkH3TyjHq2Xc5B3t 5hv7JMUsBgCWTC9ue76EHIiDWKjPsmf3pFD1Uz/+O0AJU8Qsf89B -----END CERTIFICATE-----Generated at Thu Jul 3 23:08:25 2025 by rpki-client