$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/31f29860-b9a8-3368-b909-343d11150b76.roa File: 31f29860-b9a8-3368-b909-343d11150b76.roa (raw, json) Hash identifier: Kma3woMCihYZPtBPzos9IXChlVwPAY20ycMnym5COTY= Subject key identifier: 3B:D0:39:5D:80:C5:B7:6C:64:4C:2F:3E:EA:05:AF:A9:09:A7:9F:A8 Certificate issuer: /CN=cb3ad003-aa7b-45b4-b273-e01ca5688976 Certificate serial: 010D0C9F4328584A480AE7147D762A494A170080 Authority key identifier: A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/31f29860-b9a8-3368-b909-343d11150b76.roa Signing time: Mon 23 Jun 2025 01:00:49 +0000 ROA not before: Mon 23 Jun 2025 01:00:49 +0000 ROA not after: Sun 21 Sep 2025 01:00:49 +0000 asID: 401446 IP address blocks: 142.202.82.0/23 maxlen: 23 2602:fd9a::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:0a:e7:14:7d:76:2a:49:4a:17:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb3ad003-aa7b-45b4-b273-e01ca5688976 Validity Not Before: Jun 23 01:00:49 2025 GMT Not After : Sep 21 01:00:49 2025 GMT Subject: CN=2a6e8621-fb9a-4aff-8218-ca41d1bcd164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ed:49:c7:45:b8:00:48:05:18:07:4c:a3:33: fc:e7:fb:a0:58:ad:b6:0e:31:cd:5c:4b:57:0e:ff: bd:6b:95:74:8b:55:51:82:cc:b8:6c:7e:ca:9a:42: 60:ac:bb:30:9c:ff:7e:90:64:28:5d:e5:5c:cd:8a: 69:63:f6:6d:53:bf:fd:ae:23:70:70:6c:28:04:0e: ab:ca:d8:db:89:19:52:2e:18:40:6c:c1:4d:c5:8b: 37:ef:3d:80:a2:1c:23:66:49:a0:25:6d:f8:db:98: 68:54:d9:ae:bc:a9:f5:4d:dc:26:3d:1e:b7:73:df: e5:c9:2e:e8:da:68:8b:ca:b2:9c:ca:15:df:93:a7: 0c:06:0c:ba:4b:9c:7a:5d:de:2c:a0:4d:eb:27:03: 63:fb:1c:b9:75:f2:d1:a1:42:b3:09:44:86:fb:fd: 03:05:f2:0a:51:b1:2e:70:a9:96:a8:5e:e5:df:24: d9:df:a9:cc:b0:94:bf:27:aa:d8:85:dd:9b:bf:43: 63:c6:9a:e5:0a:a1:fe:60:c5:8e:9d:03:34:7f:52: 4d:6f:5f:d1:9d:2d:05:02:21:d7:28:57:e5:42:ac: 6b:11:d8:09:19:54:e8:30:cd:2c:7a:9e:13:a8:91: b8:02:c4:18:95:5b:0c:e9:0f:01:7b:63:4f:8f:dd: 01:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D0:39:5D:80:C5:B7:6C:64:4C:2F:3E:EA:05:AF:A9:09:A7:9F:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/31f29860-b9a8-3368-b909-343d11150b76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl X509v3 Authority Key Identifier: keyid:A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer sbgp-ipAddrBlock: critical IPv4: 142.202.82.0/23 IPv6: 2602:fd9a::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:55:f6:f2:45:30:90:e6:ab:e9:2e:f9:ed:08:ff:ca:cd:4f: 2f:51:2e:a1:dc:82:7b:0e:fa:87:12:eb:20:b8:9b:8a:00:1d: 2f:ca:73:04:ec:8e:8c:d7:ce:57:bd:1a:61:78:5d:15:f9:6c: 1f:c9:f5:ea:65:b6:23:76:0b:5e:52:69:49:14:b1:88:ff:5d: 6b:07:04:d5:11:c2:f9:02:ce:25:17:ad:1d:46:1a:ff:3a:a7: f9:05:52:38:a7:ae:75:49:35:3f:ff:1b:c3:02:3b:d8:3f:4c: ff:a2:c5:c0:88:29:67:7a:71:ef:50:ae:7e:9c:09:6b:79:a0: e2:b6:f9:04:33:da:2c:55:e2:2c:62:00:3b:d4:68:c0:8d:c3: 0a:10:61:c6:6b:2f:37:81:34:db:a5:23:5b:34:71:b0:6c:2a: 04:f6:d9:26:a7:e8:86:ea:8a:7c:6e:27:e1:c3:f2:75:5d:fc: de:4c:a2:07:bf:49:73:1e:54:36:cb:ae:aa:a3:8a:a5:8d:06: ea:e8:f5:8f:a6:26:7d:df:1b:ed:22:f8:22:48:a8:41:5b:2b: 87:55:90:e4:4c:4f:da:0f:e4:1e:85:cf:da:54:84:dc:74:94: db:89:fd:91:2c:37:6d:3a:4a:00:c5:56:cf:f8:e6:c3:89:ac: ac:70:8d:a7 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEpICucUfXYqSUoXAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IzYWQwMDMtYWE3Yi00NWI0LWIyNzMtZTAxY2E1Njg4 OTc2MB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk MmE2ZTg2MjEtZmI5YS00YWZmLTgyMTgtY2E0MWQxYmNkMTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+1Jx0W4AEgFGAdMozP85/ugWK22DjHNXEtX Dv+9a5V0i1VRgsy4bH7KmkJgrLswnP9+kGQoXeVczYppY/ZtU7/9riNwcGwoBA6r ytjbiRlSLhhAbMFNxYs37z2AohwjZkmgJW3425hoVNmuvKn1TdwmPR63c9/lyS7o 2miLyrKcyhXfk6cMBgy6S5x6Xd4soE3rJwNj+xy5dfLRoUKzCUSG+/0DBfIKUbEu cKmWqF7l3yTZ36nMsJS/J6rYhd2bv0NjxprlCqH+YMWOnQM0f1JNb1/RnS0FAiHX KFflQqxrEdgJGVToMM0sep4TqJG4AsQYlVsM6Q8Be2NPj90B1QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDvQOV2AxbdsZEwvPuoFr6kJp5+oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNh ZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFjYTU2ODg5NzYvMzFmMjk4NjAtYjlhOC0z MzY4LWI5MDktMzQzZDExMTUwYjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2IzYWQwMDMtYWE3Yi00NWI0LWIy NzMtZTAxY2E1Njg4OTc2L2NiM2FkMDAzLWFhN2ItNDViNC1iMjczLWUwMWNhNTY4 ODk3Ni5jcmwwHwYDVR0jBBgwFoAUpXx2gQzGUdcquGv3mpLFL5ycpIkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNhZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFj YTU2ODg5NzYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBjspSMA4E AgACMAgDBgQmAv2aADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCAVfbyRTCQ5qvpLvntCP/KzU8vUS6h3IJ7 DvqHEusguJuKAB0vynME7I6M185XvRpheF0V+WwfyfXqZbYjdgteUmlJFLGI/11r BwTVEcL5As4lF60dRhr/Oqf5BVI4p651STU//xvDAjvYP0z/osXAiClnenHvUK5+ nAlreaDitvkEM9osVeIsYgA71GjAjcMKEGHGay83gTTbpSNbNHGwbCoE9tkmp+iG 6op8bifhw/J1XfzeTKIHv0lzHlQ2y66qo4qljQbq6PWPpiZ93xvtIvgiSKhBWyuH VZDkTE/aD+Qehc/aVITcdJTbif2RLDdtOkoAxVbP+ObDiayscI2n -----END CERTIFICATE-----Generated at Tue Jul 1 01:26:15 2025 by rpki-client