$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/ad4a1e02-1e75-3b5f-a3a4-5d5683b57228.roa File: ad4a1e02-1e75-3b5f-a3a4-5d5683b57228.roa (raw, json) Hash identifier: 3+Y1L8od2ZRHQmov0DBhnK+jOdYe8b+uO/wNeaxxCa0= Subject key identifier: 76:00:3B:81:42:DD:20:C1:4F:B1:D9:06:7A:F4:5E:75:9B:1A:CD:A9 Certificate issuer: /CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c Certificate serial: 010D0C9F4328584A71EB502A7599511780C21200 Authority key identifier: C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/ad4a1e02-1e75-3b5f-a3a4-5d5683b57228.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 7029 IP address blocks: 23.143.104.0/24 maxlen: 24 2607:340::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:50:2a:75:99:51:17:80:c2:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=bd07cf08-0b5d-4f4a-a076-6962879471d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b9:68:9e:ea:b4:f1:7b:4e:6c:83:6c:80:dc: 53:9b:70:99:ea:ab:66:b8:50:78:d7:e6:21:e1:1a: 88:b4:c7:fc:9e:dc:81:39:1b:77:05:6a:04:73:f6: 20:3f:37:d6:e4:75:77:ad:fa:46:1b:b2:ba:43:11: f7:e4:7c:ab:0e:da:86:a0:8e:4b:f1:ec:d3:89:38: af:6a:cc:f5:3f:4c:be:74:4b:ac:c4:8c:24:73:c3: 3e:b3:26:77:96:92:63:8d:5f:1e:df:3c:f9:bb:ea: 40:33:62:6e:d5:ba:c0:39:47:1b:81:3f:58:20:9d: c4:c7:8a:dc:10:f7:7d:55:ec:6d:13:1c:48:c6:69: 6e:b0:b4:40:60:bd:0d:71:8c:8d:b6:63:bd:87:fc: c9:5d:b3:52:87:d6:0f:46:f2:19:c4:95:c6:81:f3: a9:af:b3:90:ee:46:20:de:98:39:78:a4:98:f9:e6: 6e:4b:51:d1:77:b8:88:d9:92:65:25:9b:ce:6b:d8: 24:52:33:72:77:ec:95:67:c7:dd:16:46:e1:fb:18: 49:df:2f:c9:63:09:98:52:be:37:3c:54:04:b1:5b: 3e:78:50:98:55:94:df:8f:19:e7:55:a2:00:ad:53: ae:19:3d:32:15:f3:11:01:08:d4:34:2a:7d:2b:4a: a8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:00:3B:81:42:DD:20:C1:4F:B1:D9:06:7A:F4:5E:75:9B:1A:CD:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/ad4a1e02-1e75-3b5f-a3a4-5d5683b57228.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl X509v3 Authority Key Identifier: keyid:C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer sbgp-ipAddrBlock: critical IPv4: 23.143.104.0/24 IPv6: 2607:340::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e8:95:42:37:15:35:1d:20:39:85:07:0a:1c:63:d0:ca:83: 13:6f:cf:ef:be:b6:66:12:0a:af:95:8a:92:d5:37:90:82:74: 9d:aa:5a:c5:81:e8:5b:8b:79:61:d7:54:1b:86:82:3a:4c:f0: 63:c6:80:9a:07:c6:d2:44:31:2a:99:97:d4:9c:d6:5d:22:27: 5f:d9:c0:e8:74:5a:d8:20:ed:45:da:12:be:72:a7:3f:ed:41: 28:53:83:d4:62:b0:48:6a:a8:03:dd:86:f3:14:f7:63:c0:41: 51:13:bb:ea:e3:f9:b9:bb:48:98:41:35:85:36:5a:8f:17:78: 56:34:e6:cd:2b:ec:1b:10:76:e8:37:ba:03:e2:83:82:77:a0: 10:8e:86:89:2f:7b:35:37:66:c2:f4:f7:20:9c:5d:14:22:f7: 62:c3:e3:7d:de:de:c9:47:4a:08:15:5b:1e:46:9b:7d:bc:a7: 71:b3:f8:23:ef:bc:e7:5c:e5:27:d4:5a:69:cf:82:c5:e8:65: 89:5b:bf:da:a2:70:cb:56:00:c3:e0:fc:b8:25:24:b9:99:03: 2d:a5:17:4e:5d:76:d6:95:dd:6d:ca:2e:6b:a0:79:48:53:70: 64:32:71:c6:c7:73:d9:44:90:08:fe:d7:bb:85:62:c4:4f:76: aa:30:a3:6b -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEpx61AqdZlRF4DCEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhM2I4YmEtYWM3ZS00ZTBlLTg5MWMtYWEyMGU1ZmU0 NDJjMB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk YmQwN2NmMDgtMGI1ZC00ZjRhLWEwNzYtNjk2Mjg3OTQ3MWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7lonuq08XtObINsgNxTm3CZ6qtmuFB41+Yh 4RqItMf8ntyBORt3BWoEc/YgPzfW5HV3rfpGG7K6QxH35HyrDtqGoI5L8ezTiTiv asz1P0y+dEusxIwkc8M+syZ3lpJjjV8e3zz5u+pAM2Ju1brAOUcbgT9YIJ3Ex4rc EPd9VextExxIxmlusLRAYL0NcYyNtmO9h/zJXbNSh9YPRvIZxJXGgfOpr7OQ7kYg 3pg5eKSY+eZuS1HRd7iI2ZJlJZvOa9gkUjNyd+yVZ8fdFkbh+xhJ3y/JYwmYUr43 PFQEsVs+eFCYVZTfjxnnVaIArVOuGT0yFfMRAQjUNCp9K0qopQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFHYAO4FC3SDBT7HZBnr0XnWbGs2pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wOWEz YjhiYS1hYzdlLTRlMGUtODkxYy1hYTIwZTVmZTQ0MmMvYWQ0YTFlMDItMWU3NS0z YjVmLWEzYTQtNWQ1NjgzYjU3MjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDlhM2I4YmEtYWM3ZS00ZTBlLTg5 MWMtYWEyMGU1ZmU0NDJjLzA5YTNiOGJhLWFjN2UtNGUwZS04OTFjLWFhMjBlNWZl NDQyYy5jcmwwHwYDVR0jBBgwFoAUxFLvKSfy7FpRPMFy1nO9HjkFlSYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wOWEzYjhiYS1hYzdlLTRlMGUtODkxYy1hYTIw ZTVmZTQ0MmMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF49oMA0E AgACMAcDBQQmBwNAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBACTolUI3FTUdIDmFBwocY9DKgxNvz+++tmYS Cq+VipLVN5CCdJ2qWsWB6FuLeWHXVBuGgjpM8GPGgJoHxtJEMSqZl9Sc1l0iJ1/Z wOh0Wtgg7UXaEr5ypz/tQShTg9RisEhqqAPdhvMU92PAQVETu+rj+bm7SJhBNYU2 Wo8XeFY05s0r7BsQdug3ugPig4J3oBCOhokvezU3ZsL09yCcXRQi92LD433e3slH SggVWx5Gm328p3Gz+CPvvOdc5SfUWmnPgsXoZYlbv9qicMtWAMPg/LglJLmZAy2l F05ddtaV3W3KLmugeUhTcGQyccbHc9lEkAj+17uFYsRPdqowo2s= -----END CERTIFICATE-----Generated at Sun Jul 20 14:07:51 2025 by rpki-client