$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/9fde2a69-c53f-33bf-b93e-6aeaad30d17e.roa File: 9fde2a69-c53f-33bf-b93e-6aeaad30d17e.roa (raw, json) Hash identifier: gsHP8FpuVGmPqYCgPqja8kCmqqlFXgzqlKEO76iWnts= Subject key identifier: 2C:8B:34:3A:58:C4:E7:41:24:C3:D7:FD:44:87:F8:F0:FA:64:76:4F Certificate issuer: /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Certificate serial: 010D0C9F4328584A0C0554AB7FE92A9263D02200 Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/9fde2a69-c53f-33bf-b93e-6aeaad30d17e.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 13780 IP address blocks: 23.128.88.0/24 maxlen: 24 2602:fc09::/36 maxlen: 36 2602:fc09::/40 maxlen: 40 2602:fc09:800::/40 maxlen: 40 2602:fc09:805::/48 maxlen: 48 2602:fc09:818::/48 maxlen: 48 2602:fc09:a00::/40 maxlen: 40 2602:fc09:d2f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:54:ab:7f:e9:2a:92:63:d0:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=1c16569c-b308-4593-9297-5f72c25133db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:51:fc:d3:6a:02:70:2c:13:9b:df:41:46:27: 0a:9f:5a:71:75:67:67:55:b6:8a:f5:dc:50:3f:d3: 85:8f:fa:1b:a9:e1:62:59:33:c8:0b:ee:60:7c:40: 53:44:2b:58:44:2d:eb:d7:84:c2:d6:77:80:f2:2b: 0d:5a:d9:c3:82:be:cc:f5:48:8a:23:c3:71:e9:66: 35:ab:7e:69:94:4a:36:66:42:c7:3e:9d:5b:75:ff: 8c:3f:ae:a2:ea:95:74:1a:16:56:32:b4:34:16:e9: 97:0a:9e:d6:fa:75:d1:66:54:7e:92:26:3a:65:e9: 80:19:4f:07:0e:a3:c0:dd:c7:c0:ac:41:f3:55:ef: fa:ee:ba:f3:f8:16:0b:da:4e:5c:f2:43:46:54:9e: ae:3e:c4:10:1e:5f:87:94:f9:bd:5c:aa:90:30:c7: 1c:f4:30:ed:dc:28:12:aa:7f:be:b6:1f:24:db:a4: 8f:8b:11:8a:05:7d:90:fb:50:37:ad:e4:db:6b:78: e1:e2:58:11:da:7e:06:27:9e:1f:16:60:93:a2:54: c5:f2:db:8c:ad:51:5a:4f:8b:bb:a4:a3:fd:c5:5b: b2:33:c1:26:dc:b7:20:2d:2d:2d:1a:56:a0:77:13: db:6d:9f:47:53:d9:ad:b5:d3:da:32:33:04:d4:4f: 92:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8B:34:3A:58:C4:E7:41:24:C3:D7:FD:44:87:F8:F0:FA:64:76:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/9fde2a69-c53f-33bf-b93e-6aeaad30d17e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl X509v3 Authority Key Identifier: keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer sbgp-ipAddrBlock: critical IPv4: 23.128.88.0/24 IPv6: 2602:fc09::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:0f:03:fc:6b:74:7d:f8:51:2a:06:ba:36:55:66:ac:1a:2b: 0c:01:89:e7:cf:fd:8d:1a:df:bb:66:6a:41:d9:88:70:a8:69: 96:e5:02:b3:a1:2d:89:36:97:91:d3:7a:74:a8:d4:37:9a:d2: 08:0b:9a:dd:fa:70:ff:92:52:99:dd:d7:20:cf:60:a0:21:8a: 9e:d8:f5:2a:5f:b8:8a:bf:d1:36:06:3b:00:be:65:6d:8f:08: 2f:55:f3:6a:10:64:ef:e2:94:4a:98:9b:93:3b:39:51:7e:6b: 3f:b2:62:c6:b8:d7:78:17:2c:74:ac:7b:02:33:fb:14:7f:8a: 0d:dd:ea:8e:8f:c6:02:6f:68:b4:59:70:9f:c8:79:b6:19:9a: 18:b9:6a:5c:18:c9:2a:e2:d4:a2:7f:d2:d0:dd:49:25:5b:ed: 31:38:40:23:1c:6e:99:03:60:4d:90:bc:f1:88:65:69:d6:7b: ea:fd:2d:68:eb:dc:74:41:21:17:b7:95:59:88:e4:a5:88:c5: 93:6a:88:2e:b0:b6:c6:2b:4a:e3:97:49:e1:3e:41:e7:f7:48: 31:dc:56:7b:de:46:de:19:9f:2e:94:9b:66:d8:89:fe:fe:a8: a7:2f:d5:7e:5d:0b:5c:b4:b1:cb:31:07:ae:10:dc:90:87:98: e5:6c:76:1b -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEoMBVSrf+kqkmPQIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlN2I5NmQtMGFhNS00MDJhLWIyZmUtMzM3ZDdjMjA3 ZWVlMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MWMxNjU2OWMtYjMwOC00NTkzLTkyOTctNWY3MmMyNTEzM2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglH802oCcCwTm99BRicKn1pxdWdnVbaK9dxQ P9OFj/obqeFiWTPIC+5gfEBTRCtYRC3r14TC1neA8isNWtnDgr7M9UiKI8Nx6WY1 q35plEo2ZkLHPp1bdf+MP66i6pV0GhZWMrQ0FumXCp7W+nXRZlR+kiY6ZemAGU8H DqPA3cfArEHzVe/67rrz+BYL2k5c8kNGVJ6uPsQQHl+HlPm9XKqQMMcc9DDt3CgS qn++th8k26SPixGKBX2Q+1A3reTba3jh4lgR2n4GJ54fFmCTolTF8tuMrVFaT4u7 pKP9xVuyM8Em3LcgLS0tGlagdxPbbZ9HU9mttdPaMjME1E+S7QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFCyLNDpYxOdBJMPX/USH+PD6ZHZPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3 Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdkN2MyMDdlZWUvOWZkZTJhNjktYzUzZi0z M2JmLWI5M2UtNmFlYWFkMzBkMTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlN2I5NmQtMGFhNS00MDJhLWIy ZmUtMzM3ZDdjMjA3ZWVlLzUyZTdiOTZkLTBhYTUtNDAyYS1iMmZlLTMzN2Q3YzIw N2VlZS5jcmwwHwYDVR0jBBgwFoAUm2pshpw0IMSPY6IRpANBGtJdnzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdk N2MyMDdlZWUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4BYMA4E AgACMAgDBgQmAvwJADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBBDwP8a3R9+FEqBro2VWasGisMAYnnz/2N Gt+7ZmpB2YhwqGmW5QKzoS2JNpeR03p0qNQ3mtIIC5rd+nD/klKZ3dcgz2CgIYqe 2PUqX7iKv9E2BjsAvmVtjwgvVfNqEGTv4pRKmJuTOzlRfms/smLGuNd4Fyx0rHsC M/sUf4oN3eqOj8YCb2i0WXCfyHm2GZoYuWpcGMkq4tSif9LQ3UklW+0xOEAjHG6Z A2BNkLzxiGVp1nvq/S1o69x0QSEXt5VZiOSliMWTaogusLbGK0rjl0nhPkHn90gx 3FZ73kbeGZ8ulJtm2In+/qinL9V+XQtctLHLMQeuENyQh5jlbHYb -----END CERTIFICATE-----Generated at Mon Jun 9 00:08:19 2025 by rpki-client