$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37a572e9-4783-4234-bb28-e490155ccaf4/fcb80d6b-b948-3c12-9a8f-59561151ac02.roa File: fcb80d6b-b948-3c12-9a8f-59561151ac02.roa (raw, json) Hash identifier: Hc54D3EV1oPkQMAWg6BfWOh1q1Cix0mmEQq8WwFR8ww= Subject key identifier: 3E:96:C2:5B:0A:76:8B:EB:14:9E:6A:70:7B:F5:F9:8E:2F:DE:0B:FA Certificate issuer: /CN=37a572e9-4783-4234-bb28-e490155ccaf4 Certificate serial: 010D0C9F4328584A45403996F3D2851C6A744940 Authority key identifier: 67:A1:74:65:BB:4D:0B:AF:AA:CA:22:5B:F3:64:0B:AE:1C:86:08:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37a572e9-4783-4234-bb28-e490155ccaf4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37a572e9-4783-4234-bb28-e490155ccaf4/fcb80d6b-b948-3c12-9a8f-59561151ac02.roa Signing time: Sun 22 Jun 2025 01:00:50 +0000 ROA not before: Sun 22 Jun 2025 01:00:50 +0000 ROA not after: Sat 20 Sep 2025 01:00:50 +0000 asID: 400192 IP address blocks: 23.161.56.0/24 maxlen: 24 2606:b140::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37a572e9-4783-4234-bb28-e490155ccaf4/37a572e9-4783-4234-bb28-e490155ccaf4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37a572e9-4783-4234-bb28-e490155ccaf4/37a572e9-4783-4234-bb28-e490155ccaf4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37a572e9-4783-4234-bb28-e490155ccaf4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:40:39:96:f3:d2:85:1c:6a:74:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37a572e9-4783-4234-bb28-e490155ccaf4 Validity Not Before: Jun 22 01:00:50 2025 GMT Not After : Sep 20 01:00:50 2025 GMT Subject: CN=5091e738-ee4c-42fd-a8aa-16f3cab94878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fa:01:d0:c0:35:78:0a:ad:75:5b:8d:f4:62: a0:7d:94:09:cf:29:26:e3:de:6d:8d:12:2e:9f:64: 05:d0:97:90:d8:eb:13:f3:aa:a8:73:3c:34:69:2e: fa:4f:9e:b5:c8:1c:1d:aa:4c:c4:8a:f7:f6:a4:a7: 20:35:3f:8c:e4:19:e3:50:92:b1:95:95:ba:f1:57: 03:38:2c:b0:a5:5d:1c:6a:f0:a6:ee:14:2f:aa:2a: 60:46:a7:4a:10:c5:27:30:56:73:74:62:e8:7e:52: 71:2e:60:97:2c:0f:96:85:cb:58:5f:b7:a4:3c:98: 63:d4:19:41:be:ca:ed:e0:62:b1:1f:ae:22:e5:1d: 5a:3e:42:19:4b:44:a6:d8:3a:a4:43:b0:e9:1d:d7: a4:31:ca:fd:47:40:d4:ed:75:d6:7f:e4:ef:13:bf: 52:0a:c0:b2:85:67:b6:13:fa:ec:7b:d7:1d:85:09: 3c:1a:3d:c3:eb:82:ff:bf:fd:86:8f:fe:f0:6e:3a: 20:13:aa:40:66:78:3e:25:78:d8:4e:7b:3c:0e:71: 2f:79:ce:49:bf:8b:a0:ec:06:a8:8f:78:7b:fe:55: d1:40:80:83:ed:86:9a:d0:4e:9d:04:25:0e:51:46: 64:9d:9d:c6:7a:d9:a2:c1:c1:02:87:40:5f:93:6e: 2f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:96:C2:5B:0A:76:8B:EB:14:9E:6A:70:7B:F5:F9:8E:2F:DE:0B:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37a572e9-4783-4234-bb28-e490155ccaf4/fcb80d6b-b948-3c12-9a8f-59561151ac02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37a572e9-4783-4234-bb28-e490155ccaf4/37a572e9-4783-4234-bb28-e490155ccaf4.crl X509v3 Authority Key Identifier: keyid:67:A1:74:65:BB:4D:0B:AF:AA:CA:22:5B:F3:64:0B:AE:1C:86:08:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37a572e9-4783-4234-bb28-e490155ccaf4.cer sbgp-ipAddrBlock: critical IPv4: 23.161.56.0/24 IPv6: 2606:b140::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:2b:d1:e0:3e:c0:27:60:14:f0:fe:b4:2c:ce:08:89:72:54: 9d:e4:80:7d:47:57:cb:62:91:ef:3f:fe:48:b5:59:72:7c:f6: 45:99:30:bd:34:c2:c9:36:e7:23:7a:e2:1c:e9:56:9c:db:af: 4b:30:99:0e:c2:2a:46:f4:f4:76:ed:ae:99:ce:51:98:af:98: e7:aa:2f:7b:ea:df:13:a0:a0:c4:da:ad:91:52:ed:8e:c4:6c: ac:f8:e8:6c:65:08:71:ff:56:c0:e2:dc:61:b9:eb:1d:59:be: 27:2f:1a:f7:77:ed:f8:3e:13:48:d8:b9:cd:32:52:e4:4d:4b: d8:41:3c:0f:1c:d8:5a:76:0f:7a:2e:13:c5:c0:06:fd:3e:00: dd:3f:84:bd:14:90:ef:cb:48:eb:e8:db:b4:b9:5d:6d:45:0e: f1:e9:25:bf:76:cb:d8:ab:0f:6a:73:39:2f:d6:54:9a:d9:91: 08:bb:f0:9d:13:35:c0:94:79:2c:60:bf:e7:a1:74:a2:0e:f4: ad:4f:77:23:06:1c:df:05:76:ea:b9:2d:13:40:5c:a1:58:e8: cc:95:5c:1e:e3:bf:9c:36:33:6c:eb:76:2c:c9:b1:ef:29:66: 37:16:20:f0:b6:94:dd:19:80:58:1a:e5:c8:45:6d:10:64:43: 55:37:68:39 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEpFQDmW89KFHGp0SUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzdhNTcyZTktNDc4My00MjM0LWJiMjgtZTQ5MDE1NWNj YWY0MB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk NTA5MWU3MzgtZWU0Yy00MmZkLWE4YWEtMTZmM2NhYjk0ODc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPoB0MA1eAqtdVuN9GKgfZQJzykm495tjRIu n2QF0JeQ2OsT86qoczw0aS76T561yBwdqkzEivf2pKcgNT+M5BnjUJKxlZW68VcD OCywpV0cavCm7hQvqipgRqdKEMUnMFZzdGLoflJxLmCXLA+WhctYX7ekPJhj1BlB vsrt4GKxH64i5R1aPkIZS0Sm2DqkQ7DpHdekMcr9R0DU7XXWf+TvE79SCsCyhWe2 E/rse9cdhQk8Gj3D64L/v/2Gj/7wbjogE6pAZng+JXjYTns8DnEvec5Jv4ug7Aao j3h7/lXRQICD7Yaa0E6dBCUOUUZknZ3GetmiwcECh0Bfk24vYwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFD6WwlsKdovrFJ5qcHv1+Y4v3gv6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zN2E1 NzJlOS00NzgzLTQyMzQtYmIyOC1lNDkwMTU1Y2NhZjQvZmNiODBkNmItYjk0OC0z YzEyLTlhOGYtNTk1NjExNTFhYzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzdhNTcyZTktNDc4My00MjM0LWJi MjgtZTQ5MDE1NWNjYWY0LzM3YTU3MmU5LTQ3ODMtNDIzNC1iYjI4LWU0OTAxNTVj Y2FmNC5jcmwwHwYDVR0jBBgwFoAUZ6F0ZbtNC6+qyiJb82QLrhyGCGgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zN2E1NzJlOS00NzgzLTQyMzQtYmIyOC1lNDkw MTU1Y2NhZjQuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF6E4MA0E AgACMAcDBQAmBrFAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAAIr0eA+wCdgFPD+tCzOCIlyVJ3kgH1HV8ti ke8//ki1WXJ89kWZML00wsk25yN64hzpVpzbr0swmQ7CKkb09HbtrpnOUZivmOeq L3vq3xOgoMTarZFS7Y7EbKz46GxlCHH/VsDi3GG56x1ZvicvGvd37fg+E0jYuc0y UuRNS9hBPA8c2Fp2D3ouE8XABv0+AN0/hL0UkO/LSOvo27S5XW1FDvHpJb92y9ir D2pzOS/WVJrZkQi78J0TNcCUeSxgv+ehdKIO9K1PdyMGHN8Fduq5LRNAXKFY6MyV XB7jv5w2M2zrdizJse8pZjcWIPC2lN0ZgFga5chFbRBkQ1U3aDk= -----END CERTIFICATE-----Generated at Wed Jul 9 19:00:55 2025 by rpki-client