$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/2e36694a-0cc3-3c04-a6d3-0e87942c2e7d.roa File: 2e36694a-0cc3-3c04-a6d3-0e87942c2e7d.roa (raw, json) Hash identifier: nCEYCrBv3zjtq1Sapy0z5x8DeTyjiK7mjvt4/u2vXdg= Subject key identifier: 65:14:AB:57:36:62:BB:38:68:7F:37:2E:01:94:C3:8A:2E:78:7D:07 Certificate issuer: /CN=5039f611-54f3-4a44-9153-55949e05704b Certificate serial: 010D0C9F4328584A6F207904B4CEB75266516240 Authority key identifier: 9B:34:C7:F7:58:7F:83:60:63:65:B5:97:CA:CB:4E:71:56:F0:64:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/2e36694a-0cc3-3c04-a6d3-0e87942c2e7d.roa Signing time: Mon 07 Jul 2025 01:00:50 +0000 ROA not before: Mon 07 Jul 2025 01:00:50 +0000 ROA not after: Sun 05 Oct 2025 01:00:50 +0000 asID: 11004 IP address blocks: 23.161.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/5039f611-54f3-4a44-9153-55949e05704b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/5039f611-54f3-4a44-9153-55949e05704b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6f:20:79:04:b4:ce:b7:52:66:51:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5039f611-54f3-4a44-9153-55949e05704b Validity Not Before: Jul 7 01:00:50 2025 GMT Not After : Oct 5 01:00:50 2025 GMT Subject: CN=4dc01190-cef9-4078-97ca-fc28ba98d570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f3:d7:d8:56:68:94:69:27:c3:b5:0b:f4:7b: 7e:3b:32:22:18:60:2e:34:1c:9f:31:97:d3:2a:96: 1f:8c:ce:3c:99:60:4d:47:f6:36:1a:62:25:f4:f9: 63:96:57:dc:5f:91:04:4d:33:ff:db:b6:5d:bb:c0: 52:61:20:09:0e:c6:f8:01:0c:9b:18:0e:61:2d:98: 13:d3:8e:5d:01:b1:99:31:e1:56:27:8d:fd:21:3a: 9c:31:d0:ea:8d:81:94:d7:7e:9b:91:fe:b5:0a:91: 5c:e3:dc:cb:94:74:61:3b:ed:fb:51:b5:e8:a9:0c: 87:95:7a:6a:93:e9:88:8c:9a:2b:e1:0f:83:2b:bf: 9c:e9:71:46:6b:2f:78:12:06:44:6b:a1:90:08:db: 6a:ee:23:bf:38:3a:fa:a5:8b:aa:75:f9:90:fb:5e: 8f:ce:43:5e:98:cc:2c:c1:c4:a3:0f:0d:7f:c2:39: 5c:db:e1:55:51:28:56:e6:b3:70:f6:5e:eb:df:c5: 50:79:24:2f:0b:9d:b6:c2:eb:ba:cf:1b:88:84:34: 62:96:87:82:0f:eb:de:b9:d9:33:b8:de:e4:20:9e: 4e:34:ae:25:c4:ad:35:0d:a5:62:fb:da:94:50:73: 8b:fe:62:73:74:30:60:05:4b:44:b3:7e:ac:44:3c: 60:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:14:AB:57:36:62:BB:38:68:7F:37:2E:01:94:C3:8A:2E:78:7D:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/2e36694a-0cc3-3c04-a6d3-0e87942c2e7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/5039f611-54f3-4a44-9153-55949e05704b.crl X509v3 Authority Key Identifier: keyid:9B:34:C7:F7:58:7F:83:60:63:65:B5:97:CA:CB:4E:71:56:F0:64:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b.cer sbgp-ipAddrBlock: critical IPv4: 23.161.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:30:e4:05:bc:cc:2d:9f:1a:07:b9:37:50:75:08:18:66:e2: af:18:90:43:11:15:c1:10:c5:50:f1:25:f7:57:b1:09:d8:b8: 0b:22:b7:0d:97:cb:6d:dd:f4:75:b8:60:27:4c:a1:c8:8d:b6: 73:ff:17:16:64:8a:ed:03:f5:44:87:5d:95:27:a9:66:4b:6f: ea:4c:5d:67:21:68:1a:25:8e:cc:2a:b4:39:71:4a:cf:6f:c7: 7f:b3:64:13:d8:51:60:bc:75:e2:a2:0b:d8:63:9c:fc:e5:f9: 8b:39:3b:54:fb:1b:93:ef:84:e8:77:35:d7:ca:5c:53:0a:79: 91:6b:4a:6e:0c:ce:dd:ea:c3:ce:d6:48:df:c0:13:af:a1:6d: 06:a7:66:ef:51:80:06:a2:38:36:bf:81:9c:62:37:25:af:b6: 70:53:85:b1:ed:1d:a3:52:48:f0:a4:2e:15:66:0e:cd:db:7f: f0:7c:b2:68:cf:38:ee:b2:75:d7:6c:ed:d8:5a:cd:33:de:ba: da:77:8d:54:8a:1d:38:25:6d:4c:4e:ed:81:18:39:98:f8:0a: f7:54:92:84:0d:75:b0:d4:df:f2:ee:2a:34:ce:d6:0f:72:01: fc:f6:33:5e:a0:a2:ea:29:a2:9a:a6:79:b1:a7:c6:bd:ed:09: e7:41:01:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpvIHkEtM63UmZRYkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTAzOWY2MTEtNTRmMy00YTQ0LTkxNTMtNTU5NDllMDU3 MDRiMB4XDTI1MDcwNzAxMDA1MFoXDTI1MTAwNTAxMDA1MFowLzEtMCsGA1UEAxMk NGRjMDExOTAtY2VmOS00MDc4LTk3Y2EtZmMyOGJhOThkNTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvPX2FZolGknw7UL9Ht+OzIiGGAuNByfMZfT KpYfjM48mWBNR/Y2GmIl9PljllfcX5EETTP/27Zdu8BSYSAJDsb4AQybGA5hLZgT 045dAbGZMeFWJ439ITqcMdDqjYGU136bkf61CpFc49zLlHRhO+37UbXoqQyHlXpq k+mIjJor4Q+DK7+c6XFGay94EgZEa6GQCNtq7iO/ODr6pYuqdfmQ+16PzkNemMws wcSjDw1/wjlc2+FVUShW5rNw9l7r38VQeSQvC522wuu6zxuIhDRiloeCD+veudkz uN7kIJ5ONK4lxK01DaVi+9qUUHOL/mJzdDBgBUtEs36sRDxgkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUUq1c2Yrs4aH83LgGUw4oueH0HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MDM5 ZjYxMS01NGYzLTRhNDQtOTE1My01NTk0OWUwNTcwNGIvMmUzNjY5NGEtMGNjMy0z YzA0LWE2ZDMtMGU4Nzk0MmMyZTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTAzOWY2MTEtNTRmMy00YTQ0LTkx NTMtNTU5NDllMDU3MDRiLzUwMzlmNjExLTU0ZjMtNGE0NC05MTUzLTU1OTQ5ZTA1 NzA0Yi5jcmwwHwYDVR0jBBgwFoAUmzTH91h/g2BjZbWXystOcVbwZMEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MDM5ZjYxMS01NGYzLTRhNDQtOTE1My01NTk0 OWUwNTcwNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6F4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMw5AW8zC2fGge5N1B1CBhm4q8YkEMRFcEQxVDxJfdXsQnYuAsitw2X y23d9HW4YCdMociNtnP/FxZkiu0D9USHXZUnqWZLb+pMXWchaBoljswqtDlxSs9v x3+zZBPYUWC8deKiC9hjnPzl+Ys5O1T7G5PvhOh3NdfKXFMKeZFrSm4Mzt3qw87W SN/AE6+hbQanZu9RgAaiODa/gZxiNyWvtnBThbHtHaNSSPCkLhVmDs3bf/B8smjP OO6yddds7dhazTPeutp3jVSKHTglbUxO7YEYOZj4CvdUkoQNdbDU3/LuKjTO1g9y Afz2M16gouopopqmebGnxr3tCedBAV8= -----END CERTIFICATE-----Generated at Wed Jul 9 17:36:09 2025 by rpki-client