$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/4e574024-3dd3-3819-aa52-363c082ac7e8.roa File: 4e574024-3dd3-3819-aa52-363c082ac7e8.roa (raw, json) Hash identifier: jdIbGXnvLyXU1kMQIVgpFBCoqlq35XbpG/J8NLIxP1w= Subject key identifier: 60:00:71:B3:10:BE:B2:73:B9:01:14:D5:23:52:8D:95:85:56:CB:79 Certificate issuer: /CN=d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6 Certificate serial: 010D0C9F4328584A63F5BC9B6AB13928A0FBB300 Authority key identifier: 19:A3:5D:69:4B:8A:3E:5B:CA:BC:74:49:7C:7E:96:84:84:CE:35:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/4e574024-3dd3-3819-aa52-363c082ac7e8.roa Signing time: Thu 03 Jul 2025 01:00:48 +0000 ROA not before: Thu 03 Jul 2025 01:00:48 +0000 ROA not after: Wed 01 Oct 2025 01:00:48 +0000 asID: 401199 IP address blocks: 123.100.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:63:f5:bc:9b:6a:b1:39:28:a0:fb:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6 Validity Not Before: Jul 3 01:00:48 2025 GMT Not After : Oct 1 01:00:48 2025 GMT Subject: CN=85331dbf-e1bb-40ae-ad79-8b97f31d36de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:72:6d:a3:e0:3d:db:24:31:99:42:d5:cc:eb: a7:33:4c:de:6d:b3:6a:53:9e:a8:0c:63:22:53:f8: 68:ae:80:67:28:8e:0b:f6:94:13:ed:a7:92:9b:bd: e1:6f:30:e1:6e:4b:57:e3:28:e9:bc:a5:41:75:76: bd:89:ab:0b:da:1c:b1:72:bb:c2:e6:9c:ea:c8:a0: 15:d0:5f:4d:b5:77:e4:db:f9:93:bb:70:10:24:ad: ef:22:eb:28:58:73:37:79:45:6f:5d:0b:9c:61:c9: dc:03:d0:03:14:8b:d0:41:2f:06:fe:f8:f7:f6:1a: cd:05:8c:dc:de:5a:73:9c:ed:96:45:17:36:4c:45: a3:f4:00:43:1f:07:cf:33:5c:e4:27:2c:b2:35:fe: 26:32:aa:97:ce:1e:c5:74:11:61:69:7a:ac:c9:06: 38:cb:e8:54:ae:2c:ba:69:91:ef:78:b4:34:c3:8a: 59:d4:41:c9:d5:e1:69:0c:f8:94:7e:a8:d7:48:0e: 2a:f5:3b:cf:7f:62:39:6e:23:ab:32:70:ad:e5:64: d4:11:66:95:db:30:8a:f3:52:93:fb:99:00:fe:47: 10:9a:8d:1f:3c:7a:f5:b6:8a:c7:b9:4c:2e:8d:9d: d0:e6:91:d6:b4:91:fa:ca:ce:14:58:0f:85:cd:79: d8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:00:71:B3:10:BE:B2:73:B9:01:14:D5:23:52:8D:95:85:56:CB:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/4e574024-3dd3-3819-aa52-363c082ac7e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.crl X509v3 Authority Key Identifier: keyid:19:A3:5D:69:4B:8A:3E:5B:CA:BC:74:49:7C:7E:96:84:84:CE:35:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer sbgp-ipAddrBlock: critical IPv4: 123.100.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:bf:24:d1:9b:a3:1c:ad:6c:97:33:3a:7a:7a:b3:e7:cb:74: f6:fc:cb:ad:87:49:08:44:9a:c1:1b:41:88:45:62:b7:bb:6c: e0:fd:d6:31:0f:25:d4:b5:2c:91:3b:d5:da:7e:33:a9:d0:f6: 3d:ac:6e:72:98:4a:c3:49:24:3f:48:10:d0:6f:90:c8:a2:32: 4f:7a:cf:a5:7b:38:e8:56:9e:5a:b2:44:a3:cf:c5:57:21:2f: 63:66:d3:1c:04:4d:55:63:35:0c:3e:f0:2c:32:aa:5e:60:b7: 8f:9a:ae:ea:48:97:17:81:b8:7b:8f:52:ea:6e:04:03:96:a6: d7:5a:0b:93:72:bb:1a:34:b4:3c:27:e5:5f:a6:20:13:43:60: 86:5f:8f:f6:1b:e7:e6:d8:a1:85:01:67:99:ec:6a:eb:3e:b7: 89:44:f4:1f:d1:28:b7:4d:43:63:11:a9:0a:01:ee:9c:d1:c8: 5f:e2:bc:43:73:0d:d0:4c:5f:97:4c:a8:89:85:b9:44:6c:31: aa:ec:be:db:3a:9c:77:7c:84:5e:68:d8:05:aa:9a:70:e0:0a: 26:2a:01:78:88:82:83:4d:c1:06:dc:87:5a:32:e0:84:6c:7d: 5c:6c:72:46:83:0c:2b:ab:dc:22:ff:17:f0:88:25:da:fc:69: 57:65:0f:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpj9bybarE5KKD7swAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM5ZTZhMWQtYjdkYy00YjZmLWE5NWEtYjVlNDMyY2Zl YWU2MB4XDTI1MDcwMzAxMDA0OFoXDTI1MTAwMTAxMDA0OFowLzEtMCsGA1UEAxMk ODUzMzFkYmYtZTFiYi00MGFlLWFkNzktOGI5N2YzMWQzNmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3Jto+A92yQxmULVzOunM0zebbNqU56oDGMi U/horoBnKI4L9pQT7aeSm73hbzDhbktX4yjpvKVBdXa9iasL2hyxcrvC5pzqyKAV 0F9NtXfk2/mTu3AQJK3vIusoWHM3eUVvXQucYcncA9ADFIvQQS8G/vj39hrNBYzc 3lpznO2WRRc2TEWj9ABDHwfPM1zkJyyyNf4mMqqXzh7FdBFhaXqsyQY4y+hUriy6 aZHveLQ0w4pZ1EHJ1eFpDPiUfqjXSA4q9TvPf2I5biOrMnCt5WTUEWaV2zCK81KT +5kA/kcQmo0fPHr1torHuUwujZ3Q5pHWtJH6ys4UWA+FzXnYCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAAcbMQvrJzuQEU1SNSjZWFVst5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kMzll NmExZC1iN2RjLTRiNmYtYTk1YS1iNWU0MzJjZmVhZTYvNGU1NzQwMjQtM2RkMy0z ODE5LWFhNTItMzYzYzA4MmFjN2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDM5ZTZhMWQtYjdkYy00YjZmLWE5 NWEtYjVlNDMyY2ZlYWU2L2QzOWU2YTFkLWI3ZGMtNGI2Zi1hOTVhLWI1ZTQzMmNm ZWFlNi5jcmwwHwYDVR0jBBgwFoAUGaNdaUuKPlvKvHRJfH6WhITONSMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kMzllNmExZC1iN2RjLTRiNmYtYTk1YS1iNWU0 MzJjZmVhZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAe2T2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABe/JNGboxytbJczOnp6s+fLdPb8y62HSQhEmsEbQYhFYre7bOD91jEP JdS1LJE71dp+M6nQ9j2sbnKYSsNJJD9IENBvkMiiMk96z6V7OOhWnlqyRKPPxVch L2Nm0xwETVVjNQw+8Cwyql5gt4+arupIlxeBuHuPUupuBAOWptdaC5Nyuxo0tDwn 5V+mIBNDYIZfj/Yb5+bYoYUBZ5nsaus+t4lE9B/RKLdNQ2MRqQoB7pzRyF/ivENz DdBMX5dMqImFuURsMarsvts6nHd8hF5o2AWqmnDgCiYqAXiIgoNNwQbch1oy4IRs fVxsckaDDCur3CL/F/CIJdr8aVdlD5Y= -----END CERTIFICATE-----Generated at Wed Jul 9 20:02:28 2025 by rpki-client