$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/acb1cfa6-ba72-3f9c-a10d-430c59209c15.roa File: acb1cfa6-ba72-3f9c-a10d-430c59209c15.roa (raw, json) Hash identifier: UWV1jwORnGvmwPBlRIngmz849RS151z6u/Q1kqOxBEI= Subject key identifier: A7:26:FA:42:42:43:95:6C:42:CD:F4:F5:F8:D6:A4:51:CB:B4:72:76 Certificate issuer: /CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801 Certificate serial: 010D0C9F4328584A7A0B1EFA41F1518A80F92A80 Authority key identifier: 56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/acb1cfa6-ba72-3f9c-a10d-430c59209c15.roa Signing time: Wed 07 May 2025 16:01:16 +0000 ROA not before: Wed 07 May 2025 16:01:16 +0000 ROA not after: Tue 05 Aug 2025 16:01:16 +0000 asID: 19814 IP address blocks: 23.189.120.0/24 maxlen: 24 2602:f805::/48 maxlen: 48 2602:f805:800::/48 maxlen: 48 2602:f805:900::/48 maxlen: 48 2602:f805:a00::/48 maxlen: 48 2602:f805:b00::/48 maxlen: 48 2602:f805:c00::/48 maxlen: 48 2602:f805:d00::/48 maxlen: 48 2602:f805:e00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:0b:1e:fa:41:f1:51:8a:80:f9:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801 Validity Not Before: May 7 16:01:16 2025 GMT Not After : Aug 5 16:01:16 2025 GMT Subject: CN=e8943a41-e926-46b3-b420-4f87d698f649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3a:af:63:04:f9:65:b7:cd:41:c7:20:47:00: f8:5a:3d:71:ef:11:49:9a:fb:74:81:94:e2:69:e3: 8a:95:1c:40:ff:bf:66:36:a8:64:96:be:01:43:b9: 4b:37:07:5d:9f:f0:25:44:d7:ab:85:7d:ba:5e:6f: 2c:39:57:18:70:a1:93:47:0f:4e:c8:d3:57:ec:fa: 77:00:07:00:9d:96:5d:95:b3:63:61:cb:c0:62:2a: 9b:16:ea:6f:60:6d:ab:c5:78:aa:04:57:dd:e4:fb: cd:25:d3:cf:97:64:06:aa:41:de:74:4e:7f:79:24: 40:c9:45:49:b6:6a:5a:76:4a:e8:72:d0:9e:87:5e: d6:40:f8:ca:46:71:c6:76:72:40:69:5f:d6:a6:6c: b8:de:c7:f0:0f:e9:84:c5:16:78:b3:ca:9e:bc:f4: 2e:2b:aa:2a:a3:90:20:78:d1:70:f1:4f:c6:b7:d9: 3e:81:9b:9b:ed:86:04:97:80:95:1b:ae:d6:14:46: 75:00:e3:f7:c7:3d:ae:85:43:b6:b8:20:06:66:3b: 24:cd:7b:34:18:69:d8:00:20:a3:2a:61:e3:7b:ac: 44:ab:46:bb:5f:17:37:59:93:2a:05:32:49:e8:e1: 51:57:a8:ff:a4:aa:75:3d:4f:36:49:34:24:66:f5: 62:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:26:FA:42:42:43:95:6C:42:CD:F4:F5:F8:D6:A4:51:CB:B4:72:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/acb1cfa6-ba72-3f9c-a10d-430c59209c15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl X509v3 Authority Key Identifier: keyid:56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer sbgp-ipAddrBlock: critical IPv4: 23.189.120.0/24 IPv6: 2602:f805::/48 2602:f805:800::/48 2602:f805:900::/48 2602:f805:a00::/48 2602:f805:b00::/48 2602:f805:c00::/48 2602:f805:d00::/48 2602:f805:e00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:5d:91:f5:7d:6c:0e:fa:f6:b7:70:ed:0a:df:ad:6d:e7:14: 6f:7b:4d:c7:f1:96:07:ef:bb:44:45:a3:b7:9c:9c:fc:1d:4c: 3e:8b:54:be:58:e3:ed:12:b4:06:db:8e:c3:b5:d1:4c:cf:67: a5:96:f2:41:e6:9a:f2:83:b9:87:c8:5d:67:4a:a4:94:b9:8f: 7d:73:ec:da:2a:c0:f4:5f:d6:7a:a9:1d:b9:94:e8:a6:51:03: bb:f9:23:c0:74:33:b7:c3:2a:f8:85:9c:06:a5:eb:7c:e0:b5: cd:a7:e3:b7:62:34:3b:44:59:f5:39:74:8e:b8:22:08:51:43: ff:67:59:ab:70:e0:62:61:b9:ad:82:1e:6d:f1:fa:67:15:3b: 4b:2a:51:1a:d2:0c:26:f6:d7:2e:bd:72:57:a7:5c:6f:67:e5: 69:47:41:07:62:9e:89:4f:dc:b9:0b:05:c5:0c:f5:a3:64:d4: dd:a5:1c:77:92:ef:ba:4e:83:af:62:98:0b:a0:e4:2d:6c:aa: 9d:6d:24:41:79:18:f9:df:29:92:cc:de:f9:b6:21:15:ae:f6: 91:0f:02:0f:01:1e:e0:16:b1:e4:2e:e3:f2:59:e4:29:32:89: 78:f7:2e:fe:10:c0:c8:42:9e:9a:9c:47:9f:39:1b:00:13:9e: 50:c0:71:75 -----BEGIN CERTIFICATE----- MIIGkzCCBXugAwIBAgIUAQ0Mn0MoWEp6Cx76QfFRioD5KoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE2YTk1YjMtZGQzYy00MGRlLTliZDItODQzNTdiNzRm ODAxMB4XDTI1MDUwNzE2MDExNloXDTI1MDgwNTE2MDExNlowLzEtMCsGA1UEAxMk ZTg5NDNhNDEtZTkyNi00NmIzLWI0MjAtNGY4N2Q2OThmNjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDqvYwT5ZbfNQccgRwD4Wj1x7xFJmvt0gZTi aeOKlRxA/79mNqhklr4BQ7lLNwddn/AlRNerhX26Xm8sOVcYcKGTRw9OyNNX7Pp3 AAcAnZZdlbNjYcvAYiqbFupvYG2rxXiqBFfd5PvNJdPPl2QGqkHedE5/eSRAyUVJ tmpadkroctCeh17WQPjKRnHGdnJAaV/Wpmy43sfwD+mExRZ4s8qevPQuK6oqo5Ag eNFw8U/Gt9k+gZub7YYEl4CVG67WFEZ1AOP3xz2uhUO2uCAGZjskzXs0GGnYACCj KmHje6xEq0a7Xxc3WZMqBTJJ6OFRV6j/pKp1PU82STQkZvVinQIDAQABo4IDpTCC A6EwHQYDVR0OBBYEFKcm+kJCQ5VsQs309fjWpFHLtHJ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iYTZh OTViMy1kZDNjLTQwZGUtOWJkMi04NDM1N2I3NGY4MDEvYWNiMWNmYTYtYmE3Mi0z ZjljLWExMGQtNDMwYzU5MjA5YzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYmE2YTk1YjMtZGQzYy00MGRlLTli ZDItODQzNTdiNzRmODAxL2JhNmE5NWIzLWRkM2MtNDBkZS05YmQyLTg0MzU3Yjc0 ZjgwMS5jcmwwHwYDVR0jBBgwFoAUVoM58N8yt2DFZSaxnWkfb2xEoXMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iYTZhOTViMy1kZDNjLTQwZGUtOWJkMi04NDM1 N2I3NGY4MDEuY2VyMG8GCCsGAQUFBwEHAQH/BGAwXjAMBAIAATAGAwQAF714ME4E AgACMEgDBwAmAvgFAAADBwAmAvgFCAADBwAmAvgFCQADBwAmAvgFCgADBwAmAvgF CwADBwAmAvgFDAADBwAmAvgFDQADBwAmAvgFDgAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAm12R9X1sDvr2 t3DtCt+tbecUb3tNx/GWB++7REWjt5yc/B1MPotUvljj7RK0BtuOw7XRTM9npZby Qeaa8oO5h8hdZ0qklLmPfXPs2irA9F/WeqkduZToplEDu/kjwHQzt8Mq+IWcBqXr fOC1zafjt2I0O0RZ9Tl0jrgiCFFD/2dZq3DgYmG5rYIebfH6ZxU7SypRGtIMJvbX Lr1yV6dcb2flaUdBB2KeiU/cuQsFxQz1o2TU3aUcd5Lvuk6Dr2KYC6DkLWyqnW0k QXkY+d8pksze+bYhFa72kQ8CDwEe4Bax5C7j8lnkKTKJePcu/hDAyEKempxHnzkb ABOeUMBxdQ== -----END CERTIFICATE-----Generated at Fri Jul 11 04:41:10 2025 by rpki-client