$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/4006a66d-6da1-3667-95e8-2ae868c8c68e.roa File: 4006a66d-6da1-3667-95e8-2ae868c8c68e.roa (raw, json) Hash identifier: k90LNTKTpnGAgy8RVJxpruW+eNfEZSbtpwJjOC4FNvk= Subject key identifier: 24:7C:57:75:82:DD:76:E1:D7:64:D1:A0:B9:2D:BD:17:2D:37:40:A9 Certificate issuer: /CN=d96f592a-8fa9-4ec8-a272-b56c2537919c Certificate serial: 010D0C9F4328584A15831119819E06340014D880 Authority key identifier: 14:9E:FE:BF:6A:D9:01:28:3A:16:7E:4C:70:D3:63:41:47:80:42:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/4006a66d-6da1-3667-95e8-2ae868c8c68e.roa Signing time: Wed 04 Jun 2025 22:36:49 +0000 ROA not before: Wed 04 Jun 2025 22:36:49 +0000 ROA not after: Tue 02 Sep 2025 22:36:49 +0000 asID: 399587 IP address blocks: 23.139.228.0/24 maxlen: 24 2602:f623::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/d96f592a-8fa9-4ec8-a272-b56c2537919c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/d96f592a-8fa9-4ec8-a272-b56c2537919c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:15:83:11:19:81:9e:06:34:00:14:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d96f592a-8fa9-4ec8-a272-b56c2537919c Validity Not Before: Jun 4 22:36:49 2025 GMT Not After : Sep 2 22:36:49 2025 GMT Subject: CN=6cf2d524-55dc-40a0-bbc6-cf2e840cbf32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:10:c0:7c:70:12:29:24:b7:a1:b0:40:22:07: ff:1c:4a:c4:ae:28:f1:be:5b:8a:60:92:f4:1c:53: f6:a9:d2:72:2c:06:59:34:98:80:0e:9c:27:7c:01: c4:40:61:b1:b0:dd:d7:ae:0f:9b:b7:25:fb:70:61: ca:d8:1b:e5:ae:e6:30:7e:38:2d:65:f4:e0:f2:8f: 2a:df:83:4d:4e:75:ff:f7:9c:9d:cb:23:ff:8e:83: ba:d9:2a:cb:b9:64:32:a7:15:d2:0d:99:ab:28:3e: 83:0f:9b:1e:09:ac:30:9a:13:65:cd:33:19:95:e4: fa:b0:d0:fd:54:63:72:ff:a7:bf:bf:58:04:02:f7: a4:b1:fd:61:e4:4b:6c:dc:b1:e8:f4:49:f7:6b:f1: 79:35:d7:15:08:eb:df:62:c8:bd:94:8e:b7:9d:f5: 9c:6e:79:b8:b0:06:e7:59:56:fe:0b:cd:e3:c3:a6: 57:2e:e7:32:33:65:ec:b0:ac:e3:2a:a3:70:61:74: da:84:cf:35:0f:d8:c8:b5:75:40:be:44:98:e3:df: 6f:13:1f:03:dc:3d:6f:01:cf:99:6c:54:c7:7a:e6: 28:4c:82:34:8d:e3:f7:c0:79:2e:c8:f5:5b:7b:36: 90:7a:65:cf:52:fd:ec:49:10:47:7e:f5:b6:02:f5: f9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:7C:57:75:82:DD:76:E1:D7:64:D1:A0:B9:2D:BD:17:2D:37:40:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/4006a66d-6da1-3667-95e8-2ae868c8c68e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/d96f592a-8fa9-4ec8-a272-b56c2537919c.crl X509v3 Authority Key Identifier: keyid:14:9E:FE:BF:6A:D9:01:28:3A:16:7E:4C:70:D3:63:41:47:80:42:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c.cer sbgp-ipAddrBlock: critical IPv4: 23.139.228.0/24 IPv6: 2602:f623::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:0a:e1:f1:03:5f:24:55:c6:97:89:be:c3:16:14:35:8b:fb: 50:c0:35:91:dd:c2:91:2a:51:f9:c9:14:da:f9:2e:72:08:6d: 02:a2:c9:33:5e:dd:0b:e1:80:2c:7c:a0:fd:9d:22:e9:67:c4: ef:e3:45:3d:05:a1:8a:b2:ae:09:13:28:97:18:e3:a0:74:7b: 13:71:4b:67:52:e0:22:78:9d:4d:c6:d9:7b:c2:52:0f:2c:2a: d1:3e:1a:c2:6f:a8:aa:60:40:15:a2:6b:e9:b6:30:67:6a:50: a6:78:28:ad:d0:91:55:d8:20:cf:96:b4:e7:34:f2:61:17:90: f9:ba:85:65:e0:03:a6:ab:81:b8:60:8c:21:49:e3:a2:df:5c: 55:f8:17:96:6a:1e:94:46:92:44:b8:67:61:01:cd:2e:1a:15: fc:96:cc:bb:1e:ff:a0:b4:fe:63:18:89:36:c0:60:10:9d:08: f3:5b:ff:d8:e1:3a:6f:13:40:28:4c:ca:f0:e6:5e:f4:b1:b7: 9b:c9:2a:5e:a6:ab:96:32:f0:1f:8c:26:6a:52:b4:ef:09:6f: 2e:40:fe:32:9b:f2:01:c5:c8:c5:7c:89:49:35:34:8c:31:54: 7e:cd:6c:a1:ff:6e:29:d5:79:05:cd:27:63:5b:67:cb:d0:f5: 4e:74:f1:fd -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEoVgxEZgZ4GNAAU2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDk2ZjU5MmEtOGZhOS00ZWM4LWEyNzItYjU2YzI1Mzc5 MTljMB4XDTI1MDYwNDIyMzY0OVoXDTI1MDkwMjIyMzY0OVowLzEtMCsGA1UEAxMk NmNmMmQ1MjQtNTVkYy00MGEwLWJiYzYtY2YyZTg0MGNiZjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBDAfHASKSS3obBAIgf/HErErijxvluKYJL0 HFP2qdJyLAZZNJiADpwnfAHEQGGxsN3Xrg+btyX7cGHK2BvlruYwfjgtZfTg8o8q 34NNTnX/95ydyyP/joO62SrLuWQypxXSDZmrKD6DD5seCawwmhNlzTMZleT6sND9 VGNy/6e/v1gEAveksf1h5Ets3LHo9En3a/F5NdcVCOvfYsi9lI63nfWcbnm4sAbn WVb+C83jw6ZXLucyM2XssKzjKqNwYXTahM81D9jItXVAvkSY499vEx8D3D1vAc+Z bFTHeuYoTII0jeP3wHkuyPVbezaQemXPUv3sSRBHfvW2AvX5RQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFCR8V3WC3Xbh12TRoLktvRctN0CpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kOTZm NTkyYS04ZmE5LTRlYzgtYTI3Mi1iNTZjMjUzNzkxOWMvNDAwNmE2NmQtNmRhMS0z NjY3LTk1ZTgtMmFlODY4YzhjNjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZDk2ZjU5MmEtOGZhOS00ZWM4LWEy NzItYjU2YzI1Mzc5MTljL2Q5NmY1OTJhLThmYTktNGVjOC1hMjcyLWI1NmMyNTM3 OTE5Yy5jcmwwHwYDVR0jBBgwFoAUFJ7+v2rZASg6Fn5McNNjQUeAQvIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kOTZmNTkyYS04ZmE5LTRlYzgtYTI3Mi1iNTZj MjUzNzkxOWMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4vkMA4E AgACMAgDBgQmAvYjADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAUCuHxA18kVcaXib7DFhQ1i/tQwDWR3cKR KlH5yRTa+S5yCG0CoskzXt0L4YAsfKD9nSLpZ8Tv40U9BaGKsq4JEyiXGOOgdHsT cUtnUuAieJ1Nxtl7wlIPLCrRPhrCb6iqYEAVomvptjBnalCmeCit0JFV2CDPlrTn NPJhF5D5uoVl4AOmq4G4YIwhSeOi31xV+BeWah6URpJEuGdhAc0uGhX8lsy7Hv+g tP5jGIk2wGAQnQjzW//Y4TpvE0AoTMrw5l70sbebySpepquWMvAfjCZqUrTvCW8u QP4ym/IBxcjFfIlJNTSMMVR+zWyh/24p1XkFzSdjW2fL0PVOdPH9 -----END CERTIFICATE-----Generated at Fri Jun 6 15:59:14 2025 by rpki-client