$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/8e4c3c52-d7cb-3c0d-a421-062e52f3aab1.roa File: 8e4c3c52-d7cb-3c0d-a421-062e52f3aab1.roa (raw, json) Hash identifier: 85Buu2Ys+EfMr7Ar0foA00fCb2zeEjc4uyOcTKc7uIA= Subject key identifier: 83:D5:38:96:C7:FE:2E:D8:C1:0B:12:E1:1D:D3:09:CE:3D:03:1D:C9 Certificate issuer: /CN=3c126bd3-337a-46ea-8aab-c2cd7594edf9 Certificate serial: 010D0C9F4328584A6F20803DD5DE0600DBEAEE00 Authority key identifier: 1C:39:7D:D2:AA:2B:C3:BB:B1:39:4D:AC:AC:48:73:70:52:F9:0A:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/8e4c3c52-d7cb-3c0d-a421-062e52f3aab1.roa Signing time: Mon 07 Jul 2025 01:00:50 +0000 ROA not before: Mon 07 Jul 2025 01:00:50 +0000 ROA not after: Sun 05 Oct 2025 01:00:50 +0000 asID: 401463 IP address blocks: 23.128.140.0/24 maxlen: 24 2602:f7b3::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/3c126bd3-337a-46ea-8aab-c2cd7594edf9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/3c126bd3-337a-46ea-8aab-c2cd7594edf9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6f:20:80:3d:d5:de:06:00:db:ea:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c126bd3-337a-46ea-8aab-c2cd7594edf9 Validity Not Before: Jul 7 01:00:50 2025 GMT Not After : Oct 5 01:00:50 2025 GMT Subject: CN=564ba1fb-c9b3-4efe-9a91-955379beab16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:23:20:86:8b:d9:91:26:ed:39:30:fb:2e:24: 92:12:f7:4e:c7:61:93:bd:c2:0e:14:95:f8:ee:97: 7a:d2:46:07:44:fd:fc:cb:d3:36:26:0b:92:a1:b7: fc:75:62:bf:3f:8a:18:1f:f5:67:86:ee:7f:5e:97: 28:74:77:56:48:1e:2e:5e:8f:cf:43:5c:89:5f:47: 4b:ca:a3:4f:92:ef:24:a1:60:dc:04:dd:e4:6e:2a: f9:0e:96:06:04:87:35:2b:bf:4c:54:0d:0f:9b:1e: 30:62:87:8e:8c:0f:ec:30:d7:46:af:ad:24:29:61: d8:03:f0:91:04:51:16:4e:92:25:87:7c:9e:82:82: 5c:2f:a0:62:bc:70:97:99:fb:e4:0c:a9:4b:0c:37: 4b:cf:d3:08:bd:13:88:ff:e7:cd:3a:f6:f0:12:04: a8:fb:7d:85:f8:12:32:ad:d1:b1:99:41:5f:02:9e: b8:45:ce:96:98:a9:22:3f:28:b5:1d:bf:9f:b8:81: e4:43:4b:64:44:75:04:a7:ce:b9:84:aa:ec:57:08: 4d:31:9a:7d:3d:07:9b:19:b5:84:6c:fe:47:2a:99: d7:3d:6c:a9:9a:cc:56:60:d3:85:29:5d:71:18:83: 6e:db:e5:e8:68:30:bd:14:58:d7:e2:c3:f9:fe:f8: 2f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D5:38:96:C7:FE:2E:D8:C1:0B:12:E1:1D:D3:09:CE:3D:03:1D:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/8e4c3c52-d7cb-3c0d-a421-062e52f3aab1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/3c126bd3-337a-46ea-8aab-c2cd7594edf9.crl X509v3 Authority Key Identifier: keyid:1C:39:7D:D2:AA:2B:C3:BB:B1:39:4D:AC:AC:48:73:70:52:F9:0A:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9.cer sbgp-ipAddrBlock: critical IPv4: 23.128.140.0/24 IPv6: 2602:f7b3::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:8e:f8:0a:6a:a9:04:75:be:5b:69:ef:4e:b4:60:25:88:e0: b0:da:87:91:d1:67:28:80:80:57:9d:fb:b7:1a:4e:23:ab:60: 83:83:8e:2c:bf:57:6d:8b:08:bb:10:08:fe:6d:a4:d2:3c:14: 26:b0:5f:ff:d1:e1:54:ac:23:ca:e9:54:83:e0:90:88:6e:c3: 42:dc:8b:87:21:4d:7e:df:21:52:89:b8:e9:ee:57:2c:ab:23: 39:ae:58:f2:49:d2:0d:33:4f:77:64:b8:a8:92:bf:a2:17:7b: c2:f3:46:15:1e:b8:94:aa:cd:fe:b6:6d:ca:64:68:83:af:fa: f9:99:3d:31:ec:31:4d:37:8d:e3:13:cf:0b:a8:7a:fe:7c:c4: 3c:dc:db:48:03:90:05:d5:7c:90:76:a0:b7:d7:0b:ee:0d:dc: 00:13:c5:7d:6c:65:52:6d:55:39:e7:87:21:b0:91:a8:42:07: 11:e1:ac:e6:9a:33:93:2e:16:b7:6b:6b:a4:87:a5:2c:82:55: e2:17:c0:13:d6:77:1e:16:3a:2c:5d:3a:61:9c:b5:d3:e5:bf: 85:af:7c:50:dc:2e:96:04:fb:68:b6:73:f3:24:7b:95:39:54: 56:61:05:2c:c8:b1:b8:09:94:aa:e4:21:92:b6:a5:24:5d:03: 73:c4:2a:5a -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEpvIIA91d4GANvq7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MxMjZiZDMtMzM3YS00NmVhLThhYWItYzJjZDc1OTRl ZGY5MB4XDTI1MDcwNzAxMDA1MFoXDTI1MTAwNTAxMDA1MFowLzEtMCsGA1UEAxMk NTY0YmExZmItYzliMy00ZWZlLTlhOTEtOTU1Mzc5YmVhYjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCMghovZkSbtOTD7LiSSEvdOx2GTvcIOFJX4 7pd60kYHRP38y9M2JguSobf8dWK/P4oYH/Vnhu5/XpcodHdWSB4uXo/PQ1yJX0dL yqNPku8koWDcBN3kbir5DpYGBIc1K79MVA0Pmx4wYoeOjA/sMNdGr60kKWHYA/CR BFEWTpIlh3yegoJcL6BivHCXmfvkDKlLDDdLz9MIvROI/+fNOvbwEgSo+32F+BIy rdGxmUFfAp64Rc6WmKkiPyi1Hb+fuIHkQ0tkRHUEp865hKrsVwhNMZp9PQebGbWE bP5HKpnXPWypmsxWYNOFKV1xGINu2+XoaDC9FFjX4sP5/vgvFQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFIPVOJbH/i7YwQsS4R3TCc49Ax3JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zYzEy NmJkMy0zMzdhLTQ2ZWEtOGFhYi1jMmNkNzU5NGVkZjkvOGU0YzNjNTItZDdjYi0z YzBkLWE0MjEtMDYyZTUyZjNhYWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2MxMjZiZDMtMzM3YS00NmVhLThh YWItYzJjZDc1OTRlZGY5LzNjMTI2YmQzLTMzN2EtNDZlYS04YWFiLWMyY2Q3NTk0 ZWRmOS5jcmwwHwYDVR0jBBgwFoAUHDl90qorw7uxOU2srEhzcFL5CnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zYzEyNmJkMy0zMzdhLTQ2ZWEtOGFhYi1jMmNk NzU5NGVkZjkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4CMMA4E AgACMAgDBgAmAvezADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB7jvgKaqkEdb5bae9OtGAliOCw2oeR0Wco gIBXnfu3Gk4jq2CDg44sv1dtiwi7EAj+baTSPBQmsF//0eFUrCPK6VSD4JCIbsNC 3IuHIU1+3yFSibjp7lcsqyM5rljySdINM093ZLiokr+iF3vC80YVHriUqs3+tm3K ZGiDr/r5mT0x7DFNN43jE88LqHr+fMQ83NtIA5AF1XyQdqC31wvuDdwAE8V9bGVS bVU554chsJGoQgcR4azmmjOTLha3a2ukh6UsglXiF8AT1nceFjosXTphnLXT5b+F r3xQ3C6WBPtotnPzJHuVOVRWYQUsyLG4CZSq5CGStqUkXQNzxCpa -----END CERTIFICATE-----Generated at Tue Jul 8 21:49:23 2025 by rpki-client