$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641/3d9d4032-d200-3bf1-82c4-dcfbf607bed4.roa File: 3d9d4032-d200-3bf1-82c4-dcfbf607bed4.roa (raw, json) Hash identifier: gUCfOvXE86Lhj65OT+4XmK5THtw2ucGvoyqto2B+hpk= Subject key identifier: 18:E2:E7:66:01:17:F4:85:11:A2:9E:41:B8:C3:E3:D4:20:FC:38:36 Certificate issuer: /CN=c9d8d2d7-c780-4688-bbc9-433d4b540641 Certificate serial: 010D0C9F4328584AC5555480920CAD2E85C0BA80 Authority key identifier: FB:B4:43:43:74:73:89:35:FE:E9:E2:20:7C:C5:22:87:FE:03:31:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641/3d9d4032-d200-3bf1-82c4-dcfbf607bed4.roa Signing time: Mon 04 Aug 2025 19:49:58 +0000 ROA not before: Mon 04 Aug 2025 19:49:58 +0000 ROA not after: Sun 02 Nov 2025 20:49:58 +0000 asID: 396313 IP address blocks: 23.171.128.0/24 maxlen: 24 199.250.60.0/22 maxlen: 24 2602:fef2::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641/c9d8d2d7-c780-4688-bbc9-433d4b540641.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641/c9d8d2d7-c780-4688-bbc9-433d4b540641.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:55:54:80:92:0c:ad:2e:85:c0:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d8d2d7-c780-4688-bbc9-433d4b540641 Validity Not Before: Aug 4 19:49:58 2025 GMT Not After : Nov 2 20:49:58 2025 GMT Subject: CN=7e10e0e8-f326-45da-b854-d8e58a75a1b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c7:8c:37:28:50:b1:4b:df:b3:3c:d7:a4:61: 8a:90:b1:ab:68:c1:e4:3c:24:37:ca:08:3e:b6:e2: d6:04:c8:9a:92:c0:56:b8:da:c6:52:de:bb:f1:03: 92:39:cc:c8:e4:f0:6d:2d:f8:23:b9:93:c4:aa:15: 70:8a:a3:d7:b6:d3:13:83:4e:27:3d:03:6d:a6:9b: af:40:ed:81:77:74:2e:7c:23:ba:5d:99:73:f8:4a: 93:c5:d8:84:cf:46:2d:4e:a3:97:a3:09:a4:91:b3: 0a:bf:e9:65:86:9a:b3:94:a8:7f:38:aa:7f:76:dd: 2c:39:36:34:cc:15:bc:92:e2:5c:81:67:c9:86:c8: 31:96:f5:a5:e1:d8:f4:83:7a:4e:b9:76:8a:35:14: e5:8e:08:7b:e9:5c:42:b0:3f:72:d4:26:e9:62:e2: e9:08:e8:44:bd:d6:54:b2:0f:ef:6d:8e:f9:5a:53: 2f:fe:6b:e1:4e:f7:47:1d:53:1a:d8:24:df:3b:24: 60:aa:9a:a4:81:a6:71:a8:7e:bb:65:cb:2b:c7:19: 12:12:a1:48:b9:9a:47:89:54:e6:2c:40:df:ea:3c: d2:82:7a:d0:9e:86:5b:03:10:97:ef:84:45:b5:29: 84:0c:58:21:ec:ef:f6:94:fe:99:85:b0:23:d1:6c: 05:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E2:E7:66:01:17:F4:85:11:A2:9E:41:B8:C3:E3:D4:20:FC:38:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641/3d9d4032-d200-3bf1-82c4-dcfbf607bed4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641/c9d8d2d7-c780-4688-bbc9-433d4b540641.crl X509v3 Authority Key Identifier: keyid:FB:B4:43:43:74:73:89:35:FE:E9:E2:20:7C:C5:22:87:FE:03:31:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641.cer sbgp-ipAddrBlock: critical IPv4: 23.171.128.0/24 199.250.60.0/22 IPv6: 2602:fef2::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:6f:62:b7:f5:95:3d:93:1c:4b:44:bc:3a:8b:7b:cb:6e:68: 52:a2:df:7e:9a:85:86:21:4d:ea:2d:0d:2c:8e:72:bb:e2:92: e2:cd:08:b7:a4:e7:8c:3b:66:96:4f:34:fd:68:b4:16:a1:c4: 84:a2:3c:28:99:d0:4e:07:97:70:ce:81:48:69:49:c4:3b:89: c0:2a:4d:f7:c9:60:46:ce:c7:a4:76:ba:d3:97:40:12:0e:88: 0c:95:a9:9c:66:fe:ef:ef:17:37:c6:8e:f9:67:21:d8:32:5c: 89:bf:bd:f9:95:fc:b2:6d:d1:24:31:69:d8:b3:c6:e4:8e:18: c1:8f:48:82:74:1b:01:fe:88:72:4e:38:5a:52:40:86:25:cb: e3:b2:99:98:b6:88:33:db:46:f2:db:50:42:27:77:88:9b:5c: d8:9b:da:b3:36:cb:62:f6:aa:a0:f1:de:57:70:e3:14:7a:ac: 36:91:fe:cd:0f:1a:35:65:9d:0f:fe:f3:72:d9:aa:66:96:3e: f9:80:b0:05:e3:c8:7c:e0:72:eb:eb:83:71:8e:a7:ee:47:3c: 04:a0:e1:71:89:df:d7:08:1c:51:bf:31:de:b9:12:38:b6:3e: e4:93:af:74:d7:58:07:cd:b4:ba:f2:7e:45:f4:27:f6:ba:8c: 88:f0:22:bc -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWErFVVSAkgytLoXAuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlkOGQyZDctYzc4MC00Njg4LWJiYzktNDMzZDRiNTQw NjQxMB4XDTI1MDgwNDE5NDk1OFoXDTI1MTEwMjIwNDk1OFowLzEtMCsGA1UEAxMk N2UxMGUwZTgtZjMyNi00NWRhLWI4NTQtZDhlNThhNzVhMWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlceMNyhQsUvfszzXpGGKkLGraMHkPCQ3ygg+ tuLWBMiaksBWuNrGUt678QOSOczI5PBtLfgjuZPEqhVwiqPXttMTg04nPQNtppuv QO2Bd3QufCO6XZlz+EqTxdiEz0YtTqOXowmkkbMKv+llhpqzlKh/OKp/dt0sOTY0 zBW8kuJcgWfJhsgxlvWl4dj0g3pOuXaKNRTljgh76VxCsD9y1CbpYuLpCOhEvdZU sg/vbY75WlMv/mvhTvdHHVMa2CTfOyRgqpqkgaZxqH67ZcsrxxkSEqFIuZpHiVTm LEDf6jzSgnrQnoZbAxCX74RFtSmEDFgh7O/2lP6ZhbAj0WwFOwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFBji52YBF/SFEaKeQbjD49Qg/Dg2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jOWQ4 ZDJkNy1jNzgwLTQ2ODgtYmJjOS00MzNkNGI1NDA2NDEvM2Q5ZDQwMzItZDIwMC0z YmYxLTgyYzQtZGNmYmY2MDdiZWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzlkOGQyZDctYzc4MC00Njg4LWJi YzktNDMzZDRiNTQwNjQxL2M5ZDhkMmQ3LWM3ODAtNDY4OC1iYmM5LTQzM2Q0YjU0 MDY0MS5jcmwwHwYDVR0jBBgwFoAU+7RDQ3RziTX+6eIgfMUih/4DMekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jOWQ4ZDJkNy1jNzgwLTQ2ODgtYmJjOS00MzNk NGI1NDA2NDEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF6uAAwQC x/o8MA4EAgACMAgDBgQmAv7yADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBfb2K39ZU9kxxLRLw6i3vLbmhS ot9+moWGIU3qLQ0sjnK74pLizQi3pOeMO2aWTzT9aLQWocSEojwomdBOB5dwzoFI aUnEO4nAKk33yWBGzsekdrrTl0ASDogMlamcZv7v7xc3xo75ZyHYMlyJv735lfyy bdEkMWnYs8bkjhjBj0iCdBsB/ohyTjhaUkCGJcvjspmYtogz20by21BCJ3eIm1zY m9qzNsti9qqg8d5XcOMUeqw2kf7NDxo1ZZ0P/vNy2apmlj75gLAF48h84HLr64Nx jqfuRzwEoOFxid/XCBxRvzHeuRI4tj7kk69011gHzbS68n5F9Cf2uoyI8CK8 -----END CERTIFICATE-----Generated at Wed Aug 20 10:46:32 2025 by rpki-client