$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/2d0718a0-7c15-3300-af7e-f83127e2444a.roa File: 2d0718a0-7c15-3300-af7e-f83127e2444a.roa (raw, json) Hash identifier: h5psjT1XDqvn521K5pWFnp55mVULit97UrdDYdElfJ8= Subject key identifier: 5E:11:46:3A:33:B1:99:19:96:34:DE:0B:54:85:5E:A5:B8:7F:95:47 Certificate issuer: /CN=ec7ea071-9ad8-46c5-97de-de149c4a5a78 Certificate serial: 010D0C9F4328584A90A0B775ADFA66BA009DB480 Authority key identifier: 54:37:C6:D0:49:4F:D4:29:D0:C4:97:3B:92:99:0B:BC:40:6B:C9:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/2d0718a0-7c15-3300-af7e-f83127e2444a.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 400893 IP address blocks: 23.153.0.0/24 maxlen: 24 172.82.8.0/22 maxlen: 24 2602:ff2a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/ec7ea071-9ad8-46c5-97de-de149c4a5a78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/ec7ea071-9ad8-46c5-97de-de149c4a5a78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:b7:75:ad:fa:66:ba:00:9d:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec7ea071-9ad8-46c5-97de-de149c4a5a78 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=35458257-c56f-4c23-988e-73da6b91c90a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fe:1e:23:ac:87:70:4c:56:ee:79:c8:6f:d1: a9:79:ee:3a:89:d8:0e:78:66:bd:a8:4d:ed:4f:21: 53:2b:e3:c7:ad:2d:aa:50:fb:d0:b6:0a:cf:8f:33: a1:22:fd:24:b7:11:08:30:a7:f1:2d:58:aa:45:1c: 23:63:8e:29:f6:61:f7:f0:91:16:74:a9:52:94:e0: 61:be:9a:70:27:4b:13:f3:f2:0b:26:5f:1e:f6:69: ec:96:7b:cb:32:86:61:04:0a:79:f3:0a:6e:57:e6: 6a:95:dd:5e:a8:30:52:ed:d4:f9:3f:50:7b:e2:b8: 51:bc:60:21:46:db:56:e2:05:a4:f8:fb:b7:c0:07: ec:63:12:43:42:fe:3f:cf:15:35:dc:35:0a:ab:89: 40:49:be:3c:a7:65:70:04:79:6b:09:3a:44:e5:c5: 4d:43:01:db:a9:ff:3c:00:1b:e8:83:1d:81:6c:70: 55:9e:90:d9:5e:ab:f7:2c:7c:0a:c7:62:19:c0:60: 8f:e9:24:5e:fc:3b:73:83:43:00:c8:52:e1:e3:2c: 60:6f:fa:a5:95:be:4b:33:e7:f1:94:49:5a:5c:19: b3:5f:20:da:5e:26:e9:b6:06:ab:0c:4e:5c:5d:84: e3:26:80:33:c2:de:8a:92:b7:89:8e:3a:d1:7b:ec: ef:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:11:46:3A:33:B1:99:19:96:34:DE:0B:54:85:5E:A5:B8:7F:95:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/2d0718a0-7c15-3300-af7e-f83127e2444a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/ec7ea071-9ad8-46c5-97de-de149c4a5a78.crl X509v3 Authority Key Identifier: keyid:54:37:C6:D0:49:4F:D4:29:D0:C4:97:3B:92:99:0B:BC:40:6B:C9:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78.cer sbgp-ipAddrBlock: critical IPv4: 23.153.0.0/24 172.82.8.0/22 IPv6: 2602:ff2a::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:c8:cd:39:ab:9b:dc:09:f0:1f:8a:ef:ae:af:04:15:64:7f: ed:ab:79:44:57:63:33:54:61:8d:64:25:d4:b5:99:24:26:72: 3e:06:e5:19:92:15:a1:01:77:9b:31:8a:5e:42:3e:95:d6:d9: bd:b0:d0:3f:97:50:ec:aa:20:49:2a:15:88:8f:ad:68:56:ed: ea:b2:6b:61:1f:06:9e:a3:be:03:fd:d3:6e:15:c0:6c:4f:f9: 0f:96:ea:36:f7:f5:b6:75:c7:46:66:d7:c1:8e:34:a7:10:87: c7:fd:35:4e:2d:3e:03:a1:4e:07:12:5b:90:df:e8:da:06:7f: d4:5a:13:a7:71:7e:a7:9e:cd:11:bd:c3:f4:5d:5d:21:09:d3: 34:f1:b0:43:e9:e7:c9:17:d0:54:b2:a5:09:6c:b7:36:87:17: 34:3a:6b:3d:0e:52:2b:10:af:ff:7b:4f:b2:06:f6:d1:24:b3: 8e:0b:2f:30:58:52:6e:8f:97:7f:13:1b:3e:c3:9b:d2:a7:60: 49:47:dc:88:7d:d0:3c:8c:c7:62:79:ab:4b:15:c7:c0:10:21: 96:a5:15:92:9f:b1:b3:a5:0d:61:d7:12:d2:c1:01:52:39:8f: a9:01:df:49:f8:b0:a8:be:6b:e7:28:41:68:13:5b:61:51:49: d6:c1:14:b8 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEqQoLd1rfpmugCdtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWM3ZWEwNzEtOWFkOC00NmM1LTk3ZGUtZGUxNDljNGE1 YTc4MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MzU0NTgyNTctYzU2Zi00YzIzLTk4OGUtNzNkYTZiOTFjOTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3P4eI6yHcExW7nnIb9Gpee46idgOeGa9qE3t TyFTK+PHrS2qUPvQtgrPjzOhIv0ktxEIMKfxLViqRRwjY44p9mH38JEWdKlSlOBh vppwJ0sT8/ILJl8e9mnslnvLMoZhBAp58wpuV+Zqld1eqDBS7dT5P1B74rhRvGAh RttW4gWk+Pu3wAfsYxJDQv4/zxU13DUKq4lASb48p2VwBHlrCTpE5cVNQwHbqf88 ABvogx2BbHBVnpDZXqv3LHwKx2IZwGCP6SRe/Dtzg0MAyFLh4yxgb/qllb5LM+fx lElaXBmzXyDaXibptgarDE5cXYTjJoAzwt6KkreJjjrRe+zvDwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFF4RRjozsZkZljTeC1SFXqW4f5VHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzdl YTA3MS05YWQ4LTQ2YzUtOTdkZS1kZTE0OWM0YTVhNzgvMmQwNzE4YTAtN2MxNS0z MzAwLWFmN2UtZjgzMTI3ZTI0NDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWM3ZWEwNzEtOWFkOC00NmM1LTk3 ZGUtZGUxNDljNGE1YTc4L2VjN2VhMDcxLTlhZDgtNDZjNS05N2RlLWRlMTQ5YzRh NWE3OC5jcmwwHwYDVR0jBBgwFoAUVDfG0ElP1CnQxJc7kpkLvEBryc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzdlYTA3MS05YWQ4LTQ2YzUtOTdkZS1kZTE0 OWM0YTVhNzguY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF5kAAwQC rFIIMA0EAgACMAcDBQAmAv8qMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEbIzTmrm9wJ8B+K766vBBVkf+2r eURXYzNUYY1kJdS1mSQmcj4G5RmSFaEBd5sxil5CPpXW2b2w0D+XUOyqIEkqFYiP rWhW7eqya2EfBp6jvgP9024VwGxP+Q+W6jb39bZ1x0Zm18GONKcQh8f9NU4tPgOh TgcSW5Df6NoGf9RaE6dxfqeezRG9w/RdXSEJ0zTxsEPp58kX0FSypQlstzaHFzQ6 az0OUisQr/97T7IG9tEks44LLzBYUm6Pl38TGz7Dm9KnYElH3Ih90DyMx2J5q0sV x8AQIZalFZKfsbOlDWHXEtLBAVI5j6kB30n4sKi+a+coQWgTW2FRSdbBFLg= -----END CERTIFICATE-----Generated at Tue Aug 5 17:14:16 2025 by rpki-client