$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/2c9db57d-cb56-3111-ad11-10c62203b5ca.roa File: 2c9db57d-cb56-3111-ad11-10c62203b5ca.roa (raw, json) Hash identifier: 3FnjUXPbfw742oYRc+IHa1dYL6TQyzLVF9loyECR1RA= Subject key identifier: 75:E5:80:7F:09:13:4F:53:7E:75:95:A0:D9:FB:41:2F:12:81:D2:77 Certificate issuer: /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Certificate serial: 010D0C9F4328584AC0163DE3BC664A45E94B9DF0 Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/2c9db57d-cb56-3111-ad11-10c62203b5ca.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 19257 IP address blocks: 23.252.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:3d:e3:bc:66:4a:45:e9:4b:9d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=ee79cc6b-3e22-439c-b72c-ee3c3eb814a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a6:79:9b:48:d8:47:91:d5:59:67:7c:37:e0: f8:aa:1d:55:05:e8:77:d4:ef:5e:61:e4:7a:40:fa: fb:63:16:a5:a5:63:31:95:26:38:5b:b9:ba:de:7b: 46:d0:1a:1a:a2:9b:48:28:ee:43:12:3d:41:35:df: 84:b4:d6:74:83:d9:37:3a:84:91:e1:09:e5:d1:39: eb:eb:32:1d:71:4d:59:9f:71:e8:fc:62:d7:59:6d: 06:42:99:a7:45:49:49:b0:ea:a8:78:0f:54:42:bd: ec:a9:bf:21:70:64:60:e4:35:0e:0b:fe:6e:9d:0a: d8:ab:be:77:72:13:04:5f:81:23:a1:b7:7d:88:ad: b4:57:8a:00:d4:cd:d5:6f:c5:ce:f7:31:73:09:7f: 3f:81:e0:eb:87:59:e2:56:19:c9:20:1d:da:4b:f7: d5:d0:a2:62:c5:65:63:ee:86:99:36:2c:f8:99:33: 2a:c0:da:3d:8e:21:c9:15:88:45:d9:d4:e6:40:ac: a8:ff:d1:b9:c2:5e:70:08:1e:22:9b:4e:9a:d6:35: 85:d2:2e:fb:3c:b3:2a:9e:05:58:f1:dd:55:6f:de: 71:2c:6b:f1:9e:40:b3:31:aa:e9:f0:dd:3a:cf:ed: 11:ff:06:88:b7:cc:2b:64:01:55:c6:1d:b6:a9:87: 7d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E5:80:7F:09:13:4F:53:7E:75:95:A0:D9:FB:41:2F:12:81:D2:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/2c9db57d-cb56-3111-ad11-10c62203b5ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl X509v3 Authority Key Identifier: keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer sbgp-ipAddrBlock: critical IPv4: 23.252.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:20:10:91:76:b8:cd:c4:30:13:c2:dd:22:30:fc:9c:eb:ff: b0:85:db:ae:7b:b2:53:6e:8c:a9:8a:b5:f8:81:ac:ff:a6:84: a1:67:ed:ac:00:ec:31:ad:c9:72:5a:26:e1:b8:d6:2f:0c:32: cb:b8:51:29:95:e3:e3:46:99:42:83:ee:ad:fa:6c:77:28:f1: 1e:f6:fd:06:d3:92:b3:3b:b5:92:f3:29:a3:39:62:06:28:14: e4:56:db:4d:9b:9a:cc:a2:2e:34:68:c1:38:eb:05:31:63:2e: 78:11:67:f2:47:ce:64:96:4a:60:8d:06:f9:d0:a5:5c:fa:9e: 8e:d0:32:c4:35:13:3f:28:68:2a:3d:50:b0:d5:e0:88:f7:07: c3:c5:8c:32:7d:d0:a0:ec:ba:c6:6c:01:d7:00:0c:5b:5f:2f: ce:4c:6c:9b:55:8f:b9:b7:00:6a:cf:04:01:e5:ff:48:21:f2: 60:37:ec:0c:09:95:78:18:41:ef:10:d2:1b:1c:16:60:14:aa: 19:7c:7b:9f:3f:0e:6d:56:39:55:d4:e5:00:c0:17:b7:e1:eb: ae:1a:06:b0:61:35:1f:5d:bb:5d:ff:12:02:49:77:ca:79:14: de:2b:3e:07:db:51:4c:6d:de:d5:59:6c:86:08:df:b7:c8:a4: 4b:e1:74:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFj3jvGZKRelLnfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0 MjhhMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk ZWU3OWNjNmItM2UyMi00MzljLWI3MmMtZWUzYzNlYjgxNGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06Z5m0jYR5HVWWd8N+D4qh1VBeh31O9eYeR6 QPr7YxalpWMxlSY4W7m63ntG0BoaoptIKO5DEj1BNd+EtNZ0g9k3OoSR4Qnl0Tnr 6zIdcU1Zn3Ho/GLXWW0GQpmnRUlJsOqoeA9UQr3sqb8hcGRg5DUOC/5unQrYq753 chMEX4Ejobd9iK20V4oA1M3Vb8XO9zFzCX8/geDrh1niVhnJIB3aS/fV0KJixWVj 7oaZNiz4mTMqwNo9jiHJFYhF2dTmQKyo/9G5wl5wCB4im06a1jWF0i77PLMqngVY 8d1Vb95xLGvxnkCzMarp8N06z+0R/waIt8wrZAFVxh22qYd97wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXlgH8JE09TfnWVoNn7QS8SgdJ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1 YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvMmM5ZGI1N2QtY2I1Ni0z MTExLWFkMTEtMTBjNjIyMDNiNWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5 ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/xOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEggEJF2uM3EMBPC3SIw/Jzr/7CF2657slNujKmKtfiBrP+mhKFn7awA 7DGtyXJaJuG41i8MMsu4USmV4+NGmUKD7q36bHco8R72/QbTkrM7tZLzKaM5YgYo FORW202bmsyiLjRowTjrBTFjLngRZ/JHzmSWSmCNBvnQpVz6no7QMsQ1Ez8oaCo9 ULDV4Ij3B8PFjDJ90KDsusZsAdcADFtfL85MbJtVj7m3AGrPBAHl/0gh8mA37AwJ lXgYQe8Q0hscFmAUqhl8e58/Dm1WOVXU5QDAF7fh664aBrBhNR9du13/EgJJd8p5 FN4rPgfbUUxt3tVZbIYI37fIpEvhdH8= -----END CERTIFICATE-----Generated at Thu Aug 7 20:15:26 2025 by rpki-client