$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa File: 3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa (raw, json) Hash identifier: NBcrJt7VXuCQSFoOzp1FHLvR83YtAhYPK5yY6yWSfqY= Subject key identifier: 9A:01:94:55:B5:33:CB:40:6F:A1:CA:CB:82:23:24:4D:AF:EF:47:36 Certificate issuer: /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Certificate serial: 010D0C9F4328584AC0163D71F20866E387F49680 Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 19257 IP address blocks: 23.252.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:3d:71:f2:08:66:e3:87:f4:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=8fb248bb-401b-44c8-af0a-44f826402f98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:54:41:b4:89:44:d3:97:5f:30:7f:6e:32:9d: b2:67:b9:f5:33:b0:5c:3e:2c:43:9f:1c:f8:3d:55: f9:06:9d:e1:5c:12:45:77:df:c4:b1:c7:62:bc:4a: 62:23:4b:9b:f2:e0:a3:9f:c6:19:ab:87:7e:6c:f4: bd:15:d7:1f:bf:c1:e3:9d:4e:23:36:4f:d7:ce:fe: 69:a6:83:0f:08:61:27:f8:3e:43:90:2c:3e:6a:d7: d9:a3:1f:9b:10:b5:92:7b:4b:2e:f2:a9:9d:e0:be: 35:ab:fe:73:29:4c:a9:b7:f7:c2:3a:b2:eb:8f:bd: e8:64:da:db:31:48:57:e6:cd:72:47:80:f0:f3:f1: 2b:79:67:92:95:c2:46:0f:97:c4:43:91:7d:a0:70: e5:40:ec:f9:1c:0f:71:06:95:91:b0:63:c3:f5:e4: 3e:f9:90:b7:cc:03:92:80:8a:e2:da:08:f1:09:7d: e2:90:d2:55:5c:ef:d7:48:ad:57:29:99:30:bc:3f: 56:ad:4a:4f:ef:26:29:89:3a:b0:4a:d4:e0:9a:75: 3a:c4:82:81:bb:56:ea:26:63:fb:a6:06:1a:9e:98: bd:36:f4:2f:0f:71:a9:8c:f7:7d:86:75:93:d0:57: 9f:42:ab:bc:62:18:69:2d:4c:88:92:02:ba:5e:ee: a0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:01:94:55:B5:33:CB:40:6F:A1:CA:CB:82:23:24:4D:AF:EF:47:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl X509v3 Authority Key Identifier: keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer sbgp-ipAddrBlock: critical IPv4: 23.252.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:c1:d8:49:a9:80:31:f6:4e:7b:f9:e9:56:ef:76:0f:9f:e9: c3:c3:22:99:0d:9a:97:bc:cc:29:78:f9:42:c6:07:ac:55:5d: 20:6e:ab:71:32:bc:a0:76:09:ce:fb:9d:16:05:b6:1a:5e:4f: 6e:0e:77:8b:66:ad:14:b5:39:e1:58:95:71:60:fc:0a:10:11: a1:7f:56:2a:dd:c7:be:29:05:2e:2b:6b:cf:f6:23:50:36:0f: 9c:2e:d4:59:2d:9a:69:c6:85:d0:23:1b:51:6a:c5:46:02:68: 40:10:13:f1:8d:95:ac:c6:a3:96:ba:79:e1:aa:c4:b5:4b:4c: d7:cd:8d:cc:5d:30:e4:57:a9:58:c1:ac:10:d0:55:1b:52:94: 14:20:40:c7:5a:52:54:01:44:de:0f:8e:7d:48:96:5d:ce:59: 74:41:91:2c:81:eb:01:3b:e0:2a:a9:58:34:3e:5e:77:0a:a6: 7d:eb:35:39:9a:02:d3:72:b0:e9:b7:0d:14:fc:f3:42:1e:d9: ee:bf:a6:4c:1d:65:e3:c1:29:07:df:3a:d4:76:90:df:65:7a: c6:a3:79:ed:a3:c9:00:e3:c3:0c:ad:c1:9f:eb:f2:d2:d4:67: f7:ba:c3:f3:2e:11:97:97:8f:a8:39:2a:a8:c6:c0:de:1c:75: f7:fa:f0:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFj1x8ghm44f0loAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0 MjhhMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk OGZiMjQ4YmItNDAxYi00NGM4LWFmMGEtNDRmODI2NDAyZjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlRBtIlE05dfMH9uMp2yZ7n1M7BcPixDnxz4 PVX5Bp3hXBJFd9/EscdivEpiI0ub8uCjn8YZq4d+bPS9Fdcfv8HjnU4jNk/Xzv5p poMPCGEn+D5DkCw+atfZox+bELWSe0su8qmd4L41q/5zKUypt/fCOrLrj73oZNrb MUhX5s1yR4Dw8/EreWeSlcJGD5fEQ5F9oHDlQOz5HA9xBpWRsGPD9eQ++ZC3zAOS gIri2gjxCX3ikNJVXO/XSK1XKZkwvD9WrUpP7yYpiTqwStTgmnU6xIKBu1bqJmP7 pgYanpi9NvQvD3GpjPd9hnWT0FefQqu8YhhpLUyIkgK6Xu6g2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoBlFW1M8tAb6HKy4IjJE2v70c2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1 YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvM2YzYTIxY2MtNTg4My0z ZjFmLTlhNGEtN2ZjNDFjNTM0M2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5 ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF/xAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDB2EmpgDH2Tnv56Vbvdg+f6cPDIpkNmpe8zCl4+ULGB6xVXSBuq3Ey vKB2Cc77nRYFthpeT24Od4tmrRS1OeFYlXFg/AoQEaF/Virdx74pBS4ra8/2I1A2 D5wu1FktmmnGhdAjG1FqxUYCaEAQE/GNlazGo5a6eeGqxLVLTNfNjcxdMORXqVjB rBDQVRtSlBQgQMdaUlQBRN4Pjn1Ill3OWXRBkSyB6wE74CqpWDQ+XncKpn3rNTma AtNysOm3DRT880Ie2e6/pkwdZePBKQffOtR2kN9lesajee2jyQDjwwytwZ/r8tLU Z/e6w/MuEZeXj6g5KqjGwN4cdff68Io= -----END CERTIFICATE-----Generated at Thu Aug 7 23:56:54 2025 by rpki-client