$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/98d1af37-90d7-3548-8da8-c41f5ccf1a02.roa File: 98d1af37-90d7-3548-8da8-c41f5ccf1a02.roa (raw, json) Hash identifier: dI3an3f9sfVkvlqxPBfK+PULjR+W7zCEO3vjuZ695u8= Subject key identifier: CA:BF:58:16:A5:41:7F:B7:3D:6B:3D:A6:1C:B9:BB:74:7A:A5:02:38 Certificate issuer: /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Certificate serial: 010D0C9F4328584AC0163D9A95B4DF3FFFAD7D80 Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/98d1af37-90d7-3548-8da8-c41f5ccf1a02.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 19257 IP address blocks: 23.252.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:3d:9a:95:b4:df:3f:ff:ad:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=cc21f9d3-7bc6-47a6-a4ee-2f54711328d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0e:92:ae:08:df:a7:38:53:35:07:1a:3c:75: c8:fe:3b:30:53:16:7d:54:fe:80:95:4c:34:cb:f6: f9:00:e0:da:50:3c:75:b1:d8:12:29:cf:b7:17:e8: 98:e1:a1:4d:db:5d:7c:44:42:27:94:49:b0:e4:3e: 22:74:a3:3d:a3:74:d4:f0:d6:c3:41:49:3d:5d:04: d8:fe:1b:c1:c6:da:21:59:15:e4:9c:ce:0c:0c:6e: b3:fa:b7:d8:da:79:eb:0f:ee:b0:78:b5:a8:51:a2: 46:a9:6e:bd:6a:27:0f:77:d3:b0:bf:b0:a7:c2:11: 02:16:8e:2a:0a:50:bd:48:33:e7:62:d7:25:89:14: c3:c7:87:86:df:21:0d:dc:d9:5d:90:9a:62:dc:8b: 7b:11:9d:81:9c:0a:0e:7a:88:76:d2:bf:de:3b:81: 95:44:d2:59:4d:7c:80:83:22:9e:15:ae:59:c5:a5: f3:33:d4:cd:55:1a:95:42:d4:c9:cb:cf:65:57:40: cc:6a:ad:7b:1b:35:92:db:38:e9:c2:8c:4a:e0:1f: c1:ea:65:45:9b:05:b5:51:25:e1:f9:30:a7:79:63: 2c:be:eb:90:f9:a2:1c:a5:89:79:10:64:9f:b8:4d: 6c:cb:53:37:99:b8:9e:77:10:83:18:8e:c3:cd:bc: 1c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BF:58:16:A5:41:7F:B7:3D:6B:3D:A6:1C:B9:BB:74:7A:A5:02:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/98d1af37-90d7-3548-8da8-c41f5ccf1a02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl X509v3 Authority Key Identifier: keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer sbgp-ipAddrBlock: critical IPv4: 23.252.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:85:f0:40:34:46:1a:eb:1a:7c:5a:b3:2e:5a:c4:26:4d:b2: 47:2b:90:08:ec:ee:ae:7e:01:19:1b:af:73:fd:c7:e6:1e:11: 9d:ce:d4:96:f1:fd:e3:12:2a:03:80:cc:5d:c7:c0:53:d2:e4: 21:83:4d:53:cf:52:39:b4:1b:c9:50:46:eb:5a:6b:b8:2c:31: de:2c:86:10:8c:a4:ef:59:fd:26:b7:14:5e:83:55:ea:91:aa: 2d:71:9c:fc:95:08:47:df:fe:04:eb:b5:f0:57:f9:e1:53:74: b0:a2:c6:93:be:b0:56:d0:6f:45:60:39:07:62:18:90:98:bf: 35:75:4a:ae:a8:32:4f:bf:63:d9:c8:65:d2:1b:00:67:2a:b9: e0:e2:6a:7a:94:5d:a5:9e:5e:c1:74:75:9b:2a:76:cc:f4:92: 06:4b:f8:bd:ef:08:9b:9b:09:73:89:c4:1d:22:0c:d7:43:c4: 22:16:83:c8:aa:32:c0:4c:80:a0:23:17:69:89:3e:fb:b9:34: 2e:9e:ce:7f:79:44:fa:79:59:ba:1b:ed:1f:f6:a4:26:7d:90: 10:e8:cd:b2:00:32:6b:8e:d3:ee:a5:20:cd:e7:05:1d:4f:c7: 3e:a0:39:cc:e6:6a:41:c9:9c:17:fd:a3:b1:7a:77:58:ad:36: 17:b4:80:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFj2albTfP/+tfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0 MjhhMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk Y2MyMWY5ZDMtN2JjNi00N2E2LWE0ZWUtMmY1NDcxMTMyOGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw6SrgjfpzhTNQcaPHXI/jswUxZ9VP6AlUw0 y/b5AODaUDx1sdgSKc+3F+iY4aFN2118REInlEmw5D4idKM9o3TU8NbDQUk9XQTY /hvBxtohWRXknM4MDG6z+rfY2nnrD+6weLWoUaJGqW69aicPd9Owv7CnwhECFo4q ClC9SDPnYtcliRTDx4eG3yEN3NldkJpi3It7EZ2BnAoOeoh20r/eO4GVRNJZTXyA gyKeFa5ZxaXzM9TNVRqVQtTJy89lV0DMaq17GzWS2zjpwoxK4B/B6mVFmwW1USXh +TCneWMsvuuQ+aIcpYl5EGSfuE1sy1M3mbiedxCDGI7DzbwcCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMq/WBalQX+3PWs9phy5u3R6pQI4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1 YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvOThkMWFmMzctOTBkNy0z NTQ4LThkYTgtYzQxZjVjY2YxYTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5 ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/xGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiF8EA0RhrrGnxasy5axCZNskcrkAjs7q5+ARkbr3P9x+YeEZ3O1Jbx /eMSKgOAzF3HwFPS5CGDTVPPUjm0G8lQRutaa7gsMd4shhCMpO9Z/Sa3FF6DVeqR qi1xnPyVCEff/gTrtfBX+eFTdLCixpO+sFbQb0VgOQdiGJCYvzV1Sq6oMk+/Y9nI ZdIbAGcqueDianqUXaWeXsF0dZsqdsz0kgZL+L3vCJubCXOJxB0iDNdDxCIWg8iq MsBMgKAjF2mJPvu5NC6ezn95RPp5Wbob7R/2pCZ9kBDozbIAMmuO0+6lIM3nBR1P xz6gOczmakHJnBf9o7F6d1itNhe0gD4= -----END CERTIFICATE-----Generated at Thu Aug 7 23:56:31 2025 by rpki-client