$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa File: 3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa (raw, json) Hash identifier: 3qJWUmAq+zJaezTA5cxrToZ78veayi0D1/Xw2V7uKcI= Subject key identifier: 3E:0D:0F:B3:CF:C1:AA:7C:D9:E7:A6:15:7E:7C:F2:68:55:D6:8B:21 Certificate issuer: /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Certificate serial: 010D0C9F43285849DF5A6D223F63FADBC8249900 Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 19257 IP address blocks: 23.252.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:6d:22:3f:63:fa:db:c8:24:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=590820e0-473f-45b5-bfab-f12ba5e15279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b4:d7:33:1f:b1:ca:92:92:f5:c8:49:bd:c9: a3:8d:9a:ee:74:07:3c:ec:44:1d:2d:3b:4e:a7:71: 49:ca:63:9e:a3:9d:bc:c5:6b:e3:71:8f:e6:c4:c1: ae:8a:2e:c9:68:d2:d9:aa:97:10:c1:44:d3:6d:7e: b3:49:63:a7:84:03:21:64:87:72:c8:07:87:7a:21: ac:98:02:4e:43:55:2f:90:4d:d6:4d:b5:8e:63:d6: 0e:1d:3d:52:be:d8:c7:e2:be:53:a6:7e:03:3f:12: fe:83:7b:72:37:62:92:63:44:0e:eb:fb:1c:ec:a4: 98:39:bd:58:58:ec:fb:83:97:de:d5:5c:40:27:86: 6b:6d:8c:fa:4c:a1:f1:97:ac:13:a0:df:c7:48:54: cc:a7:2a:fa:22:eb:e1:d5:81:f5:aa:bc:b8:b7:b5: e0:8b:27:f2:cb:79:ec:9d:fe:d0:0c:2c:a8:39:f4: 63:e7:fc:94:46:3f:07:50:71:af:4f:21:19:07:3c: 2f:e5:e3:d7:e9:b3:df:df:ee:c0:f7:c8:0a:4e:d0: c5:f1:a7:d9:f2:66:59:aa:51:0e:0d:9e:cd:db:91: 1a:6f:45:43:b8:df:1a:69:0c:0e:c3:6d:6e:d3:59: 46:70:c9:8f:8a:2d:75:85:d8:36:60:21:57:e0:9a: eb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:0D:0F:B3:CF:C1:AA:7C:D9:E7:A6:15:7E:7C:F2:68:55:D6:8B:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl X509v3 Authority Key Identifier: keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer sbgp-ipAddrBlock: critical IPv4: 23.252.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:a7:91:14:60:b5:de:01:92:39:8d:64:8c:f6:26:da:fd:2e: b5:29:41:a6:8f:56:ff:c7:82:9f:4d:25:67:8b:01:6d:fc:c3: bd:8b:02:20:3e:37:59:06:ca:2b:d7:a5:cf:4c:eb:7d:e1:c8: 99:ad:3f:fc:4f:cc:72:d4:91:16:93:16:c3:68:d5:3b:b3:1e: d6:bf:7a:ac:a8:41:b1:24:e1:3d:7f:6a:e8:a9:21:19:b4:ee: 66:cc:cc:ff:a3:63:1e:d3:3f:d7:80:88:ec:66:f5:60:af:c8: 16:70:a9:6f:2f:db:36:f4:02:d3:b9:fd:ac:c2:07:a3:68:16: bc:ee:11:0f:be:01:9c:68:20:9c:15:66:1b:5a:ae:43:67:d0: 7f:c5:08:e1:23:38:cd:60:7b:1d:c1:a1:c6:fe:2c:f4:fe:e1: e2:42:4e:33:17:af:53:d5:a8:38:09:0b:c9:53:24:b0:9a:0d: a2:e0:5f:f4:29:84:55:26:a9:28:58:8d:74:43:3c:d3:d3:ba: e3:99:42:d0:36:30:6c:17:57:2c:17:94:9b:8d:16:c1:d5:0d: c4:8a:b5:87:2e:01:11:fe:63:43:86:b1:69:d8:a3:31:18:62: 10:2a:f8:ba:e2:6e:1f:5b:a8:2c:a3:4a:4d:7e:a5:44:78:f7: 1c:81:f6:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWm0iP2P628gkmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0 MjhhMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk NTkwODIwZTAtNDczZi00NWI1LWJmYWItZjEyYmE1ZTE1Mjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7TXMx+xypKS9chJvcmjjZrudAc87EQdLTtO p3FJymOeo528xWvjcY/mxMGuii7JaNLZqpcQwUTTbX6zSWOnhAMhZIdyyAeHeiGs mAJOQ1UvkE3WTbWOY9YOHT1SvtjH4r5Tpn4DPxL+g3tyN2KSY0QO6/sc7KSYOb1Y WOz7g5fe1VxAJ4ZrbYz6TKHxl6wToN/HSFTMpyr6Iuvh1YH1qry4t7Xgiyfyy3ns nf7QDCyoOfRj5/yURj8HUHGvTyEZBzwv5ePX6bPf3+7A98gKTtDF8afZ8mZZqlEO DZ7N25Eab0VDuN8aaQwOw21u01lGcMmPii11hdg2YCFX4Jrr6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4ND7PPwap82eemFX588mhV1oshMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1 YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvM2YzYTIxY2MtNTg4My0z ZjFmLTlhNGEtN2ZjNDFjNTM0M2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5 ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF/xAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKnkRRgtd4BkjmNZIz2Jtr9LrUpQaaPVv/Hgp9NJWeLAW38w72LAiA+ N1kGyivXpc9M633hyJmtP/xPzHLUkRaTFsNo1TuzHta/eqyoQbEk4T1/auipIRm0 7mbMzP+jYx7TP9eAiOxm9WCvyBZwqW8v2zb0AtO5/azCB6NoFrzuEQ++AZxoIJwV ZhtarkNn0H/FCOEjOM1gex3Bocb+LPT+4eJCTjMXr1PVqDgJC8lTJLCaDaLgX/Qp hFUmqShYjXRDPNPTuuOZQtA2MGwXVywXlJuNFsHVDcSKtYcuARH+Y0OGsWnYozEY YhAq+Lribh9bqCyjSk1+pUR49xyB9oo= -----END CERTIFICATE-----Generated at Sun Jun 8 06:19:48 2025 by rpki-client