$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/04873bbe-f9c7-3d10-aba1-7b80bca15222.roa File: 04873bbe-f9c7-3d10-aba1-7b80bca15222.roa (raw, json) Hash identifier: oS2ryE7B+wrHEMuJ9+b9rZteRF8l14mHkuoayWIAKT4= Subject key identifier: 97:07:DE:78:26:C7:96:85:A6:22:48:D3:15:AD:B3:5E:8B:D7:5B:21 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285849D594F0AAE3B33F4322331DE0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/04873bbe-f9c7-3d10-aba1-7b80bca15222.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 205544 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:f0:aa:e3:b3:3f:43:22:33:1d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=4f3ccd10-9db9-4424-b0cc-5bda5481c2ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:12:a7:c7:aa:f8:a1:95:57:1e:ad:8a:4a:71: 34:37:f2:24:8b:08:2f:59:88:1d:cb:96:78:60:d0: e4:3b:e9:0d:69:c5:72:32:5a:39:d7:e6:9d:48:14: 97:24:0f:f9:a6:d1:05:b8:b0:ff:6b:82:68:ae:8d: 08:67:03:ce:78:78:ec:56:a6:11:b9:46:c8:e2:ba: 3a:9b:4d:f3:6a:f7:f7:8a:fd:23:40:7b:37:92:47: ab:b2:17:2a:e6:01:1b:19:98:09:43:2c:5f:9b:e4: 1d:f0:97:28:dc:04:6f:48:6c:f4:8c:37:f9:14:cd: 2b:f4:50:41:ee:14:57:12:d3:00:e4:33:27:48:68: cd:7a:3c:f0:94:32:04:94:5e:16:9a:41:72:5a:47: 72:ee:70:65:fd:04:84:9d:38:75:ac:fb:a3:07:86: d1:a2:cb:36:39:44:8b:8c:c9:9a:d1:24:eb:b9:b3: 1f:76:b7:ce:a8:c5:8f:c7:78:b1:c3:09:59:93:17: 73:b7:27:47:ee:d7:ee:8d:de:c5:32:b8:86:3e:e9: ed:24:ef:c0:da:6d:bf:ec:a5:de:3d:22:e3:dc:4a: 0e:cb:7a:6f:67:fd:eb:6c:5d:72:34:e3:db:1e:4c: db:39:65:52:c3:06:d0:b7:96:36:e8:90:b9:8f:71: 6d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:07:DE:78:26:C7:96:85:A6:22:48:D3:15:AD:B3:5E:8B:D7:5B:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/04873bbe-f9c7-3d10-aba1-7b80bca15222.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:68:e9:13:ce:1f:87:9d:68:8d:00:f2:f9:83:27:89:0a:56: 3b:66:bb:6f:6f:77:42:1a:92:76:86:03:c2:74:f7:eb:c7:ad: 7f:6d:bc:3b:2d:f4:fa:71:0f:38:53:4f:c6:cd:78:10:be:a1: f3:9a:16:4c:b3:a8:65:ab:8e:a7:2e:c3:0e:25:be:e5:4b:04: 58:7e:4d:7c:da:f5:85:b0:e9:fe:31:59:f4:f7:81:da:07:79: 4e:73:0d:2e:bb:6d:ba:c8:08:c6:3f:3c:c8:54:25:0a:fc:43: 25:6d:df:85:3c:ed:be:d6:dc:aa:21:51:c6:d6:d1:77:f3:f7: 88:02:97:dd:f2:08:39:8c:20:67:2c:e1:e7:aa:f2:4a:90:1f: 6b:f6:37:b9:14:c9:c7:7c:fc:b0:5a:b8:58:5c:b6:d9:12:69: 39:f1:c1:fc:1e:6b:bc:3b:44:bd:32:56:2a:af:b6:2d:fc:b8: 90:99:64:b7:35:7f:a4:a7:57:36:a3:5c:ac:32:1c:27:e2:99: 65:23:4b:af:54:b0:e7:24:bd:36:40:c9:fe:5a:77:06:09:09: 22:10:a5:b7:b4:94:6e:92:a5:ec:60:9e:06:a9:2d:49:c3:5c: c8:d1:29:68:9d:28:53:26:78:2c:fa:e1:9f:7d:40:f3:b3:7d: d1:e9:dd:37 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEnVlPCq47M/QyIzHeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk NGYzY2NkMTAtOWRiOS00NDI0LWIwY2MtNWJkYTU0ODFjMmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhKnx6r4oZVXHq2KSnE0N/IkiwgvWYgdy5Z4 YNDkO+kNacVyMlo51+adSBSXJA/5ptEFuLD/a4Joro0IZwPOeHjsVqYRuUbI4ro6 m03zavf3iv0jQHs3kkershcq5gEbGZgJQyxfm+Qd8Jco3ARvSGz0jDf5FM0r9FBB 7hRXEtMA5DMnSGjNejzwlDIElF4WmkFyWkdy7nBl/QSEnTh1rPujB4bRoss2OUSL jMma0STrubMfdrfOqMWPx3ixwwlZkxdztydH7tfujd7FMriGPuntJO/A2m2/7KXe PSLj3EoOy3pvZ/3rbF1yNOPbHkzbOWVSwwbQt5Y26JC5j3FthwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFJcH3ngmx5aFpiJI0xWts16L11shMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMDQ4NzNiYmUtZjljNy0z ZDEwLWFiYTEtN2I4MGJjYTE1MjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAsGjpE84fh51ojQDy+YMniQpWO2a7b293 QhqSdoYDwnT368etf228Oy30+nEPOFNPxs14EL6h85oWTLOoZauOpy7DDiW+5UsE WH5NfNr1hbDp/jFZ9PeB2gd5TnMNLrttusgIxj88yFQlCvxDJW3fhTztvtbcqiFR xtbRd/P3iAKX3fIIOYwgZyzh56rySpAfa/Y3uRTJx3z8sFq4WFy22RJpOfHB/B5r vDtEvTJWKq+2Lfy4kJlktzV/pKdXNqNcrDIcJ+KZZSNLr1Sw5yS9NkDJ/lp3BgkJ IhClt7SUbpKl7GCeBqktScNcyNEpaJ0oUyZ4LPrhn31A87N90endNw== -----END CERTIFICATE-----Generated at Sun Jun 15 11:56:29 2025 by rpki-client