$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0a42a172-0f73-3008-af81-6fbc4d92431b.roa File: 0a42a172-0f73-3008-af81-6fbc4d92431b.roa (raw, json) Hash identifier: 7/ZPGmxvJFMM6hsDz/mzgDPz67IPJ5ONz+5MxBd7yE4= Subject key identifier: 76:83:45:E8:46:A6:86:6C:63:59:6F:4A:36:94:37:CE:F1:AE:84:6B Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584AB650F80FB49BDCC20FCF2C80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0a42a172-0f73-3008-af81-6fbc4d92431b.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 133752 IP address blocks: 23.19.52.0/24 maxlen: 24 23.19.53.0/24 maxlen: 24 2607:f5b5:2::/48 maxlen: 48 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:f8:0f:b4:9b:dc:c2:0f:cf:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=9e3d93e2-78e2-43c1-a350-3e214ebf17ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f4:aa:06:ef:72:06:e8:f3:b0:dd:67:7a:4d: de:b3:c1:89:f4:76:92:34:e3:9e:6e:89:51:49:d3: d8:63:86:05:ee:83:41:ac:7f:70:3e:88:b2:3f:01: d3:9e:43:f1:5d:41:1c:64:53:90:b5:7c:89:30:ab: 60:5e:75:f2:40:95:20:87:06:f6:65:d2:da:64:ec: 4b:dc:0d:3f:47:11:61:19:db:8a:9d:ba:16:44:82: 1e:48:99:bb:d4:a5:72:0e:85:63:04:69:21:24:e9: 16:50:09:40:d4:b2:34:89:a1:b8:80:2f:36:11:39: 77:c9:b2:36:79:14:3b:27:f3:75:ed:12:24:9b:ca: 3a:df:83:e6:4a:2c:6d:d6:48:3a:c9:39:5f:19:28: b4:4c:98:27:5a:1a:1e:38:62:e0:78:e1:e8:97:4c: 8b:d9:d3:7f:28:60:ac:4e:a5:98:f4:c5:5e:4a:22: 23:97:fe:ab:0d:c4:5b:5e:8d:90:de:b2:5e:9e:76: 50:f3:ab:23:29:12:8f:9a:20:18:16:88:4b:71:b8: 1d:bb:49:28:b1:ab:93:6f:ac:37:b6:e1:e3:f5:82: 54:89:8d:c7:59:bc:df:fa:25:d8:94:aa:89:4e:96: 3e:2c:2a:b8:d8:34:73:93:59:11:46:54:89:3a:38: 0f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:83:45:E8:46:A6:86:6C:63:59:6F:4A:36:94:37:CE:F1:AE:84:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0a42a172-0f73-3008-af81-6fbc4d92431b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.52.0/23 IPv6: 2607:f5b5:2::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:7e:c4:4e:5b:88:bc:4d:dd:05:f3:e5:ac:63:96:dd:77:36: 4b:a1:db:85:ba:8f:1e:e1:7f:d9:b7:62:fe:e0:23:52:42:71: 77:3c:29:73:d2:af:2b:fc:d6:cf:ec:12:9f:36:c4:f6:52:8f: 1e:84:77:aa:55:be:49:e9:bd:42:a6:da:f9:5e:d0:54:a9:c4: 61:0a:88:79:87:76:ba:b2:43:85:71:47:97:55:87:f0:19:42: 2a:9c:56:51:de:d5:01:f6:82:50:07:34:04:e8:48:38:5e:62: ba:e3:ef:67:ef:42:18:c8:fd:f0:da:e1:8c:71:86:cb:27:95: cf:d3:f9:89:65:9d:b7:86:c9:5c:dc:4a:7f:1e:8a:de:f1:22: 6b:f9:25:b7:35:81:11:29:2a:b6:23:9c:1c:a9:aa:30:5e:4e: a8:5e:8f:c4:91:b4:34:13:bc:25:91:fa:cc:68:59:c4:9f:5f: 01:a8:ca:7c:13:b1:7e:a8:9b:30:84:65:6b:ef:6b:c9:e8:49: c4:a8:1c:83:1a:49:79:c0:01:26:33:f9:7a:db:51:64:8a:17: 14:f5:a8:17:0e:1d:f9:6b:de:41:38:50:00:33:06:96:75:02: ef:d4:dc:ac:55:4f:59:49:76:17:12:8a:22:d0:f0:b2:e5:7a: 7e:14:5d:ae -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEq2UPgPtJvcwg/PLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk OWUzZDkzZTItNzhlMi00M2MxLWEzNTAtM2UyMTRlYmYxN2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPSqBu9yBujzsN1nek3es8GJ9HaSNOOebolR SdPYY4YF7oNBrH9wPoiyPwHTnkPxXUEcZFOQtXyJMKtgXnXyQJUghwb2ZdLaZOxL 3A0/RxFhGduKnboWRIIeSJm71KVyDoVjBGkhJOkWUAlA1LI0iaG4gC82ETl3ybI2 eRQ7J/N17RIkm8o634PmSixt1kg6yTlfGSi0TJgnWhoeOGLgeOHol0yL2dN/KGCs TqWY9MVeSiIjl/6rDcRbXo2Q3rJennZQ86sjKRKPmiAYFohLcbgdu0kosauTb6w3 tuHj9YJUiY3HWbzf+iXYlKqJTpY+LCq42DRzk1kRRlSJOjgPDQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFHaDRehGpoZsY1lvSjaUN87xroRrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMGE0MmExNzItMGY3My0z MDA4LWFmODEtNmZiYzRkOTI0MzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBFxM0MA8E AgACMAkDBwEmB/W1AAIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEApn7ETluIvE3dBfPlrGOW3Xc2S6HbhbqP HuF/2bdi/uAjUkJxdzwpc9KvK/zWz+wSnzbE9lKPHoR3qlW+Sem9Qqba+V7QVKnE YQqIeYd2urJDhXFHl1WH8BlCKpxWUd7VAfaCUAc0BOhIOF5iuuPvZ+9CGMj98Nrh jHGGyyeVz9P5iWWdt4bJXNxKfx6K3vEia/kltzWBESkqtiOcHKmqMF5OqF6PxJG0 NBO8JZH6zGhZxJ9fAajKfBOxfqibMIRla+9ryehJxKgcgxpJecABJjP5ettRZIoX FPWoFw4d+WveQThQADMGlnUC79TcrFVPWUl2FxKKItDwsuV6fhRdrg== -----END CERTIFICATE-----Generated at Tue Aug 5 17:22:58 2025 by rpki-client