$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1ca5f0e2-7748-372e-b7ee-a2cd46898ac3.roa File: 1ca5f0e2-7748-372e-b7ee-a2cd46898ac3.roa (raw, json) Hash identifier: v/uMEMXT8r71l3q2lGC4Df+MLbJ+FbdVTK2FY+XVHxg= Subject key identifier: 51:66:A6:07:C1:19:88:5A:2D:A8:74:4F:8E:4F:72:9B:C6:D4:BC:D6 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584AB650F778FAB814CB9CFBCC00 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1ca5f0e2-7748-372e-b7ee-a2cd46898ac3.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 30633 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:f7:78:fa:b8:14:cb:9c:fb:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=5dc3f7b0-c570-4392-ae34-a963f8e77808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:85:81:0e:91:fb:ef:0b:5f:07:58:df:fd:21: fb:9b:c0:d3:d1:1c:51:e8:49:62:e9:f9:e4:6d:a8: 9c:f6:fc:5e:15:d9:23:f2:85:5b:a9:7a:2d:ff:25: c7:c3:16:f7:02:7e:03:8e:e7:14:cc:03:2a:f2:7d: b5:f9:fc:fe:3e:65:b2:31:1f:cd:6e:4a:6c:19:06: d3:5a:92:79:1e:bf:3c:f9:a8:bc:ca:00:42:9e:60: 73:9b:0c:d1:20:96:80:44:91:d6:fd:80:8c:1e:3a: c7:bd:95:8c:ed:8f:d4:1f:6c:2c:e4:42:73:8d:cc: 86:c8:d9:ef:6d:91:3d:d0:f9:26:9e:97:68:24:88: 42:30:b0:cd:36:09:f2:39:76:67:56:b7:0e:42:58: 05:42:fb:39:c1:c6:2b:92:df:d2:70:3a:a6:1d:d4: b8:af:59:d2:ea:b2:6a:94:09:9c:4a:48:87:2b:8f: 81:e3:0c:78:88:72:26:a5:fe:76:22:e1:1c:8a:65: 6a:ac:40:16:12:af:26:15:20:fa:f8:a6:d3:77:51: 8d:de:b0:82:ef:7c:42:7a:8a:04:15:b0:95:8b:bc: 1f:f1:82:d0:98:bf:56:93:ab:3f:f1:94:b7:ee:d9: ac:4f:cc:da:50:e1:cc:b7:77:27:0c:37:34:a3:5e: 75:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:66:A6:07:C1:19:88:5A:2D:A8:74:4F:8E:4F:72:9B:C6:D4:BC:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1ca5f0e2-7748-372e-b7ee-a2cd46898ac3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:db:f4:f7:43:77:26:98:9d:6a:2e:5d:b2:e5:86:c4:fe:45: 13:c0:87:db:20:27:be:d7:23:85:a6:97:e7:f7:26:93:e5:1b: a1:5d:1d:cf:fa:22:69:b0:99:b1:fb:7b:a4:ba:2c:7f:83:34: 6e:4d:04:c6:73:e2:c4:29:43:fb:73:18:b7:ae:39:4b:5e:21: 29:03:82:ef:27:0f:a8:15:5a:b5:1f:9a:f7:b3:39:70:b9:4f: 65:59:59:e3:f7:8a:2c:5a:2b:a1:6c:bb:8c:0d:25:f9:e4:e0: 50:6c:94:f2:d1:8e:dd:0e:40:35:f0:6a:f4:91:e9:87:a0:62: 5f:ac:cb:ca:e7:a4:ec:e7:c2:a8:6b:08:20:c5:20:be:00:75: f5:d5:04:5e:83:5d:30:c4:0a:66:54:f7:d2:ed:46:0f:d1:69: 36:d7:f3:c7:4b:cc:68:6d:25:73:36:cd:25:d3:44:41:18:48: 36:33:2f:08:9d:70:e3:5c:67:aa:04:5a:11:e3:c8:04:92:1b: 4a:22:9e:30:9d:15:6e:b7:3b:27:f1:87:ce:42:65:67:95:e1: 8c:fd:0f:47:d0:04:d6:85:7b:9b:82:6a:2a:fc:4c:d1:02:09: aa:7c:46:f6:50:6f:78:b2:b9:cf:0a:a9:51:ca:cd:da:d8:0a: 6b:14:72:2d -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEq2UPd4+rgUy5z7zAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk NWRjM2Y3YjAtYzU3MC00MzkyLWFlMzQtYTk2M2Y4ZTc3ODA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4WBDpH77wtfB1jf/SH7m8DT0RxR6Eli6fnk baic9vxeFdkj8oVbqXot/yXHwxb3An4DjucUzAMq8n21+fz+PmWyMR/NbkpsGQbT WpJ5Hr88+ai8ygBCnmBzmwzRIJaARJHW/YCMHjrHvZWM7Y/UH2ws5EJzjcyGyNnv bZE90PkmnpdoJIhCMLDNNgnyOXZnVrcOQlgFQvs5wcYrkt/ScDqmHdS4r1nS6rJq lAmcSkiHK4+B4wx4iHImpf52IuEcimVqrEAWEq8mFSD6+KbTd1GN3rCC73xCeooE FbCVi7wf8YLQmL9Wk6s/8ZS37tmsT8zaUOHMt3cnDDc0o151jwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFFFmpgfBGYhaLah0T45PcpvG1LzWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMWNhNWYwZTItNzc0OC0z NzJlLWI3ZWUtYTJjZDQ2ODk4YWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADNv090N3Jpidai5dsuWGxP5FE8CH2yAn vtcjhaaX5/cmk+UboV0dz/oiabCZsft7pLosf4M0bk0ExnPixClD+3MYt645S14h KQOC7ycPqBVatR+a97M5cLlPZVlZ4/eKLForoWy7jA0l+eTgUGyU8tGO3Q5ANfBq 9JHph6BiX6zLyuek7OfCqGsIIMUgvgB19dUEXoNdMMQKZlT30u1GD9FpNtfzx0vM aG0lczbNJdNEQRhINjMvCJ1w41xnqgRaEePIBJIbSiKeMJ0Vbrc7J/GHzkJlZ5Xh jP0PR9AE1oV7m4JqKvxM0QIJqnxG9lBveLK5zwqpUcrN2tgKaxRyLQ== -----END CERTIFICATE-----Generated at Tue Aug 5 16:44:47 2025 by rpki-client