$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2d0afbf4-4e83-32c1-a83a-6fe16b5ce42a.roa File: 2d0afbf4-4e83-32c1-a83a-6fe16b5ce42a.roa (raw, json) Hash identifier: NvduCYPjGfSkwNtOTtA6BPxF7Gs/m4amYPgQsyj85lY= Subject key identifier: 5A:CE:53:48:17:9F:FF:76:1B:BF:A5:E0:41:40:19:CD:9D:FB:78:C0 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584AB650F756DD78FC5230103A80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2d0afbf4-4e83-32c1-a83a-6fe16b5ce42a.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 395954 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:f7:56:dd:78:fc:52:30:10:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=697c80a2-692e-4ead-befb-7711b54d4c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:15:ba:c6:fb:f2:c4:32:4a:a8:b8:3e:c7:ff: dd:10:12:49:b7:15:46:c4:b2:cb:8f:9a:bc:15:d8: 33:1c:a4:c5:e1:62:b7:c6:fa:29:35:ad:3d:63:c4: c0:3f:b8:62:c7:43:dd:06:42:fc:60:69:6e:fd:f0: 19:e8:de:d8:8c:4b:e6:dc:33:95:5e:c8:83:fa:ac: b4:84:76:d3:e9:2f:0a:8e:1c:55:99:3c:db:84:8e: a3:3b:84:51:39:36:13:aa:28:9b:88:89:23:98:13: 43:3a:5f:c9:12:f2:01:47:ea:28:38:c7:99:f9:ef: 33:f9:d3:15:45:20:d8:4b:3c:77:e4:5f:9d:e2:6e: 3d:05:b0:79:24:f2:a8:18:04:19:57:ec:3c:29:36: 22:a6:d8:5b:c1:b8:b1:92:96:ee:2f:0d:b9:47:56: f8:fa:ab:b9:fa:d1:dd:1b:84:90:fa:22:72:03:84: 0d:e5:2e:fb:4d:9b:3a:e5:77:cf:b9:72:68:6f:e8: 58:52:e3:f4:9b:25:3d:10:71:8f:1d:01:48:bb:be: 6a:bd:76:d5:71:a8:3a:dd:c2:ac:31:60:a4:84:97: bc:1b:2d:49:11:63:8f:cd:91:3a:a6:dd:1f:83:3d: da:12:87:e2:45:af:5d:e5:bf:2f:6a:a5:ea:ad:66: b2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CE:53:48:17:9F:FF:76:1B:BF:A5:E0:41:40:19:CD:9D:FB:78:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2d0afbf4-4e83-32c1-a83a-6fe16b5ce42a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:ba:20:fa:cb:3f:50:fd:cd:28:02:7d:97:95:f8:7f:e5:7f: 29:fb:df:1b:f1:c6:ee:08:ad:9a:ed:74:67:d3:ab:28:fb:5d: 19:7e:1f:59:ab:85:a2:ab:2e:eb:8b:d5:56:72:2c:6b:dc:85: 56:63:f5:46:4c:0d:7e:4c:aa:e5:e6:d4:53:7d:1a:c2:99:08: 4a:d6:7c:0f:78:6c:f7:97:72:98:49:ac:f3:df:6b:1b:1c:e1: c6:4f:18:99:c5:f1:9e:79:b3:b5:9b:ee:7c:43:c9:8a:fd:c4: 27:60:4c:4a:93:85:2b:d0:03:43:93:5a:0c:dd:d9:1c:94:03: eb:9b:89:87:b1:85:c2:eb:52:a4:02:f8:41:6f:16:d6:be:2f: 0e:10:7d:ff:c9:17:67:e7:ea:27:db:9b:40:49:00:53:a5:8f: d8:38:52:13:2a:52:ad:04:88:f8:90:93:3a:11:ed:c0:01:92: b3:21:08:9f:83:84:c6:5b:09:01:53:03:1a:9e:6f:36:d8:95: e0:d2:99:d7:68:4f:2e:94:c3:13:fb:c6:c0:d6:ba:95:f1:76: 7a:0b:7a:bc:73:f2:cd:d8:23:db:43:7e:2f:6c:56:e6:db:f5: 43:5f:63:91:4d:c4:66:63:4f:dd:72:74:ce:83:70:21:55:5e: e0:fe:14:06 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEq2UPdW3Xj8UjAQOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk Njk3YzgwYTItNjkyZS00ZWFkLWJlZmItNzcxMWI1NGQ0YzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxW6xvvyxDJKqLg+x//dEBJJtxVGxLLLj5q8 FdgzHKTF4WK3xvopNa09Y8TAP7hix0PdBkL8YGlu/fAZ6N7YjEvm3DOVXsiD+qy0 hHbT6S8KjhxVmTzbhI6jO4RROTYTqiibiIkjmBNDOl/JEvIBR+ooOMeZ+e8z+dMV RSDYSzx35F+d4m49BbB5JPKoGAQZV+w8KTYipthbwbixkpbuLw25R1b4+qu5+tHd G4SQ+iJyA4QN5S77TZs65XfPuXJob+hYUuP0myU9EHGPHQFIu75qvXbVcag63cKs MWCkhJe8Gy1JEWOPzZE6pt0fgz3aEofiRa9d5b8vaqXqrWayfwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFFrOU0gXn/92G7+l4EFAGc2d+3jAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMmQwYWZiZjQtNGU4My0z MmMxLWE4M2EtNmZlMTZiNWNlNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAXbog+ss/UP3NKAJ9l5X4f+V/KfvfG/HG 7gitmu10Z9OrKPtdGX4fWauFoqsu64vVVnIsa9yFVmP1RkwNfkyq5ebUU30awpkI StZ8D3hs95dymEms899rGxzhxk8YmcXxnnmztZvufEPJiv3EJ2BMSpOFK9ADQ5Na DN3ZHJQD65uJh7GFwutSpAL4QW8W1r4vDhB9/8kXZ+fqJ9ubQEkAU6WP2DhSEypS rQSI+JCTOhHtwAGSsyEIn4OExlsJAVMDGp5vNtiV4NKZ12hPLpTDE/vGwNa6lfF2 egt6vHPyzdgj20N+L2xW5tv1Q19jkU3EZmNP3XJ0zoNwIVVe4P4UBg== -----END CERTIFICATE-----Generated at Mon Aug 4 18:29:16 2025 by rpki-client