$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2d0afbf4-4e83-32c1-a83a-6fe16b5ce42a.roa File: 2d0afbf4-4e83-32c1-a83a-6fe16b5ce42a.roa (raw, json) Hash identifier: B+v4dW2qePakHzU/Uze4yzVuWAppP3mFfff2fwEd2nk= Subject key identifier: BF:44:6D:B6:8E:14:AE:09:B2:A5:D8:6D:A9:C2:DD:63:D7:01:78:B7 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285849D594F13749BB020FBA89C420 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2d0afbf4-4e83-32c1-a83a-6fe16b5ce42a.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 395954 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:f1:37:49:bb:02:0f:ba:89:c4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=3d1e3ccb-1f0c-467d-8337-c75d0819a62e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7b:fd:1b:97:09:1b:e1:54:f4:8a:06:4f:5d: f9:85:4b:8d:f6:16:e3:c5:22:db:79:05:0b:7b:db: ab:52:95:ed:b5:84:91:70:ec:d6:f4:02:d6:a8:da: 10:93:3b:4d:92:51:41:45:7e:d2:b4:e8:83:29:e5: f6:03:9f:73:c7:eb:bd:58:71:f6:87:8a:cf:33:93: cd:99:98:ad:6b:51:31:80:fe:da:73:8d:e9:1f:63: a5:69:50:8a:ce:d7:e1:66:80:47:4a:f7:31:aa:60: bb:16:db:2c:a5:b3:3f:c3:99:21:a2:82:35:b4:8c: 2e:cd:7b:e5:8e:b9:36:fa:39:3d:53:c3:f4:da:d2: e1:a9:2e:ab:10:20:3b:d0:dc:2f:94:72:44:29:65: 1f:30:f2:9f:62:c7:33:8b:3e:f6:18:88:5c:d3:e0: 69:34:f5:41:53:0c:3d:9c:da:90:09:c9:ea:63:71: e6:e1:1e:24:6b:00:20:c9:52:6f:6e:37:02:af:3f: ae:14:0e:9e:74:f3:66:aa:bb:0d:34:fe:e4:d8:41: fb:1e:0c:89:9a:88:23:0c:dc:d9:47:0e:26:aa:74: 90:aa:5a:ea:64:e9:15:6e:3e:ce:a6:a3:13:06:71: 9b:70:80:b5:2a:83:32:c6:70:3e:d9:ac:2d:df:f7: c9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:44:6D:B6:8E:14:AE:09:B2:A5:D8:6D:A9:C2:DD:63:D7:01:78:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2d0afbf4-4e83-32c1-a83a-6fe16b5ce42a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:1d:7e:cf:75:e1:9c:19:42:3d:7e:bc:dc:a3:45:31:4f:05: d6:01:64:fb:d0:3d:a6:85:01:77:f5:dd:18:1a:43:d6:85:1e: d1:19:89:16:06:55:fa:cb:f0:47:46:07:f1:34:38:e2:4d:f4: 3d:1a:87:36:b5:fa:31:e2:a5:fb:8b:30:de:25:44:32:c8:f4: 0e:5a:87:b0:ff:79:c6:38:9b:25:ed:f3:1c:b7:49:4f:86:96: 9d:54:d8:66:7f:ad:09:4f:9d:d9:46:d0:6c:be:54:32:14:51: 23:41:c5:c2:0c:45:40:9b:a4:11:07:81:80:2d:cf:67:4a:55: 22:50:38:8d:8d:94:ac:18:05:82:86:c9:33:0b:03:83:8b:51: 29:b4:45:2e:41:59:ed:d6:d0:78:d8:ad:59:63:89:e2:97:e1: b1:02:25:ab:3b:56:16:a6:23:91:7c:7a:fd:90:19:d6:24:30: 76:4c:1c:86:94:9a:be:56:b2:b0:bc:2d:1e:c8:34:ad:4e:eb: df:bf:dc:b9:8b:82:58:aa:f8:69:61:a5:8d:97:80:f8:4f:f8: e8:a9:a0:4f:b4:2c:3b:6a:c1:eb:5d:16:68:af:91:2a:4d:70: e6:02:a4:00:5d:5d:21:a2:fa:7d:5d:09:58:e5:26:76:f1:c1: b8:38:27:9a -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEnVlPE3SbsCD7qJxCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk M2QxZTNjY2ItMWYwYy00NjdkLTgzMzctYzc1ZDA4MTlhNjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXv9G5cJG+FU9IoGT135hUuN9hbjxSLbeQUL e9urUpXttYSRcOzW9ALWqNoQkztNklFBRX7StOiDKeX2A59zx+u9WHH2h4rPM5PN mZita1ExgP7ac43pH2OlaVCKztfhZoBHSvcxqmC7FtsspbM/w5khooI1tIwuzXvl jrk2+jk9U8P02tLhqS6rECA70NwvlHJEKWUfMPKfYscziz72GIhc0+BpNPVBUww9 nNqQCcnqY3Hm4R4kawAgyVJvbjcCrz+uFA6edPNmqrsNNP7k2EH7HgyJmogjDNzZ Rw4mqnSQqlrqZOkVbj7OpqMTBnGbcIC1KoMyxnA+2awt3/fJhwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFL9EbbaOFK4JsqXYbanC3WPXAXi3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMmQwYWZiZjQtNGU4My0z MmMxLWE4M2EtNmZlMTZiNWNlNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAmx1+z3XhnBlCPX683KNFMU8F1gFk+9A9 poUBd/XdGBpD1oUe0RmJFgZV+svwR0YH8TQ44k30PRqHNrX6MeKl+4sw3iVEMsj0 DlqHsP95xjibJe3zHLdJT4aWnVTYZn+tCU+d2UbQbL5UMhRRI0HFwgxFQJukEQeB gC3PZ0pVIlA4jY2UrBgFgobJMwsDg4tRKbRFLkFZ7dbQeNitWWOJ4pfhsQIlqztW FqYjkXx6/ZAZ1iQwdkwchpSavlaysLwtHsg0rU7r37/cuYuCWKr4aWGljZeA+E/4 6KmgT7QsO2rB610WaK+RKk1w5gKkAF1dIaL6fV0JWOUmdvHBuDgnmg== -----END CERTIFICATE-----Generated at Sun Jun 15 11:54:28 2025 by rpki-client