$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3a603485-8119-3bb4-9449-4eb447f559ba.roa File: 3a603485-8119-3bb4-9449-4eb447f559ba.roa (raw, json) Hash identifier: Zd9PEtXUyVeoJgCufAZ+xjYRCRROVdyf93Ht7INic5M= Subject key identifier: 22:20:26:98:E2:A3:E2:EB:94:32:DF:3C:D2:9D:96:B1:A0:3D:E6:CA Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584AB650F7DB23FA69486DCF2000 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3a603485-8119-3bb4-9449-4eb447f559ba.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 59253 IP address blocks: 23.19.197.0/24 maxlen: 24 2607:f5b5:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:f7:db:23:fa:69:48:6d:cf:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=abf11c30-789b-4dd4-bda1-9c8201aca98a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f1:66:23:df:3e:dd:ea:c6:2d:cf:b4:b7:b6: 8d:e2:bb:0f:cf:f2:b1:0c:7b:83:55:d3:59:58:bf: 74:db:18:51:57:ab:72:1f:95:14:70:21:75:97:1d: 92:8c:bd:ee:73:fc:49:1e:01:b1:47:6b:b5:71:e7: 47:14:b6:42:29:64:52:e4:10:1f:88:a8:1c:3f:41: 9a:6d:f4:b1:4e:9e:92:57:04:a3:02:91:b1:a8:56: 1f:46:ca:00:32:19:95:02:4f:c3:9f:b6:c4:19:b7: 7e:5b:2d:28:f7:c5:c0:a6:d6:34:3e:20:d1:80:60: 89:60:b0:c5:11:07:37:6b:5e:00:3f:3e:48:08:48: 26:eb:10:08:97:67:7c:83:17:60:e5:d5:65:b9:9d: 68:00:f7:0f:e7:4c:b8:e2:bb:ab:33:9d:58:0c:2d: 54:42:52:39:a7:b7:3a:db:2b:b7:5d:2b:8c:a7:ea: 4e:b9:4e:36:92:9d:8c:b5:60:24:1d:dc:e0:05:f1: f8:01:97:6b:35:47:16:aa:0f:ac:53:8f:53:94:9c: 30:1d:fa:9c:f9:ed:e4:84:4e:81:6d:66:6c:10:e6: 63:cf:de:15:13:45:96:08:c9:22:84:ab:53:95:ff: 16:5d:c7:78:44:3b:9d:10:fd:2f:69:ce:8a:26:cc: f2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:20:26:98:E2:A3:E2:EB:94:32:DF:3C:D2:9D:96:B1:A0:3D:E6:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3a603485-8119-3bb4-9449-4eb447f559ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.197.0/24 IPv6: 2607:f5b5:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:1a:b6:f7:04:5c:25:26:f6:f5:99:52:4a:e2:e1:bd:4d:ca: 56:89:e3:6b:8f:31:27:3b:d2:78:47:6b:5b:21:1a:62:a9:b1: f6:06:62:6b:da:57:05:80:46:3b:a3:ed:37:fe:49:e5:89:8c: 5e:19:9b:be:87:1c:75:bc:c5:df:fc:83:b6:a4:ab:e1:1a:4a: 08:2e:93:a9:c2:33:16:37:10:e3:cc:41:c8:93:7a:1d:3f:8d: e3:d6:29:9f:e7:10:72:2e:f3:72:81:0d:6c:73:62:ef:1d:0f: 44:d2:48:1e:d0:c8:9d:00:f5:2a:f8:66:f3:e4:d4:82:a0:a8: 32:10:5b:ec:dc:9c:2f:25:a3:a9:9e:ae:d6:be:e9:d7:8b:8a: 1b:b3:ff:46:28:e0:2d:d9:2b:e6:f7:e8:bd:e7:6f:c7:12:68: 25:f3:fb:19:70:25:95:87:8f:95:0d:7c:e2:6d:2a:40:e9:5c: 55:fb:1d:86:87:78:11:9c:3e:d8:0b:4b:ec:ec:8e:97:a7:be: b3:cd:ef:c6:fd:fe:eb:8a:ab:d8:22:f5:f5:34:6f:93:af:19: ac:1b:b0:8a:02:55:13:bd:8d:8a:67:4f:3f:2c:31:3a:2e:0a: 04:ef:ec:ca:1e:e1:61:c4:36:be:b2:5c:4b:96:94:e0:12:35: 04:ac:97:f0 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEq2UPfbI/ppSG3PIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk YWJmMTFjMzAtNzg5Yi00ZGQ0LWJkYTEtOWM4MjAxYWNhOThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/FmI98+3erGLc+0t7aN4rsPz/KxDHuDVdNZ WL902xhRV6tyH5UUcCF1lx2SjL3uc/xJHgGxR2u1cedHFLZCKWRS5BAfiKgcP0Ga bfSxTp6SVwSjApGxqFYfRsoAMhmVAk/Dn7bEGbd+Wy0o98XAptY0PiDRgGCJYLDF EQc3a14APz5ICEgm6xAIl2d8gxdg5dVluZ1oAPcP50y44rurM51YDC1UQlI5p7c6 2yu3XSuMp+pOuU42kp2MtWAkHdzgBfH4AZdrNUcWqg+sU49TlJwwHfqc+e3khE6B bWZsEOZjz94VE0WWCMkihKtTlf8WXcd4RDudEP0vac6KJszyuQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFCIgJpjio+LrlDLfPNKdlrGgPebKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvM2E2MDM0ODUtODExOS0z YmI0LTk0NDktNGViNDQ3ZjU1OWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxPFMA8E AgACMAkDBwAmB/W1AAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAaRq29wRcJSb29ZlSSuLhvU3KVonja48x JzvSeEdrWyEaYqmx9gZia9pXBYBGO6PtN/5J5YmMXhmbvoccdbzF3/yDtqSr4RpK CC6TqcIzFjcQ48xByJN6HT+N49Ypn+cQci7zcoENbHNi7x0PRNJIHtDInQD1Kvhm 8+TUgqCoMhBb7NycLyWjqZ6u1r7p14uKG7P/RijgLdkr5vfovedvxxJoJfP7GXAl lYePlQ184m0qQOlcVfsdhod4EZw+2AtL7OyOl6e+s83vxv3+64qr2CL19TRvk68Z rBuwigJVE72NimdPPywxOi4KBO/syh7hYcQ2vrJcS5aU4BI1BKyX8A== -----END CERTIFICATE-----Generated at Mon Aug 4 18:33:18 2025 by rpki-client