$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3e1f93dc-6520-3778-ad3d-37750549a980.roa File: 3e1f93dc-6520-3778-ad3d-37750549a980.roa (raw, json) Hash identifier: R5sM/l/L6pGHq6oUtXzi4+bONmwu+cOLxrxQKAqRrTM= Subject key identifier: B7:E2:33:41:AB:F9:46:68:DE:27:58:42:7E:0E:70:37:39:DB:A1:B2 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584AB650F7682C90267A6FBC3920 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3e1f93dc-6520-3778-ad3d-37750549a980.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 393886 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:f7:68:2c:90:26:7a:6f:bc:39:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=0c0aad84-7be4-40c4-a49a-60aae9e5a41c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:69:2a:b2:25:af:fd:5a:9d:99:e9:19:ba:e7: 50:a6:b7:5b:d9:2c:e4:4b:f3:cc:54:3b:03:a1:65: e2:c8:77:37:81:9b:15:b1:c4:f8:fe:50:a5:b7:53: 8c:de:1e:bb:34:6c:ca:7c:86:77:89:a7:8d:f0:ec: f1:e7:03:a4:bd:a7:bb:49:4d:7b:82:ac:b0:89:b7: 1e:b3:01:76:50:6c:d7:5a:b4:a0:cd:1f:2a:57:5e: 3b:aa:cf:77:51:4d:d0:3f:2b:24:a7:b5:e7:52:58: 8a:20:96:78:79:d6:2c:08:21:08:61:9c:9f:c1:2c: d9:f3:fa:4a:c0:18:03:5d:18:1b:58:c6:80:c9:b6: 66:d6:40:0b:b1:92:eb:2a:69:a1:74:f2:3f:75:41: d5:88:a4:74:37:35:d3:d7:87:f0:ec:22:26:56:b5: 6c:cb:c7:72:63:d2:66:cf:38:95:7e:cd:e8:9b:da: 8d:98:24:d9:c3:4e:48:99:f1:40:85:6e:38:df:54: 33:d6:1f:2f:3c:07:12:ce:d0:c0:48:e1:ee:bf:1d: 4a:a7:54:d7:97:bd:f6:aa:dc:e1:9e:fb:ac:64:a2: 59:c7:bc:7b:01:ed:6e:cc:a2:b1:3b:79:2b:e9:ce: 02:7e:ab:61:95:3f:2d:91:fa:eb:2a:eb:73:16:5b: 36:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E2:33:41:AB:F9:46:68:DE:27:58:42:7E:0E:70:37:39:DB:A1:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3e1f93dc-6520-3778-ad3d-37750549a980.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:14:79:0e:35:b2:68:0f:5b:01:37:89:e3:02:ba:5c:2a:c5: 25:8b:e5:9d:9c:40:17:e3:ba:6c:07:5c:39:00:d7:70:96:9f: d4:d5:36:e8:76:ea:7b:e1:a5:4a:2e:35:e2:d2:4f:f9:36:88: 0b:e1:64:c6:29:09:cc:07:91:26:35:eb:04:af:f6:88:5c:24: 27:bb:06:2f:57:50:a7:0c:95:a2:4a:c5:6c:5b:54:1e:2a:04: f5:1e:37:12:39:85:7a:69:35:29:9e:19:fd:53:72:cb:8a:c2: 75:44:f8:7e:f1:9b:ff:bf:3c:fa:6b:be:a8:07:f9:92:94:eb: c4:79:43:43:13:f8:73:c6:7b:11:f5:9d:87:80:ae:6d:a4:c3: 17:cc:84:2d:d8:82:df:5d:6e:10:46:5a:71:7a:46:ea:01:f6: b8:9c:b9:92:0f:46:d7:e0:81:6f:68:13:b6:88:df:29:4a:6f: 8a:47:75:4d:20:af:8e:a6:02:81:c1:60:35:e9:07:2c:e8:9c: ef:3f:77:4d:0d:4c:e5:34:8a:a4:2a:89:4f:b8:5e:e4:a4:0c: 29:44:21:1f:dd:84:79:85:a7:74:e7:42:6b:a7:ff:1c:9e:be: 0e:25:b2:9e:6b:1f:ac:8f:1a:5f:05:dd:57:cc:fc:24:23:0c: 73:0b:d9:4b -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEq2UPdoLJAmem+8OSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk MGMwYWFkODQtN2JlNC00MGM0LWE0OWEtNjBhYWU5ZTVhNDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmkqsiWv/VqdmekZuudQprdb2SzkS/PMVDsD oWXiyHc3gZsVscT4/lClt1OM3h67NGzKfIZ3iaeN8Ozx5wOkvae7SU17gqywibce swF2UGzXWrSgzR8qV147qs93UU3QPyskp7XnUliKIJZ4edYsCCEIYZyfwSzZ8/pK wBgDXRgbWMaAybZm1kALsZLrKmmhdPI/dUHViKR0NzXT14fw7CImVrVsy8dyY9Jm zziVfs3om9qNmCTZw05ImfFAhW4431Qz1h8vPAcSztDASOHuvx1Kp1TXl732qtzh nvusZKJZx7x7Ae1uzKKxO3kr6c4CfqthlT8tkfrrKutzFls2sQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFLfiM0Gr+UZo3idYQn4OcDc526GyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvM2UxZjkzZGMtNjUyMC0z Nzc4LWFkM2QtMzc3NTA1NDlhOTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADBR5DjWyaA9bATeJ4wK6XCrFJYvlnZxA F+O6bAdcOQDXcJaf1NU26Hbqe+GlSi414tJP+TaIC+FkxikJzAeRJjXrBK/2iFwk J7sGL1dQpwyVokrFbFtUHioE9R43EjmFemk1KZ4Z/VNyy4rCdUT4fvGb/788+mu+ qAf5kpTrxHlDQxP4c8Z7EfWdh4CubaTDF8yELdiC311uEEZacXpG6gH2uJy5kg9G 1+CBb2gTtojfKUpvikd1TSCvjqYCgcFgNekHLOic7z93TQ1M5TSKpCqJT7he5KQM KUQhH92EeYWndOdCa6f/HJ6+DiWynmsfrI8aXwXdV8z8JCMMcwvZSw== -----END CERTIFICATE-----Generated at Wed Aug 6 16:10:40 2025 by rpki-client