$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/44a7008f-8c8e-3393-bd69-b78e24b4387a.roa File: 44a7008f-8c8e-3393-bd69-b78e24b4387a.roa (raw, json) Hash identifier: /pegb4j38mzSwAU6bvYQmGvztzdcy3hQKhtbYv/mQqQ= Subject key identifier: 77:DF:BC:19:34:EE:53:07:4B:B2:34:C2:02:4F:4C:3C:A6:C1:81:95 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285849D594F16CF6D35D059D7FEDC0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/44a7008f-8c8e-3393-bd69-b78e24b4387a.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 7203 IP address blocks: 23.19.197.0/24 maxlen: 24 2607:f5b5:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:f1:6c:f6:d3:5d:05:9d:7f:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=15b7302c-7b5f-44df-9bb0-1ca1a272c4c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ba:eb:59:44:5f:b0:29:27:c4:4c:ef:1f:4b: 82:36:e4:30:e3:b4:26:10:2d:a7:05:08:a1:5e:24: 54:49:de:4d:63:37:98:d5:46:d8:d8:fb:62:00:df: ad:fd:24:e9:50:36:82:84:8d:d6:02:96:d5:af:38: d8:14:4e:2e:22:4f:ef:18:41:cb:3f:56:3b:b2:cc: 89:8b:86:3b:a1:3f:3c:cc:96:49:26:6a:58:a6:a6: 41:42:32:a3:45:bb:ab:39:66:0c:5a:39:02:a6:bd: 31:e2:94:f9:cf:3c:37:d3:01:92:8d:cc:08:85:45: 3a:94:80:03:85:dc:b8:67:43:f3:f8:88:6e:d6:96: 2c:a9:ba:86:d7:17:30:4b:77:aa:54:08:bd:b3:38: 3b:20:6a:d8:3c:1f:9c:31:93:60:07:46:57:6f:6d: 58:64:0a:56:5e:c7:1f:92:7b:08:83:bf:cc:55:e4: 33:9e:80:5a:13:91:01:d4:81:fd:c6:46:49:33:f3: 1a:81:5b:b6:9c:64:c1:84:90:db:48:1a:fe:2a:52: e7:30:45:5c:2c:21:39:5f:b8:0b:e0:18:81:f3:8e: d7:d0:91:a9:42:15:bd:b6:47:d6:84:81:31:ba:ef: 0b:a5:9e:ff:cd:3c:cb:29:13:8a:91:66:1f:36:6d: 38:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:DF:BC:19:34:EE:53:07:4B:B2:34:C2:02:4F:4C:3C:A6:C1:81:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/44a7008f-8c8e-3393-bd69-b78e24b4387a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.197.0/24 IPv6: 2607:f5b5:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:23:ed:45:02:d4:43:a2:d1:32:cb:30:84:4a:af:9d:74:da: 27:78:f7:cb:78:c1:09:e9:b8:75:70:b8:5e:33:1d:1b:87:ed: 6b:7a:e7:f0:a2:20:3e:46:2d:f7:66:ab:a5:b4:c4:8e:6e:0c: 2f:f0:b7:52:89:9c:24:c8:f9:16:e0:5d:29:2d:b1:40:6e:45: b9:46:9d:60:66:11:00:07:fd:9d:8b:46:b4:01:6a:ac:b5:51: 57:fe:73:e1:72:7d:30:31:23:d9:b1:3b:f0:50:d4:6d:95:17: 49:f6:0f:d4:d1:96:19:61:a5:65:79:79:86:01:c8:f6:e6:bf: f6:8b:2c:3a:df:a4:79:59:73:92:70:86:92:b8:9b:f9:ae:17: 15:31:dc:ff:bb:37:3c:62:1c:e5:f9:31:47:be:fc:20:1b:0b: f2:5f:d5:17:de:ff:a9:dc:e3:f9:7e:a6:a0:42:7e:e6:a4:2e: 9f:d2:1f:6a:ed:e2:d8:2c:97:b2:21:1e:30:98:cd:af:4d:fc: 06:36:4c:88:68:ba:ef:78:a0:17:19:3e:82:3d:ed:5a:ce:29: 6f:15:ed:7b:41:ac:7f:fa:ca:17:87:15:9a:cc:a9:cd:b0:8e: 6b:b0:da:6c:4c:f6:15:23:2d:98:1f:e8:1d:8b:33:fb:cc:cf: 2e:29:a1:75 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEnVlPFs9tNdBZ1/7cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk MTViNzMwMmMtN2I1Zi00NGRmLTliYjAtMWNhMWEyNzJjNGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLrrWURfsCknxEzvH0uCNuQw47QmEC2nBQih XiRUSd5NYzeY1UbY2PtiAN+t/STpUDaChI3WApbVrzjYFE4uIk/vGEHLP1Y7ssyJ i4Y7oT88zJZJJmpYpqZBQjKjRburOWYMWjkCpr0x4pT5zzw30wGSjcwIhUU6lIAD hdy4Z0Pz+Ihu1pYsqbqG1xcwS3eqVAi9szg7IGrYPB+cMZNgB0ZXb21YZApWXscf knsIg7/MVeQznoBaE5EB1IH9xkZJM/MagVu2nGTBhJDbSBr+KlLnMEVcLCE5X7gL 4BiB847X0JGpQhW9tkfWhIExuu8LpZ7/zTzLKROKkWYfNm04SQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFHffvBk07lMHS7I0wgJPTDymwYGVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNDRhNzAwOGYtOGM4ZS0z MzkzLWJkNjktYjc4ZTI0YjQzODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxPFMA8E AgACMAkDBwAmB/W1AAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAkSPtRQLUQ6LRMsswhEqvnXTaJ3j3y3jB Cem4dXC4XjMdG4fta3rn8KIgPkYt92arpbTEjm4ML/C3UomcJMj5FuBdKS2xQG5F uUadYGYRAAf9nYtGtAFqrLVRV/5z4XJ9MDEj2bE78FDUbZUXSfYP1NGWGWGlZXl5 hgHI9ua/9ossOt+keVlzknCGkrib+a4XFTHc/7s3PGIc5fkxR778IBsL8l/VF97/ qdzj+X6moEJ+5qQun9Ifau3i2CyXsiEeMJjNr038BjZMiGi673igFxk+gj3tWs4p bxXte0Gsf/rKF4cVmsypzbCOa7DabEz2FSMtmB/oHYsz+8zPLimhdQ== -----END CERTIFICATE-----Generated at Sun Jun 15 12:13:35 2025 by rpki-client