$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/44a7008f-8c8e-3393-bd69-b78e24b4387a.roa File: 44a7008f-8c8e-3393-bd69-b78e24b4387a.roa (raw, json) Hash identifier: ioY7wQKB03sPPpp6NTRNIEBcTJrCmsCNYoZffBvXIOw= Subject key identifier: 00:D3:49:80:21:47:A6:85:82:55:3F:76:E1:98:5E:CD:A4:32:C1:91 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584AB650F7938B038ADE4A7462C0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/44a7008f-8c8e-3393-bd69-b78e24b4387a.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 7203 IP address blocks: 23.19.197.0/24 maxlen: 24 2607:f5b5:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:f7:93:8b:03:8a:de:4a:74:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=870ee2b1-d081-430f-8883-f9ec1471cc69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:74:d2:61:f5:f8:f1:0a:29:da:db:57:ca:4a: ca:4f:5a:08:ba:fa:fb:26:35:f1:0d:07:5b:57:a2: 54:7e:46:0d:af:fd:47:d3:e0:5f:81:d0:a6:44:d9: 62:dd:98:95:f2:3a:b6:ce:d1:e9:13:ad:3a:e5:10: 9d:02:7f:8f:ef:8a:28:7d:02:cc:9c:8c:37:c3:a1: 96:28:92:05:7f:50:be:0d:1e:e6:e9:e7:2e:7b:d6: 6b:3c:4e:38:88:9d:fa:18:eb:2d:cb:ba:64:64:f7: aa:9a:e7:5a:84:64:b6:93:76:40:30:49:0b:34:69: b6:79:16:9b:47:c9:f4:f1:77:93:41:b9:19:5f:6e: c3:58:e4:8b:3f:97:a4:6d:f1:e0:c1:2f:09:85:eb: 15:53:47:e6:8d:39:42:c7:11:30:c7:e2:94:e2:54: 48:38:22:88:b8:0f:4d:c6:8b:eb:f1:73:c2:38:32: f3:80:3e:00:41:28:2d:83:b1:81:0a:26:db:c5:4b: ec:af:71:c3:2f:5c:60:3d:39:56:0b:57:67:c0:b3: cf:8b:69:cb:44:37:44:e8:02:6f:a2:a5:90:0e:4e: 37:a9:ed:f5:ef:8c:9b:92:50:6c:93:59:68:db:ac: 9a:08:1c:e5:0c:42:fc:fc:c1:8e:3d:82:52:18:8f: f3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D3:49:80:21:47:A6:85:82:55:3F:76:E1:98:5E:CD:A4:32:C1:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/44a7008f-8c8e-3393-bd69-b78e24b4387a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.197.0/24 IPv6: 2607:f5b5:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:0e:a6:d3:12:f4:99:0a:ae:8f:81:05:38:d4:91:a8:c1:09: 26:a5:60:69:a9:c4:46:26:d5:53:57:ad:12:2a:3d:89:fb:99: 5c:3a:6e:24:93:de:69:28:69:45:3d:03:60:14:cf:36:5f:ff: a1:a1:f8:d4:8e:00:e9:89:74:79:c1:33:64:9e:c4:44:5e:a3: 95:57:21:8e:1b:f1:c8:d8:8c:1f:90:74:ad:18:3d:8b:47:f5: 4a:9a:a6:dd:3e:0c:aa:c9:1a:88:35:c8:7a:47:c6:ac:be:8f: 61:c4:a1:12:2d:29:79:62:a6:1a:fb:83:55:27:df:2c:40:cc: af:5e:31:3c:14:d9:b3:d4:89:fe:77:5a:0f:fa:2d:86:09:8e: e7:93:9e:9b:15:2f:d9:c8:dd:ce:5f:47:5f:65:35:25:93:2c: 3f:fe:8d:9c:03:4c:69:11:e1:98:84:90:4b:19:58:ca:27:31: 7a:96:8f:26:53:6b:2c:6c:64:7b:9f:fb:f1:98:bd:aa:a6:0c: 27:8f:39:53:35:9d:61:7e:fc:e9:fc:4f:49:c4:73:d4:dd:4b: 7a:ca:1f:cb:04:45:f4:80:4f:53:8b:b7:5c:ef:63:9e:8c:e8: b7:60:bf:78:f2:96:2d:f6:27:d0:b8:d9:e7:f5:71:c5:56:8b: 8e:8c:a1:a0 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEq2UPeTiwOK3kp0YsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk ODcwZWUyYjEtZDA4MS00MzBmLTg4ODMtZjllYzE0NzFjYzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3TSYfX48Qop2ttXykrKT1oIuvr7JjXxDQdb V6JUfkYNr/1H0+BfgdCmRNli3ZiV8jq2ztHpE6065RCdAn+P74oofQLMnIw3w6GW KJIFf1C+DR7m6ecue9ZrPE44iJ36GOsty7pkZPeqmudahGS2k3ZAMEkLNGm2eRab R8n08XeTQbkZX27DWOSLP5ekbfHgwS8JhesVU0fmjTlCxxEwx+KU4lRIOCKIuA9N xovr8XPCODLzgD4AQSgtg7GBCibbxUvsr3HDL1xgPTlWC1dnwLPPi2nLRDdE6AJv oqWQDk43qe3174ybklBsk1lo26yaCBzlDEL8/MGOPYJSGI/z1QIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFADTSYAhR6aFglU/duGYXs2kMsGRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNDRhNzAwOGYtOGM4ZS0z MzkzLWJkNjktYjc4ZTI0YjQzODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxPFMA8E AgACMAkDBwAmB/W1AAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGw6m0xL0mQquj4EFONSRqMEJJqVgaanE RibVU1etEio9ifuZXDpuJJPeaShpRT0DYBTPNl//oaH41I4A6Yl0ecEzZJ7ERF6j lVchjhvxyNiMH5B0rRg9i0f1Spqm3T4MqskaiDXIekfGrL6PYcShEi0peWKmGvuD VSffLEDMr14xPBTZs9SJ/ndaD/othgmO55OemxUv2cjdzl9HX2U1JZMsP/6NnANM aRHhmISQSxlYyicxepaPJlNrLGxke5/78Zi9qqYMJ485UzWdYX786fxPScRz1N1L esofywRF9IBPU4u3XO9jnozot2C/ePKWLfYn0LjZ5/VxxVaLjoyhoA== -----END CERTIFICATE-----Generated at Mon Aug 4 15:33:17 2025 by rpki-client