$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/701d4f9d-3ad1-3d4d-afea-37da4a754fe5.roa File: 701d4f9d-3ad1-3d4d-afea-37da4a754fe5.roa (raw, json) Hash identifier: pldHf4iefL+H+Tc7Fem/l+hIwCQ6K41QKkg2CuvwmF4= Subject key identifier: F9:F5:FD:3C:E3:EC:F7:FA:3B:C4:F3:2C:5F:56:D3:A2:71:71:58:28 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584AB650F7B7E03C07C9ED878480 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/701d4f9d-3ad1-3d4d-afea-37da4a754fe5.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 60781 IP address blocks: 23.19.197.0/24 maxlen: 24 2607:f5b5:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:f7:b7:e0:3c:07:c9:ed:87:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=c9eb6a36-ab84-4671-9a94-cac0aa081711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2f:77:32:f8:14:46:34:d6:5d:d3:c9:1c:c4: 0a:62:a2:a6:1e:78:ef:9f:4e:a4:46:a0:ab:2b:e4: 39:46:1e:4a:95:41:10:15:b5:03:7f:e0:17:32:b1: d7:1a:13:29:b4:e0:08:64:4a:33:5e:36:34:5d:ab: a0:a1:7d:f1:77:78:c0:b2:27:33:61:1c:56:1b:ce: 15:92:84:a7:50:5c:64:d3:96:10:95:94:ed:92:8f: 96:bb:5c:0b:71:3b:fd:ce:b3:e1:5e:8d:5d:df:e4: 80:df:b5:a1:90:8a:04:1d:da:61:7d:2d:93:68:19: f1:7f:ec:11:09:38:5f:8d:fa:2e:c2:57:ae:6b:05: ab:01:8b:a5:ef:5b:62:d5:c7:29:1b:23:9b:6d:a1: d2:ff:4c:c5:0c:df:3b:cb:f6:71:af:07:47:66:b4: fd:fe:3e:42:19:bf:98:ab:91:73:f3:2d:81:ce:49: 0e:02:0f:15:9c:28:a1:c3:72:f5:68:4c:0d:05:48: 1f:bb:b2:86:3b:55:fd:da:13:0b:54:85:09:eb:a3: 2c:fb:36:4f:95:16:5a:c2:9d:04:f6:15:00:47:ad: e3:da:95:df:7a:d4:98:0e:51:34:90:23:18:a9:0f: a5:c2:c8:29:6d:af:b7:e7:cf:74:a2:5e:69:32:66: 1e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F5:FD:3C:E3:EC:F7:FA:3B:C4:F3:2C:5F:56:D3:A2:71:71:58:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/701d4f9d-3ad1-3d4d-afea-37da4a754fe5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.197.0/24 IPv6: 2607:f5b5:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:78:b9:b1:f2:99:74:cc:9a:ee:16:65:c4:4c:92:99:62:f7: 4b:f3:c3:bb:6f:1b:d7:f7:61:5b:e1:8a:16:b8:c9:17:82:4a: ef:d1:e6:98:78:06:d0:18:97:c8:86:f3:66:69:f8:6a:a6:c9: 08:05:45:3b:06:a8:f3:22:f0:a6:c4:93:e0:03:55:36:a4:28: d8:33:08:8e:69:0d:ee:8b:3e:8b:e5:aa:8b:ce:59:af:5e:42: 3f:1d:44:6e:1f:b2:fd:df:0a:f4:f5:ef:44:bb:85:9f:bc:bc: fa:25:02:75:c5:d5:f1:a7:85:1d:8b:d5:e8:9d:81:0a:d9:b5: 22:a0:29:4f:c8:04:e8:f3:17:76:22:37:2b:fe:68:a4:e0:1c: 33:83:41:09:49:cc:0b:90:79:2e:13:a4:39:f3:5e:1e:ab:0b: 23:9a:3b:73:61:a7:42:d1:96:77:3f:bc:3e:80:88:78:0c:55: ed:85:fc:ca:82:60:de:7d:93:11:60:fa:4c:6c:4e:f3:ac:99: 76:fe:d6:40:7b:2a:9c:44:d8:21:cb:d7:ae:0f:38:67:70:cd: 3b:51:80:21:36:8d:04:c2:09:7e:51:56:d3:70:78:fe:ff:04: 8c:04:4d:57:5b:05:86:61:a2:70:83:58:7f:1e:f8:f0:ad:1b: 2f:f0:96:03 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEq2UPe34DwHye2HhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk YzllYjZhMzYtYWI4NC00NjcxLTlhOTQtY2FjMGFhMDgxNzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS93MvgURjTWXdPJHMQKYqKmHnjvn06kRqCr K+Q5Rh5KlUEQFbUDf+AXMrHXGhMptOAIZEozXjY0XaugoX3xd3jAsiczYRxWG84V koSnUFxk05YQlZTtko+Wu1wLcTv9zrPhXo1d3+SA37WhkIoEHdphfS2TaBnxf+wR CThfjfouwleuawWrAYul71ti1ccpGyObbaHS/0zFDN87y/ZxrwdHZrT9/j5CGb+Y q5Fz8y2BzkkOAg8VnCihw3L1aEwNBUgfu7KGO1X92hMLVIUJ66Ms+zZPlRZawp0E 9hUAR63j2pXfetSYDlE0kCMYqQ+lwsgpba+35890ol5pMmYedQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFPn1/Tzj7Pf6O8TzLF9W06JxcVgoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNzAxZDRmOWQtM2FkMS0z ZDRkLWFmZWEtMzdkYTRhNzU0ZmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxPFMA8E AgACMAkDBwAmB/W1AAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAx3i5sfKZdMya7hZlxEySmWL3S/PDu28b 1/dhW+GKFrjJF4JK79HmmHgG0BiXyIbzZmn4aqbJCAVFOwao8yLwpsST4ANVNqQo 2DMIjmkN7os+i+Wqi85Zr15CPx1Ebh+y/d8K9PXvRLuFn7y8+iUCdcXV8aeFHYvV 6J2BCtm1IqApT8gE6PMXdiI3K/5opOAcM4NBCUnMC5B5LhOkOfNeHqsLI5o7c2Gn QtGWdz+8PoCIeAxV7YX8yoJg3n2TEWD6TGxO86yZdv7WQHsqnETYIcvXrg84Z3DN O1GAITaNBMIJflFW03B4/v8EjARNV1sFhmGicINYfx748K0bL/CWAw== -----END CERTIFICATE-----Generated at Mon Aug 4 15:35:11 2025 by rpki-client