$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/86cf6b8d-588c-3655-91c4-daa30a58f113.roa File: 86cf6b8d-588c-3655-91c4-daa30a58f113.roa (raw, json) Hash identifier: JGrh5p23Js7+BrAxL+5kfjAUvpKEP3cnQvQrVV1za/M= Subject key identifier: 86:0A:F6:71:29:BA:5B:BE:56:7A:36:2D:3B:16:00:B7:BB:FB:C2:44 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285849D594EEF22C10B5055B7BEC00 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/86cf6b8d-588c-3655-91c4-daa30a58f113.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 394380 IP address blocks: 23.19.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:ee:f2:2c:10:b5:05:5b:7b:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=d354e631-7738-4bc7-8c1b-bce90fd436e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d6:d2:00:23:6d:83:3a:c8:6d:10:35:7f:88: 11:cd:1a:46:da:0c:a2:e0:1e:00:8c:f9:9c:bc:0c: 27:8d:80:98:ec:93:48:7c:a2:28:ed:8e:b5:61:6a: 2f:9e:fa:d3:6e:5f:41:d9:98:4a:da:e2:cb:a8:eb: 50:45:6a:62:04:81:ab:61:6e:55:d1:fd:97:d4:6f: 7c:3d:97:f9:1c:b4:51:2c:d5:a8:3c:f7:ba:fe:7e: 6b:cb:66:32:98:56:a3:2f:f9:f3:90:bc:d9:74:c5: 07:a0:2c:dc:4a:3e:d0:f8:fc:2a:0c:f4:31:b3:30: 12:6c:10:9f:6a:48:b9:20:e8:cc:e1:7e:e3:78:99: 60:17:4e:47:67:1e:d9:db:05:c3:7f:97:dd:77:7f: 72:c6:13:95:19:46:ee:31:19:54:53:6d:5b:98:36: e6:e6:a9:2f:46:f3:71:a2:34:bb:7a:d3:5a:25:03: 7d:26:a5:bb:a3:21:a4:d0:dd:3c:f1:b9:ef:3c:d9: 44:9f:79:e2:b5:00:e0:08:da:03:fb:ea:68:2b:b1: a6:e6:2d:42:9b:c0:5f:5a:81:f3:ac:08:e5:e1:1f: 96:98:46:6c:53:83:38:b9:e8:2d:b6:4f:1f:3f:a8: 03:1f:f4:9f:29:ee:cd:54:ae:6e:e3:62:b2:71:aa: 38:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:0A:F6:71:29:BA:5B:BE:56:7A:36:2D:3B:16:00:B7:BB:FB:C2:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/86cf6b8d-588c-3655-91c4-daa30a58f113.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:f4:3f:50:a8:a5:d3:9f:cd:d9:01:a3:36:86:a0:7c:2a:37: ae:f0:a5:a4:02:3d:b2:91:99:e1:af:27:18:37:55:dc:b3:39: 9a:75:9e:1b:79:53:96:a6:9f:21:72:fa:e0:a4:44:bb:b2:e1: 91:b8:41:c2:5d:ec:34:42:31:41:81:f4:5c:f4:f2:3f:c4:91: 18:40:37:6e:d0:38:ad:b2:a2:82:b3:f3:0a:67:ba:50:52:98: 27:64:ff:50:f6:4c:7c:ce:de:9c:96:da:10:d3:f4:40:83:37: 2a:0d:4d:82:b6:26:63:34:d9:0d:4e:b8:16:98:11:0f:5b:3a: 08:38:55:84:8a:10:20:5f:80:f7:92:60:d3:74:91:b7:16:cd: 7b:b5:73:c8:1c:20:6c:75:68:dd:9e:d7:5c:4f:ee:01:73:ac: 37:d9:22:7e:1c:03:46:12:82:6b:f4:43:d4:83:4d:21:31:1f: 7c:bf:78:5a:63:29:2a:3d:a0:23:e0:fb:da:a6:cb:9b:b9:cc: f8:37:b3:c0:6f:c1:80:aa:36:1f:bf:62:80:9e:12:5a:02:ed: 36:28:de:43:b4:e1:e7:d2:bc:1c:8c:79:7f:b3:fb:af:3f:80: b2:e8:ce:f0:54:65:66:7c:6c:fa:98:20:5a:0a:6e:33:77:15: 4a:2c:ff:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlO7yLBC1BVt77AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk ZDM1NGU2MzEtNzczOC00YmM3LThjMWItYmNlOTBmZDQzNmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNbSACNtgzrIbRA1f4gRzRpG2gyi4B4AjPmc vAwnjYCY7JNIfKIo7Y61YWovnvrTbl9B2ZhK2uLLqOtQRWpiBIGrYW5V0f2X1G98 PZf5HLRRLNWoPPe6/n5ry2YymFajL/nzkLzZdMUHoCzcSj7Q+PwqDPQxszASbBCf aki5IOjM4X7jeJlgF05HZx7Z2wXDf5fdd39yxhOVGUbuMRlUU21bmDbm5qkvRvNx ojS7etNaJQN9JqW7oyGk0N088bnvPNlEn3nitQDgCNoD++poK7Gm5i1Cm8BfWoHz rAjl4R+WmEZsU4M4uegttk8fP6gDH/SfKe7NVK5u42Kycao43wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYK9nEpulu+Vno2LTsWALe7+8JEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvODZjZjZiOGQtNTg4Yy0z NjU1LTkxYzQtZGFhMzBhNThmMTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAr0P1CopdOfzdkBozaGoHwqN67wpaQCPbKRmeGvJxg3VdyzOZp1nht5 U5amnyFy+uCkRLuy4ZG4QcJd7DRCMUGB9Fz08j/EkRhAN27QOK2yooKz8wpnulBS mCdk/1D2THzO3pyW2hDT9ECDNyoNTYK2JmM02Q1OuBaYEQ9bOgg4VYSKECBfgPeS YNN0kbcWzXu1c8gcIGx1aN2e11xP7gFzrDfZIn4cA0YSgmv0Q9SDTSExH3y/eFpj KSo9oCPg+9qmy5u5zPg3s8BvwYCqNh+/YoCeEloC7TYo3kO04efSvByMeX+z+68/ gLLozvBUZWZ8bPqYIFoKbjN3FUos/6U= -----END CERTIFICATE-----Generated at Sun Jun 15 12:14:15 2025 by rpki-client