$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bb02bbe3-126a-326c-b493-d6ffc832128e.roa File: bb02bbe3-126a-326c-b493-d6ffc832128e.roa (raw, json) Hash identifier: Lld2sdPZmDA/FCn6LAO05zh+99hinDaUuON1uLEK/Kk= Subject key identifier: FE:6F:5F:BC:A4:15:C5:CC:81:36:E0:33:22:12:13:44:48:D8:FE:80 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285849D594F0E4E832E5CFC8BABF80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bb02bbe3-126a-326c-b493-d6ffc832128e.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 134351 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:f0:e4:e8:32:e5:cf:c8:ba:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=cfb45d57-d276-441c-82c0-fca0f968cf72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ba:07:fe:7f:f9:2c:55:cd:bd:d5:3e:14:ef: ca:80:a3:cf:f5:0b:28:d8:9c:db:90:09:9f:f4:4b: 71:de:cd:3a:b4:ff:70:23:59:52:fa:cb:1a:d2:6b: b9:56:83:0b:11:2c:bb:9f:d6:39:d9:34:e9:3d:7b: 0d:ff:37:fc:09:d9:91:3d:39:4f:f7:a8:f4:37:43: 74:4e:57:4f:af:ab:85:99:b3:e7:c9:17:38:ff:d9: c3:00:71:4b:cf:c7:53:c7:5b:f3:65:85:8a:fb:2d: e7:a5:44:40:04:f1:e9:69:bc:3b:9a:e7:21:49:65: 5c:37:3a:64:37:22:54:fb:ea:90:5a:68:29:4d:b1: d2:d6:ee:b2:8a:3f:a3:00:0d:74:97:dc:70:e4:0b: 03:5f:37:db:38:94:ac:e4:23:cd:03:19:08:4c:33: 08:0b:59:50:6a:09:96:02:f0:89:a2:fc:46:b4:7c: d9:1e:dd:f0:54:51:20:59:73:39:87:f5:8a:fb:e0: 16:8a:ea:bb:3c:4f:63:19:c2:90:2d:e3:85:a9:49: 4a:ca:05:0e:83:79:90:37:37:5f:a7:7d:a6:de:6f: a2:ab:29:fe:f8:d2:1e:84:2d:4d:2d:f3:df:b6:05: 2e:1c:ac:c4:a7:a5:df:60:87:7d:30:36:14:ee:3b: ee:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:6F:5F:BC:A4:15:C5:CC:81:36:E0:33:22:12:13:44:48:D8:FE:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bb02bbe3-126a-326c-b493-d6ffc832128e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:24:79:97:25:43:44:d1:a3:66:a6:52:81:ce:ba:85:75:cd: 44:41:eb:e9:d4:d9:9a:ab:05:54:b8:6a:80:10:00:0a:ce:7d: b3:27:4d:53:81:b1:68:c4:cc:7f:32:ac:7f:e1:ad:2b:1f:f5: e2:3b:1b:6c:71:5f:4b:80:36:51:b0:ca:3f:56:e2:8c:17:6b: 08:c0:0c:37:e2:3e:25:9b:89:f8:b8:17:87:f1:8a:10:99:55: 1f:29:7b:94:30:0a:33:54:fc:31:b4:62:81:9d:84:f7:c5:44: d2:87:c6:fd:d3:59:55:36:a6:14:dc:e5:f0:de:15:aa:dc:44: fe:de:36:0f:aa:85:e1:1f:06:46:98:bf:d4:01:cf:37:6b:87: 2c:20:20:bd:16:11:30:ef:e2:7e:37:5b:2b:b5:ca:b8:ad:3a: 64:60:7a:bf:46:64:c0:2f:fc:da:a1:5c:52:57:b3:84:c3:31: 17:5a:be:e4:d3:b7:eb:a1:6d:ab:8c:ba:97:99:47:3b:93:a0: 03:ec:70:a2:9f:c7:b9:a3:00:39:65:05:8e:e9:f8:02:35:b2: 09:01:d9:73:56:75:0f:17:b8:38:5c:73:e4:71:33:a3:e7:ce: 91:9c:0c:bd:a9:c4:d9:b9:e3:a8:ab:8e:bb:63:7e:e4:78:ce: 42:c1:5d:8b -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEnVlPDk6DLlz8i6v4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk Y2ZiNDVkNTctZDI3Ni00NDFjLTgyYzAtZmNhMGY5NjhjZjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmroH/n/5LFXNvdU+FO/KgKPP9Qso2JzbkAmf 9Etx3s06tP9wI1lS+ssa0mu5VoMLESy7n9Y52TTpPXsN/zf8CdmRPTlP96j0N0N0 TldPr6uFmbPnyRc4/9nDAHFLz8dTx1vzZYWK+y3npURABPHpabw7muchSWVcNzpk NyJU++qQWmgpTbHS1u6yij+jAA10l9xw5AsDXzfbOJSs5CPNAxkITDMIC1lQagmW AvCJovxGtHzZHt3wVFEgWXM5h/WK++AWiuq7PE9jGcKQLeOFqUlKygUOg3mQNzdf p32m3m+iqyn++NIehC1NLfPftgUuHKzEp6XfYId9MDYU7jvueQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFP5vX7ykFcXMgTbgMyISE0RI2P6AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYmIwMmJiZTMtMTI2YS0z MjZjLWI0OTMtZDZmZmM4MzIxMjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAkCR5lyVDRNGjZqZSgc66hXXNREHr6dTZ mqsFVLhqgBAACs59sydNU4GxaMTMfzKsf+GtKx/14jsbbHFfS4A2UbDKP1bijBdr CMAMN+I+JZuJ+LgXh/GKEJlVHyl7lDAKM1T8MbRigZ2E98VE0ofG/dNZVTamFNzl 8N4VqtxE/t42D6qF4R8GRpi/1AHPN2uHLCAgvRYRMO/ifjdbK7XKuK06ZGB6v0Zk wC/82qFcUlezhMMxF1q+5NO366Ftq4y6l5lHO5OgA+xwop/HuaMAOWUFjun4AjWy CQHZc1Z1Dxe4OFxz5HEzo+fOkZwMvanE2bnjqKuOu2N+5HjOQsFdiw== -----END CERTIFICATE-----Generated at Sun Jun 15 20:01:23 2025 by rpki-client