$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/beaa5cfd-2ca5-306e-9d94-088d7c9f721d.roa File: beaa5cfd-2ca5-306e-9d94-088d7c9f721d.roa (raw, json) Hash identifier: C+avc934bPGE7EdFoBv3cHNI6T3uEeBxLbNhBNvVj+4= Subject key identifier: BA:71:C3:D3:44:3A:F7:D1:63:0E:C8:3D:87:03:02:D0:86:41:ED:7B Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584AB650F6B6EE3DB886999C8080 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/beaa5cfd-2ca5-306e-9d94-088d7c9f721d.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 396362 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:f6:b6:ee:3d:b8:86:99:9c:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=f4cf721f-3383-4ae8-8740-e4ef6cf11344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5f:c7:cc:dd:c7:fc:80:12:0c:4d:8c:3f:c5: d4:8f:bb:5f:e9:73:06:5b:ee:f4:1d:5c:1f:d7:e1: dc:a7:e3:2d:fe:29:77:0a:68:bc:f1:3c:fb:9d:2f: c0:57:5c:77:f6:09:3a:99:28:ae:66:58:7d:23:f9: 4a:6c:0e:b3:c3:bd:27:49:7a:bf:9d:73:6a:8f:89: 73:55:22:a2:a9:db:5f:8c:bc:3c:07:ea:11:8e:7c: d7:00:57:c5:59:95:e7:35:bd:e7:6d:35:3d:eb:fc: 78:27:05:8f:43:a0:25:c2:c4:36:af:76:27:db:a0: a8:f3:4b:a3:a3:fa:75:d9:cc:43:c0:03:19:b3:3e: 10:98:a7:14:4d:92:e0:ea:cc:0e:3b:be:34:ef:ae: 5b:a0:cd:ef:27:3d:17:a5:85:7a:dc:03:c3:4d:18: b4:eb:5a:0e:51:3e:28:b0:bd:ab:09:bc:e7:25:d7: 8d:d1:13:97:41:df:02:e3:68:9a:3c:61:53:cf:2a: e0:c5:64:93:6d:6b:2c:fc:46:cb:4e:be:79:f0:68: 17:90:e4:d1:e6:24:e3:50:c8:3f:d4:eb:dc:e4:a2: df:3d:58:db:e5:37:56:f7:0c:57:68:82:47:34:e0: f7:5b:6a:b8:9c:86:a7:c6:a8:eb:03:29:86:04:0e: 04:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:71:C3:D3:44:3A:F7:D1:63:0E:C8:3D:87:03:02:D0:86:41:ED:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/beaa5cfd-2ca5-306e-9d94-088d7c9f721d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:cb:7d:d0:9f:61:c7:66:25:c7:75:a6:b2:b9:cb:77:04:23: 24:75:e4:26:a2:fd:4e:4e:29:e5:7b:a8:1a:e5:c5:3e:74:4c: c1:24:14:57:d5:fb:b0:f7:7d:3f:d3:24:49:d3:21:1e:e0:18: 18:78:b0:42:62:a8:73:95:fc:12:21:7a:0f:71:38:05:72:1d: 02:d9:01:72:c8:b6:cd:48:75:8e:8c:06:74:33:4e:fb:24:3d: 62:09:37:95:09:e4:b6:56:a2:0d:3f:13:11:88:d3:4d:03:94: 44:ca:e0:29:f2:32:03:ce:ec:bf:8d:f1:87:20:6d:5c:e4:5e: dd:8b:84:01:ce:32:9f:53:c1:a1:8f:dc:c3:8f:29:a2:f7:8d: 91:6b:4a:bb:39:95:c8:28:12:d2:36:07:a0:55:53:4b:12:0f: 72:5d:01:d4:9d:96:32:e1:1e:a3:a1:76:c5:70:91:0c:9f:b0: 13:00:8a:af:6b:09:e5:9f:6f:ce:31:38:3e:10:12:76:65:5d: d7:15:06:64:ba:3c:a2:4a:4a:65:58:b3:37:1f:32:12:3c:cf: 8b:a1:b6:44:09:79:51:ab:3f:e5:d3:20:a6:8c:12:15:f3:de: 10:4b:e3:d3:03:89:a4:8d:cc:62:20:94:01:ad:86:10:60:1c: 9a:a5:99:ea -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEq2UPa27j24hpmcgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk ZjRjZjcyMWYtMzM4My00YWU4LTg3NDAtZTRlZjZjZjExMzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF/HzN3H/IASDE2MP8XUj7tf6XMGW+70HVwf 1+Hcp+Mt/il3Cmi88Tz7nS/AV1x39gk6mSiuZlh9I/lKbA6zw70nSXq/nXNqj4lz VSKiqdtfjLw8B+oRjnzXAFfFWZXnNb3nbTU96/x4JwWPQ6AlwsQ2r3Yn26Co80uj o/p12cxDwAMZsz4QmKcUTZLg6swOO740765boM3vJz0XpYV63APDTRi061oOUT4o sL2rCbznJdeN0ROXQd8C42iaPGFTzyrgxWSTbWss/EbLTr558GgXkOTR5iTjUMg/ 1Ovc5KLfPVjb5TdW9wxXaIJHNOD3W2q4nIanxqjrAymGBA4E8wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFLpxw9NEOvfRYw7IPYcDAtCGQe17MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYmVhYTVjZmQtMmNhNS0z MDZlLTlkOTQtMDg4ZDdjOWY3MjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAAst90J9hx2Ylx3WmsrnLdwQjJHXkJqL9 Tk4p5XuoGuXFPnRMwSQUV9X7sPd9P9MkSdMhHuAYGHiwQmKoc5X8EiF6D3E4BXId AtkBcsi2zUh1jowGdDNO+yQ9Ygk3lQnktlaiDT8TEYjTTQOURMrgKfIyA87sv43x hyBtXORe3YuEAc4yn1PBoY/cw48poveNkWtKuzmVyCgS0jYHoFVTSxIPcl0B1J2W MuEeo6F2xXCRDJ+wEwCKr2sJ5Z9vzjE4PhASdmVd1xUGZLo8okpKZVizNx8yEjzP i6G2RAl5Uas/5dMgpowSFfPeEEvj0wOJpI3MYiCUAa2GEGAcmqWZ6g== -----END CERTIFICATE-----Generated at Tue Aug 5 08:24:05 2025 by rpki-client