$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d6d31bd6-e13a-3d53-ab6c-9794fd535cb0.roa File: d6d31bd6-e13a-3d53-ab6c-9794fd535cb0.roa (raw, json) Hash identifier: PiPFXVGNYPjsef+F/MZ7oq0e/cnafSrB2TYqTmd8NYU= Subject key identifier: BD:5A:93:3F:5E:B4:32:1A:48:A7:B5:13:73:E0:F8:75:34:B7:BB:99 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285849D594F0CA52CEDB468CE98FF0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d6d31bd6-e13a-3d53-ab6c-9794fd535cb0.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 394380 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:f0:ca:52:ce:db:46:8c:e9:8f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=470300f4-b07e-4e65-96f9-bf829673ea94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e9:06:ac:e4:22:75:86:1c:b2:d7:04:6f:8b: 8c:9d:b3:eb:a4:57:01:cb:d5:7c:6a:76:56:85:c5: e1:f8:cb:dd:6e:cb:e4:33:bc:c6:a0:dd:07:fb:5d: 4b:d3:de:3a:99:36:43:1f:51:50:6b:dd:47:9a:d6: 29:78:8c:2d:5d:34:3b:a9:61:d9:e7:95:d0:e2:78: d9:0f:9e:a2:c6:2f:d1:33:f1:fd:de:74:21:71:29: 98:1a:7a:6f:52:d7:ae:80:b1:eb:2a:33:d9:2f:cd: 4b:2a:e7:00:c5:29:c5:3c:16:14:6c:e4:20:75:c5: f9:ec:82:e9:99:18:09:c2:d0:e4:23:ca:45:e5:12: 32:62:ca:43:14:82:6f:6c:b7:e4:af:af:86:68:51: 2e:5f:45:07:53:27:3c:18:c9:58:20:8f:cb:b2:aa: d6:00:56:c9:25:77:66:37:44:02:04:e2:39:a2:e6: 6c:bb:d4:7f:69:de:02:da:9f:e2:e0:06:59:f3:25: 90:f4:e4:d2:51:f4:96:82:87:6c:77:9c:00:67:00: 9b:60:ab:73:bb:9f:a6:df:89:cb:8b:47:50:8d:ba: 65:00:67:6e:7e:45:34:4f:6f:67:46:75:60:76:52: 58:93:17:73:03:3d:db:53:fd:c2:ed:9b:06:2f:72: 7c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:5A:93:3F:5E:B4:32:1A:48:A7:B5:13:73:E0:F8:75:34:B7:BB:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d6d31bd6-e13a-3d53-ab6c-9794fd535cb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:d1:2a:c1:3d:4b:2b:a2:91:fd:9a:e2:d7:7c:0b:76:2e:a8: af:38:1d:00:81:80:a5:21:02:a4:0c:ca:38:ae:81:c6:5d:af: fc:4f:27:a4:88:e6:4a:70:a5:ce:c0:4b:82:d9:fc:70:f7:8f: ea:8d:31:34:49:58:b5:b2:94:11:64:53:8a:6e:10:f4:b8:93: 65:d3:af:72:b6:50:10:9a:ea:5c:39:cd:b4:30:3a:40:06:a1: b0:65:e3:18:1a:85:b3:15:52:e2:80:4d:39:a7:fe:87:37:90: fc:a8:b1:74:c7:23:fb:bf:33:e8:68:b7:fd:5d:c3:fa:1f:35: 14:33:a4:ca:6b:59:41:19:fc:f0:00:41:d7:6d:e4:f4:1b:37: 1c:30:9f:ce:41:62:51:67:c7:e9:76:e0:42:78:91:03:ba:d3: 1b:cf:20:e9:ba:d7:2d:68:f8:8c:a2:79:a6:49:9b:d2:dd:2b: 74:d8:94:9f:d8:70:85:1a:86:85:74:7f:91:3c:5a:2c:0f:ed: 4b:fb:e5:ef:21:0f:2a:b5:66:b6:5b:76:35:3b:66:a9:e3:3c: aa:78:59:dc:f8:49:9a:23:94:f5:6a:b8:86:85:80:bb:bb:01: ff:89:a9:dd:d6:41:9d:27:b4:3f:92:36:4e:c6:4b:42:93:e2: ff:10:07:57 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEnVlPDKUs7bRozpj/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk NDcwMzAwZjQtYjA3ZS00ZTY1LTk2ZjktYmY4Mjk2NzNlYTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiukGrOQidYYcstcEb4uMnbPrpFcBy9V8anZW hcXh+MvdbsvkM7zGoN0H+11L0946mTZDH1FQa91HmtYpeIwtXTQ7qWHZ55XQ4njZ D56ixi/RM/H93nQhcSmYGnpvUteugLHrKjPZL81LKucAxSnFPBYUbOQgdcX57ILp mRgJwtDkI8pF5RIyYspDFIJvbLfkr6+GaFEuX0UHUyc8GMlYII/LsqrWAFbJJXdm N0QCBOI5ouZsu9R/ad4C2p/i4AZZ8yWQ9OTSUfSWgodsd5wAZwCbYKtzu5+m34nL i0dQjbplAGdufkU0T29nRnVgdlJYkxdzAz3bU/3C7ZsGL3J8fQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFL1akz9etDIaSKe1E3Pg+HU0t7uZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZDZkMzFiZDYtZTEzYS0z ZDUzLWFiNmMtOTc5NGZkNTM1Y2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPdEqwT1LK6KR/Zri13wLdi6orzgdAIGA pSECpAzKOK6Bxl2v/E8npIjmSnClzsBLgtn8cPeP6o0xNElYtbKUEWRTim4Q9LiT ZdOvcrZQEJrqXDnNtDA6QAahsGXjGBqFsxVS4oBNOaf+hzeQ/KixdMcj+78z6Gi3 /V3D+h81FDOkymtZQRn88ABB123k9Bs3HDCfzkFiUWfH6XbgQniRA7rTG88g6brX LWj4jKJ5pkmb0t0rdNiUn9hwhRqGhXR/kTxaLA/tS/vl7yEPKrVmtlt2NTtmqeM8 qnhZ3PhJmiOU9Wq4hoWAu7sB/4mp3dZBnSe0P5I2TsZLQpPi/xAHVw== -----END CERTIFICATE-----Generated at Sun Jun 15 11:57:49 2025 by rpki-client