$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e27e85fc-74f0-3a9f-b8c7-06ac1778712b.roa File: e27e85fc-74f0-3a9f-b8c7-06ac1778712b.roa (raw, json) Hash identifier: tm7WHRHMB9RKUc3zkaXjhwQuS4zPlmN5BfZxoTSGiFo= Subject key identifier: 4C:37:A9:BC:79:B6:54:3A:28:0C:64:37:9C:35:AF:C0:32:40:C3:CC Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584AB650F785FB2F64038DF4B3A0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e27e85fc-74f0-3a9f-b8c7-06ac1778712b.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 7203 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:f7:85:fb:2f:64:03:8d:f4:b3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=ba953a59-52bc-4a4d-9a83-322993bb37fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9f:2e:f1:cf:b6:7b:0f:64:89:38:72:ee:a5: 26:06:10:82:09:f6:f9:0c:02:48:ea:3e:33:97:4e: 3a:58:fd:15:3b:19:77:99:d4:48:b5:65:ca:c5:7c: 10:cd:14:64:0d:f9:02:59:2b:9c:d1:08:b5:3d:44: b5:32:b1:d1:b6:1d:35:5a:0f:ca:d0:27:4c:09:9a: 7a:ab:d0:d9:c4:b7:63:3a:35:77:ed:6a:54:4c:6b: ea:d4:89:8c:8f:38:ab:0f:75:77:69:bb:45:b0:b6: 43:2b:bc:7d:61:d0:3d:8c:77:db:28:80:83:d2:53: f1:66:44:ca:6e:9f:cd:08:0c:ae:2e:da:05:3b:46: 81:30:c5:d9:08:22:ae:68:e4:5b:10:b5:46:5f:84: 92:e9:64:52:f2:b3:ba:09:8b:97:8d:8c:05:d4:20: 7b:a9:90:94:ee:fa:10:6f:91:5e:3c:d3:e9:48:31: 3a:47:48:6c:75:c3:b7:b5:6b:a4:d7:07:e8:85:8d: 52:1d:15:39:c1:a2:04:d5:be:86:f5:db:a5:46:e1: 10:26:80:53:b7:7f:f1:8d:35:de:9b:14:59:9b:ac: 24:f3:a6:e9:47:fc:3c:40:63:c3:49:0d:55:c4:95: 87:c7:ad:a0:67:ea:a2:a1:3a:76:f2:cc:e1:94:bb: c2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:37:A9:BC:79:B6:54:3A:28:0C:64:37:9C:35:AF:C0:32:40:C3:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e27e85fc-74f0-3a9f-b8c7-06ac1778712b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:78:02:f5:f9:b2:41:2e:7d:e6:73:e7:61:5f:d2:c6:5a:46: 2a:8c:a5:01:93:ad:7c:e6:a4:6c:4f:81:a4:49:92:05:b2:84: 8b:38:85:72:96:4f:56:c7:94:a9:6d:ff:21:4c:d5:d7:41:e0: 8c:4e:04:88:3c:23:8a:82:cd:8f:26:6a:f6:03:e5:b4:7b:6d: 90:ab:b0:c3:ec:76:f6:49:a8:d6:0b:a4:c1:55:0c:49:c1:08: 43:2e:6f:20:b2:2f:83:9b:6a:2a:ef:45:c6:fb:86:cf:7c:b7: 20:a4:5d:78:2b:af:cd:0f:13:a2:0a:fc:8d:6f:32:89:ff:f6: 18:22:82:b9:c9:39:b0:f5:49:b8:0a:10:4b:c7:15:64:70:9b: db:3e:ce:23:9f:47:f2:d8:04:0e:56:90:9f:7f:d8:83:56:88: 0e:1f:90:05:f5:cc:15:f5:c5:75:d4:db:f7:b6:76:d5:f9:1d: 5e:30:cd:6f:2c:3f:77:db:24:56:5a:6e:03:9b:a6:d2:6e:d2: 10:16:ac:dc:b3:4b:d1:8a:ac:18:82:6e:bf:79:d1:0c:d7:04: fc:e4:1d:f5:f6:f0:10:40:af:1e:a0:00:66:0d:f1:4e:ec:fa: 0a:df:01:30:7c:fc:88:a0:bf:b6:cd:f3:2e:ad:2d:f1:3b:93: fb:8c:c0:a1 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEq2UPeF+y9kA430s6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk YmE5NTNhNTktNTJiYy00YTRkLTlhODMtMzIyOTkzYmIzN2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp8u8c+2ew9kiThy7qUmBhCCCfb5DAJI6j4z l046WP0VOxl3mdRItWXKxXwQzRRkDfkCWSuc0Qi1PUS1MrHRth01Wg/K0CdMCZp6 q9DZxLdjOjV37WpUTGvq1ImMjzirD3V3abtFsLZDK7x9YdA9jHfbKICD0lPxZkTK bp/NCAyuLtoFO0aBMMXZCCKuaORbELVGX4SS6WRS8rO6CYuXjYwF1CB7qZCU7voQ b5FePNPpSDE6R0hsdcO3tWuk1wfohY1SHRU5waIE1b6G9dulRuEQJoBTt3/xjTXe mxRZm6wk86bpR/w8QGPDSQ1VxJWHx62gZ+qioTp28szhlLvCPQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFEw3qbx5tlQ6KAxkN5w1r8AyQMPMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZTI3ZTg1ZmMtNzRmMC0z YTlmLWI4YzctMDZhYzE3Nzg3MTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAAHgC9fmyQS595nPnYV/SxlpGKoylAZOt fOakbE+BpEmSBbKEiziFcpZPVseUqW3/IUzV10HgjE4EiDwjioLNjyZq9gPltHtt kKuww+x29kmo1gukwVUMScEIQy5vILIvg5tqKu9FxvuGz3y3IKRdeCuvzQ8Togr8 jW8yif/2GCKCuck5sPVJuAoQS8cVZHCb2z7OI59H8tgEDlaQn3/Yg1aIDh+QBfXM FfXFddTb97Z21fkdXjDNbyw/d9skVlpuA5um0m7SEBas3LNL0YqsGIJuv3nRDNcE /OQd9fbwEECvHqAAZg3xTuz6Ct8BMHz8iKC/ts3zLq0t8TuT+4zAoQ== -----END CERTIFICATE-----Generated at Mon Aug 4 18:59:29 2025 by rpki-client