$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ea7ca2b1-e689-373f-a9ca-9e3008107917.roa File: ea7ca2b1-e689-373f-a9ca-9e3008107917.roa (raw, json) Hash identifier: glGwYw6FRpDZSW+Eg/nOKHlGyVhLzuHNAKSXlfrIPQ4= Subject key identifier: 3E:01:96:05:C1:40:28:1F:0F:A6:FB:73:78:2F:40:21:AC:82:90:14 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584AB650F7C7988860E789D89940 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ea7ca2b1-e689-373f-a9ca-9e3008107917.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 28753 IP address blocks: 23.19.197.0/24 maxlen: 24 2607:f5b5:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:f7:c7:98:88:60:e7:89:d8:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=d759ce03-97e8-4fa9-b7eb-612b0f0f4f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8d:a4:6e:60:72:d6:4b:8e:14:e5:13:ee:18: 3d:dd:6a:0f:02:7f:4e:66:85:f2:ec:4d:b2:da:24: 93:50:b1:16:c0:7d:ca:82:39:d9:ec:68:20:25:b1: a6:6e:9c:7b:ce:c9:a5:c7:78:de:b9:98:96:d9:16: af:6a:2f:0a:cd:39:31:04:07:b0:cd:c5:1b:32:08: 72:f3:11:84:3d:3d:be:7e:6e:6f:7e:53:f2:67:3f: 2b:22:bf:c3:f5:2f:13:a2:4d:dd:50:0f:39:58:d1: bb:53:06:20:72:bd:29:49:5f:fe:59:4c:3f:c2:b8: 7f:23:d9:1f:18:df:f0:26:b5:0d:aa:d0:51:45:92: cd:aa:9e:68:8f:23:d0:dc:12:41:08:31:91:bd:5b: 3a:58:43:ab:fa:4f:46:f3:6f:f2:13:fb:43:c0:2c: 5c:be:0b:4a:b8:b6:1a:6c:b4:3b:96:bc:8b:a0:35: 4a:17:ef:90:03:01:f4:22:ba:f8:96:36:c0:7d:10: 3e:ef:fa:b1:bf:92:2b:18:a5:c6:40:f4:88:98:bf: 7f:de:39:70:7a:49:a8:0a:48:95:0a:35:67:a3:6d: 34:b9:c2:a9:80:85:94:c0:f2:6d:ca:7e:4d:be:24: e3:4f:df:6c:54:42:2f:c9:dc:12:c6:87:76:a0:0e: e7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:01:96:05:C1:40:28:1F:0F:A6:FB:73:78:2F:40:21:AC:82:90:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ea7ca2b1-e689-373f-a9ca-9e3008107917.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.197.0/24 IPv6: 2607:f5b5:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:bd:32:9b:36:9d:1b:f4:06:16:4c:c7:51:53:37:90:ef:39: 97:fa:9f:96:96:d3:31:e5:09:51:14:00:db:3e:92:da:0c:31: 7d:c5:0e:78:21:ff:63:55:db:25:b5:a4:6d:db:40:a2:15:cd: 70:3c:88:7c:f4:cd:ed:f3:30:ee:ed:8a:72:3b:0b:3e:ea:4d: d6:12:a3:28:00:ea:47:08:a7:76:fc:9f:cb:9d:21:7d:79:a2: 6d:30:95:ed:0f:3a:57:9b:79:a3:9d:9c:c6:66:d6:ee:df:5c: 7f:91:b1:39:07:f8:ff:d9:8f:0c:92:e8:17:bd:6b:f5:5e:81: ac:54:49:17:8f:85:92:4c:cd:6e:d6:28:ab:7b:f0:44:ec:f5: 57:1f:f7:83:ec:35:a1:5d:75:f0:53:7a:91:94:f5:dd:32:e1: ef:dc:cb:3a:59:0a:51:f3:ba:3f:4e:80:c0:b6:5c:2f:2c:99: 4a:72:96:aa:8e:85:4c:f8:21:83:c7:03:a5:09:54:c4:47:77: 94:ab:56:d1:71:ec:79:1f:d1:f3:ac:e4:2b:f6:18:08:08:76: 42:a8:f1:d8:1f:04:9c:3d:6e:5e:83:dd:48:4e:b7:c1:a0:c1: 61:04:24:1f:15:6e:f4:3c:ce:35:31:8b:ec:9f:00:6e:44:f3: ff:91:2b:8f -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEq2UPfHmIhg54nYmUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk ZDc1OWNlMDMtOTdlOC00ZmE5LWI3ZWItNjEyYjBmMGY0ZjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj42kbmBy1kuOFOUT7hg93WoPAn9OZoXy7E2y 2iSTULEWwH3KgjnZ7GggJbGmbpx7zsmlx3jeuZiW2Ravai8KzTkxBAewzcUbMghy 8xGEPT2+fm5vflPyZz8rIr/D9S8Tok3dUA85WNG7UwYgcr0pSV/+WUw/wrh/I9kf GN/wJrUNqtBRRZLNqp5ojyPQ3BJBCDGRvVs6WEOr+k9G82/yE/tDwCxcvgtKuLYa bLQ7lryLoDVKF++QAwH0Irr4ljbAfRA+7/qxv5IrGKXGQPSImL9/3jlwekmoCkiV CjVno200ucKpgIWUwPJtyn5NviTjT99sVEIvydwSxod2oA7n+QIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFD4BlgXBQCgfD6b7c3gvQCGsgpAUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZWE3Y2EyYjEtZTY4OS0z NzNmLWE5Y2EtOWUzMDA4MTA3OTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxPFMA8E AgACMAkDBwAmB/W1AAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAkL0ymzadG/QGFkzHUVM3kO85l/qflpbT MeUJURQA2z6S2gwxfcUOeCH/Y1XbJbWkbdtAohXNcDyIfPTN7fMw7u2KcjsLPupN 1hKjKADqRwindvyfy50hfXmibTCV7Q86V5t5o52cxmbW7t9cf5GxOQf4/9mPDJLo F71r9V6BrFRJF4+FkkzNbtYoq3vwROz1Vx/3g+w1oV118FN6kZT13TLh79zLOlkK UfO6P06AwLZcLyyZSnKWqo6FTPghg8cDpQlUxEd3lKtW0XHseR/R86zkK/YYCAh2 Qqjx2B8EnD1uXoPdSE63waDBYQQkHxVu9DzONTGL7J8AbkTz/5Erjw== -----END CERTIFICATE-----Generated at Tue Aug 5 20:16:44 2025 by rpki-client