$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/53e4a9c3-167f-351d-88fa-2d900fd6639d.roa File: 53e4a9c3-167f-351d-88fa-2d900fd6639d.roa (raw, json) Hash identifier: SZK1637fBkMJnjo+8Cdz8Clh3DNG5N6mrSoKuhnaDkY= Subject key identifier: F2:08:22:62:5B:04:39:84:A7:C5:AD:F1:14:D4:A5:48:84:EB:B1:96 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584A8C70E06949E7ABB69D1CAD48 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/53e4a9c3-167f-351d-88fa-2d900fd6639d.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 54113 IP address blocks: 23.235.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:e0:69:49:e7:ab:b6:9d:1c:ad:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=50a41447-db7a-4280-b549-e51adbde89a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:41:5d:30:c1:4d:92:f4:40:e3:4c:01:1c:1a: c9:d1:19:72:ae:ab:79:43:20:f5:59:f2:5e:a1:9e: 45:20:81:e2:68:52:2f:e0:13:ef:ba:4f:72:60:00: d6:1a:c6:02:4b:9f:55:e3:ec:3e:b0:53:d8:b5:95: 7d:1f:0e:6c:a5:49:d6:11:a1:45:d2:64:29:d2:81: 36:67:8a:1d:18:7b:8b:5d:0d:db:97:83:56:d1:3a: 0f:ef:24:ca:8a:a0:f2:dc:b2:db:36:ac:a0:9d:68: ad:61:51:41:d5:a5:3f:c2:5a:77:55:b5:da:85:92: d9:71:e5:d7:d1:b0:65:6e:f5:13:92:46:9a:6f:69: d7:7e:3f:66:2a:6a:03:8f:64:32:cd:1e:ce:47:26: b6:26:9e:5a:75:03:6b:83:a5:fb:62:71:6f:f4:9d: e7:f8:b5:bb:78:58:9b:83:8e:fc:8e:80:7c:ac:5b: 73:1f:32:e2:dc:d0:d7:09:95:28:58:35:b5:1e:91: 97:f8:9a:4d:7b:d0:3c:bc:e3:ca:1e:1d:47:bd:ab: 78:c0:8d:17:c9:09:eb:0e:a2:90:0f:21:18:15:4a: ae:d5:5f:89:39:98:84:a6:24:1c:ad:ef:b6:90:3d: d0:d3:c6:72:eb:8a:c9:7d:8d:06:6e:96:04:af:b0: 2e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:08:22:62:5B:04:39:84:A7:C5:AD:F1:14:D4:A5:48:84:EB:B1:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/53e4a9c3-167f-351d-88fa-2d900fd6639d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 23.235.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:e2:d7:53:52:65:67:f9:8a:98:14:bd:dd:ba:3e:d6:74:7f: b8:20:17:be:82:a0:c7:7c:82:27:7d:7f:6b:46:6f:fb:2b:81: 1d:d9:0b:f4:29:4b:c2:c2:63:0e:7d:b5:e2:d0:23:87:22:98: 91:42:90:57:eb:25:6f:99:7e:7a:ad:c8:9f:56:8a:ab:ad:cf: d4:64:86:17:52:d6:26:79:1a:a0:54:17:da:5e:5e:37:24:5f: 27:52:11:e1:40:fe:4f:88:d8:07:75:c9:0a:75:dd:62:e5:ba: 8c:be:3c:85:7a:3a:0f:f2:a3:2d:90:01:d3:83:22:3b:82:4a: 37:5f:76:af:48:80:8f:78:28:cc:08:b9:97:58:ff:22:eb:0b: 20:c8:b8:e5:e2:48:1a:42:ad:3e:c0:c2:c4:ee:66:bf:b7:92: 17:47:9e:3e:e0:da:1f:ae:ef:a1:76:3b:21:1a:df:1d:db:5b: 26:39:d3:9c:e0:ec:5a:b1:a8:be:25:aa:93:53:9f:c1:41:58: fc:25:7b:2d:5c:60:47:db:93:ca:c1:1c:5d:c6:84:fa:c2:08: c4:a7:1d:e5:04:bf:3b:61:87:5d:13:24:94:eb:5b:88:57:f3: b1:bd:3d:27:e0:00:bd:f8:a2:dd:8a:5a:10:de:10:af:09:a4: 76:ce:4b:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcOBpSeertp0crUgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk NTBhNDE0NDctZGI3YS00MjgwLWI1NDktZTUxYWRiZGU4OWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0FdMMFNkvRA40wBHBrJ0Rlyrqt5QyD1WfJe oZ5FIIHiaFIv4BPvuk9yYADWGsYCS59V4+w+sFPYtZV9Hw5spUnWEaFF0mQp0oE2 Z4odGHuLXQ3bl4NW0ToP7yTKiqDy3LLbNqygnWitYVFB1aU/wlp3VbXahZLZceXX 0bBlbvUTkkaab2nXfj9mKmoDj2QyzR7ORya2Jp5adQNrg6X7YnFv9J3n+LW7eFib g478joB8rFtzHzLi3NDXCZUoWDW1HpGX+JpNe9A8vOPKHh1Hvat4wI0XyQnrDqKQ DyEYFUqu1V+JOZiEpiQcre+2kD3Q08Zy64rJfY0GbpYEr7AujwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIIImJbBDmEp8Wt8RTUpUiE67GWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNTNlNGE5YzMtMTY3Zi0z NTFkLTg4ZmEtMmQ5MDBmZDY2MzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+smMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbi11NSZWf5ipgUvd26PtZ0f7ggF76CoMd8gid9f2tGb/srgR3ZC/Qp S8LCYw59teLQI4cimJFCkFfrJW+ZfnqtyJ9Wiqutz9RkhhdS1iZ5GqBUF9peXjck XydSEeFA/k+I2Ad1yQp13WLluoy+PIV6Og/yoy2QAdODIjuCSjdfdq9IgI94KMwI uZdY/yLrCyDIuOXiSBpCrT7AwsTuZr+3khdHnj7g2h+u76F2OyEa3x3bWyY505zg 7FqxqL4lqpNTn8FBWPwley1cYEfbk8rBHF3GhPrCCMSnHeUEvzthh10TJJTrW4hX 87G9PSfgAL34ot2KWhDeEK8JpHbOSws= -----END CERTIFICATE-----Generated at Wed Aug 6 05:58:24 2025 by rpki-client