$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/24d02c6c-fbff-3e17-a7ee-bdb7046a2384.roa File: 24d02c6c-fbff-3e17-a7ee-bdb7046a2384.roa (raw, json) Hash identifier: Av6sp0UL5Sxezx5k7VRUTcp8tkkWGiQzyR76lmBD5CY= Subject key identifier: F4:89:91:72:6E:69:2E:46:B6:D1:AD:91:EA:76:C6:7A:3C:A9:8F:D2 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285849D594EE8A12E63E2A9A55FEC0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/24d02c6c-fbff-3e17-a7ee-bdb7046a2384.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 30633 IP address blocks: 23.19.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:ee:8a:12:e6:3e:2a:9a:55:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=8155d18f-648f-44b1-b9cc-ace1190d738c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:98:74:21:2a:d6:17:17:1d:83:1b:24:56:be: 8b:fd:aa:37:27:3a:bb:db:1e:21:9d:a0:6d:21:91: 33:08:d1:52:5e:ec:27:ad:c5:e2:c1:68:46:ae:74: 90:97:66:15:19:7d:9e:69:8d:1a:bc:ed:5a:90:7f: 23:f4:5d:11:8e:01:4c:84:95:cf:3f:73:e6:27:d8: f8:57:fd:88:8c:87:20:ec:e6:25:c4:e8:0c:75:00: 79:9a:a6:37:f1:2f:72:27:76:58:26:4c:7f:2a:74: 47:e1:b9:29:93:5b:d9:ff:1d:9c:2b:9f:f8:8d:5c: 77:2c:15:a3:59:e6:52:36:2b:8d:1f:ca:2a:c4:11: b4:bc:c6:c1:f9:8a:8c:0a:37:45:46:9d:78:6d:2f: bf:03:e8:10:db:65:4a:bd:89:e3:ad:3b:c9:01:6f: e1:c6:36:cf:cd:76:f4:91:57:58:1f:78:4a:1f:3f: 47:06:bb:5b:6f:c6:88:5a:49:93:4e:41:2f:fd:df: 58:6e:76:52:22:de:80:f9:3d:8d:6a:00:57:48:4c: cc:0d:4e:c7:ca:74:d7:59:2b:ef:34:d0:c2:cd:3d: 56:a0:96:f3:57:ec:d7:36:f7:d1:8e:a7:28:f5:47: 0f:93:a3:05:d9:78:ba:98:9b:9f:11:8e:4f:51:b1: 75:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:89:91:72:6E:69:2E:46:B6:D1:AD:91:EA:76:C6:7A:3C:A9:8F:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/24d02c6c-fbff-3e17-a7ee-bdb7046a2384.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:a4:bb:bc:f3:54:93:b7:72:13:69:be:7d:ca:c9:aa:3d:21: f6:3a:7e:99:8b:99:e7:2b:cb:85:97:28:5e:90:50:a6:9c:a0: db:95:96:22:d3:d4:d0:a1:ef:7c:38:a7:58:fa:d5:71:ae:55: cf:63:6a:fe:f5:b3:37:98:0e:46:b4:5e:5e:5a:71:fa:36:c8: ff:9d:ae:68:ed:5e:da:f0:97:21:76:6d:2e:0d:19:bb:b6:1c: 5f:f9:31:12:1c:2e:ba:4a:db:ef:9a:99:a2:6b:2b:92:7e:8d: 24:57:85:cb:ca:74:10:f6:79:0c:4e:65:90:8a:b0:3e:46:23: 41:7f:81:66:7d:eb:ba:2c:a8:43:26:36:f1:6b:ef:be:83:6a: 0e:7b:ea:c5:6f:ba:2f:b1:4b:9e:6e:77:1d:a1:1d:0c:c5:b6: 4c:a9:cd:50:ee:6b:f5:bf:7f:41:99:13:9c:09:a3:fb:7a:17: 85:4f:85:bc:e3:d0:44:45:4b:5e:d5:16:da:4e:3b:9d:ec:24: 5a:b9:31:99:a6:4c:1f:50:2a:52:32:c7:99:89:30:4b:70:f1: 29:0f:77:fc:7a:b5:2c:66:86:11:4f:33:a1:4a:a5:77:ff:1d: ca:ca:3e:44:eb:b1:c0:7e:a6:64:ef:39:a8:e3:21:20:27:79: 3e:77:17:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlO6KEuY+KppV/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk ODE1NWQxOGYtNjQ4Zi00NGIxLWI5Y2MtYWNlMTE5MGQ3MzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Jh0ISrWFxcdgxskVr6L/ao3Jzq72x4hnaBt IZEzCNFSXuwnrcXiwWhGrnSQl2YVGX2eaY0avO1akH8j9F0RjgFMhJXPP3PmJ9j4 V/2IjIcg7OYlxOgMdQB5mqY38S9yJ3ZYJkx/KnRH4bkpk1vZ/x2cK5/4jVx3LBWj WeZSNiuNH8oqxBG0vMbB+YqMCjdFRp14bS+/A+gQ22VKvYnjrTvJAW/hxjbPzXb0 kVdYH3hKHz9HBrtbb8aIWkmTTkEv/d9YbnZSIt6A+T2NagBXSEzMDU7HynTXWSvv NNDCzT1WoJbzV+zXNvfRjqco9UcPk6MF2Xi6mJufEY5PUbF1GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSJkXJuaS5GttGtkep2xno8qY/SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMjRkMDJjNmMtZmJmZi0z ZTE3LWE3ZWUtYmRiNzA0NmEyMzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxPEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALaku7zzVJO3chNpvn3Kyao9IfY6fpmLmecry4WXKF6QUKacoNuVliLT 1NCh73w4p1j61XGuVc9jav71szeYDka0Xl5acfo2yP+drmjtXtrwlyF2bS4NGbu2 HF/5MRIcLrpK2++amaJrK5J+jSRXhcvKdBD2eQxOZZCKsD5GI0F/gWZ967osqEMm NvFr776Dag576sVvui+xS55udx2hHQzFtkypzVDua/W/f0GZE5wJo/t6F4VPhbzj 0ERFS17VFtpOO53sJFq5MZmmTB9QKlIyx5mJMEtw8SkPd/x6tSxmhhFPM6FKpXf/ HcrKPkTrscB+pmTvOajjISAneT53F68= -----END CERTIFICATE-----Generated at Sun Jun 29 12:36:42 2025 by rpki-client