$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3e1f93dc-6520-3778-ad3d-37750549a980.roa File: 3e1f93dc-6520-3778-ad3d-37750549a980.roa (raw, json) Hash identifier: FnRsk5IqQBhcftSL+ULXho9HVxJhr0H4jMWPLgOTdAA= Subject key identifier: 3F:2A:80:FA:17:6F:99:0A:A5:80:B6:D4:93:D3:32:F3:62:F6:A0:1F Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285849D594F144DD8DB3925E980F80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3e1f93dc-6520-3778-ad3d-37750549a980.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 393886 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:f1:44:dd:8d:b3:92:5e:98:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=65d41252-2a90-4868-891d-36a0e2910756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4c:27:e1:46:0c:1a:62:74:90:a6:85:79:c3: 6c:aa:e8:eb:73:27:4c:2e:2f:f2:86:62:2b:23:72: 18:0b:f2:af:4a:ba:a4:d2:da:73:ae:5a:88:bd:08: 64:e4:41:ff:6b:50:6f:11:f1:0b:cf:7d:5f:e9:4f: 67:17:6a:21:e6:28:fa:aa:e9:02:88:68:f8:de:33: f1:a0:c1:8c:11:93:7c:8a:26:fe:3f:d2:9b:96:84: 35:25:d1:c0:c4:03:9a:b1:2e:0b:0a:91:a9:ce:29: fd:de:e4:9f:33:86:9b:b3:86:68:23:5c:89:d9:46: 68:56:3f:84:b9:59:62:7b:5e:40:e8:b9:9e:e7:e3: 2f:fa:2a:59:b7:03:74:7d:6c:f7:07:c0:9c:b3:72: 55:2e:23:ba:72:e7:80:45:a5:35:d3:99:70:a6:70: 33:d4:0f:8d:f1:06:16:d1:32:72:a0:27:be:d8:fa: cb:1a:43:e3:7f:80:89:63:c2:e8:da:f8:58:24:94: 59:e7:2b:99:6d:7e:3e:cc:b4:d9:44:46:c5:6e:be: 6e:0f:2f:cc:ea:51:5b:70:a6:0f:48:75:41:e6:a7: a6:4d:de:28:e7:9a:23:65:88:bd:df:93:c9:fd:2a: b4:87:66:68:39:9b:9c:44:00:b2:2e:74:a0:5c:ff: b3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:2A:80:FA:17:6F:99:0A:A5:80:B6:D4:93:D3:32:F3:62:F6:A0:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3e1f93dc-6520-3778-ad3d-37750549a980.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:91:4f:bd:ef:52:80:08:f1:fe:3d:8b:43:0f:e6:f1:0a:c1: 02:4b:0f:b8:2c:6e:6b:3d:b2:4d:e2:a6:82:63:e2:33:cd:db: 04:60:33:64:b3:fe:a4:1e:d0:94:94:e5:3e:07:ba:58:61:67: ba:01:6a:5a:81:a3:34:94:61:b9:71:ff:cb:f4:60:1f:ac:30: 58:a5:e9:98:c7:91:f1:96:29:d8:07:6e:bf:37:4d:81:3b:59: e5:13:fa:0e:40:83:ae:bf:15:dd:a2:42:ca:00:84:69:0c:f4: d3:49:26:89:c3:ba:dc:cc:e8:b4:31:87:8a:09:fb:a8:06:fe: d1:d5:fe:6d:1d:da:fd:5c:ef:63:3e:20:9e:ab:d5:c2:a4:7e: 58:ca:2d:6b:25:bb:fb:46:c8:a4:23:d2:73:79:e7:54:fd:1c: 20:8a:48:32:2e:a5:13:09:e0:18:08:d5:7c:ad:1a:dd:ba:7f: 26:26:54:2b:63:eb:03:14:04:c7:84:04:82:62:7b:7a:09:3a: 05:70:da:83:61:a1:34:e8:20:35:08:eb:aa:2c:8c:89:d2:06: 1a:1e:ae:fa:6b:41:de:e9:26:99:1a:9b:64:c5:b5:7f:cc:4e: 37:44:0c:e4:1e:e6:86:4d:14:bb:ba:5a:d5:7e:53:1c:2e:8b: bb:d4:4d:d2 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEnVlPFE3Y2zkl6YD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk NjVkNDEyNTItMmE5MC00ODY4LTg5MWQtMzZhMGUyOTEwNzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEwn4UYMGmJ0kKaFecNsqujrcydMLi/yhmIr I3IYC/KvSrqk0tpzrlqIvQhk5EH/a1BvEfELz31f6U9nF2oh5ij6qukCiGj43jPx oMGMEZN8iib+P9KbloQ1JdHAxAOasS4LCpGpzin93uSfM4abs4ZoI1yJ2UZoVj+E uVlie15A6Lme5+Mv+ipZtwN0fWz3B8Ccs3JVLiO6cueARaU105lwpnAz1A+N8QYW 0TJyoCe+2PrLGkPjf4CJY8Lo2vhYJJRZ5yuZbX4+zLTZREbFbr5uDy/M6lFbcKYP SHVB5qemTd4o55ojZYi935PJ/Sq0h2ZoOZucRACyLnSgXP+zEwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFD8qgPoXb5kKpYC21JPTMvNi9qAfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvM2UxZjkzZGMtNjUyMC0z Nzc4LWFkM2QtMzc3NTA1NDlhOTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAnJFPve9SgAjx/j2LQw/m8QrBAksPuCxu az2yTeKmgmPiM83bBGAzZLP+pB7QlJTlPge6WGFnugFqWoGjNJRhuXH/y/RgH6ww WKXpmMeR8ZYp2AduvzdNgTtZ5RP6DkCDrr8V3aJCygCEaQz000kmicO63MzotDGH ign7qAb+0dX+bR3a/VzvYz4gnqvVwqR+WMotayW7+0bIpCPSc3nnVP0cIIpIMi6l EwngGAjVfK0a3bp/JiZUK2PrAxQEx4QEgmJ7egk6BXDag2GhNOggNQjrqiyMidIG Gh6u+mtB3ukmmRqbZMW1f8xON0QM5B7mhk0Uu7pa1X5THC6Lu9RN0g== -----END CERTIFICATE-----Generated at Mon Jun 30 23:46:18 2025 by rpki-client