$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/980a16b1-7521-3b19-9838-27c21280ee09.roa File: 980a16b1-7521-3b19-9838-27c21280ee09.roa (raw, json) Hash identifier: 7CNFc9A/uZ5TyJs+SMMd0gOy6de18DY0z8hLmJIW8sQ= Subject key identifier: E2:5D:3B:D8:60:09:66:0F:CD:A1:90:55:E0:C0:AB:65:2B:B4:95:D1 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F43285849D594F11CBDCA76E682419380 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/980a16b1-7521-3b19-9838-27c21280ee09.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 136988 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:f1:1c:bd:ca:76:e6:82:41:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=33aa196f-a476-40d4-a354-a2120c60cc9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0e:c7:7e:27:f2:4a:dd:bf:e0:09:b4:7f:5e: e4:a7:ec:14:12:73:48:f7:c3:e9:1b:bf:42:b8:a3: f3:39:1c:d6:f4:16:bf:4e:b2:1c:d1:89:9b:94:46: 89:b1:50:32:7d:e1:7d:9d:9e:1f:c3:a5:d3:d3:8b: 68:ef:7e:da:e9:62:47:93:e3:bb:e4:c2:f6:87:99: e6:fc:db:ee:8e:d1:50:14:a6:7c:67:0e:a1:ee:7b: be:cc:ac:b4:a3:51:18:f8:f4:c1:c3:f5:3a:75:c2: 09:f0:b9:9d:c4:1e:e3:a1:61:85:4d:34:fb:5d:e7: 3b:89:e5:a1:6a:6d:9f:51:b1:06:27:b3:a6:37:1b: 6e:7e:39:f8:9b:68:d7:0f:ca:26:c3:6a:46:ed:42: 19:ea:19:ed:d0:62:2f:cd:14:88:8e:ab:1c:40:9e: fd:3d:d5:9d:0c:99:25:6c:e6:72:a5:9a:61:01:e8: 77:4e:1b:5c:0a:fc:43:5f:e9:cf:71:28:78:15:c5: 32:c1:41:62:8c:c5:2d:54:a7:a3:b4:85:72:25:3d: 0c:49:8f:ca:29:0e:51:29:43:8b:a2:4e:2f:0a:9c: 82:e9:d3:76:e2:18:f2:7f:c3:01:89:0b:42:71:3b: e5:26:27:4a:5a:cc:2d:24:82:86:22:77:73:88:93: 00:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:5D:3B:D8:60:09:66:0F:CD:A1:90:55:E0:C0:AB:65:2B:B4:95:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/980a16b1-7521-3b19-9838-27c21280ee09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:40:4c:f7:27:1d:36:b2:43:d7:19:2c:33:45:24:28:ed:2d: 57:09:d3:b1:20:0a:c2:f6:b5:10:27:59:8d:ed:9e:f8:24:05: 9d:a7:9c:8b:83:74:8e:1e:d9:e8:1b:22:2e:a8:a8:6a:c3:21: e0:be:df:eb:e0:af:57:11:5c:5a:ca:5f:46:d1:84:b8:4b:be: 0a:fd:5c:50:42:68:cb:e9:bd:f1:71:9d:b5:17:05:e6:17:34: b7:6f:a0:ef:72:ad:01:81:1e:8f:17:21:a5:4c:d0:19:04:14: aa:1e:47:f2:92:e2:d9:99:2a:46:87:0d:a0:99:bb:5a:4a:94: f3:9b:cd:bd:05:3a:aa:a1:0b:5c:37:ea:57:bf:4c:ff:8e:89: aa:57:93:fc:77:b0:cc:df:db:b0:0b:2c:ee:90:d1:67:fb:5d: f4:fc:51:b5:8f:26:3c:a4:76:e1:fd:e0:8d:6d:ca:a7:ca:f5: 9d:4c:fd:74:ab:db:c6:61:ce:e7:d2:fd:d4:04:03:33:fa:33: 3f:dd:3b:fd:5e:03:ec:71:77:85:1e:b5:23:61:8c:ee:f0:61: c4:7f:db:dd:47:87:b7:09:93:ed:1a:4d:f9:43:f1:c0:56:b0: ca:2d:e2:d0:78:73:ad:80:61:70:b6:1a:c7:79:de:20:4d:cb: 73:b6:5b:02 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEnVlPEcvcp25oJBk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk MzNhYTE5NmYtYTQ3Ni00MGQ0LWEzNTQtYTIxMjBjNjBjYzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow7HfifySt2/4Am0f17kp+wUEnNI98PpG79C uKPzORzW9Ba/TrIc0YmblEaJsVAyfeF9nZ4fw6XT04to737a6WJHk+O75ML2h5nm /NvujtFQFKZ8Zw6h7nu+zKy0o1EY+PTBw/U6dcIJ8LmdxB7joWGFTTT7Xec7ieWh am2fUbEGJ7OmNxtufjn4m2jXD8omw2pG7UIZ6hnt0GIvzRSIjqscQJ79PdWdDJkl bOZypZphAeh3ThtcCvxDX+nPcSh4FcUywUFijMUtVKejtIVyJT0MSY/KKQ5RKUOL ok4vCpyC6dN24hjyf8MBiQtCcTvlJidKWswtJIKGIndziJMApwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFOJdO9hgCWYPzaGQVeDAq2UrtJXRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvOTgwYTE2YjEtNzUyMS0z YjE5LTk4MzgtMjdjMjEyODBlZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAlEBM9ycdNrJD1xksM0UkKO0tVwnTsSAK wva1ECdZje2e+CQFnaeci4N0jh7Z6BsiLqioasMh4L7f6+CvVxFcWspfRtGEuEu+ Cv1cUEJoy+m98XGdtRcF5hc0t2+g73KtAYEejxchpUzQGQQUqh5H8pLi2ZkqRocN oJm7WkqU85vNvQU6qqELXDfqV79M/46JqleT/HewzN/bsAss7pDRZ/td9PxRtY8m PKR24f3gjW3Kp8r1nUz9dKvbxmHO59L91AQDM/ozP907/V4D7HF3hR61I2GM7vBh xH/b3UeHtwmT7RpN+UPxwFawyi3i0HhzrYBhcLYax3neIE3Lc7ZbAg== -----END CERTIFICATE-----Generated at Tue Jul 1 09:25:32 2025 by rpki-client