$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/03fc74fa-41d7-3d38-a95b-ffdcc4137a4d.roa File: 03fc74fa-41d7-3d38-a95b-ffdcc4137a4d.roa (raw, json) Hash identifier: lmYF67iXVEDy1YJEMAzLDaWatAJI4hGGoI1EnRPN2zs= Subject key identifier: 21:4D:2A:B1:3C:B2:F6:5E:12:40:74:BB:92:9F:30:AE:84:42:DF:8C Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F7BB3026FE6C5854CCA060680 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/03fc74fa-41d7-3d38-a95b-ffdcc4137a4d.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 60781 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:02:6f:e6:c5:85:4c:ca:06:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=b13bd586-ca6d-47d6-8d3e-3f2231655063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a9:fe:ba:78:e4:f2:c4:7b:a3:b9:c1:b6:85: 38:11:cf:8f:88:b5:74:b7:4d:21:c8:f1:4e:7e:13: 39:54:9e:09:26:08:db:ca:83:b0:2f:10:5b:96:c8: 4f:9a:b9:8d:e8:ce:30:07:14:8d:8f:0f:06:09:64: 0d:94:c6:01:6b:84:1f:ed:4a:a6:6c:d0:e0:7c:c9: 4d:64:c2:da:5b:34:e2:c9:02:9e:71:94:93:dd:ad: f0:12:0c:2b:a0:82:a5:cb:79:fe:8f:66:9d:8f:d3: b4:2d:33:ee:b5:73:a1:4f:db:75:f0:a9:37:56:8a: 28:b3:cb:bd:9f:61:33:c2:f4:ec:b5:7f:3a:e9:ce: 79:da:6c:44:40:7b:05:b1:50:67:a2:c3:14:7e:88: 63:f6:36:b8:cc:ea:d5:d4:32:7d:8e:ff:b5:92:44: 95:5b:fa:3a:3b:ec:ba:32:ed:9a:12:68:5f:28:59: 8b:7f:53:eb:27:ca:7b:31:6b:32:90:0d:cd:b4:c6: 7c:fa:9c:d3:ba:0b:3d:25:91:9e:d6:18:f2:ff:cc: 3c:50:d4:c6:ae:91:e6:47:2d:eb:fb:8b:c5:28:67: db:33:85:13:e8:56:20:f4:5c:36:a1:11:2a:48:d8: eb:b7:d8:78:e8:d8:a9:17:d2:e8:7c:6e:e3:18:0b: bc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4D:2A:B1:3C:B2:F6:5E:12:40:74:BB:92:9F:30:AE:84:42:DF:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/03fc74fa-41d7-3d38-a95b-ffdcc4137a4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:72:aa:f2:42:45:13:f2:4d:93:95:07:92:ef:4f:d1:95:c5: 05:a1:e7:3b:f9:ca:32:85:fc:54:8d:e4:5b:1a:77:99:6f:63: 56:8b:76:5d:1f:1e:ca:99:55:4f:48:7c:38:0f:f8:06:4c:09: b2:1a:43:d0:5d:6c:52:9e:3b:eb:d1:d8:3f:12:05:7a:84:2f: 9c:a8:4c:f0:2d:d0:9e:15:d6:94:99:1d:6b:5f:9a:bd:03:7f: a2:20:c4:7c:e5:25:97:56:03:6a:10:c0:a7:7f:6c:94:cb:3b: b3:91:83:93:1e:08:d8:e2:39:3e:e3:fb:b3:44:db:dd:a7:ce: dc:2a:80:72:44:c5:a0:8f:11:26:8f:ff:6a:30:e2:71:47:92: f6:f7:3a:55:fa:a8:1d:15:90:12:4c:d4:56:4c:33:94:73:e6: 60:82:da:f5:4a:0b:53:ae:0b:33:c1:a3:86:b0:21:63:da:2c: 79:da:07:be:44:c2:4f:4c:9d:38:ef:62:3e:06:7e:e2:66:3d: cf:99:a5:52:d0:88:13:e7:48:45:1e:81:46:e3:34:2b:b6:28: 71:0f:ab:5e:e1:79:d9:80:a3:84:07:c8:17:ca:34:4c:66:b0: a5:f4:9e:98:4d:1d:a7:cd:6c:dc:2b:fd:3e:44:8d:ac:84:9e: e3:1e:63:b7 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE97swJv5sWFTMoGBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk YjEzYmQ1ODYtY2E2ZC00N2Q2LThkM2UtM2YyMjMxNjU1MDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKn+unjk8sR7o7nBtoU4Ec+PiLV0t00hyPFO fhM5VJ4JJgjbyoOwLxBblshPmrmN6M4wBxSNjw8GCWQNlMYBa4Qf7UqmbNDgfMlN ZMLaWzTiyQKecZST3a3wEgwroIKly3n+j2adj9O0LTPutXOhT9t18Kk3Vooos8u9 n2EzwvTstX866c552mxEQHsFsVBnosMUfohj9ja4zOrV1DJ9jv+1kkSVW/o6O+y6 Mu2aEmhfKFmLf1PrJ8p7MWsykA3NtMZ8+pzTugs9JZGe1hjy/8w8UNTGrpHmRy3r +4vFKGfbM4UT6FYg9Fw2oREqSNjrt9h46NipF9LofG7jGAu8YQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFCFNKrE8svZeEkB0u5KfMK6EQt+MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMDNmYzc0ZmEtNDFkNy0z ZDM4LWE5NWItZmZkY2M0MTM3YTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMXKq8kJFE/JNk5UHku9P0ZXFBaHnO/nK MoX8VI3kWxp3mW9jVot2XR8eyplVT0h8OA/4BkwJshpD0F1sUp4769HYPxIFeoQv nKhM8C3QnhXWlJkda1+avQN/oiDEfOUll1YDahDAp39slMs7s5GDkx4I2OI5PuP7 s0Tb3afO3CqAckTFoI8RJo//ajDicUeS9vc6VfqoHRWQEkzUVkwzlHPmYILa9UoL U64LM8GjhrAhY9osedoHvkTCT0ydOO9iPgZ+4mY9z5mlUtCIE+dIRR6BRuM0K7Yo cQ+rXuF52YCjhAfIF8o0TGawpfSemE0dp81s3Cv9PkSNrISe4x5jtw== -----END CERTIFICATE-----Generated at Wed Oct 14 01:57:45 2026 by rpki-client