$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/04873bbe-f9c7-3d10-aba1-7b80bca15222.roa File: 04873bbe-f9c7-3d10-aba1-7b80bca15222.roa (raw, json) Hash identifier: rEtiQ2OZbKujrax8CNYP6IQBw7lpiQWCTmPHq30/B60= Subject key identifier: 06:D4:30:16:32:CA:E1:CA:12:9A:B2:38:96:C7:A3:D4:AF:83:BE:AB Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F7BB3024A777EAB11D83BB680 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/04873bbe-f9c7-3d10-aba1-7b80bca15222.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 205544 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:02:4a:77:7e:ab:11:d8:3b:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=a5b0124b-e543-468b-ac4c-14c5876a75ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:91:bb:0b:7e:5b:c1:37:01:6c:dd:8d:fd:5c: 5c:84:f7:87:d6:41:35:d5:81:02:0d:f7:c1:8c:d6: 20:f7:a1:d7:a9:72:52:a1:3c:38:c5:47:33:0a:0e: 37:a7:c4:57:2f:d6:25:f3:2e:74:15:ef:18:a1:fc: 59:6a:0b:b0:e5:85:57:ad:35:6f:49:de:c0:c2:46: 96:8c:2b:36:2d:ae:df:d2:e2:fd:e9:04:4f:b5:b9: 7d:87:e4:13:22:d1:e1:49:67:dc:ef:43:bf:e5:5e: 84:41:99:f6:33:b7:56:1d:7f:79:48:c4:33:da:7d: 4e:c9:8c:24:e4:20:f4:3d:5d:7d:b1:39:e0:eb:0f: 59:5b:e4:c6:70:fe:e5:f9:36:40:23:23:cf:7e:aa: c5:f1:7a:fd:4c:cf:83:8f:31:9d:41:d1:02:89:1e: d8:34:2e:0f:29:92:96:cf:4e:a8:c4:bf:c0:f8:a0: 41:d5:b9:49:af:7f:39:c7:81:4a:a4:1e:10:64:5b: b6:d2:e0:94:ed:6f:1a:be:ba:f1:54:3f:df:43:da: 65:1a:cd:91:4e:87:30:32:d6:bd:33:7c:b9:ab:63: 03:a8:e5:60:48:ce:d5:80:41:7c:72:df:af:08:93: 2c:1b:6a:4d:3c:de:50:6f:84:4d:1e:ad:2c:92:46: 68:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D4:30:16:32:CA:E1:CA:12:9A:B2:38:96:C7:A3:D4:AF:83:BE:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/04873bbe-f9c7-3d10-aba1-7b80bca15222.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:24:58:14:05:8a:c3:25:1f:3a:bd:31:17:de:75:9a:12:8f: 7c:4e:37:0c:e5:77:04:6b:8f:db:7f:b4:03:bd:4e:0e:b0:1c: 7f:af:54:26:d6:60:24:34:45:74:5a:4c:c5:f3:bc:1b:15:50: fa:0b:59:20:f5:9e:86:ac:20:f0:e0:d0:87:06:32:1d:0c:21: b3:fe:ab:01:4d:ff:cd:bd:48:a9:f3:29:12:d5:a9:0e:bc:54: b3:85:af:2c:cd:e8:d2:d8:74:23:90:12:e6:cf:31:ab:48:ee: dd:20:c9:e7:82:ef:4b:81:4f:17:9d:83:13:28:38:9f:c4:bb: ef:ff:3b:c2:9e:9e:b1:1f:d7:39:57:03:32:e2:4c:dd:86:b0: e4:56:f8:6b:0d:3a:f4:9f:ba:48:c8:ef:0b:dd:c7:f5:04:fe: 13:66:a8:2e:17:78:16:90:91:9f:4a:fb:b0:d3:5c:18:0a:bd: f9:53:47:32:03:df:5c:be:03:7d:8e:d1:d4:14:08:d7:9f:95: 3f:52:5e:02:f7:d8:fb:30:80:a1:7b:0c:f2:5b:2e:34:25:13: b2:72:a7:8d:0a:c5:e3:4d:dd:6c:b5:9a:a3:71:90:cb:40:77: 27:d7:59:5e:f8:d9:5e:bc:a4:c6:eb:68:8d:5a:bf:92:0d:30: fb:46:8e:4c -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE97swJKd36rEdg7toAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk YTViMDEyNGItZTU0My00NjhiLWFjNGMtMTRjNTg3NmE3NWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5G7C35bwTcBbN2N/VxchPeH1kE11YECDffB jNYg96HXqXJSoTw4xUczCg43p8RXL9Yl8y50Fe8YofxZaguw5YVXrTVvSd7AwkaW jCs2La7f0uL96QRPtbl9h+QTItHhSWfc70O/5V6EQZn2M7dWHX95SMQz2n1OyYwk 5CD0PV19sTng6w9ZW+TGcP7l+TZAIyPPfqrF8Xr9TM+DjzGdQdECiR7YNC4PKZKW z06oxL/A+KBB1blJr385x4FKpB4QZFu20uCU7W8avrrxVD/fQ9plGs2RTocwMta9 M3y5q2MDqOVgSM7VgEF8ct+vCJMsG2pNPN5Qb4RNHq0skkZo0wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFAbUMBYyyuHKEpqyOJbHo9Svg76rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMDQ4NzNiYmUtZjljNy0z ZDEwLWFiYTEtN2I4MGJjYTE1MjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAvSRYFAWKwyUfOr0xF951mhKPfE43DOV3 BGuP23+0A71ODrAcf69UJtZgJDRFdFpMxfO8GxVQ+gtZIPWehqwg8ODQhwYyHQwh s/6rAU3/zb1IqfMpEtWpDrxUs4WvLM3o0th0I5AS5s8xq0ju3SDJ54LvS4FPF52D Eyg4n8S77/87wp6esR/XOVcDMuJM3Yaw5Fb4aw069J+6SMjvC93H9QT+E2aoLhd4 FpCRn0r7sNNcGAq9+VNHMgPfXL4DfY7R1BQI15+VP1JeAvfY+zCAoXsM8lsuNCUT snKnjQrF403dbLWao3GQy0B3J9dZXvjZXrykxutojVq/kg0w+0aOTA== -----END CERTIFICATE-----Generated at Wed Oct 14 20:39:18 2026 by rpki-client