$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/04873bbe-f9c7-3d10-aba1-7b80bca15222.roa File: 04873bbe-f9c7-3d10-aba1-7b80bca15222.roa (raw, json) Hash identifier: svbsBLFk+7mdvHEvN73Nt3AqQPv7IpwiRVEI469Zh1s= Subject key identifier: 62:D8:23:40:FC:A3:65:D6:7D:4D:F7:3C:D6:D6:86:1B:E0:EF:6A:9E Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584C76817D2B22D8632690330600 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/04873bbe-f9c7-3d10-aba1-7b80bca15222.roa Signing time: Fri 09 Jan 2026 02:00:31 +0000 ROA not before: Fri 09 Jan 2026 02:00:31 +0000 ROA not after: Thu 09 Apr 2026 01:00:31 +0000 asID: 205544 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:76:81:7d:2b:22:d8:63:26:90:33:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Jan 9 02:00:31 2026 GMT Not After : Apr 9 01:00:31 2026 GMT Subject: CN=a5cfce61-fad2-473e-a3f1-23f30b27042d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:77:ad:47:61:ca:06:bc:a8:8b:d9:f6:b1:bc: 06:ad:41:7e:03:77:f2:40:89:b6:c9:91:5e:ab:12: fc:63:57:2a:68:4e:95:7a:42:38:c5:31:f2:0e:14: 6b:b9:83:d3:e8:45:84:4b:f5:5f:7e:77:e4:a6:06: 63:74:f5:16:4d:cb:75:91:e8:94:4e:96:42:60:aa: 67:61:28:c6:d9:7c:07:bb:9d:d3:ec:01:03:4e:b7: 1b:f0:18:e4:27:da:5d:6a:e5:14:66:85:a4:60:c3: 95:81:73:1d:d7:e7:7c:fa:09:71:80:5f:aa:ae:73: 33:eb:7f:cf:b8:e7:6d:74:43:69:51:05:99:16:26: eb:71:ce:78:44:16:e5:9e:98:a4:22:5f:e3:f0:2c: ce:03:ef:7c:38:3f:97:1a:b1:49:72:e4:a3:7c:be: af:2a:68:2a:6c:3a:2d:82:ca:2e:bd:35:b5:1d:21: df:24:0b:81:6a:0c:92:fc:70:6b:60:f4:7c:92:d8: 77:6e:41:a8:2f:ec:ae:9e:da:ca:2b:77:38:e4:cc: d8:96:69:01:b2:2b:54:c4:87:4e:bb:2f:46:f2:7f: 46:f6:ee:90:d3:01:cc:7b:72:ab:e8:f5:18:a1:97: 4a:74:a0:a8:29:55:70:35:a2:65:37:9c:c1:34:24: f4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D8:23:40:FC:A3:65:D6:7D:4D:F7:3C:D6:D6:86:1B:E0:EF:6A:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/04873bbe-f9c7-3d10-aba1-7b80bca15222.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:6b:ed:59:8a:26:0a:cb:d6:ad:b7:d6:d6:8e:e3:82:3d:54: d3:d5:e4:3f:dd:01:18:6f:26:cb:90:47:1e:86:c8:f7:cd:d3: 97:9d:b4:53:8d:18:32:4d:67:35:3a:5c:19:f5:97:e8:60:95: 14:41:f2:7f:75:df:0e:3c:d9:8f:82:58:65:91:3c:ae:e5:7b: d6:42:b8:0c:d0:0f:80:ae:70:d2:2c:bc:1b:1d:c7:f5:46:a8: e6:82:81:11:fd:ef:60:fe:0b:d1:f2:28:0f:aa:7c:5f:7f:6d: c3:a6:cf:2e:3b:a4:8f:27:c2:44:68:73:56:92:af:97:30:5c: 1c:72:1c:cd:ed:4b:6e:7d:f4:05:35:77:a8:1c:9f:82:ee:a8: 59:cf:d0:0a:ed:ec:93:93:11:12:75:49:c8:11:aa:f8:98:b5: fd:75:ec:85:d8:2d:ed:cc:5e:ee:86:a6:96:f4:fc:42:ed:4a: db:af:16:24:d1:f7:64:a8:a8:70:b0:0d:d2:57:ce:a9:60:86: 41:5a:ab:60:5f:a9:52:fe:eb:17:d0:98:06:a0:ec:76:69:42: 6b:d7:a7:41:2a:8a:b3:b5:8a:32:1a:e3:1e:84:ad:7f:2d:74: 74:67:89:e8:ef:2e:7c:ad:30:6c:f0:1e:58:5f:2d:9d:94:96: bd:36:be:6c -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEx2gX0rIthjJpAzBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDEwOTAyMDAzMVoXDTI2MDQwOTAxMDAzMVowLzEtMCsGA1UEAxMk YTVjZmNlNjEtZmFkMi00NzNlLWEzZjEtMjNmMzBiMjcwNDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3etR2HKBryoi9n2sbwGrUF+A3fyQIm2yZFe qxL8Y1cqaE6VekI4xTHyDhRruYPT6EWES/VffnfkpgZjdPUWTct1keiUTpZCYKpn YSjG2XwHu53T7AEDTrcb8BjkJ9pdauUUZoWkYMOVgXMd1+d8+glxgF+qrnMz63/P uOdtdENpUQWZFibrcc54RBblnpikIl/j8CzOA+98OD+XGrFJcuSjfL6vKmgqbDot gsouvTW1HSHfJAuBagyS/HBrYPR8kth3bkGoL+yuntrKK3c45MzYlmkBsitUxIdO uy9G8n9G9u6Q0wHMe3Kr6PUYoZdKdKCoKVVwNaJlN5zBNCT0hwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFGLYI0D8o2XWfU33PNbWhhvg72qeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMDQ4NzNiYmUtZjljNy0z ZDEwLWFiYTEtN2I4MGJjYTE1MjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgWvtWYomCsvWrbfW1o7jgj1U09XkP90B GG8my5BHHobI983Tl520U40YMk1nNTpcGfWX6GCVFEHyf3XfDjzZj4JYZZE8ruV7 1kK4DNAPgK5w0iy8Gx3H9Uao5oKBEf3vYP4L0fIoD6p8X39tw6bPLjukjyfCRGhz VpKvlzBcHHIcze1Lbn30BTV3qByfgu6oWc/QCu3sk5MREnVJyBGq+Ji1/XXshdgt 7cxe7oamlvT8Qu1K268WJNH3ZKiocLAN0lfOqWCGQVqrYF+pUv7rF9CYBqDsdmlC a9enQSqKs7WKMhrjHoStfy10dGeJ6O8ufK0wbPAeWF8tnZSWvTa+bA== -----END CERTIFICATE-----Generated at Thu Feb 26 15:03:09 2026 by rpki-client