$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0570f96e-8680-3b7f-b5b1-03e9ec5ca3f8.roa File: 0570f96e-8680-3b7f-b5b1-03e9ec5ca3f8.roa (raw, json) Hash identifier: WlvJDZcZe1m7l38SF+PJyJIgRYsh6qXk3qfrysL9Tf8= Subject key identifier: FA:05:6F:42:72:EC:17:8E:46:EE:0A:C6:9D:DE:07:AE:1A:08:BD:E6 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EB9C4340DA2A1CCF798EC0460 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0570f96e-8680-3b7f-b5b1-03e9ec5ca3f8.roa Signing time: Tue 04 Aug 2026 13:48:23 +0000 ROA not before: Tue 04 Aug 2026 13:48:23 +0000 ROA not after: Mon 02 Nov 2026 14:48:23 +0000 asID: 7203 IP address blocks: 23.19.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b9:c4:34:0d:a2:a1:cc:f7:98:ec:04:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 4 13:48:23 2026 GMT Not After : Nov 2 14:48:23 2026 GMT Subject: CN=678c59b0-f54f-48ea-b60a-e67ce65d6057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4c:d9:79:9a:ed:66:48:be:05:45:da:7d:b4: 68:45:78:92:b5:8a:90:cc:4e:21:12:d8:10:4b:fd: a6:92:1c:ff:b7:33:cd:4e:0c:1d:ed:62:05:57:62: e9:79:21:75:e7:a1:d9:8b:eb:8c:18:70:79:57:69: eb:b8:e6:25:ff:08:7e:fd:8f:fd:62:e0:c4:1a:47: 4f:ce:19:5d:2e:5b:b0:73:91:b1:dc:30:90:07:d3: 67:77:1d:36:94:6f:ba:2f:64:b8:88:8b:82:3f:c1: 95:96:d5:3c:fb:d0:c6:40:11:fa:3b:a5:e2:bf:68: 7a:47:65:84:bb:22:ba:3f:d9:c1:62:86:9c:65:cf: c0:e3:43:58:9c:58:fb:34:94:08:2e:32:ef:ee:26: 8e:ed:29:7c:3c:d6:ec:c5:f4:67:ef:3b:61:23:22: a3:d6:f6:d5:ea:99:70:fc:2b:f0:48:89:06:24:06: 07:1c:be:cf:58:6d:c4:0c:e3:1f:21:c9:6c:14:b2: d3:6c:0f:1f:8b:4d:8b:64:4f:d6:be:b2:88:ce:3b: 57:77:6b:a8:c7:d1:92:02:ad:32:cc:cd:95:f9:5c: 22:b0:bd:a3:df:99:8e:5c:aa:05:c9:25:13:ac:35: ab:04:c8:30:c5:72:f8:74:73:b6:f7:18:d8:a5:95: 5e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:05:6F:42:72:EC:17:8E:46:EE:0A:C6:9D:DE:07:AE:1A:08:BD:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0570f96e-8680-3b7f-b5b1-03e9ec5ca3f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:8a:8a:29:2a:98:ef:a4:eb:57:e0:61:44:e5:24:d4:b6:8c: b2:d6:0f:a3:79:5d:0e:b7:03:bb:9b:a5:21:b5:07:3b:36:ad: b2:e8:f8:e3:8d:59:a8:2c:36:29:9d:a8:df:84:86:2c:7e:d1: 0d:75:e0:52:a8:03:6f:fa:a8:c7:69:9c:27:9b:77:3e:85:2f: 51:3a:3b:e9:81:e2:0f:91:d3:a3:fa:22:a8:49:10:e7:5f:ef: 90:8c:45:17:d2:b8:72:26:6d:4a:15:33:6e:ef:b5:25:5c:2d: 4d:0e:2f:a3:8e:06:be:c2:4a:25:fe:f0:32:d8:69:a1:8c:96: 9d:1c:5b:d3:b7:2f:7d:33:3a:47:df:c5:b1:1d:33:ec:58:24: b6:02:91:8d:07:a1:97:a5:05:73:dd:78:6a:97:1a:48:1b:86: 73:f4:7a:f1:d3:99:94:33:3c:62:f2:be:60:84:ed:c1:ac:1c: a2:35:f9:82:49:2c:7b:9e:3a:fc:e1:42:8d:62:f9:dc:57:3d: e3:de:53:dc:2b:a5:25:6d:a6:a2:c5:dd:0d:21:04:af:75:9f: a7:61:e8:a9:2c:0e:ac:1f:e6:e0:18:64:a7:7a:52:91:90:47: d3:f1:a4:7c:c1:df:cb:b5:6d:fb:5c:98:9a:b4:63:64:3a:de: 3b:34:90:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE65xDQNoqHM95jsBGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNDEzNDgyM1oXDTI2MTEwMjE0NDgyM1owLzEtMCsGA1UEAxMk Njc4YzU5YjAtZjU0Zi00OGVhLWI2MGEtZTY3Y2U2NWQ2MDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukzZeZrtZki+BUXafbRoRXiStYqQzE4hEtgQ S/2mkhz/tzPNTgwd7WIFV2LpeSF156HZi+uMGHB5V2nruOYl/wh+/Y/9YuDEGkdP zhldLluwc5Gx3DCQB9Nndx02lG+6L2S4iIuCP8GVltU8+9DGQBH6O6Xiv2h6R2WE uyK6P9nBYoacZc/A40NYnFj7NJQILjLv7iaO7Sl8PNbsxfRn7zthIyKj1vbV6plw /CvwSIkGJAYHHL7PWG3EDOMfIclsFLLTbA8fi02LZE/WvrKIzjtXd2uox9GSAq0y zM2V+VwisL2j35mOXKoFySUTrDWrBMgwxXL4dHO29xjYpZVedQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPoFb0Jy7BeORu4Kxp3eB64aCL3mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMDU3MGY5NmUtODY4MC0z YjdmLWI1YjEtMDNlOWVjNWNhM2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFxNYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqKiikqmO+k61fgYUTlJNS2jLLWD6N5XQ63A7ubpSG1Bzs2rbLo+OON WagsNimdqN+Ehix+0Q114FKoA2/6qMdpnCebdz6FL1E6O+mB4g+R06P6IqhJEOdf 75CMRRfSuHImbUoVM27vtSVcLU0OL6OOBr7CSiX+8DLYaaGMlp0cW9O3L30zOkff xbEdM+xYJLYCkY0HoZelBXPdeGqXGkgbhnP0evHTmZQzPGLyvmCE7cGsHKI1+YJJ LHueOvzhQo1i+dxXPePeU9wrpSVtpqLF3Q0hBK91n6dh6KksDqwf5uAYZKd6UpGQ R9PxpHzB38u1bftcmJq0Y2Q63js0kH0= -----END CERTIFICATE-----Generated at Thu Aug 27 17:38:02 2026 by rpki-client