$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0570f96e-8680-3b7f-b5b1-03e9ec5ca3f8.roa File: 0570f96e-8680-3b7f-b5b1-03e9ec5ca3f8.roa (raw, json) Hash identifier: FFCqiBd+2HqGu+fDdu99fBNMunTMn6ic4foktpCHoss= Subject key identifier: 60:20:4C:DB:2A:91:93:E3:6E:A1:53:30:17:9A:D2:26:52:08:A3:DA Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F5CFD52BAF2E2ACF36AF6AC80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0570f96e-8680-3b7f-b5b1-03e9ec5ca3f8.roa Signing time: Fri 02 Oct 2026 01:00:12 +0000 ROA not before: Fri 02 Oct 2026 01:00:12 +0000 ROA not after: Thu 31 Dec 2026 02:00:12 +0000 asID: 7203 IP address blocks: 23.19.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5c:fd:52:ba:f2:e2:ac:f3:6a:f6:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 2 01:00:12 2026 GMT Not After : Dec 31 02:00:12 2026 GMT Subject: CN=0d0f55a3-3eb5-4cff-94b9-c6d8d9cc4f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d5:08:c9:98:11:92:db:b1:b2:57:7a:86:f1: 92:4d:c9:e8:fc:ee:04:b0:a6:18:04:c8:d3:11:d9: 7c:d2:2b:83:e5:56:1a:78:f7:2f:74:e8:3f:d7:c1: 6b:6b:08:6b:f9:79:35:de:7c:76:54:bf:62:f7:53: 8d:7e:07:85:9e:d3:c5:eb:dd:0c:7d:bb:7f:49:de: ed:47:95:d0:b2:13:2b:eb:3d:1c:15:9d:be:c7:4b: 7d:70:8a:88:f1:9b:cd:d7:00:f9:e6:72:84:bd:ef: 92:26:3d:b8:a2:26:5d:1c:63:24:cd:dc:28:a8:7c: 27:9a:00:ec:42:bc:3e:ce:0d:2e:7b:cc:8a:e9:e0: 4a:47:f6:a8:c6:ea:7d:ad:fc:40:36:36:b3:5e:10: 19:67:32:18:17:07:67:3a:09:2b:2d:6e:68:f1:08: 9e:73:36:87:16:7c:47:32:10:72:4d:41:bd:01:e2: 2e:d3:e6:28:e1:38:a5:bb:0e:39:0f:fd:6b:48:ab: 91:05:f3:54:61:a9:77:a6:89:b9:ec:48:98:69:85: 62:cb:c3:00:34:d1:75:6d:2f:5e:bc:b8:ad:e1:ab: 44:0f:76:8c:9c:37:f3:cf:ca:1c:89:57:5d:b6:dd: 82:be:b3:ce:04:74:a9:6a:e0:eb:57:84:a7:25:61: a9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:20:4C:DB:2A:91:93:E3:6E:A1:53:30:17:9A:D2:26:52:08:A3:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0570f96e-8680-3b7f-b5b1-03e9ec5ca3f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:1a:36:43:bc:31:fe:03:d3:04:7f:c5:e7:fc:56:a7:12:47: b1:6b:5c:f5:c4:fb:08:48:6d:30:21:65:70:cf:c9:c5:40:3a: 2b:fa:24:c1:8f:e0:ef:53:6f:f7:4a:01:78:6c:7e:b3:d0:31: 34:4a:96:99:8b:e3:6e:06:e7:67:2e:94:78:4f:1c:19:ac:33: 71:25:35:7e:0f:00:9e:d1:3a:f7:92:6e:5e:91:f9:27:53:59: f3:6c:be:11:19:58:d1:2b:4e:61:80:73:39:bc:fd:42:68:f7: a5:dd:04:50:38:6c:cd:60:4a:bf:b5:8d:b3:be:9a:34:f5:4b: 33:fb:49:49:4b:21:b4:9d:e8:bf:2a:7d:dd:0e:a8:1c:34:85: de:77:b2:30:25:4f:61:ad:b9:eb:61:98:e3:93:4a:a3:ed:2c: e6:92:52:67:ac:da:3b:0f:7e:03:1a:b9:16:c3:22:a7:3b:a1: 4d:11:e8:97:b6:67:f6:0c:18:50:0f:09:46:54:5f:88:3e:64: dc:52:70:b4:77:ff:fd:86:56:75:a4:f3:20:2a:18:0b:a8:3d: 2d:4c:70:02:b9:13:e9:e5:51:84:e7:85:f9:39:0f:b3:1f:6a: b6:f3:20:26:ea:6d:17:05:8a:4c:7f:aa:cb:3a:f3:64:ab:ae: 90:39:be:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9c/VK68uKs82r2rIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwMjAxMDAxMloXDTI2MTIzMTAyMDAxMlowLzEtMCsGA1UEAxMk MGQwZjU1YTMtM2ViNS00Y2ZmLTk0YjktYzZkOGQ5Y2M0Zjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktUIyZgRktuxsld6hvGSTcno/O4EsKYYBMjT Edl80iuD5VYaePcvdOg/18Frawhr+Xk13nx2VL9i91ONfgeFntPF690Mfbt/Sd7t R5XQshMr6z0cFZ2+x0t9cIqI8ZvN1wD55nKEve+SJj24oiZdHGMkzdwoqHwnmgDs Qrw+zg0ue8yK6eBKR/aoxup9rfxANjazXhAZZzIYFwdnOgkrLW5o8QieczaHFnxH MhByTUG9AeIu0+Yo4Tiluw45D/1rSKuRBfNUYal3pom57EiYaYViy8MANNF1bS9e vLit4atED3aMnDfzz8ociVddtt2CvrPOBHSpauDrV4SnJWGpEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAgTNsqkZPjbqFTMBea0iZSCKPaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMDU3MGY5NmUtODY4MC0z YjdmLWI1YjEtMDNlOWVjNWNhM2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFxNYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0aNkO8Mf4D0wR/xef8VqcSR7FrXPXE+whIbTAhZXDPycVAOiv6JMGP 4O9Tb/dKAXhsfrPQMTRKlpmL424G52culHhPHBmsM3ElNX4PAJ7ROveSbl6R+SdT WfNsvhEZWNErTmGAczm8/UJo96XdBFA4bM1gSr+1jbO+mjT1SzP7SUlLIbSd6L8q fd0OqBw0hd53sjAlT2GtuethmOOTSqPtLOaSUmes2jsPfgMauRbDIqc7oU0R6Je2 Z/YMGFAPCUZUX4g+ZNxScLR3//2GVnWk8yAqGAuoPS1McAK5E+nlUYTnhfk5D7Mf arbzICbqbRcFikx/qss682SrrpA5vuI= -----END CERTIFICATE-----Generated at Wed Oct 14 07:58:58 2026 by rpki-client