$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1ca5f0e2-7748-372e-b7ee-a2cd46898ac3.roa File: 1ca5f0e2-7748-372e-b7ee-a2cd46898ac3.roa (raw, json) Hash identifier: iO++xXPcPaymFtQrNAnTEYiJcRaAD9OtE2Fsd/6KQRI= Subject key identifier: 4B:96:B0:F0:B0:4F:76:E8:0F:87:98:DB:7F:0D:43:11:92:DB:40:4E Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F7BB302DD657E8E6554274800 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1ca5f0e2-7748-372e-b7ee-a2cd46898ac3.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 30633 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:02:dd:65:7e:8e:65:54:27:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=5e355fe6-c9b5-44e1-a873-caa0849cb319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:66:ec:42:df:ac:dc:02:1d:92:34:e1:82:0e: bc:16:1d:f8:ab:8c:2c:0a:45:f7:7b:af:85:c0:ad: b5:c5:4a:4a:90:64:f8:7e:39:c4:7d:cb:a0:6c:8d: 21:e6:85:59:40:6e:03:23:e3:81:ba:6d:93:ae:c4: 34:b0:ff:b9:22:d7:0d:cf:b3:a7:cb:06:dd:4e:0d: 54:1d:fb:99:2e:55:84:75:c7:92:f2:be:37:a4:79: d7:69:f2:41:b8:39:91:f8:11:6a:ec:36:5a:c9:45: 86:69:d3:55:09:f1:0d:f2:76:fe:cb:ad:ad:54:76: ca:df:c7:21:53:e3:1c:2a:5a:07:cd:ed:9e:35:6f: ce:a4:55:97:b1:e1:f0:db:b1:8d:0e:8f:19:00:6f: 65:ff:55:d4:ff:b7:0a:9e:37:29:a7:ce:ce:02:5f: 8c:a0:3e:89:b0:d5:e7:54:0b:dd:43:c4:bc:fd:cd: 5b:2c:49:17:e7:47:5f:65:94:92:c7:1f:4c:9e:de: ee:83:04:e5:07:a7:31:b2:c6:0e:39:9a:cb:47:9c: dc:68:6f:e7:89:99:cc:c0:58:f4:9b:03:31:4f:24: 79:ca:3f:8c:6a:bd:cb:42:3d:81:34:95:93:fa:53: 13:08:3f:53:da:f1:d0:77:a4:14:6e:51:71:3c:59: 9d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:96:B0:F0:B0:4F:76:E8:0F:87:98:DB:7F:0D:43:11:92:DB:40:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1ca5f0e2-7748-372e-b7ee-a2cd46898ac3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:85:3f:da:51:2a:a4:ac:64:a4:61:28:b8:05:b6:a2:93:77: 81:1a:ce:80:28:a9:11:d2:83:be:de:84:a4:df:46:c6:34:76: f9:3d:6e:e7:73:55:a1:24:61:a7:51:24:05:c3:9b:cc:64:d4: 09:e3:a1:7b:4e:e6:18:98:69:b7:42:c9:05:4d:4b:66:fa:a5: ff:54:56:6f:09:22:c5:aa:bf:d3:95:b0:0f:cd:86:7f:c7:a5: f7:05:9d:1b:b4:a7:46:55:7d:71:c6:f3:24:06:f0:fa:fa:55: 6c:76:71:32:95:86:c2:53:4c:5c:b4:9e:45:42:62:fc:35:9c: 6e:8a:05:59:d2:43:3f:34:87:c7:d9:2d:53:92:ef:33:f4:3e: d1:5a:dc:40:b7:3a:6b:d2:c6:2d:64:05:57:30:44:f2:bd:c5: 26:97:b6:ff:75:39:da:46:33:14:d2:06:fa:2a:43:a8:1f:94: 3d:c4:5d:48:23:2e:7d:d7:17:79:63:30:39:50:a5:4a:fb:68: d0:3c:f6:ec:e8:b0:05:cc:74:68:eb:90:36:9b:fc:b6:72:c3: 27:2f:72:8e:9f:66:11:3a:21:9d:d9:c7:7c:84:83:22:ae:3c: af:c8:19:09:74:7c:4b:33:71:82:76:d1:47:2d:6a:2d:8f:24: 40:79:af:17 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE97swLdZX6OZVQnSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk NWUzNTVmZTYtYzliNS00NGUxLWE4NzMtY2FhMDg0OWNiMzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GbsQt+s3AIdkjThgg68Fh34q4wsCkX3e6+F wK21xUpKkGT4fjnEfcugbI0h5oVZQG4DI+OBum2TrsQ0sP+5ItcNz7OnywbdTg1U HfuZLlWEdceS8r43pHnXafJBuDmR+BFq7DZayUWGadNVCfEN8nb+y62tVHbK38ch U+McKloHze2eNW/OpFWXseHw27GNDo8ZAG9l/1XU/7cKnjcpp87OAl+MoD6JsNXn VAvdQ8S8/c1bLEkX50dfZZSSxx9Mnt7ugwTlB6cxssYOOZrLR5zcaG/niZnMwFj0 mwMxTyR5yj+Mar3LQj2BNJWT+lMTCD9T2vHQd6QUblFxPFmd8wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFEuWsPCwT3boD4eY238NQxGS20BOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMWNhNWYwZTItNzc0OC0z NzJlLWI3ZWUtYTJjZDQ2ODk4YWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJ4U/2lEqpKxkpGEouAW2opN3gRrOgCip EdKDvt6EpN9GxjR2+T1u53NVoSRhp1EkBcObzGTUCeOhe07mGJhpt0LJBU1LZvql /1RWbwkixaq/05WwD82Gf8el9wWdG7SnRlV9ccbzJAbw+vpVbHZxMpWGwlNMXLSe RUJi/DWcbooFWdJDPzSHx9ktU5LvM/Q+0VrcQLc6a9LGLWQFVzBE8r3FJpe2/3U5 2kYzFNIG+ipDqB+UPcRdSCMufdcXeWMwOVClSvto0Dz27OiwBcx0aOuQNpv8tnLD Jy9yjp9mETohndnHfISDIq48r8gZCXR8SzNxgnbRRy1qLY8kQHmvFw== -----END CERTIFICATE-----Generated at Wed Oct 14 01:58:23 2026 by rpki-client