$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1ca5f0e2-7748-372e-b7ee-a2cd46898ac3.roa File: 1ca5f0e2-7748-372e-b7ee-a2cd46898ac3.roa (raw, json) Hash identifier: mBk1mGBxPgANjpzGB8jdSk/47cTNYNARMSuFyMQQTHc= Subject key identifier: 25:68:0C:28:85:78:27:03:C5:DF:76:E6:71:2D:E5:25:A6:64:1A:DE Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584C76817DFCF25B1D7F77AB2280 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1ca5f0e2-7748-372e-b7ee-a2cd46898ac3.roa Signing time: Fri 09 Jan 2026 02:00:31 +0000 ROA not before: Fri 09 Jan 2026 02:00:31 +0000 ROA not after: Thu 09 Apr 2026 01:00:31 +0000 asID: 30633 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:76:81:7d:fc:f2:5b:1d:7f:77:ab:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Jan 9 02:00:31 2026 GMT Not After : Apr 9 01:00:31 2026 GMT Subject: CN=9cdcb5a5-6bc3-44a5-afe2-ea7dfada2e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b6:87:a4:b4:e6:cb:69:5e:f8:66:6d:a8:67: 6c:0a:7e:0c:c7:bc:06:aa:47:d3:13:99:e2:c9:0e: 75:78:d0:ac:df:1e:4e:54:f7:1e:b0:08:cd:db:bc: eb:e9:3f:b6:66:ab:05:58:27:e1:f3:6e:3a:dd:98: 0c:f4:c1:e9:1c:75:f9:02:38:ba:c3:67:4d:9b:20: 06:15:6a:ef:3f:42:c2:28:fe:cd:a8:ef:ec:58:c4: c5:06:d6:89:24:ef:6f:ad:f1:ee:f9:f1:29:7a:f3: bb:2a:87:2a:7a:ac:94:6d:1d:99:de:ef:98:a4:b9: 37:21:2d:f2:4a:8d:63:07:12:34:28:a0:22:00:85: a5:8e:68:5f:fe:6e:9d:fa:bd:73:36:97:fe:df:d9: a6:12:0b:10:ed:62:06:8a:c2:41:42:f4:09:3a:90: 52:a3:29:15:12:fb:66:7d:8f:88:ac:7c:4c:f0:cd: 31:75:b5:c6:21:ce:2c:a5:bc:ba:15:5f:6f:07:df: ad:a2:e4:a8:54:e7:bf:72:f6:e0:97:1f:b8:83:2b: e4:8c:55:d0:44:6c:dc:d7:f9:ad:2c:10:4d:fb:80: 0d:00:50:79:09:11:e7:11:76:f3:9e:16:52:07:10: a4:21:b2:4c:17:d1:cd:32:92:9b:df:67:48:c4:6c: a2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:68:0C:28:85:78:27:03:C5:DF:76:E6:71:2D:E5:25:A6:64:1A:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1ca5f0e2-7748-372e-b7ee-a2cd46898ac3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:4f:82:99:a0:24:c3:50:a9:03:a4:33:fb:4b:2f:e7:76:07: 4f:af:5c:d1:d2:12:fa:c8:37:8b:8c:c4:79:76:52:93:2b:52: 74:a5:16:61:05:1c:9c:e3:b2:57:b2:e8:9f:37:43:f2:56:b4: f8:8b:34:b1:b8:c1:cf:15:f5:77:85:49:90:2b:71:51:97:3d: 90:6f:46:70:6a:34:92:77:6b:b4:b0:8b:c6:5a:56:87:c7:eb: 91:07:03:28:85:c7:86:3d:24:1b:df:6a:6d:1a:01:d9:59:27: 5e:97:6f:30:71:b0:f2:22:1f:79:d4:fe:79:93:4b:2a:7c:55: 63:89:d8:b8:89:71:34:cb:66:67:13:46:cd:c8:de:49:1d:a9: be:c9:41:76:f9:fb:87:5c:f2:30:30:b9:e5:d8:81:ca:73:c0: 3a:0d:e8:8b:db:c8:8c:e4:a1:a9:df:36:36:59:34:55:d6:ef: 69:74:bd:cf:09:87:c4:0b:4d:97:ad:f5:f2:53:49:2d:ae:83: d2:fa:99:86:2a:a8:34:52:c1:83:a3:d0:0c:65:5c:50:32:31: 01:d8:ab:41:75:c6:09:1b:29:90:41:48:22:ca:e1:c0:fc:55: 56:4c:e7:a6:83:d7:0f:87:3e:77:0b:08:c0:32:54:f4:ca:72: 02:f2:1f:59 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEx2gX388lsdf3erIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDEwOTAyMDAzMVoXDTI2MDQwOTAxMDAzMVowLzEtMCsGA1UEAxMk OWNkY2I1YTUtNmJjMy00NGE1LWFmZTItZWE3ZGZhZGEyZTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbaHpLTmy2le+GZtqGdsCn4Mx7wGqkfTE5ni yQ51eNCs3x5OVPcesAjN27zr6T+2ZqsFWCfh82463ZgM9MHpHHX5Aji6w2dNmyAG FWrvP0LCKP7NqO/sWMTFBtaJJO9vrfHu+fEpevO7KocqeqyUbR2Z3u+YpLk3IS3y So1jBxI0KKAiAIWljmhf/m6d+r1zNpf+39mmEgsQ7WIGisJBQvQJOpBSoykVEvtm fY+IrHxM8M0xdbXGIc4spby6FV9vB9+touSoVOe/cvbglx+4gyvkjFXQRGzc1/mt LBBN+4ANAFB5CRHnEXbznhZSBxCkIbJMF9HNMpKb32dIxGyiVwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFCVoDCiFeCcDxd925nEt5SWmZBreMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMWNhNWYwZTItNzc0OC0z NzJlLWI3ZWUtYTJjZDQ2ODk4YWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPE+CmaAkw1CpA6Qz+0sv53YHT69c0dIS +sg3i4zEeXZSkytSdKUWYQUcnOOyV7LonzdD8la0+Is0sbjBzxX1d4VJkCtxUZc9 kG9GcGo0kndrtLCLxlpWh8frkQcDKIXHhj0kG99qbRoB2VknXpdvMHGw8iIfedT+ eZNLKnxVY4nYuIlxNMtmZxNGzcjeSR2pvslBdvn7h1zyMDC55diBynPAOg3oi9vI jOShqd82Nlk0VdbvaXS9zwmHxAtNl6318lNJLa6D0vqZhiqoNFLBg6PQDGVcUDIx AdirQXXGCRspkEFIIsrhwPxVVkznpoPXD4c+dwsIwDJU9MpyAvIfWQ== -----END CERTIFICATE-----Generated at Thu Feb 26 15:00:05 2026 by rpki-client