$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/24d02c6c-fbff-3e17-a7ee-bdb7046a2384.roa File: 24d02c6c-fbff-3e17-a7ee-bdb7046a2384.roa (raw, json) Hash identifier: u6y0A+Vm0opO8t2UivTrRKzNTMUWUEdL0Je4GCmtDiw= Subject key identifier: 69:AB:B9:47:64:75:BE:50:1F:3F:C1:C8:B0:13:30:A5:05:59:8C:4D Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584D571FB50C1C0ED2AD7A196F40 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/24d02c6c-fbff-3e17-a7ee-bdb7046a2384.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 30633 IP address blocks: 23.19.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b5:0c:1c:0e:d2:ad:7a:19:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=720961c1-d732-4c13-87e4-2a57dbd35b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a8:b4:e3:85:f5:a0:46:e7:c3:f4:4a:bf:39: b1:bb:e6:f6:85:0c:ae:7f:cf:51:3f:2f:04:ea:a2: cb:af:79:13:f4:a2:46:90:e5:49:aa:13:57:4b:cf: d8:6e:58:5f:d6:4b:15:db:c5:51:57:a5:ba:53:14: 90:e8:05:7b:8f:5c:95:6e:07:0e:df:47:20:96:67: 97:8f:ec:df:d1:2b:9b:b2:12:9b:81:26:d9:ff:bd: 3e:1c:9c:87:e3:33:72:92:8a:ab:da:10:05:9e:10: aa:70:c9:27:f3:dc:06:35:0c:5a:97:8d:72:5e:1b: 85:fd:18:7c:92:cf:da:13:eb:76:a6:4d:96:c0:12: 75:f0:28:6b:37:2c:f1:7c:93:4a:6d:4a:ee:af:9e: c8:68:61:be:68:33:84:b3:d8:5b:9a:e9:b9:69:ee: 43:40:1d:6d:06:26:5e:82:49:c9:d1:57:dc:d3:5b: b9:7a:5e:86:dc:78:88:11:ae:9e:3a:c8:cb:86:78: e5:15:6a:a4:e4:d7:77:aa:36:4c:e6:54:2b:3b:6f: a3:14:f1:cc:a7:a2:66:8b:d9:48:eb:51:2a:94:67: 54:47:dc:0c:57:f5:74:4f:e9:d1:2b:b1:df:d4:02: 5b:90:b5:0d:01:98:c8:c7:04:0a:d3:f8:3d:a4:c9: 28:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AB:B9:47:64:75:BE:50:1F:3F:C1:C8:B0:13:30:A5:05:59:8C:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/24d02c6c-fbff-3e17-a7ee-bdb7046a2384.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:02:49:e6:97:b1:8c:ca:e7:5f:72:3a:62:d0:6f:74:21:a9: b6:91:12:fe:1c:1c:da:02:e0:62:d6:f6:24:63:40:c5:d9:33: 8b:ae:8e:73:2b:71:ab:a1:be:f9:a2:96:29:55:d0:a7:9c:76: 33:7a:eb:c3:0a:af:88:0c:65:2f:d8:5d:2b:88:0a:63:dc:9d: 3b:0d:b3:1b:84:ea:e2:85:cb:62:90:8a:03:c8:5f:84:1a:82: bb:ae:2c:73:5a:93:0b:39:2e:4e:68:fd:07:dc:62:7a:b2:02: 1d:b6:af:5b:05:d9:0c:85:c2:bf:03:57:27:99:27:c0:3b:8e: 41:67:db:3b:88:60:62:52:72:0b:2d:97:5e:f3:9d:ba:92:23: 11:f1:62:a8:ce:17:2c:b0:4d:6b:c6:f1:8d:06:8e:e7:8c:59: af:ab:e4:61:69:76:98:6d:18:e4:de:7c:a2:67:1c:d4:d9:ef: 06:34:5e:a9:6b:95:0b:6c:2f:10:01:02:15:ef:90:a6:0b:ec: c4:19:97:8a:f4:38:fc:91:45:09:ac:9a:8f:36:85:e9:61:1c: 41:24:1b:08:ad:9e:df:12:7e:d3:32:57:80:65:d9:b2:17:1d: 4f:ad:9c:11:4e:7a:f5:c9:fd:75:ff:58:4c:6f:34:9d:96:45: 6a:4b:89:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH7UMHA7SrXoZb0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk NzIwOTYxYzEtZDczMi00YzEzLTg3ZTQtMmE1N2RiZDM1YjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qi044X1oEbnw/RKvzmxu+b2hQyuf89RPy8E 6qLLr3kT9KJGkOVJqhNXS8/Yblhf1ksV28VRV6W6UxSQ6AV7j1yVbgcO30cglmeX j+zf0SubshKbgSbZ/70+HJyH4zNykoqr2hAFnhCqcMkn89wGNQxal41yXhuF/Rh8 ks/aE+t2pk2WwBJ18ChrNyzxfJNKbUrur57IaGG+aDOEs9hbmum5ae5DQB1tBiZe gknJ0Vfc01u5el6G3HiIEa6eOsjLhnjlFWqk5Nd3qjZM5lQrO2+jFPHMp6Jmi9lI 61EqlGdUR9wMV/V0T+nRK7Hf1AJbkLUNAZjIxwQK0/g9pMko6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmruUdkdb5QHz/ByLATMKUFWYxNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMjRkMDJjNmMtZmJmZi0z ZTE3LWE3ZWUtYmRiNzA0NmEyMzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxPEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMQCSeaXsYzK519yOmLQb3QhqbaREv4cHNoC4GLW9iRjQMXZM4uujnMr cauhvvmililV0KecdjN668MKr4gMZS/YXSuICmPcnTsNsxuE6uKFy2KQigPIX4Qa gruuLHNakws5Lk5o/QfcYnqyAh22r1sF2QyFwr8DVyeZJ8A7jkFn2zuIYGJScgst l17znbqSIxHxYqjOFyywTWvG8Y0GjueMWa+r5GFpdphtGOTefKJnHNTZ7wY0Xqlr lQtsLxABAhXvkKYL7MQZl4r0OPyRRQmsmo82helhHEEkGwitnt8SftMyV4Bl2bIX HU+tnBFOevXJ/XX/WExvNJ2WRWpLiYk= -----END CERTIFICATE-----Generated at Mon Apr 13 15:32:33 2026 by rpki-client