$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/27c6c150-4348-3c20-90f5-4786f24b2bff.roa File: 27c6c150-4348-3c20-90f5-4786f24b2bff.roa (raw, json) Hash identifier: 6oFwyT1M+p7s+gkCcmUIfFScvyQCJfeQIxwAAjBWMUg= Subject key identifier: 58:53:CB:FF:DB:8C:67:28:EF:D5:F6:CD:01:99:D9:7A:60:0F:40:AE Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584D571FB57BC4612A4F097B05F8 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/27c6c150-4348-3c20-90f5-4786f24b2bff.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 28753 IP address blocks: 23.19.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b5:7b:c4:61:2a:4f:09:7b:05:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=9e6fa49f-0b5f-482f-a7bb-0f6487c08c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a6:f5:f2:87:28:48:87:37:bf:c4:ff:b0:b0: 69:3a:13:d3:d5:99:0d:b8:3e:b8:21:69:c5:7a:97: 20:6f:71:2a:f7:de:90:82:6a:60:20:2b:e6:8a:d7: f6:36:9d:b2:be:25:26:bd:a5:e3:0e:94:2e:f3:ac: fe:af:43:0e:f6:6e:cf:09:5a:e6:ab:7d:7d:13:b8: ca:7c:1a:ac:c3:21:c3:5b:d6:f0:5e:94:f8:05:09: e7:75:cc:25:5f:12:1b:4c:f0:c5:9f:b8:73:0a:20: 82:4d:e2:4c:cb:aa:e5:bb:08:15:02:23:08:29:88: cc:23:cd:a6:f3:33:b1:41:02:28:8d:f4:f6:e2:f9: f5:8e:1a:fe:4f:00:6d:0f:16:ea:1e:13:cd:2f:6e: 3c:72:62:be:a6:52:80:d8:24:e4:94:d3:7a:97:0d: 30:35:71:34:14:42:94:0e:27:ff:92:a1:77:4c:1b: fa:e4:ed:4d:6b:47:a5:ba:c8:23:51:16:f8:50:9b: 20:cf:7e:68:a2:ae:96:5d:40:ed:a3:99:e5:df:cb: 0d:39:0c:d2:6f:87:56:09:b4:47:42:0d:66:f7:78: 49:e4:df:ce:d8:6c:37:a3:14:0e:de:6c:c3:0c:9e: 93:62:82:99:07:4c:04:42:11:50:a1:03:f0:e6:56: 3e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:53:CB:FF:DB:8C:67:28:EF:D5:F6:CD:01:99:D9:7A:60:0F:40:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/27c6c150-4348-3c20-90f5-4786f24b2bff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:65:4a:2b:da:45:db:9b:8a:cd:25:31:17:c7:3b:49:ff:26: 11:25:30:a3:d3:00:87:85:3c:05:3f:cf:00:9a:83:5b:4a:04: 48:c1:3a:de:58:99:5c:26:f6:e2:5c:3b:c2:c1:35:ae:ed:27: e1:02:9c:92:0b:9b:6a:68:e6:24:38:a8:f9:68:b8:9a:b3:05: d4:d6:2a:55:3c:59:98:03:26:6e:0e:6a:be:c3:81:d8:3f:16: d2:4a:bf:f9:e1:2c:11:db:9d:fd:ca:79:44:8f:b5:99:04:01: 38:2b:46:0a:22:ad:ab:79:58:a5:78:68:0b:25:2f:51:1d:3b: 85:25:d4:ec:ae:7d:25:4a:11:14:37:e8:35:9e:11:58:af:71: f7:9d:5a:3d:ed:64:7d:7f:f8:09:20:58:f4:38:e0:68:44:a0: db:e4:7d:69:9c:0b:95:a1:a7:1c:29:a9:17:dd:23:78:87:88: 14:d9:6f:5c:9a:02:ac:75:32:dd:d7:bf:55:03:ab:46:ab:30: 3d:b2:7c:a2:88:da:f8:fe:06:40:1f:00:1f:0b:94:23:d8:be: 9d:97:85:e0:e3:70:12:a0:46:58:3c:e3:08:76:6d:ff:0a:f1: 25:5a:4d:1c:14:93:a3:b9:c0:99:d9:b1:07:e2:67:49:c3:cb: 98:12:b2:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH7V7xGEqTwl7BfgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk OWU2ZmE0OWYtMGI1Zi00ODJmLWE3YmItMGY2NDg3YzA4Yzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKb18ocoSIc3v8T/sLBpOhPT1ZkNuD64IWnF epcgb3Eq996QgmpgICvmitf2Np2yviUmvaXjDpQu86z+r0MO9m7PCVrmq319E7jK fBqswyHDW9bwXpT4BQnndcwlXxIbTPDFn7hzCiCCTeJMy6rluwgVAiMIKYjMI82m 8zOxQQIojfT24vn1jhr+TwBtDxbqHhPNL248cmK+plKA2CTklNN6lw0wNXE0FEKU Dif/kqF3TBv65O1Na0elusgjURb4UJsgz35ooq6WXUDto5nl38sNOQzSb4dWCbRH Qg1m93hJ5N/O2Gw3oxQO3mzDDJ6TYoKZB0wEQhFQoQPw5lY+vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhTy//bjGco79X2zQGZ2XpgD0CuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMjdjNmMxNTAtNDM0OC0z YzIwLTkwZjUtNDc4NmYyNGIyYmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1lSivaRdubis0lMRfHO0n/JhElMKPTAIeFPAU/zwCag1tKBEjBOt5Y mVwm9uJcO8LBNa7tJ+ECnJILm2po5iQ4qPlouJqzBdTWKlU8WZgDJm4Oar7Dgdg/ FtJKv/nhLBHbnf3KeUSPtZkEATgrRgoirat5WKV4aAslL1EdO4Ul1OyufSVKERQ3 6DWeEVivcfedWj3tZH1/+AkgWPQ44GhEoNvkfWmcC5WhpxwpqRfdI3iHiBTZb1ya Aqx1Mt3Xv1UDq0arMD2yfKKI2vj+BkAfAB8LlCPYvp2XheDjcBKgRlg84wh2bf8K 8SVaTRwUk6O5wJnZsQfiZ0nDy5gSskc= -----END CERTIFICATE-----Generated at Mon Apr 13 15:33:26 2026 by rpki-client