$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2b2559a8-5457-356a-b9b1-c46c289e434a.roa File: 2b2559a8-5457-356a-b9b1-c46c289e434a.roa (raw, json) Hash identifier: VpemS5Abg/BE6rv/QO5omnjOgmyZVWelDtDrsi9X36w= Subject key identifier: A8:3E:99:31:83:00:43:88:38:FA:B6:2F:C8:6D:A8:1E:4F:01:F4:E0 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584ED9C75BEDE2B2D0FE0EDCF700 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2b2559a8-5457-356a-b9b1-c46c289e434a.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 59253 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:5b:ed:e2:b2:d0:fe:0e:dc:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=bb094ec8-ff74-4161-92f9-dee9c26a4030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:45:a9:8c:85:26:89:cc:af:9e:84:ea:8a:83: 6b:0d:f8:1f:78:63:f3:38:f8:d0:37:72:1b:dd:05: 72:bd:97:de:d0:56:d8:9f:2c:79:ff:b9:aa:45:2c: d4:e4:10:a3:0a:35:28:ee:ef:5e:4f:27:47:a1:b3: 82:dc:4d:6c:30:06:61:47:37:3a:fe:9e:30:00:29: 7c:e6:cf:4d:17:e4:2c:bd:a3:2f:e1:e6:38:bc:84: 35:9d:7e:05:3f:1c:d9:ac:c9:b4:4e:4c:3f:4e:e1: 59:fe:37:67:a9:3e:b7:ed:be:7c:b2:0d:9a:4d:6f: 3b:53:bc:94:c4:8e:04:93:0a:89:0a:a3:b7:a8:89: dc:e0:72:bc:1a:f1:b0:a0:62:b5:d1:c9:23:fb:af: 74:18:19:36:04:0a:81:18:1a:7a:bb:b8:80:77:64: f9:3c:b4:a6:40:08:54:c8:ea:b8:23:54:63:27:85: 27:29:de:7e:91:80:04:e3:ac:24:ed:ba:50:fa:0e: 02:ed:fd:14:89:59:4f:ea:cb:5b:99:55:94:ea:81: 04:18:99:51:e3:d2:49:fd:69:f4:7a:e5:9c:2a:64: f9:c2:6b:9f:69:6f:1a:ac:9f:c8:6c:e5:34:65:07: 5c:2a:6d:d8:bf:e0:e7:b1:6d:2d:88:f3:ec:c1:63: e0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:3E:99:31:83:00:43:88:38:FA:B6:2F:C8:6D:A8:1E:4F:01:F4:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2b2559a8-5457-356a-b9b1-c46c289e434a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:22:3f:09:cf:97:f5:1a:ed:48:13:38:a8:43:21:ea:ca:4e: e6:98:6d:d0:1b:6f:99:f7:e0:5d:fa:88:2e:8b:3f:fa:d3:7e: d1:00:5a:8d:c2:3c:53:7a:34:c3:17:61:4f:2c:7c:89:10:7e: 17:63:94:d0:72:19:63:e4:f1:1b:97:94:af:e3:c7:f9:f8:39: 4d:88:7c:fd:1e:c9:3d:8f:96:51:b1:87:5d:e7:2f:7d:0e:c0: 2c:77:41:df:c4:49:25:5c:7c:3a:7d:e5:a2:2d:32:26:a9:ff: 18:56:df:be:2f:82:08:ae:cb:2b:dc:f9:b5:a0:89:ee:9e:f9: b0:80:1f:6a:32:24:33:be:7c:b7:17:53:65:1a:ca:e5:6e:e3: d0:99:2c:ea:e2:03:08:a5:33:82:da:78:22:18:a0:1e:87:6d: 7c:57:bf:ed:a8:d3:72:6f:62:71:90:16:13:b5:fe:17:58:59: 63:88:70:95:aa:f0:3a:0f:99:6f:e5:b3:0d:e4:3f:0f:bb:fa: c7:7d:d8:83:f2:f9:29:98:a4:1e:07:67:e6:0d:04:92:31:e3: 83:a9:15:1c:34:4e:c5:bc:6d:45:ce:b2:1e:00:df:43:20:d5: b9:e4:a9:13:4e:71:74:1f:70:0e:b2:4a:df:a1:77:df:2b:97: f9:34:ff:84 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE7Zx1vt4rLQ/g7c9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk YmIwOTRlYzgtZmY3NC00MTYxLTkyZjktZGVlOWMyNmE0MDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkWpjIUmicyvnoTqioNrDfgfeGPzOPjQN3Ib 3QVyvZfe0FbYnyx5/7mqRSzU5BCjCjUo7u9eTydHobOC3E1sMAZhRzc6/p4wACl8 5s9NF+QsvaMv4eY4vIQ1nX4FPxzZrMm0Tkw/TuFZ/jdnqT637b58sg2aTW87U7yU xI4EkwqJCqO3qInc4HK8GvGwoGK10ckj+690GBk2BAqBGBp6u7iAd2T5PLSmQAhU yOq4I1RjJ4UnKd5+kYAE46wk7bpQ+g4C7f0UiVlP6stbmVWU6oEEGJlR49JJ/Wn0 euWcKmT5wmufaW8arJ/IbOU0ZQdcKm3Yv+DnsW0tiPPswWPgcwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFKg+mTGDAEOIOPq2L8htqB5PAfTgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMmIyNTU5YTgtNTQ1Ny0z NTZhLWI5YjEtYzQ2YzI4OWU0MzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUiI/Cc+X9RrtSBM4qEMh6spO5pht0Btv mffgXfqILos/+tN+0QBajcI8U3o0wxdhTyx8iRB+F2OU0HIZY+TxG5eUr+PH+fg5 TYh8/R7JPY+WUbGHXecvfQ7ALHdB38RJJVx8On3loi0yJqn/GFbfvi+CCK7LK9z5 taCJ7p75sIAfajIkM758txdTZRrK5W7j0Jks6uIDCKUzgtp4IhigHodtfFe/7ajT cm9icZAWE7X+F1hZY4hwlarwOg+Zb+WzDeQ/D7v6x33Yg/L5KZikHgdn5g0EkjHj g6kVHDROxbxtRc6yHgDfQyDVueSpE05xdB9wDrJK36F33yuX+TT/hA== -----END CERTIFICATE-----Generated at Thu Aug 27 19:07:20 2026 by rpki-client