$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2b2559a8-5457-356a-b9b1-c46c289e434a.roa File: 2b2559a8-5457-356a-b9b1-c46c289e434a.roa (raw, json) Hash identifier: bHMYaQlj36CncU+22MM++LmPn5WKdbeFaNeIPcCIylQ= Subject key identifier: 70:2E:5D:F0:E0:72:4E:A1:A4:AB:BB:BC:36:0B:FF:F5:17:AE:ED:E1 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584D571FB7233115E0FEB216AE80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2b2559a8-5457-356a-b9b1-c46c289e434a.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 59253 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b7:23:31:15:e0:fe:b2:16:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=41e74733-d297-4b56-af78-bf1b18eb27d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f2:07:a4:b8:af:35:84:1e:e4:37:4a:29:51: 22:43:9a:ba:8e:1b:c2:5f:89:ee:0a:70:f7:ac:6d: 7b:d2:9b:62:99:7c:b7:24:2a:45:dd:8c:17:d7:6d: 4c:b0:43:3b:12:cd:62:0e:e8:36:f8:3a:3c:f4:98: e9:8a:22:a3:17:38:1a:48:f8:ac:0f:43:fa:9c:f0: 62:2e:59:04:87:cf:5d:69:52:04:4e:48:c8:31:f6: b8:a9:05:f6:bf:7a:9d:73:58:78:80:87:92:8e:2a: 6a:86:de:d9:4b:46:79:8b:7f:36:25:2b:d3:4b:7f: b2:e2:81:b7:8f:0c:35:2e:52:41:f8:63:75:1a:fe: 49:20:76:24:b4:6e:be:98:ff:be:12:21:2a:3e:9b: 17:33:fa:f3:59:3d:ca:fa:43:a2:fd:e4:7f:6e:1d: 98:1e:e6:f7:b9:79:ad:dc:2a:3a:9f:6b:ca:37:dd: b1:6c:f9:d1:07:f2:e7:91:83:d3:78:23:e7:52:d0: 91:ab:d8:7b:fb:0e:1f:d0:14:35:7e:23:db:95:c6: c7:d3:cc:f6:6f:ca:bd:c4:82:69:a5:10:cc:dd:2b: 92:95:45:c3:d5:cf:65:41:08:39:ce:03:e7:17:de: fa:68:3e:02:59:da:78:ec:be:df:d5:77:05:2e:d3: c1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2E:5D:F0:E0:72:4E:A1:A4:AB:BB:BC:36:0B:FF:F5:17:AE:ED:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2b2559a8-5457-356a-b9b1-c46c289e434a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:91:ab:8f:95:f2:c3:42:ba:e0:9b:85:8d:c2:7f:81:19:59: 24:ce:7f:a6:c3:ad:f5:5a:61:21:52:ff:9a:61:68:06:c3:c0: 8b:be:be:ca:60:7d:4e:c4:8a:59:58:f3:43:1e:4c:07:cf:85: 9b:7c:fa:8e:c7:24:b7:c3:e3:5d:1a:a6:b7:a6:b6:d1:7b:81: c1:3d:83:19:33:35:7b:7a:cc:84:69:6f:de:98:94:7f:9e:fa: e3:d2:c1:c0:df:fc:81:92:61:a2:02:01:95:3e:dd:2d:fc:9c: a3:5c:03:f4:ed:fb:ad:9f:0c:2a:6f:38:35:e5:a3:5b:48:a9: e6:f9:a1:98:1a:4f:f0:69:de:92:5a:e7:9e:a6:9b:0e:45:c5: 7d:66:1b:cc:0f:c7:e4:11:7e:85:79:b9:d5:3e:3b:3a:47:33: 01:8d:f7:be:a9:53:21:62:8a:25:90:1f:5a:e2:f3:c7:c7:e4: 5e:a5:71:e1:8b:9e:ab:87:22:5e:87:03:55:77:d1:43:38:ef: 38:d7:26:b6:08:d0:69:db:51:1c:cd:98:f5:3e:b5:32:cc:27: ae:3a:54:b8:1d:28:b1:90:e8:a8:5d:03:f6:fc:9b:a3:f9:72: 2f:4b:62:73:e2:49:6d:fb:ab:27:d5:bc:6c:9c:37:e5:46:00: 93:a8:67:20 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE1XH7cjMRXg/rIWroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk NDFlNzQ3MzMtZDI5Ny00YjU2LWFmNzgtYmYxYjE4ZWIyN2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPIHpLivNYQe5DdKKVEiQ5q6jhvCX4nuCnD3 rG170ptimXy3JCpF3YwX121MsEM7Es1iDug2+Do89JjpiiKjFzgaSPisD0P6nPBi LlkEh89daVIETkjIMfa4qQX2v3qdc1h4gIeSjipqht7ZS0Z5i382JSvTS3+y4oG3 jww1LlJB+GN1Gv5JIHYktG6+mP++EiEqPpsXM/rzWT3K+kOi/eR/bh2YHub3uXmt 3Co6n2vKN92xbPnRB/LnkYPTeCPnUtCRq9h7+w4f0BQ1fiPblcbH08z2b8q9xIJp pRDM3SuSlUXD1c9lQQg5zgPnF976aD4CWdp47L7f1XcFLtPBhQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFHAuXfDgck6hpKu7vDYL//UXru3hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMmIyNTU5YTgtNTQ1Ny0z NTZhLWI5YjEtYzQ2YzI4OWU0MzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAxZGrj5Xyw0K64JuFjcJ/gRlZJM5/psOt 9VphIVL/mmFoBsPAi76+ymB9TsSKWVjzQx5MB8+Fm3z6jsckt8PjXRqmt6a20XuB wT2DGTM1e3rMhGlv3piUf57649LBwN/8gZJhogIBlT7dLfyco1wD9O37rZ8MKm84 NeWjW0ip5vmhmBpP8GneklrnnqabDkXFfWYbzA/H5BF+hXm51T47OkczAY33vqlT IWKKJZAfWuLzx8fkXqVx4Yueq4ciXocDVXfRQzjvONcmtgjQadtRHM2Y9T61Mswn rjpUuB0osZDoqF0D9vybo/lyL0tic+JJbfurJ9W8bJw35UYAk6hnIA== -----END CERTIFICATE-----Generated at Mon Apr 13 15:33:51 2026 by rpki-client