$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2d0afbf4-4e83-32c1-a83a-6fe16b5ce42a.roa File: 2d0afbf4-4e83-32c1-a83a-6fe16b5ce42a.roa (raw, json) Hash identifier: gX+anZ9gQOGvebTiP5af1RVh6/NAxavdySSUK/tQ6Sc= Subject key identifier: 95:FC:E9:2D:B5:AC:5A:5D:1C:30:0C:02:90:CF:39:E6:6E:7C:E7:F1 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F7BB302C4F5AA0DA8510EADD3 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2d0afbf4-4e83-32c1-a83a-6fe16b5ce42a.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 395954 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:02:c4:f5:aa:0d:a8:51:0e:ad:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=7be5b256-f76e-4cea-8e14-127b0d3605a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3d:06:b9:dd:49:09:96:52:44:aa:af:7c:15: 23:e8:ca:87:f4:6a:14:d8:be:ef:6e:91:57:c1:7d: 0f:4a:3f:5c:f8:aa:fb:9f:05:f5:63:54:d4:69:1c: 45:c3:0c:29:0f:02:74:c9:80:e7:80:33:50:86:f6: ec:dc:c4:01:c2:b9:b5:4d:7c:27:ca:a6:92:00:26: 62:f0:e6:24:b3:8f:26:f9:e3:76:5b:b3:f5:ca:5c: ef:71:29:0f:e3:16:c1:1d:f4:dd:e3:d8:0e:20:e7: a8:b0:57:6b:1a:f9:5c:b0:0a:d6:47:27:e6:1a:ff: b1:ff:9c:ac:6f:45:d0:47:b2:91:f7:5d:11:07:61: c5:25:42:bd:5d:3f:d1:1c:90:f7:44:87:26:8d:b7: be:5c:98:4f:d3:3a:88:98:7c:07:ce:72:68:99:ff: ef:e0:9b:6d:e3:1f:2f:42:9a:23:74:ee:10:09:b6: 09:e9:30:9c:da:c8:99:b2:fd:9e:c4:06:2e:87:f1: d3:57:e2:75:a6:4c:fc:41:66:ff:95:76:44:d3:b4: 81:c9:e9:0f:1f:fc:5c:2b:15:d3:99:2b:80:6f:37: 61:1f:6c:b8:dc:5a:77:8f:d2:d5:5b:fc:04:14:b2: dc:a7:c9:52:36:96:81:ec:ac:64:54:80:d8:df:36: f5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:FC:E9:2D:B5:AC:5A:5D:1C:30:0C:02:90:CF:39:E6:6E:7C:E7:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2d0afbf4-4e83-32c1-a83a-6fe16b5ce42a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:f4:44:97:11:52:c9:6b:67:1d:b9:96:47:66:f1:8c:01:9a: 0e:84:c7:d4:df:cb:64:43:0e:f9:85:af:fd:af:05:79:d3:37: ae:64:e2:20:97:40:7d:ef:7a:35:d4:2e:27:a4:bf:80:9a:5b: ef:26:3b:3b:dc:12:8c:ab:b3:8e:3c:e9:23:85:65:76:fb:71: 21:7d:cc:a4:d1:1d:6d:6a:af:26:69:67:96:e7:cc:b0:69:5d: eb:09:9e:d3:8f:5d:7a:9e:a3:ee:cc:93:0e:37:1b:b8:0f:76: 70:28:03:c8:30:cb:0c:16:e8:36:b6:5d:55:53:2d:59:d4:5f: bd:be:e9:0b:4d:35:40:02:d1:1e:e9:c3:ed:71:1f:77:ed:98: 15:78:81:b0:79:4d:a6:e1:57:9b:1b:8f:e3:d8:48:2a:dd:9e: f4:e3:0c:de:25:a5:35:8b:4c:c5:d6:f6:94:26:38:3f:78:cb: ed:70:d6:f3:05:50:a5:4c:74:e9:05:11:70:70:c4:9f:f9:e9: 1e:23:b8:a9:1c:99:c3:87:b6:af:a7:b0:4c:e5:17:45:be:a7: 5c:35:12:9b:85:1d:4e:c4:3d:e0:25:2a:fd:10:02:ca:d9:0d: 30:ef:94:64:3f:f6:b1:cb:6d:d2:e4:36:cd:6e:68:3c:75:4a: 66:bd:41:ce -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE97swLE9aoNqFEOrdMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk N2JlNWIyNTYtZjc2ZS00Y2VhLThlMTQtMTI3YjBkMzYwNWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzz0Gud1JCZZSRKqvfBUj6MqH9GoU2L7vbpFX wX0PSj9c+Kr7nwX1Y1TUaRxFwwwpDwJ0yYDngDNQhvbs3MQBwrm1TXwnyqaSACZi 8OYks48m+eN2W7P1ylzvcSkP4xbBHfTd49gOIOeosFdrGvlcsArWRyfmGv+x/5ys b0XQR7KR910RB2HFJUK9XT/RHJD3RIcmjbe+XJhP0zqImHwHznJomf/v4Jtt4x8v QpojdO4QCbYJ6TCc2siZsv2exAYuh/HTV+J1pkz8QWb/lXZE07SByekPH/xcKxXT mSuAbzdhH2y43Fp3j9LVW/wEFLLcp8lSNpaB7KxkVIDY3zb1JQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFJX86S21rFpdHDAMApDPOeZufOfxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMmQwYWZiZjQtNGU4My0z MmMxLWE4M2EtNmZlMTZiNWNlNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEArvRElxFSyWtnHbmWR2bxjAGaDoTH1N/L ZEMO+YWv/a8FedM3rmTiIJdAfe96NdQuJ6S/gJpb7yY7O9wSjKuzjjzpI4Vldvtx IX3MpNEdbWqvJmlnlufMsGld6wme049dep6j7syTDjcbuA92cCgDyDDLDBboNrZd VVMtWdRfvb7pC001QALRHunD7XEfd+2YFXiBsHlNpuFXmxuP49hIKt2e9OMM3iWl NYtMxdb2lCY4P3jL7XDW8wVQpUx06QURcHDEn/npHiO4qRyZw4e2r6ewTOUXRb6n XDUSm4UdTsQ94CUq/RACytkNMO+UZD/2sctt0uQ2zW5oPHVKZr1Bzg== -----END CERTIFICATE-----Generated at Wed Oct 14 01:57:35 2026 by rpki-client