$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2d0afbf4-4e83-32c1-a83a-6fe16b5ce42a.roa File: 2d0afbf4-4e83-32c1-a83a-6fe16b5ce42a.roa (raw, json) Hash identifier: ul+gQsyZTn1n17I3fBGM5ttGC49D/HXHgplhO1jRDOU= Subject key identifier: 1A:2F:5D:94:50:B3:0D:87:1B:86:B5:5B:E4:54:5C:38:9D:58:C4:78 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584E37647C34661C1C3747CDEE80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2d0afbf4-4e83-32c1-a83a-6fe16b5ce42a.roa Signing time: Thu 18 Jun 2026 21:00:12 +0000 ROA not before: Thu 18 Jun 2026 21:00:12 +0000 ROA not after: Wed 16 Sep 2026 21:00:12 +0000 asID: 395954 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:37:64:7c:34:66:1c:1c:37:47:cd:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Jun 18 21:00:12 2026 GMT Not After : Sep 16 21:00:12 2026 GMT Subject: CN=44b27b6c-5bfc-4fe7-8843-d5aede6f4a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9a:39:9b:41:34:05:2f:c9:f5:ed:ee:3b:12: fb:76:39:f9:1f:cb:0d:82:3b:01:54:61:94:48:97: d9:55:40:c1:ca:5f:11:18:29:7e:e0:50:bb:07:b9: 30:18:9c:d2:e1:fc:87:74:02:43:24:9a:2d:2c:2c: b9:7d:b8:41:d9:d1:10:51:d0:66:1e:e1:f3:7f:1b: 36:40:4a:0e:2d:a3:ee:99:ab:09:cc:5a:e2:73:a5: 75:cf:d0:2a:bd:ae:df:fe:f8:95:be:4c:7b:21:24: ee:00:47:0c:ea:ef:f7:32:41:58:49:57:95:f3:6b: 06:95:46:1b:04:b6:ac:c7:70:0a:76:45:fa:c4:3d: 4b:fe:f3:95:38:58:fe:b3:0e:46:69:94:4d:19:72: 08:a6:6f:1e:83:ef:74:15:27:15:1d:50:e6:63:b7: d0:2c:66:f3:02:c6:58:32:c3:c6:3c:cb:f7:c2:94: 88:40:be:d7:f9:ae:05:d1:a0:6a:27:ec:04:84:d0: 6d:d2:01:02:67:e8:a0:14:10:a1:1c:3e:96:ca:e1: cc:e9:f4:62:80:07:b9:d0:19:8a:1f:02:6b:48:ed: ca:51:05:d0:b0:f1:d5:56:1a:3b:6a:3a:08:7b:da: 57:c1:e7:97:c8:16:0e:d6:c3:12:53:44:ea:60:0d: da:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2F:5D:94:50:B3:0D:87:1B:86:B5:5B:E4:54:5C:38:9D:58:C4:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2d0afbf4-4e83-32c1-a83a-6fe16b5ce42a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:c7:ad:82:93:3d:61:9a:33:b6:a5:d6:a5:ac:24:84:41:71: f2:5c:e7:c3:ea:e5:4a:c5:d8:67:83:dc:e4:bf:fa:f3:18:38: a7:bc:59:03:52:43:bb:ee:4f:ce:a9:a8:c3:9f:2e:32:1e:38: 9b:7a:e5:76:ac:44:0e:84:a6:b9:fa:1b:c2:ca:82:a1:de:91: d6:d7:d2:10:7f:e7:3e:fd:ca:03:80:45:64:31:c8:71:e6:03: ba:3d:95:a1:4f:d0:d3:0e:47:ab:ce:ef:ef:14:8e:eb:62:2b: 3e:04:ce:c5:02:af:82:03:48:bd:6c:34:cb:d1:b1:b2:30:85: f2:3a:64:76:8c:71:ac:58:ce:b7:06:bb:cb:86:52:ba:94:7d: 02:b4:c3:cf:8b:bc:4b:6f:e4:52:ad:e6:ef:6e:9a:63:ee:ba: 16:7a:97:84:1e:d0:3c:7d:10:62:98:24:24:cf:00:66:74:0a: db:84:d5:a0:be:15:5f:2a:3c:62:42:ae:44:7f:a2:01:65:ea: 52:2b:2b:0c:97:50:23:7a:34:ad:99:66:e3:cf:d7:0d:41:42: b2:53:5e:cb:1e:53:ed:b4:4b:65:4e:7f:d3:52:17:40:fa:ed: a4:f3:fd:15:7f:7d:57:42:12:92:2d:ad:8d:2b:68:de:ff:d6: d7:96:aa:01 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE43ZHw0ZhwcN0fN7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk NDRiMjdiNmMtNWJmYy00ZmU3LTg4NDMtZDVhZWRlNmY0YTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5o5m0E0BS/J9e3uOxL7djn5H8sNgjsBVGGU SJfZVUDByl8RGCl+4FC7B7kwGJzS4fyHdAJDJJotLCy5fbhB2dEQUdBmHuHzfxs2 QEoOLaPumasJzFric6V1z9Aqva7f/viVvkx7ISTuAEcM6u/3MkFYSVeV82sGlUYb BLasx3AKdkX6xD1L/vOVOFj+sw5GaZRNGXIIpm8eg+90FScVHVDmY7fQLGbzAsZY MsPGPMv3wpSIQL7X+a4F0aBqJ+wEhNBt0gECZ+igFBChHD6WyuHM6fRigAe50BmK HwJrSO3KUQXQsPHVVho7ajoIe9pXweeXyBYO1sMSU0TqYA3aHwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFBovXZRQsw2HG4a1W+RUXDidWMR4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMmQwYWZiZjQtNGU4My0z MmMxLWE4M2EtNmZlMTZiNWNlNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPcetgpM9YZoztqXWpawkhEFx8lznw+rl SsXYZ4Pc5L/68xg4p7xZA1JDu+5Pzqmow58uMh44m3rldqxEDoSmufobwsqCod6R 1tfSEH/nPv3KA4BFZDHIceYDuj2VoU/Q0w5Hq87v7xSO62IrPgTOxQKvggNIvWw0 y9GxsjCF8jpkdoxxrFjOtwa7y4ZSupR9ArTDz4u8S2/kUq3m726aY+66FnqXhB7Q PH0QYpgkJM8AZnQK24TVoL4VXyo8YkKuRH+iAWXqUisrDJdQI3o0rZlm48/XDUFC slNeyx5T7bRLZU5/01IXQPrtpPP9FX99V0ISki2tjSto3v/W15aqAQ== -----END CERTIFICATE-----Generated at Mon Jul 13 14:53:14 2026 by rpki-client