$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2d0afbf4-4e83-32c1-a83a-6fe16b5ce42a.roa File: 2d0afbf4-4e83-32c1-a83a-6fe16b5ce42a.roa (raw, json) Hash identifier: zVsJGXeZioBodr5KGTuLoB5u4HWK9ziFPYyjUFGKTII= Subject key identifier: EE:3D:F3:73:4E:05:AC:9F:49:C4:F0:A5:1B:1A:C2:D4:2A:8B:C4:D1 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584D571FB7491DC5740E326EBD40 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2d0afbf4-4e83-32c1-a83a-6fe16b5ce42a.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 395954 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b7:49:1d:c5:74:0e:32:6e:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=8bf29661-310b-446a-8496-f4997a8120ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2e:5d:07:c0:26:be:98:63:1a:7b:81:62:3b: 47:08:18:23:34:6f:5b:5b:5d:ad:06:1f:9d:13:05: 34:53:a2:72:73:4b:3d:89:a7:d4:9e:70:52:86:0b: 19:96:2b:c6:fb:a7:94:6c:e5:d9:64:8b:ac:5f:d4: 36:1a:2e:fb:48:3a:a5:75:8b:c2:88:df:08:5d:24: 94:41:1a:ae:b9:b2:e9:7a:70:78:45:90:e0:c2:bd: b3:4a:0a:9e:ab:ad:b2:55:82:e1:69:9e:88:08:7e: cb:d5:95:41:11:3f:9b:22:9d:a4:78:60:ac:50:01: 7d:94:b7:07:ca:87:63:66:e2:eb:77:5b:63:36:95: 76:15:6d:54:22:56:40:72:8a:65:dd:44:4c:75:cd: 5f:17:f9:f1:a0:f9:47:31:97:69:5e:fe:c9:05:35: ab:bb:c6:ef:79:fb:2a:4d:84:91:81:5e:07:97:51: 28:dd:ab:73:d4:94:20:1a:8f:2f:4e:f0:57:81:c6: d1:8f:1c:cf:47:28:ab:f4:b9:c9:fe:40:6f:a1:53: 57:3a:a1:7d:9c:cb:4a:2f:74:62:83:b2:4c:1f:2c: 48:20:c5:3b:b7:cb:dc:26:8b:33:1b:17:63:7f:14: 9c:08:38:82:ca:6b:bc:73:e7:de:c8:d0:46:51:0d: 8d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:3D:F3:73:4E:05:AC:9F:49:C4:F0:A5:1B:1A:C2:D4:2A:8B:C4:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2d0afbf4-4e83-32c1-a83a-6fe16b5ce42a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:78:92:98:b5:ae:30:d2:0f:ad:d7:e4:30:57:75:aa:b6:95: c2:7b:e3:42:31:f9:fb:f8:51:dd:aa:79:cd:70:f9:ef:ca:0d: 1b:b2:4d:3a:3c:bf:01:35:3c:6a:2e:43:a5:95:fe:56:83:93: e2:23:d6:f9:1a:ba:ee:46:0a:5f:ec:a0:45:a3:09:95:01:d1: 69:f1:2a:19:bc:3c:95:55:3e:10:98:b4:65:fa:30:08:98:1c: 94:31:00:aa:af:a3:b1:b7:33:46:9c:40:0f:2a:ce:50:23:ab: 90:0c:c2:62:85:7b:9b:d5:9c:a8:09:f1:49:3f:f4:76:97:a9: 8f:f8:7f:33:77:29:6d:ea:35:35:bd:1d:b3:ea:17:9e:e5:96: 01:16:8c:8c:64:c9:cd:40:43:8c:0c:33:a7:63:ca:48:d6:b1: d2:19:a7:87:72:ad:36:b4:ec:53:27:36:d9:13:d6:fb:15:7e: f7:a6:88:94:27:3f:c1:5e:5a:1f:f5:a9:c0:46:c3:e2:2d:88: 90:82:e7:46:22:48:14:18:b3:52:59:24:0b:5e:21:8f:60:11: 88:70:eb:7b:83:3a:91:bc:b2:e6:b8:c7:d3:2f:64:0b:5c:87: 5e:8e:26:e7:a4:70:8a:d2:b0:ff:77:a3:f4:19:dd:ad:0b:a3: 8b:35:eb:63 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE1XH7dJHcV0DjJuvUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk OGJmMjk2NjEtMzEwYi00NDZhLTg0OTYtZjQ5OTdhODEyMGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmC5dB8AmvphjGnuBYjtHCBgjNG9bW12tBh+d EwU0U6Jyc0s9iafUnnBShgsZlivG+6eUbOXZZIusX9Q2Gi77SDqldYvCiN8IXSSU QRquubLpenB4RZDgwr2zSgqeq62yVYLhaZ6ICH7L1ZVBET+bIp2keGCsUAF9lLcH yodjZuLrd1tjNpV2FW1UIlZAcopl3URMdc1fF/nxoPlHMZdpXv7JBTWru8bvefsq TYSRgV4Hl1Eo3atz1JQgGo8vTvBXgcbRjxzPRyir9LnJ/kBvoVNXOqF9nMtKL3Ri g7JMHyxIIMU7t8vcJoszGxdjfxScCDiCymu8c+feyNBGUQ2NwwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFO4983NOBayfScTwpRsawtQqi8TRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMmQwYWZiZjQtNGU4My0z MmMxLWE4M2EtNmZlMTZiNWNlNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAaHiSmLWuMNIPrdfkMFd1qraVwnvjQjH5 +/hR3ap5zXD578oNG7JNOjy/ATU8ai5DpZX+VoOT4iPW+Rq67kYKX+ygRaMJlQHR afEqGbw8lVU+EJi0ZfowCJgclDEAqq+jsbczRpxADyrOUCOrkAzCYoV7m9WcqAnx ST/0dpepj/h/M3cpbeo1Nb0ds+oXnuWWARaMjGTJzUBDjAwzp2PKSNax0hmnh3Kt NrTsUyc22RPW+xV+96aIlCc/wV5aH/WpwEbD4i2IkILnRiJIFBizUlkkC14hj2AR iHDre4M6kbyy5rjH0y9kC1yHXo4m56RwitKw/3ej9BndrQujizXrYw== -----END CERTIFICATE-----Generated at Mon Apr 13 15:32:12 2026 by rpki-client