$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3454930a-2e03-3ea1-b840-1957b45965b0.roa File: 3454930a-2e03-3ea1-b840-1957b45965b0.roa (raw, json) Hash identifier: bqnkVR1JNG7HrRcLFIoi7SEdB/PCVjL51T6H3m8J2T8= Subject key identifier: 0A:2D:37:B9:2B:6C:DA:F7:4C:98:5B:1C:CE:FE:1A:69:36:28:01:ED Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EC06463C895A0686EDBE4E000 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3454930a-2e03-3ea1-b840-1957b45965b0.roa Signing time: Thu 06 Aug 2026 22:45:59 +0000 ROA not before: Thu 06 Aug 2026 22:45:59 +0000 ROA not after: Wed 04 Nov 2026 23:45:59 +0000 asID: 395954 IP address blocks: 23.19.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:64:63:c8:95:a0:68:6e:db:e4:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 6 22:45:59 2026 GMT Not After : Nov 4 23:45:59 2026 GMT Subject: CN=4729ab46-46ea-4416-bec3-d58c36ee803f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:4b:73:f0:7a:7c:0c:cc:c1:ca:fb:95:3a:d5: 0c:20:f6:0c:2b:91:e5:a6:32:14:d9:5d:4c:2d:e4: 36:56:f9:75:7f:49:a9:9b:86:03:10:20:18:ef:bf: 58:ab:a6:d5:00:e4:7f:22:16:c2:19:e5:7b:60:4d: 8c:46:74:ae:e5:9d:51:27:b8:a8:60:29:18:28:38: c3:fa:07:2b:c2:27:c5:20:dd:37:bd:2e:6e:ee:7f: b2:d6:48:a6:f3:8a:37:2f:ad:bc:c8:44:2e:c7:50: b7:2a:41:23:08:f6:71:65:5d:a3:05:d1:c2:c3:e9: 6a:4e:68:05:3e:e0:07:4e:7d:82:ae:f6:94:12:bb: d9:87:f7:22:1c:a3:35:8a:04:2c:93:f5:c6:1b:0a: bd:bf:bc:9a:b4:cb:18:fe:0c:9d:94:ab:b0:36:2e: 7c:70:44:5f:ae:ba:21:21:99:99:bb:e7:7b:9f:29: ea:ba:44:17:33:58:b2:27:d7:c1:02:96:c0:42:e4: dc:35:4d:f1:e1:12:5e:23:62:cc:f9:e7:95:61:e8: 96:0f:7b:3d:df:71:b1:03:1b:d1:ac:f9:04:f1:8e: cf:4f:7b:e1:2a:62:83:d7:c0:a9:90:e1:56:28:b0: 58:ea:a7:ff:7b:5d:b5:23:5d:e5:48:8b:46:42:fd: ca:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2D:37:B9:2B:6C:DA:F7:4C:98:5B:1C:CE:FE:1A:69:36:28:01:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3454930a-2e03-3ea1-b840-1957b45965b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:d3:73:83:0a:03:6a:39:77:b6:2a:71:c8:70:d4:2b:39:b1: 68:fc:c6:73:35:6f:9e:57:60:b1:51:4f:61:34:25:21:29:7d: cd:3c:02:a6:33:d1:13:0c:dc:b9:04:a2:21:bb:ab:02:7e:cf: d2:eb:28:49:82:21:ba:ab:c9:ef:32:63:7a:7c:54:51:69:78: c6:c0:b7:22:ef:9c:2a:2b:77:29:6c:24:c6:50:93:bc:fd:53: a4:b1:9f:04:9d:58:5a:34:f2:8a:9e:90:9b:60:a5:1a:90:c8: 62:50:0d:19:be:e9:ad:f1:7e:2c:2a:fd:a7:62:dd:c5:bd:44: 86:f1:94:9d:07:7b:d3:15:66:f4:15:8d:cc:3f:c0:bb:62:40: 48:0a:72:e7:74:8b:30:dc:86:7a:89:a2:54:d7:96:33:f1:59: de:f1:7b:93:cc:79:b3:66:25:2e:1b:f3:97:cd:dd:de:f1:16: 22:d6:13:12:07:00:a8:1d:74:1a:7e:37:6d:8a:0a:91:b8:2c: 34:4b:9a:30:1b:3e:2a:81:04:5f:f7:67:37:03:23:f4:7f:52: 02:3b:09:95:02:c4:2c:01:26:d4:22:b2:a8:cf:83:36:56:a3: e0:4e:5d:9f:20:e1:b0:12:55:d8:b4:07:56:ce:34:58:d5:1b: 6c:ec:e9:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7AZGPIlaBobtvk4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNjIyNDU1OVoXDTI2MTEwNDIzNDU1OVowLzEtMCsGA1UEAxMk NDcyOWFiNDYtNDZlYS00NDE2LWJlYzMtZDU4YzM2ZWU4MDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEtz8Hp8DMzByvuVOtUMIPYMK5HlpjIU2V1M LeQ2Vvl1f0mpm4YDECAY779Yq6bVAOR/IhbCGeV7YE2MRnSu5Z1RJ7ioYCkYKDjD +gcrwifFIN03vS5u7n+y1kim84o3L628yEQux1C3KkEjCPZxZV2jBdHCw+lqTmgF PuAHTn2CrvaUErvZh/ciHKM1igQsk/XGGwq9v7yatMsY/gydlKuwNi58cERfrroh IZmZu+d7nynqukQXM1iyJ9fBApbAQuTcNU3x4RJeI2LM+eeVYeiWD3s933GxAxvR rPkE8Y7PT3vhKmKD18CpkOFWKLBY6qf/e121I13lSItGQv3K9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAotN7krbNr3TJhbHM7+Gmk2KAHtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMzQ1NDkzMGEtMmUwMy0z ZWExLWI4NDAtMTk1N2I0NTk2NWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFxOUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHTc4MKA2o5d7Yqcchw1Cs5sWj8xnM1b55XYLFRT2E0JSEpfc08AqYz 0RMM3LkEoiG7qwJ+z9LrKEmCIbqrye8yY3p8VFFpeMbAtyLvnCordylsJMZQk7z9 U6SxnwSdWFo08oqekJtgpRqQyGJQDRm+6a3xfiwq/adi3cW9RIbxlJ0He9MVZvQV jcw/wLtiQEgKcud0izDchnqJolTXljPxWd7xe5PMebNmJS4b85fN3d7xFiLWExIH AKgddBp+N22KCpG4LDRLmjAbPiqBBF/3ZzcDI/R/UgI7CZUCxCwBJtQisqjPgzZW o+BOXZ8g4bASVdi0B1bONFjVG2zs6fM= -----END CERTIFICATE-----Generated at Thu Aug 27 18:21:16 2026 by rpki-client