$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3a603485-8119-3bb4-9449-4eb447f559ba.roa File: 3a603485-8119-3bb4-9449-4eb447f559ba.roa (raw, json) Hash identifier: J+khZA0DcBsWcCq7xNBOmCITN9eyyetXmbN6mTAnX/o= Subject key identifier: 36:0E:7C:0B:2F:B5:7F:4E:4A:6B:44:45:C6:87:A1:56:DA:B0:7C:D2 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584C76817E69E182F1C7B8554580 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3a603485-8119-3bb4-9449-4eb447f559ba.roa Signing time: Fri 09 Jan 2026 02:00:31 +0000 ROA not before: Fri 09 Jan 2026 02:00:31 +0000 ROA not after: Thu 09 Apr 2026 01:00:31 +0000 asID: 59253 IP address blocks: 23.19.197.0/24 maxlen: 24 2607:f5b5:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:76:81:7e:69:e1:82:f1:c7:b8:55:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Jan 9 02:00:31 2026 GMT Not After : Apr 9 01:00:31 2026 GMT Subject: CN=d31b8946-93a6-452e-9138-483dedf040d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:16:ab:7a:39:e7:c2:7d:af:2f:cb:1e:11:f7: f7:48:d8:fc:c9:6a:61:9c:7b:e9:d2:ec:24:0c:81: 07:ea:be:9f:e1:e1:fc:f5:d6:5b:01:9c:25:96:1c: 3b:29:11:12:80:10:2e:b1:36:86:50:81:fc:33:9f: ab:5a:5b:b6:ea:e3:bd:fc:19:50:90:70:94:ba:ce: ee:dc:c2:80:8f:4f:cd:b6:b1:ca:82:23:cb:c5:b4: 59:a9:a3:7c:c1:4d:2a:40:d8:d8:2d:08:27:7c:59: 64:eb:86:c7:6b:53:8b:f6:16:f7:f8:ae:a9:82:3a: 0b:36:47:06:de:f4:30:c3:a5:3f:21:f3:3f:90:80: de:57:2b:4a:23:14:56:5e:fe:30:5b:f6:62:29:dc: c4:9c:0c:75:de:f2:e2:1a:24:be:f6:80:11:b2:05: b5:0d:e1:2e:ae:53:03:df:7e:11:ca:15:41:57:8f: c6:da:d0:37:2e:69:30:a5:a5:ca:dc:46:8a:c9:fa: 42:44:df:15:6c:38:f8:f4:1e:df:09:c7:d2:79:e2: e1:71:59:63:93:0b:7f:ac:0b:c3:a8:bd:c7:e3:84: 61:34:13:4b:3c:9f:44:04:3a:18:f3:99:ba:29:04: 12:19:ff:00:f4:ca:21:16:af:72:2e:8c:1a:88:a2: 6f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0E:7C:0B:2F:B5:7F:4E:4A:6B:44:45:C6:87:A1:56:DA:B0:7C:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3a603485-8119-3bb4-9449-4eb447f559ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.197.0/24 IPv6: 2607:f5b5:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:eb:c7:c2:14:62:0a:d4:bc:72:e5:40:11:41:a0:63:60:c3: c9:03:4c:3b:ff:08:c6:6c:60:1b:d4:17:f0:54:60:91:87:fe: 11:b3:42:18:e9:98:27:0a:d8:0d:1d:8e:e6:11:c9:32:8e:8a: 28:87:0d:e3:d9:18:c4:97:cb:37:b2:01:2e:ad:4d:02:5d:fb: 14:ec:22:86:2f:90:14:c2:f8:4d:06:3b:a6:78:ae:4e:7a:bc: 3c:70:00:c6:7b:ca:96:c3:51:70:26:2d:a8:73:58:91:44:fd: 0d:60:c6:dc:6a:b5:b8:50:bc:98:ab:02:67:b0:8a:70:cd:5e: 89:de:e8:08:8a:ce:6c:b1:6b:39:d2:be:34:86:ac:29:0e:af: 7a:5e:e3:2c:c5:e8:46:3c:99:af:50:70:69:56:bd:d2:80:42: f3:36:42:5c:54:df:f9:4b:88:7c:c0:ed:5a:8d:83:fa:56:0c: ce:f4:e6:1d:93:e6:f8:9b:bb:39:cd:2b:a6:0c:b2:44:15:fd: bc:00:cc:9c:39:97:2b:9b:43:31:3d:61:83:d2:b0:6b:d9:75: bf:41:c8:dc:0d:cb:3d:5e:55:4c:a7:41:36:cf:53:9e:03:10: 4f:7d:ec:7e:60:22:02:21:f7:c5:76:b3:f2:1d:ef:70:4e:c8: f2:48:db:f0 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEx2gX5p4YLxx7hVRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDEwOTAyMDAzMVoXDTI2MDQwOTAxMDAzMVowLzEtMCsGA1UEAxMk ZDMxYjg5NDYtOTNhNi00NTJlLTkxMzgtNDgzZGVkZjA0MGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyharejnnwn2vL8seEff3SNj8yWphnHvp0uwk DIEH6r6f4eH89dZbAZwllhw7KRESgBAusTaGUIH8M5+rWlu26uO9/BlQkHCUus7u 3MKAj0/NtrHKgiPLxbRZqaN8wU0qQNjYLQgnfFlk64bHa1OL9hb3+K6pgjoLNkcG 3vQww6U/IfM/kIDeVytKIxRWXv4wW/ZiKdzEnAx13vLiGiS+9oARsgW1DeEurlMD 334RyhVBV4/G2tA3LmkwpaXK3EaKyfpCRN8VbDj49B7fCcfSeeLhcVljkwt/rAvD qL3H44RhNBNLPJ9EBDoY85m6KQQSGf8A9MohFq9yLowaiKJvlwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFDYOfAsvtX9OSmtERcaHoVbasHzSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvM2E2MDM0ODUtODExOS0z YmI0LTk0NDktNGViNDQ3ZjU1OWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxPFMA8E AgACMAkDBwAmB/W1AAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASuvHwhRiCtS8cuVAEUGgY2DDyQNMO/8I xmxgG9QX8FRgkYf+EbNCGOmYJwrYDR2O5hHJMo6KKIcN49kYxJfLN7IBLq1NAl37 FOwihi+QFML4TQY7pniuTnq8PHAAxnvKlsNRcCYtqHNYkUT9DWDG3Gq1uFC8mKsC Z7CKcM1eid7oCIrObLFrOdK+NIasKQ6vel7jLMXoRjyZr1BwaVa90oBC8zZCXFTf +UuIfMDtWo2D+lYMzvTmHZPm+Ju7Oc0rpgyyRBX9vADMnDmXK5tDMT1hg9Kwa9l1 v0HI3A3LPV5VTKdBNs9TngMQT33sfmAiAiH3xXaz8h3vcE7I8kjb8A== -----END CERTIFICATE-----Generated at Thu Feb 26 15:02:46 2026 by rpki-client