$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3a603485-8119-3bb4-9449-4eb447f559ba.roa File: 3a603485-8119-3bb4-9449-4eb447f559ba.roa (raw, json) Hash identifier: ZHFkznZdlkjr1UZSFaxoynj3uxmwTJlAFUYZSC8pDho= Subject key identifier: 6D:F2:49:8B:5B:ED:08:70:B0:91:EE:E3:E7:C7:8F:06:22:96:A1:71 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584D571FB7BFD988B563AE7D4B00 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3a603485-8119-3bb4-9449-4eb447f559ba.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 59253 IP address blocks: 23.19.197.0/24 maxlen: 24 2607:f5b5:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b7:bf:d9:88:b5:63:ae:7d:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=c8d8f52f-7a86-4616-bcac-8fff0146aece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b9:49:a4:dc:5c:5d:9b:e6:50:5b:35:77:0f: 8e:be:a3:af:0e:ac:ed:43:91:42:3b:4c:40:55:16: 8a:4b:22:4c:83:8a:31:49:c2:b1:77:05:a5:f8:d1: 91:e0:6a:78:ee:f3:b9:f1:30:96:ac:d2:24:78:4e: 13:96:16:23:d0:b7:b1:65:c7:64:f5:76:8c:a7:88: e1:25:c5:3f:10:0a:44:06:1b:39:41:90:fc:b2:d6: 28:5e:37:d0:a9:67:56:ad:20:1e:07:4a:78:9a:99: c1:26:6d:ff:f6:ff:03:8b:ec:28:16:6a:03:6d:06: 22:25:1f:55:de:e1:ab:9f:0b:91:be:89:b2:56:1b: 1b:7f:42:27:a1:fd:84:e5:f7:cd:c6:06:38:f3:5f: 82:b8:7d:8f:61:a9:bd:84:6c:72:64:20:81:bf:9a: 52:73:25:64:5e:b6:31:f4:a4:e9:b2:1d:80:cc:11: 4e:24:53:08:3b:c4:26:05:a2:b0:45:97:72:34:55: ba:a1:e9:0d:b1:f2:19:e6:a9:88:ae:73:26:92:eb: c3:a8:be:57:3e:c1:d1:e5:38:82:1e:74:90:8d:5e: b3:d1:66:30:a7:e9:47:fd:49:3e:9e:48:e2:f6:c2: 02:55:f0:e2:26:58:13:c9:e3:07:2d:7d:95:fa:74: ca:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F2:49:8B:5B:ED:08:70:B0:91:EE:E3:E7:C7:8F:06:22:96:A1:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3a603485-8119-3bb4-9449-4eb447f559ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.197.0/24 IPv6: 2607:f5b5:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:01:10:0e:8f:be:d5:b7:63:f4:dc:91:96:a5:ab:e5:d6:0d: 97:15:fd:35:ce:eb:d7:8d:6d:7a:89:d7:72:48:b7:c6:a9:3d: 6d:db:77:0c:25:83:5b:af:b2:f8:1f:8f:86:3f:3f:2d:1a:69: cc:4a:34:e3:85:31:8a:30:00:70:09:02:13:48:9a:df:3e:81: 19:58:53:be:ae:3b:ad:5e:05:c0:77:00:82:7c:39:ba:c6:2b: 75:3a:0f:77:cb:a6:46:4b:07:0f:d4:7b:3f:69:ab:3c:5e:43: af:18:fa:91:f2:87:a3:9e:e9:db:90:b0:78:20:39:09:d3:9f: 0d:72:70:0d:81:2f:36:87:a0:40:e5:8f:5b:b4:07:ff:35:bc: 13:12:32:41:95:78:d7:73:c6:2a:56:b9:80:da:27:19:56:e8: 07:44:af:a2:1f:35:e6:74:0e:76:c3:17:1e:0c:55:1c:0a:83: 73:45:51:27:19:05:7f:1d:61:e2:9b:33:fc:cb:00:1f:81:46: d9:b7:6c:2e:b7:9f:23:b2:e4:f6:87:b7:24:ae:3f:25:ef:be: 62:2e:e7:79:24:83:7c:08:2d:30:c4:61:03:04:c9:51:0d:ac: 5f:37:a7:cd:91:4f:dd:53:1b:ba:8e:71:17:ea:c6:a6:39:77: 14:ee:7d:22 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE1XH7e/2Yi1Y659SwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk YzhkOGY1MmYtN2E4Ni00NjE2LWJjYWMtOGZmZjAxNDZhZWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07lJpNxcXZvmUFs1dw+OvqOvDqztQ5FCO0xA VRaKSyJMg4oxScKxdwWl+NGR4Gp47vO58TCWrNIkeE4TlhYj0LexZcdk9XaMp4jh JcU/EApEBhs5QZD8stYoXjfQqWdWrSAeB0p4mpnBJm3/9v8Di+woFmoDbQYiJR9V 3uGrnwuRvomyVhsbf0Inof2E5ffNxgY481+CuH2PYam9hGxyZCCBv5pScyVkXrYx 9KTpsh2AzBFOJFMIO8QmBaKwRZdyNFW6oekNsfIZ5qmIrnMmkuvDqL5XPsHR5TiC HnSQjV6z0WYwp+lH/Uk+nkji9sICVfDiJlgTyeMHLX2V+nTKVQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFG3ySYtb7QhwsJHu4+fHjwYilqFxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvM2E2MDM0ODUtODExOS0z YmI0LTk0NDktNGViNDQ3ZjU1OWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxPFMA8E AgACMAkDBwAmB/W1AAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOgEQDo++1bdj9NyRlqWr5dYNlxX9Nc7r 141teonXcki3xqk9bdt3DCWDW6+y+B+Phj8/LRppzEo044UxijAAcAkCE0ia3z6B GVhTvq47rV4FwHcAgnw5usYrdToPd8umRksHD9R7P2mrPF5Drxj6kfKHo57p25Cw eCA5CdOfDXJwDYEvNoegQOWPW7QH/zW8ExIyQZV413PGKla5gNonGVboB0Svoh81 5nQOdsMXHgxVHAqDc0VRJxkFfx1h4psz/MsAH4FG2bdsLrefI7Lk9oe3JK4/Je++ Yi7neSSDfAgtMMRhAwTJUQ2sXzenzZFP3VMbuo5xF+rGpjl3FO59Ig== -----END CERTIFICATE-----Generated at Mon Apr 13 15:33:04 2026 by rpki-client