$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3e1f93dc-6520-3778-ad3d-37750549a980.roa File: 3e1f93dc-6520-3778-ad3d-37750549a980.roa (raw, json) Hash identifier: K2jq80ChqakhBVipHGUbhQzxcLw1y4HlrpS5o7vrntI= Subject key identifier: C3:0E:06:9D:58:07:95:5E:4A:69:FB:4B:70:06:8C:2A:26:68:A3:02 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584D571FB75510BA906355076F00 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3e1f93dc-6520-3778-ad3d-37750549a980.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 393886 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b7:55:10:ba:90:63:55:07:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=02cc1c71-b7ff-46c5-86af-e02f328b1f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ad:3f:22:08:83:ed:f2:78:a3:88:29:54:6b: 1b:0b:6d:0d:b3:da:fa:a3:a6:12:ee:f3:1b:73:6a: 5d:42:22:94:57:9d:88:d7:ae:05:8e:75:f2:d3:47: 5d:a3:ec:bb:f4:af:c6:fc:eb:66:5d:8e:2f:10:78: aa:ac:44:ae:85:18:f0:dd:5e:8b:42:ab:32:53:bb: f9:8b:6c:9b:3a:5a:bd:5c:08:6b:e2:3e:f0:69:ac: d1:ec:27:c6:31:aa:83:09:f5:0b:7b:e1:da:cb:c9: 4c:f4:fa:14:0d:cc:de:33:92:5e:76:49:39:60:13: 73:c9:f9:81:0b:d6:b5:31:c3:43:70:d0:8b:4b:29: 77:18:dc:61:64:eb:6c:d3:31:c5:3b:8b:e9:5e:ab: 77:85:cd:84:ab:e8:ff:a5:e9:ca:ab:15:7a:30:3c: 75:43:63:1c:67:3f:1c:3a:31:21:cb:b5:27:f9:7b: 72:85:17:1d:dd:af:7c:54:04:90:46:cd:cd:77:45: df:bc:e4:b7:91:6e:03:9d:6a:66:53:fc:9f:b7:b2: 19:9e:c5:af:f2:84:6d:4a:a8:7e:12:60:bf:14:5c: db:c0:38:1e:c4:77:bb:b0:43:b0:e8:fd:fe:04:8d: 07:08:b6:36:c5:90:7c:5d:f7:23:75:9b:0c:a4:de: 6e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:0E:06:9D:58:07:95:5E:4A:69:FB:4B:70:06:8C:2A:26:68:A3:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3e1f93dc-6520-3778-ad3d-37750549a980.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:63:0e:7a:e1:e1:bd:33:2e:2c:03:59:9e:26:71:bc:84:62: 02:84:f4:e5:2b:61:42:7f:9f:82:8e:13:24:53:6b:a5:01:7a: 10:5c:a9:01:75:d4:d2:ed:bf:05:91:51:9a:fc:1c:dc:16:00: a7:b0:fd:91:c9:1c:5b:78:08:72:81:b6:eb:57:08:44:85:6b: 1f:fa:75:b7:9f:98:a4:08:28:6d:00:5b:03:1a:95:7e:eb:c7: a4:a2:e9:1f:ce:28:d7:ed:8f:6f:8d:b1:d8:33:d8:bc:06:0d: 7c:85:c4:a7:e1:62:90:40:9a:ed:fc:a5:9a:ea:9c:eb:ef:fe: cd:52:14:c6:72:53:f6:8d:78:15:20:e5:c4:40:f9:03:dc:fb: 0f:47:13:0a:5a:0d:47:4a:a5:5a:c2:04:c1:34:c7:e2:4b:03: 6b:83:94:93:54:78:71:c2:9c:82:02:10:9a:98:94:aa:22:7e: 0c:f3:c3:35:c0:2c:97:48:29:55:88:4f:72:1a:2a:ed:59:d7: 89:b4:1a:d3:d5:50:74:7b:b2:29:92:18:5d:64:d1:e4:3d:9e: c7:66:5c:66:46:f2:d1:90:47:be:b6:01:a1:7b:1b:62:7b:d3: 0c:99:99:fe:8b:d6:97:83:fe:43:fc:7b:bf:fd:28:f8:b0:a6: 6d:6c:8c:09 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE1XH7dVELqQY1UHbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk MDJjYzFjNzEtYjdmZi00NmM1LTg2YWYtZTAyZjMyOGIxZjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq0/IgiD7fJ4o4gpVGsbC20Ns9r6o6YS7vMb c2pdQiKUV52I164FjnXy00ddo+y79K/G/OtmXY4vEHiqrESuhRjw3V6LQqsyU7v5 i2ybOlq9XAhr4j7waazR7CfGMaqDCfULe+Hay8lM9PoUDczeM5Jedkk5YBNzyfmB C9a1McNDcNCLSyl3GNxhZOts0zHFO4vpXqt3hc2Eq+j/penKqxV6MDx1Q2McZz8c OjEhy7Un+XtyhRcd3a98VASQRs3Nd0XfvOS3kW4DnWpmU/yft7IZnsWv8oRtSqh+ EmC/FFzbwDgexHe7sEOw6P3+BI0HCLY2xZB8XfcjdZsMpN5uwQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFMMOBp1YB5VeSmn7S3AGjComaKMCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvM2UxZjkzZGMtNjUyMC0z Nzc4LWFkM2QtMzc3NTA1NDlhOTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQWMOeuHhvTMuLANZniZxvIRiAoT05Sth Qn+fgo4TJFNrpQF6EFypAXXU0u2/BZFRmvwc3BYAp7D9kckcW3gIcoG261cIRIVr H/p1t5+YpAgobQBbAxqVfuvHpKLpH84o1+2Pb42x2DPYvAYNfIXEp+FikECa7fyl muqc6+/+zVIUxnJT9o14FSDlxED5A9z7D0cTCloNR0qlWsIEwTTH4ksDa4OUk1R4 ccKcggIQmpiUqiJ+DPPDNcAsl0gpVYhPchoq7VnXibQa09VQdHuyKZIYXWTR5D2e x2ZcZkby0ZBHvrYBoXsbYnvTDJmZ/ovWl4P+Q/x7v/0o+LCmbWyMCQ== -----END CERTIFICATE-----Generated at Mon Apr 13 12:29:25 2026 by rpki-client