$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3e1f93dc-6520-3778-ad3d-37750549a980.roa File: 3e1f93dc-6520-3778-ad3d-37750549a980.roa (raw, json) Hash identifier: uCZJpEBuGLGFZJNnxXJMkc7cKhRN3Hn0WrF5cd4JByg= Subject key identifier: DE:7F:7B:90:A6:74:6E:9C:1A:F8:FB:48:DC:22:7F:2B:C2:4F:9D:EE Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584ED9C75C20D6F932E08C931200 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3e1f93dc-6520-3778-ad3d-37750549a980.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 393886 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:5c:20:d6:f9:32:e0:8c:93:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=d102381c-34f2-4aa9-a6ae-1798ec21e3de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:74:d2:f1:d4:62:a3:a0:56:14:a2:04:f6:5b: ce:db:97:35:50:bc:31:18:d6:0d:65:db:c8:30:ec: ad:a8:79:89:42:04:b6:be:00:48:7d:eb:7c:d5:d8: 24:f3:a9:de:44:27:f4:19:61:9d:1d:f8:88:ee:22: e3:7c:64:d3:9f:9a:29:a0:fa:75:59:69:02:89:7e: ae:b7:2b:b6:01:a2:eb:99:d5:c3:98:97:c3:49:f8: 17:67:4a:68:01:a9:a5:8a:eb:18:a7:52:9c:b4:32: a1:97:b9:45:4b:c8:8d:79:50:ea:6c:ad:88:59:8f: 9f:75:e6:ca:89:75:f0:cd:a3:59:da:08:e7:08:e8: 32:ef:3a:4d:92:2d:3c:65:03:c1:eb:b5:0f:b9:65: d4:1d:7e:df:d7:9b:57:56:41:00:bd:32:bd:e5:f6: 7c:09:3a:94:03:4c:3b:65:0c:e0:05:60:ba:ee:09: 35:dd:79:62:6a:af:63:2b:1a:33:51:95:46:da:6d: d0:f9:8c:83:fe:5e:32:1d:da:8e:70:ce:f4:75:a7: 56:83:0b:5d:89:6b:23:b9:e4:28:37:a4:0e:9f:32: 16:b9:3b:53:a8:3a:1e:d0:f7:40:91:7a:d9:29:3c: 01:36:5e:05:93:34:2c:04:f2:70:53:16:f6:82:2d: 79:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:7F:7B:90:A6:74:6E:9C:1A:F8:FB:48:DC:22:7F:2B:C2:4F:9D:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3e1f93dc-6520-3778-ad3d-37750549a980.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:13:55:bd:b4:8e:5d:7c:37:2a:42:19:0e:a1:57:c6:53:4d: 9a:fd:ac:6a:49:19:5b:98:99:e3:f4:59:1e:75:52:39:7d:b8: ad:9a:14:a3:44:03:40:61:66:a6:81:fd:38:cc:e0:ec:55:6e: d6:0d:cb:f9:c0:2a:06:af:41:48:4e:6e:dc:3b:62:6b:9b:d0: 24:a8:a1:3d:3c:49:e1:28:41:a5:2e:af:be:4e:33:f2:ec:0b: 02:fb:bd:18:c6:a8:ec:84:c8:7b:eb:9b:17:ca:2e:4c:db:e9: 84:55:9c:c0:bc:4f:9e:28:11:1f:b5:36:76:86:40:b6:b6:12: c4:22:f6:78:f4:64:dd:b2:87:8d:85:4c:02:c5:85:47:77:11: be:60:d9:a9:1b:6f:38:5a:e4:09:98:cc:d9:15:b3:7e:df:c8: 37:c7:af:95:7c:cc:35:5b:a6:57:59:f2:b4:05:d9:1e:1f:24: 43:06:1a:52:a4:a7:45:79:9d:11:5e:49:3a:dd:30:86:46:9b: 02:ac:64:60:d1:6c:1d:1e:46:5c:fd:e6:fd:17:6d:3a:37:7c: e7:5d:52:b7:f6:4d:d3:e5:5d:6c:40:14:b2:36:c9:f0:35:3d: f7:a8:08:f5:97:81:1f:a4:ce:3a:a9:e5:bd:d0:98:2e:8c:82: 5d:9f:78:d5 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE7Zx1wg1vky4IyTEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk ZDEwMjM4MWMtMzRmMi00YWE5LWE2YWUtMTc5OGVjMjFlM2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXTS8dRio6BWFKIE9lvO25c1ULwxGNYNZdvI MOytqHmJQgS2vgBIfet81dgk86neRCf0GWGdHfiI7iLjfGTTn5opoPp1WWkCiX6u tyu2AaLrmdXDmJfDSfgXZ0poAamliusYp1KctDKhl7lFS8iNeVDqbK2IWY+fdebK iXXwzaNZ2gjnCOgy7zpNki08ZQPB67UPuWXUHX7f15tXVkEAvTK95fZ8CTqUA0w7 ZQzgBWC67gk13Xliaq9jKxozUZVG2m3Q+YyD/l4yHdqOcM70dadWgwtdiWsjueQo N6QOnzIWuTtTqDoe0PdAkXrZKTwBNl4FkzQsBPJwUxb2gi15yQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFN5/e5CmdG6cGvj7SNwifyvCT53uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvM2UxZjkzZGMtNjUyMC0z Nzc4LWFkM2QtMzc3NTA1NDlhOTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAuhNVvbSOXXw3KkIZDqFXxlNNmv2sakkZ W5iZ4/RZHnVSOX24rZoUo0QDQGFmpoH9OMzg7FVu1g3L+cAqBq9BSE5u3Dtia5vQ JKihPTxJ4ShBpS6vvk4z8uwLAvu9GMao7ITIe+ubF8ouTNvphFWcwLxPnigRH7U2 doZAtrYSxCL2ePRk3bKHjYVMAsWFR3cRvmDZqRtvOFrkCZjM2RWzft/IN8evlXzM NVumV1nytAXZHh8kQwYaUqSnRXmdEV5JOt0whkabAqxkYNFsHR5GXP3m/RdtOjd8 511St/ZN0+VdbEAUsjbJ8DU996gI9ZeBH6TOOqnlvdCYLoyCXZ941Q== -----END CERTIFICATE-----Generated at Thu Aug 27 16:58:07 2026 by rpki-client