$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3e1f93dc-6520-3778-ad3d-37750549a980.roa File: 3e1f93dc-6520-3778-ad3d-37750549a980.roa (raw, json) Hash identifier: PT+SLbW17qtH6ipAuBw8Ar43OvSZY3a6Q1VBYM7oN9o= Subject key identifier: B6:E9:77:72:27:B3:02:5F:BA:AA:55:BC:5A:D8:C0:07:28:B9:9E:DF Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F7BB302D174220952BA14AA00 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3e1f93dc-6520-3778-ad3d-37750549a980.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 393886 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:02:d1:74:22:09:52:ba:14:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=f0665fc9-d00f-4a57-83e9-bbe434ae9742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c3:54:d0:ba:8a:d3:ce:df:9b:56:98:e5:22: 50:ca:37:2f:6b:93:07:be:15:36:ed:57:08:5e:0b: da:03:32:51:25:51:0e:88:8c:fc:0e:6b:0c:93:05: 9c:12:a8:67:bd:47:9d:bc:82:c5:57:fe:54:50:5e: c5:da:39:94:0b:77:d6:b0:71:d6:20:7f:47:fe:d8: b9:81:77:3f:33:08:56:9e:c7:8a:1c:20:d5:1a:cc: 6e:8a:a8:b9:d1:5d:62:92:01:90:fa:e9:b4:74:c0: b7:fa:8d:2c:a9:9a:ab:2a:3c:18:b6:a8:b9:59:f7: 5b:3a:8d:15:fe:63:74:b1:d7:3b:d4:87:dd:08:bc: 27:c2:cd:94:67:73:6b:a8:9c:f7:38:35:59:35:4f: 29:05:e2:b9:86:4d:c8:72:eb:b7:bb:3e:bd:0c:59: 34:c5:55:bd:f7:4a:ce:e3:ed:6a:86:fe:89:13:d2: 8f:77:bf:20:48:3e:73:4d:7d:1a:52:70:6f:85:45: ea:b3:cd:ba:c7:26:4e:05:5e:87:27:d1:ed:f7:c3: c9:df:27:a3:c7:55:2a:81:3b:46:3f:a3:3f:05:45: 18:f5:96:cc:f2:5f:3a:95:e0:ef:ba:54:13:07:f6: cc:a2:9d:3e:39:27:12:63:69:79:31:e5:b7:2d:62: 63:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E9:77:72:27:B3:02:5F:BA:AA:55:BC:5A:D8:C0:07:28:B9:9E:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3e1f93dc-6520-3778-ad3d-37750549a980.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:90:98:75:de:b8:82:32:1d:39:25:ad:bc:b4:b0:7e:31:d8: ee:a1:94:0d:36:5e:03:78:d8:40:61:b6:dd:13:25:7e:12:77: 18:43:11:b4:cd:22:a7:25:a9:fc:97:f5:22:4b:a6:ff:94:28: 6b:18:12:b5:34:b2:41:b5:70:87:45:36:29:25:bb:17:3c:5e: 05:a6:de:f4:dc:22:16:eb:08:ad:f5:58:cd:12:e0:af:42:ed: a5:12:78:36:8d:bf:83:54:5d:83:8e:7d:9c:54:ed:63:ff:19: d9:7c:6e:e9:b0:28:13:51:97:c9:d5:a7:0d:d7:2f:f1:d4:d1: 1c:8f:0e:cd:e5:52:54:ab:22:62:2e:f3:8c:e9:3c:5c:5f:da: 82:2a:25:80:fa:38:ba:c9:45:51:72:82:f1:e8:4f:34:11:62: c5:c6:ad:b4:a5:14:00:60:ea:0d:f7:b2:3c:ec:b6:9e:b8:3f: 58:a9:8d:fe:20:90:bb:95:f1:e4:29:53:2c:d6:20:a1:00:a1: bd:b9:19:d0:de:c9:c5:06:53:78:b1:96:42:04:af:54:d1:04: c6:a7:ee:c0:46:5e:47:6c:63:ac:8f:3a:7a:c5:34:88:bd:41: 80:15:4e:00:98:5b:06:c2:5a:7c:88:e1:d5:25:4a:6c:5a:bc: b8:a5:07:ab -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE97swLRdCIJUroUqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk ZjA2NjVmYzktZDAwZi00YTU3LTgzZTktYmJlNDM0YWU5NzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssNU0LqK087fm1aY5SJQyjcva5MHvhU27VcI XgvaAzJRJVEOiIz8DmsMkwWcEqhnvUedvILFV/5UUF7F2jmUC3fWsHHWIH9H/ti5 gXc/MwhWnseKHCDVGsxuiqi50V1ikgGQ+um0dMC3+o0sqZqrKjwYtqi5WfdbOo0V /mN0sdc71IfdCLwnws2UZ3NrqJz3ODVZNU8pBeK5hk3Icuu3uz69DFk0xVW990rO 4+1qhv6JE9KPd78gSD5zTX0aUnBvhUXqs826xyZOBV6HJ9Ht98PJ3yejx1UqgTtG P6M/BUUY9ZbM8l86leDvulQTB/bMop0+OScSY2l5MeW3LWJjOwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFLbpd3InswJfuqpVvFrYwAcouZ7fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvM2UxZjkzZGMtNjUyMC0z Nzc4LWFkM2QtMzc3NTA1NDlhOTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAmZCYdd64gjIdOSWtvLSwfjHY7qGUDTZe A3jYQGG23RMlfhJ3GEMRtM0ipyWp/Jf1Ikum/5QoaxgStTSyQbVwh0U2KSW7Fzxe Babe9NwiFusIrfVYzRLgr0LtpRJ4No2/g1Rdg459nFTtY/8Z2Xxu6bAoE1GXydWn Ddcv8dTRHI8OzeVSVKsiYi7zjOk8XF/agiolgPo4uslFUXKC8ehPNBFixcattKUU AGDqDfeyPOy2nrg/WKmN/iCQu5Xx5ClTLNYgoQChvbkZ0N7JxQZTeLGWQgSvVNEE xqfuwEZeR2xjrI86esU0iL1BgBVOAJhbBsJafIjh1SVKbFq8uKUHqw== -----END CERTIFICATE-----Generated at Tue Oct 13 14:14:55 2026 by rpki-client