$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/40b45ee2-a392-35b8-a132-5bade746d13c.roa File: 40b45ee2-a392-35b8-a132-5bade746d13c.roa (raw, json) Hash identifier: CCmfdzX7qtk+3s41VKzoKhgJspO/Itzhjc47GQh0iA4= Subject key identifier: DF:55:9B:2D:65:0D:AC:65:DB:7F:52:24:7E:E9:16:06:73:47:11:9E Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F6292B783E59CAA1EF78E8480 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/40b45ee2-a392-35b8-a132-5bade746d13c.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 394380 IP address blocks: 23.19.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:b7:83:e5:9c:aa:1e:f7:8e:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=de70448f-825c-4ca7-87a4-67152f9d7338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:09:8f:cc:a6:37:ea:a6:2a:f3:85:e8:cd:ee: ee:80:9b:a8:1d:60:7e:40:e9:86:38:68:71:d8:d4: 56:9a:93:fd:ec:8e:db:32:ad:fe:0c:d1:ac:58:d8: b8:c4:1d:22:9e:0f:b5:d8:40:48:9b:21:dc:af:d9: 5f:05:76:ab:ac:19:0a:77:8c:a0:8c:df:7e:ad:df: 8f:e5:02:cb:24:a8:32:03:fd:78:e6:0d:1f:ae:fb: b6:9f:ac:24:5b:72:90:24:37:89:73:be:b8:07:b1: 78:c0:10:ae:36:5d:bc:6f:25:b9:f2:ff:37:c6:08: 80:c4:c3:81:8c:27:40:b0:83:4a:ce:39:17:ae:c8: 22:63:16:05:d7:5d:93:22:cf:58:7c:07:6f:d5:46: 9d:d3:e8:9e:ae:dc:f3:4a:f6:1c:61:7a:89:fd:35: 32:2a:ab:f1:b7:fc:e0:86:2a:56:0a:27:a7:17:04: 71:a5:05:2b:9a:97:a7:42:4e:16:4a:15:90:5e:7a: ac:36:5a:33:7a:9d:14:fa:dc:b5:0a:0c:8a:a0:3f: b4:09:6d:a8:86:d2:72:9c:38:49:7b:f8:c2:85:a4: 93:57:68:cc:b7:c4:47:4b:27:be:5b:f2:ed:61:8d: b5:4e:41:37:99:a6:3b:58:f6:8e:10:c8:82:b3:24: 3c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:55:9B:2D:65:0D:AC:65:DB:7F:52:24:7E:E9:16:06:73:47:11:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/40b45ee2-a392-35b8-a132-5bade746d13c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:56:8f:69:14:1f:a4:3d:f6:c7:a8:9f:f8:bf:4e:e4:8e:46: 23:c3:37:e0:80:7b:b9:ce:36:aa:54:d9:50:bd:80:8c:fb:b1: e5:ae:eb:e3:24:71:c1:bf:59:f0:49:1b:89:22:ca:fc:4d:94: a3:f2:6f:4f:28:35:2d:e4:0f:4d:b3:bc:31:75:0c:fd:cd:d6: 6d:97:0a:96:eb:a8:b1:3b:1e:e1:77:cd:3b:e8:73:71:b6:26: 6a:f0:e7:e0:0b:15:54:46:bb:87:db:6a:72:85:9d:04:57:11: f2:ff:b3:b8:48:67:b9:d8:23:f7:2e:01:a0:fe:0b:a5:ad:26: 48:4e:64:8b:3c:bf:6c:a3:7b:34:41:37:ac:06:91:ed:af:58: c3:5a:6e:d4:e7:1b:fe:80:95:85:0b:94:51:0d:67:31:35:3c: 9d:ce:df:b6:1d:00:59:b9:cc:c3:7c:74:68:25:97:d8:22:f7: 90:ba:d6:e2:0e:9b:0f:13:a7:95:bc:b9:55:c5:00:c0:9f:db: 14:ba:0a:6b:2e:01:9f:f7:2c:7a:79:0d:38:fa:72:90:51:90: e1:4a:c8:b1:62:02:ae:84:8d:e0:05:70:8d:ec:69:d7:4d:99: 28:4f:e8:59:df:a8:75:13:ec:97:9c:c5:2d:13:d9:06:84:77: 05:53:9b:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikreD5ZyqHveOhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZGU3MDQ0OGYtODI1Yy00Y2E3LTg3YTQtNjcxNTJmOWQ3MzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAmPzKY36qYq84Xoze7ugJuoHWB+QOmGOGhx 2NRWmpP97I7bMq3+DNGsWNi4xB0ing+12EBImyHcr9lfBXarrBkKd4ygjN9+rd+P 5QLLJKgyA/145g0frvu2n6wkW3KQJDeJc764B7F4wBCuNl28byW58v83xgiAxMOB jCdAsINKzjkXrsgiYxYF112TIs9YfAdv1Uad0+iertzzSvYcYXqJ/TUyKqvxt/zg hipWCienFwRxpQUrmpenQk4WShWQXnqsNlozep0U+ty1CgyKoD+0CW2ohtJynDhJ e/jChaSTV2jMt8RHSye+W/LtYY21TkE3maY7WPaOEMiCsyQ8KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9Vmy1lDaxl239SJH7pFgZzRxGeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNDBiNDVlZTItYTM5Mi0z NWI4LWExMzItNWJhZGU3NDZkMTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFxOYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALxWj2kUH6Q99seon/i/TuSORiPDN+CAe7nONqpU2VC9gIz7seWu6+Mk ccG/WfBJG4kiyvxNlKPyb08oNS3kD02zvDF1DP3N1m2XCpbrqLE7HuF3zTvoc3G2 Jmrw5+ALFVRGu4fbanKFnQRXEfL/s7hIZ7nYI/cuAaD+C6WtJkhOZIs8v2yjezRB N6wGke2vWMNabtTnG/6AlYULlFENZzE1PJ3O37YdAFm5zMN8dGgll9gi95C61uIO mw8Tp5W8uVXFAMCf2xS6CmsuAZ/3LHp5DTj6cpBRkOFKyLFiAq6EjeAFcI3saddN mShP6FnfqHUT7JecxS0T2QaEdwVTm5E= -----END CERTIFICATE-----Generated at Thu Oct 15 10:35:19 2026 by rpki-client