$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/4296f480-05d3-3639-a70c-34756d720e3f.roa File: 4296f480-05d3-3639-a70c-34756d720e3f.roa (raw, json) Hash identifier: dAcA65DGTb+WH5lquWiBpen61+T/fCyyXbFa1YRRhQY= Subject key identifier: BF:BB:A1:B0:4A:4A:C4:F9:C0:E4:1D:20:D4:93:D9:C1:1A:08:19:1B Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F6DBD698C5D799C0689A134C0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/4296f480-05d3-3639-a70c-34756d720e3f.roa Signing time: Thu 08 Oct 2026 01:00:11 +0000 ROA not before: Thu 08 Oct 2026 01:00:11 +0000 ROA not after: Wed 06 Jan 2027 02:00:11 +0000 asID: 395954 IP address blocks: 23.19.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6d:bd:69:8c:5d:79:9c:06:89:a1:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 8 01:00:11 2026 GMT Not After : Jan 6 02:00:11 2027 GMT Subject: CN=e10052e0-ab1d-4795-a050-d16020929392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1a:5e:93:13:07:f1:16:61:b6:3d:1c:18:89: b1:fd:89:9b:47:f4:a5:15:44:2c:b9:86:fc:f1:83: 7d:fa:d2:c8:a7:3b:2a:7b:10:1f:b1:53:8c:1a:86: a8:69:7d:8c:58:8c:0e:ba:14:d4:1d:6c:e3:c6:b0: ce:63:3b:18:33:96:7e:99:25:8b:88:ba:07:e8:9d: 5e:e4:14:9e:df:fc:c9:d5:b4:89:de:6c:5f:53:b2: a1:d2:61:9f:2d:55:c5:15:d5:2a:6a:42:fb:ae:bc: dc:65:26:b7:23:cc:cc:cb:65:a5:b3:27:e3:56:bf: 79:fc:69:59:48:4f:36:ab:99:bd:89:b8:c7:3a:15: 99:8a:c0:6b:6c:1d:7c:6d:5a:dc:da:86:25:2b:76: 9b:26:a5:2f:89:e1:17:b6:d1:99:b8:91:da:cd:17: 0a:f1:aa:32:73:97:9d:72:9d:41:c5:e1:cf:91:e8: 24:09:5d:a8:a8:fd:eb:c6:93:dc:d9:dd:da:80:36: 6b:f2:b8:79:9e:39:01:1c:14:23:ed:1e:7a:e2:ff: 90:b2:6f:92:e2:e3:39:5d:4c:06:71:5e:e0:d3:29: a1:f4:0e:84:b2:1d:6b:07:5e:e8:4e:e6:02:55:eb: b7:2d:97:4a:e3:99:45:da:46:5b:f3:99:2b:70:a8: 67:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BB:A1:B0:4A:4A:C4:F9:C0:E4:1D:20:D4:93:D9:C1:1A:08:19:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/4296f480-05d3-3639-a70c-34756d720e3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:ed:29:67:79:7b:db:84:59:75:54:6d:c3:63:0b:56:3c:a1: 30:53:71:af:3d:2e:00:f0:ac:63:78:d7:2f:be:32:dc:21:27: 2f:ff:2a:70:7e:03:7c:7f:ce:35:d3:47:12:38:65:de:1f:a5: 51:7d:76:af:5a:d9:38:e1:3f:e2:13:8b:18:c7:da:cc:eb:dd: f0:b1:e6:e8:43:64:b1:7a:5b:5e:d2:96:75:78:f9:ef:1b:1c: ae:9f:74:2b:76:3a:fe:63:ee:eb:83:1d:4a:1c:0e:ec:f7:5c: f3:01:1a:5d:ae:9c:75:d3:14:cd:d7:e2:9c:16:22:53:54:d4: f4:f4:33:fa:69:87:b8:9d:1a:5e:45:1c:af:2a:e9:62:99:fd: cf:00:1a:7e:d6:b9:c1:6a:ea:7c:fe:c0:30:2d:0c:0c:e7:4c: a3:4d:ca:c2:16:0d:34:b7:cf:be:e1:db:9c:6e:9a:9b:1b:12: 11:29:41:0a:7f:99:00:d1:b5:d2:c1:7c:9b:b1:d9:e2:73:32: f0:86:74:7a:98:70:cc:15:68:8d:ad:1a:cb:28:73:01:f2:4c: 01:6a:9e:92:2a:cb:a2:44:99:31:72:85:17:df:b4:1b:6a:4b: 05:62:39:2e:8f:9c:15:8e:ce:57:e5:57:ed:7c:64:52:88:ff: 64:3c:3e:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9tvWmMXXmcBomhNMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwODAxMDAxMVoXDTI3MDEwNjAyMDAxMVowLzEtMCsGA1UEAxMk ZTEwMDUyZTAtYWIxZC00Nzk1LWEwNTAtZDE2MDIwOTI5MzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhpekxMH8RZhtj0cGImx/YmbR/SlFUQsuYb8 8YN9+tLIpzsqexAfsVOMGoaoaX2MWIwOuhTUHWzjxrDOYzsYM5Z+mSWLiLoH6J1e 5BSe3/zJ1bSJ3mxfU7Kh0mGfLVXFFdUqakL7rrzcZSa3I8zMy2WlsyfjVr95/GlZ SE82q5m9ibjHOhWZisBrbB18bVrc2oYlK3abJqUvieEXttGZuJHazRcK8aoyc5ed cp1BxeHPkegkCV2oqP3rxpPc2d3agDZr8rh5njkBHBQj7R564v+Qsm+S4uM5XUwG cV7g0ymh9A6Esh1rB17oTuYCVeu3LZdK45lF2kZb85krcKhnbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+7obBKSsT5wOQdINST2cEaCBkbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNDI5NmY0ODAtMDVkMy0z NjM5LWE3MGMtMzQ3NTZkNzIwZTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFxPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrtKWd5e9uEWXVUbcNjC1Y8oTBTca89LgDwrGN41y++MtwhJy//KnB+ A3x/zjXTRxI4Zd4fpVF9dq9a2TjhP+ITixjH2szr3fCx5uhDZLF6W17SlnV4+e8b HK6fdCt2Ov5j7uuDHUocDuz3XPMBGl2unHXTFM3X4pwWIlNU1PT0M/pph7idGl5F HK8q6WKZ/c8AGn7WucFq6nz+wDAtDAznTKNNysIWDTS3z77h25xumpsbEhEpQQp/ mQDRtdLBfJux2eJzMvCGdHqYcMwVaI2tGssocwHyTAFqnpIqy6JEmTFyhRfftBtq SwViOS6PnBWOzlflV+18ZFKI/2Q8PpY= -----END CERTIFICATE-----Generated at Wed Oct 14 13:11:19 2026 by rpki-client