$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/4296f480-05d3-3639-a70c-34756d720e3f.roa File: 4296f480-05d3-3639-a70c-34756d720e3f.roa (raw, json) Hash identifier: 0Iv6vZVGEdsJeENP1usSKXZdRQBUYyMqFvHN7Ymsf4s= Subject key identifier: 13:3A:1D:55:6B:6E:19:7B:EF:5F:C6:F5:0C:2A:1E:EA:D7:F0:C5:0F Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584ECA8F034A3CB829D016B1DB80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/4296f480-05d3-3639-a70c-34756d720e3f.roa Signing time: Mon 10 Aug 2026 14:09:57 +0000 ROA not before: Mon 10 Aug 2026 14:09:57 +0000 ROA not after: Sun 08 Nov 2026 15:09:57 +0000 asID: 395954 IP address blocks: 23.19.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ca:8f:03:4a:3c:b8:29:d0:16:b1:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 10 14:09:57 2026 GMT Not After : Nov 8 15:09:57 2026 GMT Subject: CN=537cc086-e8d8-4b7e-8f97-479e7bc8fcc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1b:c8:98:35:52:ca:3c:8c:57:ee:fb:8a:d1: d1:f2:c1:16:ea:af:b9:ba:20:58:f7:b2:26:0a:78: 5e:8d:c3:57:cb:48:6a:15:d1:ac:5a:a0:b6:92:0b: e1:86:00:e0:90:23:56:1e:0e:c2:0e:3c:24:67:ef: 4c:4c:91:2a:40:c9:3c:f1:7c:cd:a3:35:cb:6b:63: d6:88:fb:b7:29:a2:a1:42:7a:4d:83:6f:b0:2f:2a: 14:dc:b5:75:40:96:75:3e:7b:0c:7d:74:b0:6d:f6: bb:7b:7e:28:f8:d7:6d:7c:21:b1:fc:14:c3:9e:94: 4b:f4:f2:60:1f:e4:59:e1:3d:93:57:8d:ab:4b:a4: 4f:46:99:c8:c1:f8:72:0c:6c:f1:39:3e:cb:8e:e4: bf:80:40:3b:c4:87:86:7c:6a:a9:3d:c8:23:c3:b0: b9:93:6b:b0:60:eb:72:0f:79:06:37:4e:e8:38:58: f8:9b:cf:66:48:36:9f:e8:22:fa:1c:50:63:53:aa: 5e:1b:82:e8:09:48:8d:90:b4:a3:af:1e:a2:d4:40: 75:3c:fb:17:d4:af:7c:d8:ad:97:ad:50:3c:ff:3a: 99:0d:d6:14:c7:bb:88:fd:93:39:e6:d1:ca:b4:b3: 09:24:bc:b0:11:86:52:50:38:1c:6f:74:32:75:d7: a1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:3A:1D:55:6B:6E:19:7B:EF:5F:C6:F5:0C:2A:1E:EA:D7:F0:C5:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/4296f480-05d3-3639-a70c-34756d720e3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:b3:05:df:bf:98:5d:34:e8:d2:28:f5:5b:df:f3:71:97:1c: a0:6e:50:46:e4:fd:49:d5:04:5d:cd:64:0e:4e:1b:39:b5:49: f6:1c:dc:28:0d:12:eb:96:1b:0f:14:d2:1d:96:fb:78:0d:09: a1:88:81:23:aa:ee:68:27:53:24:bf:58:0f:de:4a:da:92:27: 5f:cc:80:7d:f2:20:47:1f:17:07:14:4a:69:10:b4:8b:91:09: 07:bb:1d:e5:a6:f5:2c:26:12:dc:2a:b3:ec:1b:a4:3a:58:f6: 5b:2e:fa:a3:d7:b4:7b:90:da:5b:d8:e4:4f:8e:59:b0:9e:14: 79:dd:92:38:26:f1:42:55:52:9a:a1:16:43:6a:1b:14:e6:17: 92:90:7e:ba:3c:a2:96:ba:80:34:b6:99:5f:45:87:31:b5:68: ff:e4:f7:9b:16:14:2a:40:24:b9:91:75:17:30:c0:c8:85:9f: f1:c0:4f:a5:c8:f5:23:e5:39:a5:91:97:92:51:2b:97:c3:3b: fd:5a:42:37:1c:45:6d:0e:ae:46:12:89:fc:43:eb:d5:ba:f7: a6:84:fb:89:b7:d0:80:83:8e:be:bc:46:ec:56:cf:7e:79:ce: b4:81:5a:79:4a:c9:85:74:a1:44:94:2b:e0:b8:5c:8f:1a:00: ad:d8:1f:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7KjwNKPLgp0Bax24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgxMDE0MDk1N1oXDTI2MTEwODE1MDk1N1owLzEtMCsGA1UEAxMk NTM3Y2MwODYtZThkOC00YjdlLThmOTctNDc5ZTdiYzhmY2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBvImDVSyjyMV+77itHR8sEW6q+5uiBY97Im CnhejcNXy0hqFdGsWqC2kgvhhgDgkCNWHg7CDjwkZ+9MTJEqQMk88XzNozXLa2PW iPu3KaKhQnpNg2+wLyoU3LV1QJZ1PnsMfXSwbfa7e34o+NdtfCGx/BTDnpRL9PJg H+RZ4T2TV42rS6RPRpnIwfhyDGzxOT7LjuS/gEA7xIeGfGqpPcgjw7C5k2uwYOty D3kGN07oOFj4m89mSDaf6CL6HFBjU6peG4LoCUiNkLSjrx6i1EB1PPsX1K982K2X rVA8/zqZDdYUx7uI/ZM55tHKtLMJJLywEYZSUDgcb3QyddehtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBM6HVVrbhl771/G9QwqHurX8MUPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNDI5NmY0ODAtMDVkMy0z NjM5LWE3MGMtMzQ3NTZkNzIwZTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFxPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKazBd+/mF006NIo9Vvf83GXHKBuUEbk/UnVBF3NZA5OGzm1SfYc3CgN EuuWGw8U0h2W+3gNCaGIgSOq7mgnUyS/WA/eStqSJ1/MgH3yIEcfFwcUSmkQtIuR CQe7HeWm9SwmEtwqs+wbpDpY9lsu+qPXtHuQ2lvY5E+OWbCeFHndkjgm8UJVUpqh FkNqGxTmF5KQfro8opa6gDS2mV9FhzG1aP/k95sWFCpAJLmRdRcwwMiFn/HAT6XI 9SPlOaWRl5JRK5fDO/1aQjccRW0OrkYSifxD69W696aE+4m30ICDjr68RuxWz355 zrSBWnlKyYV0oUSUK+C4XI8aAK3YH/g= -----END CERTIFICATE-----Generated at Thu Aug 27 17:39:25 2026 by rpki-client