$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/44a7008f-8c8e-3393-bd69-b78e24b4387a.roa File: 44a7008f-8c8e-3393-bd69-b78e24b4387a.roa (raw, json) Hash identifier: P3BdFFwRl1btZBDSdS4Ut1UMQNkbr2EazeGNzy26Y28= Subject key identifier: 2F:4D:48:96:A9:8D:F2:AA:B5:53:10:05:63:D9:36:0C:6A:DB:2C:01 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F7BB302FB30BD321E9D2A9040 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/44a7008f-8c8e-3393-bd69-b78e24b4387a.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 7203 IP address blocks: 23.19.197.0/24 maxlen: 24 2607:f5b5:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:02:fb:30:bd:32:1e:9d:2a:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=f36da373-4e51-42d1-8db4-2e25ee368e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a9:3d:3b:c4:a6:18:3b:0f:91:21:e7:a3:5d: e6:a0:ef:28:81:7f:ce:ed:fa:d6:4a:88:8a:bc:c9: 44:86:69:bd:a1:b8:24:d1:96:75:d4:9e:7e:5b:55: f0:80:7a:f5:77:72:0d:fd:51:c8:4c:66:2e:b3:98: cb:bb:bf:4b:32:52:8b:03:1b:31:bc:13:82:14:c9: cd:7e:e5:36:42:86:c6:4c:0a:45:27:4f:29:f6:80: 4c:d1:70:8f:48:f8:ae:60:87:ef:13:92:40:52:35: 1d:6e:e6:f9:4c:24:60:06:94:23:b0:73:0b:56:ac: 89:fa:a3:bb:56:58:7e:82:5a:80:83:6a:06:15:e3: 8a:95:a8:06:00:d1:7d:91:05:4a:e7:6b:39:6f:de: a7:e8:66:87:87:fd:80:09:ba:5b:8c:6c:81:86:1d: 76:0d:9d:f4:f2:32:5a:25:7c:e9:4e:76:ac:46:a5: 9c:95:6e:68:e4:85:73:18:ac:11:ce:6f:fe:00:2f: d9:d6:6f:2f:59:ab:d5:52:73:ba:a1:71:5c:c3:b2: 99:2d:f1:60:dc:4a:0e:69:3a:8d:1f:ff:bc:ce:7e: 50:bf:52:4a:c7:14:02:bc:f4:a0:50:8c:2a:c8:b9: 43:6c:c3:4b:6a:ec:fc:b3:e2:a0:01:41:62:54:77: 9a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4D:48:96:A9:8D:F2:AA:B5:53:10:05:63:D9:36:0C:6A:DB:2C:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/44a7008f-8c8e-3393-bd69-b78e24b4387a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.197.0/24 IPv6: 2607:f5b5:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:dc:7d:14:2c:1e:a9:5b:72:5e:b4:ca:9a:d3:7c:28:56:82: 8f:ac:85:03:01:f7:c9:be:4c:9b:16:d6:5b:c4:70:51:5c:e6: 9f:9c:74:35:49:0f:de:2f:dc:9b:b0:31:cf:8d:e0:6f:85:c0: 83:d4:26:21:2e:b4:82:60:03:ed:51:9c:58:84:2e:78:a5:13: f7:31:db:c5:c7:8b:ca:29:8c:e4:8b:e3:16:f7:a2:a3:63:ab: 13:c4:00:d8:b7:f1:8b:28:3f:8e:0c:70:4f:f3:fe:2f:f3:eb: b2:b6:77:ca:5d:7e:25:27:34:26:59:4a:30:56:bc:60:fa:9c: 68:d8:26:e5:c3:85:d9:eb:35:52:af:eb:27:ea:87:a8:18:1c: c1:f2:21:42:fd:e6:77:ec:d7:92:1c:c4:4a:f9:88:88:f4:fc: 60:09:87:d6:a4:4a:97:dc:0f:41:a2:d2:aa:a7:23:6c:40:8d: d2:ec:f6:30:09:26:73:80:80:e0:36:50:99:45:80:2e:88:1b: 0a:e3:45:02:7a:f1:47:c6:0c:ba:6b:55:ba:0a:c5:fc:18:21: f8:49:66:d9:54:0a:4d:0c:52:9e:9a:8c:f8:30:22:8b:bf:d0: 02:c3:d2:82:47:d2:85:66:f6:5f:7b:79:1e:5f:07:39:39:d3: 48:b4:f3:08 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE97swL7ML0yHp0qkEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk ZjM2ZGEzNzMtNGU1MS00MmQxLThkYjQtMmUyNWVlMzY4ZTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKk9O8SmGDsPkSHno13moO8ogX/O7frWSoiK vMlEhmm9obgk0ZZ11J5+W1XwgHr1d3IN/VHITGYus5jLu79LMlKLAxsxvBOCFMnN fuU2QobGTApFJ08p9oBM0XCPSPiuYIfvE5JAUjUdbub5TCRgBpQjsHMLVqyJ+qO7 Vlh+glqAg2oGFeOKlagGANF9kQVK52s5b96n6GaHh/2ACbpbjGyBhh12DZ308jJa JXzpTnasRqWclW5o5IVzGKwRzm/+AC/Z1m8vWavVUnO6oXFcw7KZLfFg3EoOaTqN H/+8zn5Qv1JKxxQCvPSgUIwqyLlDbMNLauz8s+KgAUFiVHearwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFC9NSJapjfKqtVMQBWPZNgxq2ywBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNDRhNzAwOGYtOGM4ZS0z MzkzLWJkNjktYjc4ZTI0YjQzODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxPFMA8E AgACMAkDBwAmB/W1AAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAddx9FCweqVtyXrTKmtN8KFaCj6yFAwH3 yb5MmxbWW8RwUVzmn5x0NUkP3i/cm7Axz43gb4XAg9QmIS60gmAD7VGcWIQueKUT 9zHbxceLyimM5IvjFveio2OrE8QA2Lfxiyg/jgxwT/P+L/PrsrZ3yl1+JSc0JllK MFa8YPqcaNgm5cOF2es1Uq/rJ+qHqBgcwfIhQv3md+zXkhzESvmIiPT8YAmH1qRK l9wPQaLSqqcjbECN0uz2MAkmc4CA4DZQmUWALogbCuNFAnrxR8YMumtVugrF/Bgh +Elm2VQKTQxSnpqM+DAii7/QAsPSgkfShWb2X3t5Hl8HOTnTSLTzCA== -----END CERTIFICATE-----Generated at Wed Oct 14 23:00:30 2026 by rpki-client