$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/44a7008f-8c8e-3393-bd69-b78e24b4387a.roa File: 44a7008f-8c8e-3393-bd69-b78e24b4387a.roa (raw, json) Hash identifier: S5NLpXobNRz8p3pZoWfTS2pdECgyKXSCM2pllfzaRA8= Subject key identifier: 69:DA:E9:58:5E:EC:F1:F9:3F:79:6D:50:F9:19:0F:B1:9E:3B:BF:EA Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584D571FB780EF62F0489D738340 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/44a7008f-8c8e-3393-bd69-b78e24b4387a.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 7203 IP address blocks: 23.19.197.0/24 maxlen: 24 2607:f5b5:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b7:80:ef:62:f0:48:9d:73:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=0a930508-d99f-4970-88a6-9c59bc95249c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:68:8a:f3:93:9f:0e:44:1a:20:36:ef:aa:f1: cb:8d:63:8a:d5:0a:51:fd:09:84:71:5f:0b:03:05: e8:4d:0e:b2:b1:8c:f4:54:2a:5f:45:3a:1d:3e:c6: 32:66:bd:09:2a:51:24:f7:d7:74:23:3c:d4:dc:b0: b3:2f:25:7e:34:9d:2f:8d:2e:1b:d2:4a:b8:df:1b: d3:02:65:c8:fd:bc:3d:96:22:9f:97:89:3d:30:37: 16:9c:53:94:6f:92:11:62:03:f8:72:d8:ec:2d:aa: 8a:bb:33:bf:7a:33:fa:63:68:0e:b8:0c:d1:6e:cb: 9b:98:d1:55:53:69:20:9a:a5:81:ce:c1:90:b9:54: 6c:9f:42:1a:2c:e3:9e:2c:51:28:a2:d9:07:bb:63: 51:1c:a5:65:09:05:24:e1:84:ec:71:8f:47:9d:98: 5d:6b:34:65:71:08:21:47:4c:7e:e6:73:ed:c5:fb: 30:f5:cb:1d:4d:58:82:79:c6:fd:25:c0:13:15:dd: 0d:7a:23:2d:53:41:b8:9c:85:2e:16:94:64:27:ca: d4:95:a9:ae:3d:9a:c7:72:79:94:9f:48:ae:90:9e: 89:37:c1:88:74:a5:d3:96:8b:1f:fa:b8:c2:6a:8b: c4:98:4d:0e:45:b6:6f:e2:8d:8d:d0:a4:b0:7c:15: ce:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DA:E9:58:5E:EC:F1:F9:3F:79:6D:50:F9:19:0F:B1:9E:3B:BF:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/44a7008f-8c8e-3393-bd69-b78e24b4387a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.197.0/24 IPv6: 2607:f5b5:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:4d:2d:c9:64:f3:ed:84:d5:8f:d2:64:32:83:c3:02:8a:df: df:46:7a:43:88:4c:eb:4f:73:84:b8:f7:76:c1:31:28:52:db: ae:d3:79:6c:08:40:2d:0d:bb:14:f8:4e:e7:50:34:59:2d:da: 60:1b:26:c2:08:c2:10:15:30:55:46:99:33:f0:00:77:78:1b: 88:ae:dd:b3:b3:f4:db:6a:cb:78:ad:a9:a5:7c:2e:b5:e2:61: fc:aa:24:17:ad:8a:c2:0b:05:de:db:a4:b1:48:85:a8:8e:f5: 10:01:ad:25:b1:e3:4c:e2:00:f0:33:e4:d6:c6:52:f1:49:2f: a5:a0:f3:42:17:73:88:1a:e1:83:fe:1b:f5:31:61:38:2a:a2: 4f:09:c6:bd:7c:65:79:23:ac:19:85:8f:bb:f2:d0:48:4f:4b: 2d:01:11:80:33:98:9a:41:ae:da:a6:b1:c2:b7:94:ee:e2:79: 2e:39:3a:6e:5b:7b:ae:14:e7:fb:f0:84:4e:09:72:19:bc:4a: fd:76:b0:48:2e:65:83:bd:00:0e:4a:a3:db:61:1b:bc:90:68: ba:d7:e9:70:5e:25:e8:c0:87:b7:8b:5c:5c:97:cf:1e:85:6d: 52:64:05:55:90:b9:a4:d3:55:13:75:f4:0b:ec:d4:2f:f1:0f: 9a:50:fc:98 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE1XH7eA72LwSJ1zg0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk MGE5MzA1MDgtZDk5Zi00OTcwLTg4YTYtOWM1OWJjOTUyNDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72iK85OfDkQaIDbvqvHLjWOK1QpR/QmEcV8L AwXoTQ6ysYz0VCpfRTodPsYyZr0JKlEk99d0IzzU3LCzLyV+NJ0vjS4b0kq43xvT AmXI/bw9liKfl4k9MDcWnFOUb5IRYgP4ctjsLaqKuzO/ejP6Y2gOuAzRbsubmNFV U2kgmqWBzsGQuVRsn0IaLOOeLFEootkHu2NRHKVlCQUk4YTscY9HnZhdazRlcQgh R0x+5nPtxfsw9csdTViCecb9JcATFd0NeiMtU0G4nIUuFpRkJ8rUlamuPZrHcnmU n0iukJ6JN8GIdKXTlosf+rjCaovEmE0ORbZv4o2N0KSwfBXOqQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFGna6Vhe7PH5P3ltUPkZD7GeO7/qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNDRhNzAwOGYtOGM4ZS0z MzkzLWJkNjktYjc4ZTI0YjQzODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxPFMA8E AgACMAkDBwAmB/W1AAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJ00tyWTz7YTVj9JkMoPDAorf30Z6Q4hM 609zhLj3dsExKFLbrtN5bAhALQ27FPhO51A0WS3aYBsmwgjCEBUwVUaZM/AAd3gb iK7ds7P022rLeK2ppXwuteJh/KokF62KwgsF3tuksUiFqI71EAGtJbHjTOIA8DPk 1sZS8UkvpaDzQhdziBrhg/4b9TFhOCqiTwnGvXxleSOsGYWPu/LQSE9LLQERgDOY mkGu2qaxwreU7uJ5Ljk6blt7rhTn+/CETglyGbxK/XawSC5lg70ADkqj22EbvJBo utfpcF4l6MCHt4tcXJfPHoVtUmQFVZC5pNNVE3X0C+zUL/EPmlD8mA== -----END CERTIFICATE-----Generated at Mon Apr 13 15:32:44 2026 by rpki-client