$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/494bc969-36fb-3c89-a5c5-f2e89d093b91.roa File: 494bc969-36fb-3c89-a5c5-f2e89d093b91.roa (raw, json) Hash identifier: ToQ6Lk87I++yqCf848v0JQiufAJbpMcjWPBgXl3hmrg= Subject key identifier: D8:7C:31:A2:49:3F:8D:4C:77:2E:0C:2F:B8:86:84:75:8B:A9:91:E1 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584C76817DCB072DC260DF982A40 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/494bc969-36fb-3c89-a5c5-f2e89d093b91.roa Signing time: Fri 09 Jan 2026 02:00:31 +0000 ROA not before: Fri 09 Jan 2026 02:00:31 +0000 ROA not after: Thu 09 Apr 2026 01:00:31 +0000 asID: 396190 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:76:81:7d:cb:07:2d:c2:60:df:98:2a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Jan 9 02:00:31 2026 GMT Not After : Apr 9 01:00:31 2026 GMT Subject: CN=14c5ad7f-560b-4f4e-abbd-a68070bdcb29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:eb:3e:8b:0e:f0:8d:98:ac:f0:72:83:38:d2: 7e:f1:f0:0c:b9:05:45:90:f4:3e:5e:8e:2d:be:a5: 58:1d:36:c6:2a:71:82:ad:6d:76:af:97:9e:71:e7: 99:16:f3:88:5f:95:88:c4:b7:0a:c7:53:b3:b3:7c: e8:b3:3f:72:f5:bd:cf:05:86:54:5f:7a:82:ad:9d: 5a:b8:4b:b3:4c:80:ef:92:85:a0:01:cd:87:0e:34: c8:8b:48:66:bc:bc:51:f5:e6:3d:e7:db:36:c8:0a: 61:7c:9d:54:ac:0e:52:04:6b:17:0b:fb:9b:84:4c: e4:b4:1d:10:3f:c2:2f:38:47:dc:6d:ea:a4:f8:dd: 9e:91:cd:e2:bc:b3:ee:d9:20:69:38:95:3e:53:e1: 36:64:fb:8c:48:80:cb:4a:d2:73:b7:60:06:f3:40: 3d:eb:25:b3:e6:7c:6b:f7:ef:0b:21:a9:9e:28:3c: 38:d1:18:49:a8:8f:0c:7b:51:f8:d3:70:fa:f4:0d: 17:d7:88:95:38:81:7e:1b:56:88:c2:09:8f:64:ed: 4b:92:81:88:80:be:90:fb:82:29:78:c6:7f:bf:17: 46:23:30:af:c3:30:29:df:7d:22:30:28:13:fc:81: fa:90:cc:8f:5b:d8:9b:d3:25:ad:87:dd:c8:b8:b9: cf:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:7C:31:A2:49:3F:8D:4C:77:2E:0C:2F:B8:86:84:75:8B:A9:91:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/494bc969-36fb-3c89-a5c5-f2e89d093b91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:27:af:5b:ac:5c:fb:c9:ff:ce:67:3a:92:8f:24:6b:85:22: ed:b3:1c:dd:9d:ac:95:4d:d8:d1:ad:66:5c:ee:fe:ac:c9:16: 9e:41:22:3f:fb:f0:dd:b3:33:e5:19:ca:cd:5a:21:fc:6d:64: af:92:36:6f:c3:8e:1f:a4:9e:96:8f:0f:f2:f2:39:9e:53:c8: c2:da:8b:98:26:d8:2f:02:c4:7b:78:34:e5:91:ae:9d:d0:d0: 1d:19:2f:a5:16:d6:54:a8:c2:6c:02:99:78:a4:bb:20:99:f3: 1f:16:89:42:ff:0f:ec:64:16:d7:df:d9:35:96:93:53:58:a9: 4a:3c:74:60:55:f2:82:46:c4:68:41:2d:a8:23:a9:84:04:1b: 27:b8:92:ae:12:c7:70:9c:8d:e3:6d:02:d2:30:c7:cd:a5:99: 80:8a:c3:7b:f6:79:4f:1c:d4:93:ab:41:26:c4:b4:63:f4:47: d4:24:5b:f3:f0:db:ff:e1:c3:5b:fd:d2:0d:a0:36:09:9c:c0: dc:fc:61:f0:e2:fd:98:70:c2:62:d9:81:99:f7:00:79:5a:31: ef:58:60:ff:3e:8f:6a:16:51:d9:ea:4f:1d:0c:5b:5e:49:ef: 7c:48:46:cd:18:df:d7:0e:56:ec:91:1f:a5:da:bd:db:ab:35: aa:cc:c7:9a -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEx2gX3LBy3CYN+YKkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDEwOTAyMDAzMVoXDTI2MDQwOTAxMDAzMVowLzEtMCsGA1UEAxMk MTRjNWFkN2YtNTYwYi00ZjRlLWFiYmQtYTY4MDcwYmRjYjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOs+iw7wjZis8HKDONJ+8fAMuQVFkPQ+Xo4t vqVYHTbGKnGCrW12r5eeceeZFvOIX5WIxLcKx1Ozs3zosz9y9b3PBYZUX3qCrZ1a uEuzTIDvkoWgAc2HDjTIi0hmvLxR9eY959s2yAphfJ1UrA5SBGsXC/ubhEzktB0Q P8IvOEfcbeqk+N2ekc3ivLPu2SBpOJU+U+E2ZPuMSIDLStJzt2AG80A96yWz5nxr 9+8LIameKDw40RhJqI8Me1H403D69A0X14iVOIF+G1aIwgmPZO1LkoGIgL6Q+4Ip eMZ/vxdGIzCvwzAp330iMCgT/IH6kMyPW9ib0yWth93IuLnPUwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFNh8MaJJP41Mdy4ML7iGhHWLqZHhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNDk0YmM5NjktMzZmYi0z Yzg5LWE1YzUtZjJlODlkMDkzYjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIievW6xc+8n/zmc6ko8ka4Ui7bMc3Z2s lU3Y0a1mXO7+rMkWnkEiP/vw3bMz5RnKzVoh/G1kr5I2b8OOH6Selo8P8vI5nlPI wtqLmCbYLwLEe3g05ZGundDQHRkvpRbWVKjCbAKZeKS7IJnzHxaJQv8P7GQW19/Z NZaTU1ipSjx0YFXygkbEaEEtqCOphAQbJ7iSrhLHcJyN420C0jDHzaWZgIrDe/Z5 TxzUk6tBJsS0Y/RH1CRb8/Db/+HDW/3SDaA2CZzA3Pxh8OL9mHDCYtmBmfcAeVox 71hg/z6PahZR2epPHQxbXknvfEhGzRjf1w5W7JEfpdq926s1qszHmg== -----END CERTIFICATE-----Generated at Thu Feb 26 15:03:52 2026 by rpki-client