$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/494bc969-36fb-3c89-a5c5-f2e89d093b91.roa File: 494bc969-36fb-3c89-a5c5-f2e89d093b91.roa (raw, json) Hash identifier: 65QziuEy88+V/+7Hfxmv3eBPAfRS/T2mEakSuGqKPuk= Subject key identifier: C2:EB:F4:58:51:81:5F:AA:A7:77:35:28:B8:0D:52:41:08:63:BA:C3 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584D571FB73CAB4A899EF7C22F00 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/494bc969-36fb-3c89-a5c5-f2e89d093b91.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 396190 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b7:3c:ab:4a:89:9e:f7:c2:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=1be691e0-94fc-4afd-9e8d-ce857c739bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6e:6e:25:8b:41:c4:25:2d:71:86:6f:03:20: 9d:46:8a:f4:7c:eb:60:7a:2d:a9:48:ff:9a:7f:ed: 17:2c:98:f6:99:f4:10:31:f3:2a:7b:b7:7e:25:d3: 07:f8:61:a7:30:87:3b:cf:bb:e6:45:79:6e:4f:23: 79:fe:59:80:73:55:31:97:2a:8e:43:a3:c6:22:5e: bc:a1:f0:2f:d2:f3:1d:b1:dc:6b:ad:44:9a:fb:88: 8b:6b:7e:25:a9:af:45:c3:24:87:23:5b:a0:fa:5f: 1c:1a:ce:aa:22:ab:c7:7b:6d:a7:26:4a:e0:d3:7f: 09:b6:2c:5d:c2:c9:ef:b9:25:a5:85:d3:dc:68:dd: 9c:ca:e5:1b:3c:03:74:60:9c:44:ed:96:80:94:b2: 7d:c0:c5:40:47:96:72:a2:48:df:18:df:b1:3d:b7: d4:2b:84:de:fb:26:9f:33:07:2f:07:1c:98:5f:eb: 2b:b2:68:ad:f7:71:e3:02:0e:4d:2b:cb:98:eb:0d: 64:d8:b3:85:a5:ac:a9:39:e9:c7:61:8f:c1:b3:7b: 69:97:d0:f5:0a:52:ef:7c:c9:7e:aa:05:ae:97:22: a3:46:05:3a:4e:ae:bf:4d:ae:65:a8:bf:cc:b3:26: 41:69:90:8c:9f:1f:b7:09:89:b4:ce:d3:f8:d1:31: de:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EB:F4:58:51:81:5F:AA:A7:77:35:28:B8:0D:52:41:08:63:BA:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/494bc969-36fb-3c89-a5c5-f2e89d093b91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:fa:b5:f8:09:e4:36:36:9d:1e:2e:b2:35:26:3a:06:fe:09: 0d:dd:f9:a4:f6:c6:02:e1:db:19:09:1a:52:e9:f3:12:5f:22: c0:a9:58:d4:18:2f:31:60:20:85:30:47:d0:0a:e3:12:24:93: e1:ce:14:5b:e1:dd:fc:52:61:14:b5:ad:14:14:be:38:68:67: 0a:ac:20:0d:0f:52:0f:09:61:46:c9:28:fc:54:8d:c8:8c:d6: 78:90:f6:0d:d7:9f:46:4f:8e:45:9b:00:80:86:f4:ca:fa:5e: 36:c3:64:36:3c:3c:dc:d7:94:c4:77:11:bc:21:dc:02:3e:ae: 51:4c:b5:98:aa:0b:0a:6b:f6:8f:5c:b3:1f:bb:25:1b:5f:5d: 67:1b:a8:3c:25:d4:64:af:0b:5b:08:68:35:83:be:d8:86:91: 62:f1:aa:c4:53:c6:75:28:d4:45:f8:bf:f0:9d:d2:f5:be:34: d9:7e:ad:20:1e:48:a7:11:37:d6:35:97:86:64:15:a5:4b:5e: 12:7d:b5:36:1c:6d:cd:8f:1c:20:74:3d:47:92:ec:14:a5:67: d3:f5:91:b0:45:3f:f9:1c:2b:d4:f5:0b:fc:20:c6:c6:e2:10: 97:be:92:fd:b8:52:d1:da:c5:22:43:50:2f:e2:41:09:f6:51: a9:99:f0:8c -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE1XH7c8q0qJnvfCLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk MWJlNjkxZTAtOTRmYy00YWZkLTllOGQtY2U4NTdjNzM5YmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4m5uJYtBxCUtcYZvAyCdRor0fOtgei2pSP+a f+0XLJj2mfQQMfMqe7d+JdMH+GGnMIc7z7vmRXluTyN5/lmAc1UxlyqOQ6PGIl68 ofAv0vMdsdxrrUSa+4iLa34lqa9FwySHI1ug+l8cGs6qIqvHe22nJkrg038Jtixd wsnvuSWlhdPcaN2cyuUbPAN0YJxE7ZaAlLJ9wMVAR5ZyokjfGN+xPbfUK4Te+yaf MwcvBxyYX+srsmit93HjAg5NK8uY6w1k2LOFpaypOenHYY/Bs3tpl9D1ClLvfMl+ qgWulyKjRgU6Tq6/Ta5lqL/MsyZBaZCMnx+3CYm0ztP40THeEQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFMLr9FhRgV+qp3c1KLgNUkEIY7rDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNDk0YmM5NjktMzZmYi0z Yzg5LWE1YzUtZjJlODlkMDkzYjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAU/q1+AnkNjadHi6yNSY6Bv4JDd35pPbG AuHbGQkaUunzEl8iwKlY1BgvMWAghTBH0ArjEiST4c4UW+Hd/FJhFLWtFBS+OGhn CqwgDQ9SDwlhRsko/FSNyIzWeJD2DdefRk+ORZsAgIb0yvpeNsNkNjw83NeUxHcR vCHcAj6uUUy1mKoLCmv2j1yzH7slG19dZxuoPCXUZK8LWwhoNYO+2IaRYvGqxFPG dSjURfi/8J3S9b402X6tIB5IpxE31jWXhmQVpUteEn21NhxtzY8cIHQ9R5LsFKVn 0/WRsEU/+Rwr1PUL/CDGxuIQl76S/bhS0drFIkNQL+JBCfZRqZnwjA== -----END CERTIFICATE-----Generated at Mon Apr 13 15:34:18 2026 by rpki-client