$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/494bc969-36fb-3c89-a5c5-f2e89d093b91.roa File: 494bc969-36fb-3c89-a5c5-f2e89d093b91.roa (raw, json) Hash identifier: m0gcnE6ljVsOo0MzYGBhaAiQZ8klrpheh6j0necQP8I= Subject key identifier: AF:26:86:45:F7:B5:14:6B:0C:32:60:67:8A:2C:6C:9E:51:2B:FC:22 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584E37647C290A7DF49B75171C80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/494bc969-36fb-3c89-a5c5-f2e89d093b91.roa Signing time: Thu 18 Jun 2026 21:00:12 +0000 ROA not before: Thu 18 Jun 2026 21:00:12 +0000 ROA not after: Wed 16 Sep 2026 21:00:12 +0000 asID: 396190 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:37:64:7c:29:0a:7d:f4:9b:75:17:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Jun 18 21:00:12 2026 GMT Not After : Sep 16 21:00:12 2026 GMT Subject: CN=e5fbaa26-8c90-4274-b256-48df055a9b79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:89:68:a8:ef:b8:8e:2a:60:3e:d4:36:4c:42: 92:5b:11:8d:68:a6:28:cf:d7:ca:9c:e6:8f:a5:6d: b2:ef:d2:56:9d:52:e5:ad:a8:34:f7:02:19:9b:7d: 06:7e:a7:8f:29:6c:b0:f3:d7:e5:da:6f:ef:f4:d3: 6b:27:3a:2b:3f:20:a5:ac:dc:8c:a3:cc:25:da:30: 6c:31:90:f6:14:6a:d1:f7:81:4f:5e:7a:78:3f:e0: 05:93:9a:4c:1a:c0:bb:59:83:df:cb:93:6c:6b:7b: 40:32:37:21:3e:67:54:15:2e:36:35:02:64:24:57: f1:d3:76:b3:fd:60:11:e1:72:fb:76:5b:b8:cc:f7: b4:06:84:18:48:4c:b6:e6:7e:c8:32:38:37:1a:93: 3b:49:6d:b3:76:fc:26:64:4c:6d:82:53:c9:e2:29: e6:09:75:2f:7c:04:2d:9e:08:a1:cc:aa:eb:0d:93: 34:c7:b3:57:07:cf:50:0d:b3:19:e6:7a:0f:60:ad: 3d:02:85:5d:50:81:87:44:ec:5d:5b:9f:9b:1a:23: 6b:71:22:29:52:c0:ea:77:16:6e:90:d6:b5:2b:a0: 7e:fe:c0:73:d1:9d:8a:fd:d2:0b:e7:ab:2d:79:bf: f5:47:16:0c:32:3a:c5:87:14:08:b6:77:f5:99:6f: eb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:26:86:45:F7:B5:14:6B:0C:32:60:67:8A:2C:6C:9E:51:2B:FC:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/494bc969-36fb-3c89-a5c5-f2e89d093b91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:14:41:52:b1:a3:c0:11:21:29:a1:67:ec:9e:1f:b7:95:fe: 2f:3a:f8:e3:f7:44:74:5d:45:60:06:78:fb:c7:25:27:1c:fa: ed:25:d4:ca:a2:ed:a6:2b:13:d6:e0:0c:87:98:86:7a:4d:e7: e1:56:c6:49:44:f2:7b:24:07:7b:72:a2:93:2b:e6:cd:53:e5: 04:e0:aa:7f:1a:a5:31:11:64:4c:ce:64:2c:37:51:3b:82:da: ef:e8:2d:e3:4d:fb:2c:26:d7:82:e4:58:9b:fe:e0:b2:80:04: 29:d7:0f:dc:3d:5c:c9:7f:3e:18:8f:f9:37:a6:d8:a9:0d:83: 88:1d:99:90:e4:15:57:80:a9:b7:2e:2c:b6:7a:02:af:88:74: 0a:36:e2:17:cb:b6:79:0d:61:ee:3b:8b:31:a6:48:79:7a:a1: a5:56:c0:09:ea:92:35:16:a8:30:f5:25:19:91:21:e4:53:2e: f5:42:74:20:73:1c:38:27:e2:8c:80:58:00:c5:68:4e:4c:a8: 02:41:6b:91:f5:78:0e:93:e9:0b:e2:f8:f2:25:af:0e:74:ad: 19:04:19:b6:f0:a9:7a:70:09:36:c6:4c:78:a4:3e:dc:e2:0a: 75:b7:a5:97:7f:1b:4a:72:fa:db:4a:dc:2d:6b:c3:77:3b:65: c2:80:c5:df -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE43ZHwpCn30m3UXHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk ZTVmYmFhMjYtOGM5MC00Mjc0LWIyNTYtNDhkZjA1NWE5Yjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioloqO+4jipgPtQ2TEKSWxGNaKYoz9fKnOaP pW2y79JWnVLlrag09wIZm30GfqePKWyw89fl2m/v9NNrJzorPyClrNyMo8wl2jBs MZD2FGrR94FPXnp4P+AFk5pMGsC7WYPfy5Nsa3tAMjchPmdUFS42NQJkJFfx03az /WAR4XL7dlu4zPe0BoQYSEy25n7IMjg3GpM7SW2zdvwmZExtglPJ4inmCXUvfAQt ngihzKrrDZM0x7NXB89QDbMZ5noPYK09AoVdUIGHROxdW5+bGiNrcSIpUsDqdxZu kNa1K6B+/sBz0Z2K/dIL56steb/1RxYMMjrFhxQItnf1mW/rkwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFK8mhkX3tRRrDDJgZ4osbJ5RK/wiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNDk0YmM5NjktMzZmYi0z Yzg5LWE1YzUtZjJlODlkMDkzYjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAlRRBUrGjwBEhKaFn7J4ft5X+Lzr44/dE dF1FYAZ4+8clJxz67SXUyqLtpisT1uAMh5iGek3n4VbGSUTyeyQHe3KikyvmzVPl BOCqfxqlMRFkTM5kLDdRO4La7+gt4037LCbXguRYm/7gsoAEKdcP3D1cyX8+GI/5 N6bYqQ2DiB2ZkOQVV4Cpty4stnoCr4h0CjbiF8u2eQ1h7juLMaZIeXqhpVbACeqS NRaoMPUlGZEh5FMu9UJ0IHMcOCfijIBYAMVoTkyoAkFrkfV4DpPpC+L48iWvDnSt GQQZtvCpenAJNsZMeKQ+3OIKdbell38bSnL620rcLWvDdztlwoDF3w== -----END CERTIFICATE-----Generated at Mon Jul 13 14:52:14 2026 by rpki-client