$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/4c4952c4-1067-3d79-b9a2-52a12aacfa1c.roa File: 4c4952c4-1067-3d79-b9a2-52a12aacfa1c.roa (raw, json) Hash identifier: 1huoWVMwJfLQEVdnxt26EC1iESeYKmCMVPlRXIhWCiM= Subject key identifier: 3A:B6:A0:18:46:71:7B:74:34:39:D9:A2:97:93:19:0B:76:D5:14:87 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F6DBD69D5055168D6960ED200 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/4c4952c4-1067-3d79-b9a2-52a12aacfa1c.roa Signing time: Thu 08 Oct 2026 01:00:11 +0000 ROA not before: Thu 08 Oct 2026 01:00:11 +0000 ROA not after: Wed 06 Jan 2027 02:00:11 +0000 asID: 395954 IP address blocks: 23.19.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6d:bd:69:d5:05:51:68:d6:96:0e:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 8 01:00:11 2026 GMT Not After : Jan 6 02:00:11 2027 GMT Subject: CN=a8e752cc-794b-444d-a040-e2f21a054d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a4:35:81:69:18:43:6b:ea:83:ec:2d:82:72: ce:69:01:74:1f:6f:6a:85:ba:6b:ea:e8:74:06:c8: 9d:4e:ff:3c:43:56:77:de:a2:f7:54:c5:74:df:04: c3:e1:9f:e9:ef:28:4b:8e:9b:61:88:07:08:dc:a1: d2:d8:e2:12:b8:db:d9:1e:26:da:5f:03:3d:9d:6d: 01:39:50:21:4e:3b:1f:45:03:2c:78:a9:63:25:23: 8c:37:d4:34:3a:d7:50:27:4a:b4:cf:23:50:7a:b5: e0:a1:33:13:3a:1d:53:30:90:c6:ea:07:bc:dc:9f: d1:94:9b:7f:39:06:d9:f9:d6:8c:51:de:90:62:32: df:55:7a:c3:21:80:21:dc:30:ac:13:e7:25:ee:13: 1e:55:b3:28:52:97:14:dd:97:2a:2f:e1:78:b0:8e: 02:da:83:c3:3a:f4:9b:de:44:65:73:aa:3e:a9:57: a1:90:16:a4:d5:5b:8f:74:fe:f3:78:f6:bb:70:cf: f5:15:72:34:ec:9b:db:3f:3a:23:eb:1b:09:eb:c7: 62:af:6b:42:b1:f5:da:34:4d:63:16:61:d6:09:3f: 02:f3:92:1b:fe:d7:ea:07:81:8c:66:5d:54:dc:6e: 1e:bf:73:13:14:bc:fd:b6:d1:11:66:36:8d:f8:5f: 1d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B6:A0:18:46:71:7B:74:34:39:D9:A2:97:93:19:0B:76:D5:14:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/4c4952c4-1067-3d79-b9a2-52a12aacfa1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:0c:d6:22:e8:90:41:64:5a:4f:90:e4:94:95:b4:de:5d:a9: 6a:f5:08:d7:1f:f2:a7:e5:fc:9a:20:4e:54:74:c9:7d:d1:17: 16:e8:53:b7:8b:03:f9:6f:a4:eb:18:0a:93:a5:4e:30:2e:0f: b9:fb:20:61:b9:a1:51:75:af:75:d7:05:33:8f:79:49:2d:d2: 88:49:d4:1e:c1:8d:77:8c:dd:66:da:1f:b3:a1:4b:1d:e9:e8: 80:8b:15:21:7d:69:96:c2:5c:f5:3d:b7:eb:c4:b7:c7:15:21: be:41:90:29:6b:56:5f:a6:d5:8e:d0:74:86:1d:e7:8b:e7:bf: 92:6a:e0:2a:50:c8:25:36:be:f7:df:42:3f:32:8d:51:69:cd: d2:ed:86:78:c5:59:98:06:be:99:df:cd:0d:92:ba:02:33:0b: 3c:97:1a:65:cf:c5:b5:31:e8:a2:b1:d9:26:d8:4a:6f:d3:eb: e0:3a:e0:df:c1:72:56:e2:fe:0b:44:60:48:0e:ac:13:68:c8: a3:a4:8c:b2:70:0b:3c:24:8c:75:76:0e:bf:09:6e:0c:c7:89: 04:87:39:74:17:84:5b:ab:6f:ba:e9:7b:b7:98:79:b3:a9:76: e1:7a:df:af:4c:79:b9:fa:36:73:77:ec:a9:53:68:b4:eb:38: cc:1b:c9:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9tvWnVBVFo1pYO0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwODAxMDAxMVoXDTI3MDEwNjAyMDAxMVowLzEtMCsGA1UEAxMk YThlNzUyY2MtNzk0Yi00NDRkLWEwNDAtZTJmMjFhMDU0ZDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qQ1gWkYQ2vqg+wtgnLOaQF0H29qhbpr6uh0 BsidTv88Q1Z33qL3VMV03wTD4Z/p7yhLjpthiAcI3KHS2OISuNvZHibaXwM9nW0B OVAhTjsfRQMseKljJSOMN9Q0OtdQJ0q0zyNQerXgoTMTOh1TMJDG6ge83J/RlJt/ OQbZ+daMUd6QYjLfVXrDIYAh3DCsE+cl7hMeVbMoUpcU3ZcqL+F4sI4C2oPDOvSb 3kRlc6o+qVehkBak1VuPdP7zePa7cM/1FXI07JvbPzoj6xsJ68dir2tCsfXaNE1j FmHWCT8C85Ib/tfqB4GMZl1U3G4ev3MTFLz9ttERZjaN+F8dvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDq2oBhGcXt0NDnZopeTGQt21RSHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNGM0OTUyYzQtMTA2Ny0z ZDc5LWI5YTItNTJhMTJhYWNmYTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFxMsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsM1iLokEFkWk+Q5JSVtN5dqWr1CNcf8qfl/JogTlR0yX3RFxboU7eL A/lvpOsYCpOlTjAuD7n7IGG5oVF1r3XXBTOPeUkt0ohJ1B7BjXeM3WbaH7OhSx3p 6ICLFSF9aZbCXPU9t+vEt8cVIb5BkClrVl+m1Y7QdIYd54vnv5Jq4CpQyCU2vvff Qj8yjVFpzdLthnjFWZgGvpnfzQ2SugIzCzyXGmXPxbUx6KKx2SbYSm/T6+A64N/B clbi/gtEYEgOrBNoyKOkjLJwCzwkjHV2Dr8JbgzHiQSHOXQXhFurb7rpe7eYebOp duF6369Mebn6NnN37KlTaLTrOMwbycA= -----END CERTIFICATE-----Generated at Thu Oct 15 10:39:02 2026 by rpki-client