$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/533efaf5-b19c-3390-892b-5d553edff9f3.roa File: 533efaf5-b19c-3390-892b-5d553edff9f3.roa (raw, json) Hash identifier: ybJa4OHHGpjmIeWcNJdcTYXXCbUrwk9ZeAHiG2C3ipo= Subject key identifier: 21:D1:D8:84:AE:C7:54:43:A0:71:DD:A0:5A:4D:22:DB:D4:B5:60:CF Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F6292B45FFBA2B3E39D3F0580 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/533efaf5-b19c-3390-892b-5d553edff9f3.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396190 IP address blocks: 23.108.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:b4:5f:fb:a2:b3:e3:9d:3f:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=35880d76-6e98-46d9-a5d2-35b8456f7d59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ae:69:f0:9c:24:13:47:cc:58:46:11:13:33: c2:ae:23:bd:bf:65:66:f5:1c:89:a7:e2:5f:4d:7b: 99:a9:e6:3b:26:01:c2:4d:0b:18:00:2f:4d:57:5b: 1f:a4:1d:28:8e:97:29:f3:77:55:0b:11:44:f7:d2: b1:e1:c4:b4:bb:79:59:ff:a8:2c:10:8d:7e:06:58: 00:62:8b:15:81:10:21:a0:17:36:1c:8a:4c:c4:a4: 74:23:51:1c:a2:86:59:8e:6c:8e:54:a8:7c:51:c2: 94:5f:5b:33:f7:1c:94:21:e0:5d:00:81:d7:c5:0b: e4:a6:c4:81:21:33:ab:2d:db:b8:74:dc:bf:d9:6a: 26:af:e6:7c:9a:7b:4d:5a:c2:26:c9:84:59:94:93: 6f:9a:9f:10:04:18:7f:01:bc:75:94:07:52:4d:97: ff:6a:c5:ba:ec:09:e9:d0:45:fe:6e:d3:64:dc:0a: 2c:6c:0c:62:8f:7b:1d:19:28:87:76:86:e5:66:f4: 3a:ba:01:b1:19:53:7e:20:72:90:ad:5f:99:bd:ab: a6:a9:3b:e5:d1:f3:3f:a4:a5:e1:36:c5:8c:92:3b: ed:d0:6c:92:5e:30:15:8a:23:3b:3d:1b:80:74:8a: a6:06:3d:80:ac:11:8c:6d:93:c7:50:70:ac:9e:36: 5c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D1:D8:84:AE:C7:54:43:A0:71:DD:A0:5A:4D:22:DB:D4:B5:60:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/533efaf5-b19c-3390-892b-5d553edff9f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.108.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:0f:b4:8a:e3:a3:4e:0f:83:f8:38:be:55:de:3c:be:06:2f: 4d:1e:11:88:68:72:69:d7:d9:d5:da:25:1c:f0:45:5d:de:92: 01:f2:d7:b0:07:ce:00:0c:1a:c7:63:ab:d4:62:e1:34:77:c4: ee:d7:e6:69:d6:dd:81:4b:6c:24:31:c2:9e:7a:b0:aa:89:07: c7:bf:fa:c4:a5:47:94:a1:e7:c3:fd:5c:31:05:42:f8:61:5a: 5d:37:21:c8:d2:23:19:9f:0f:75:82:35:0c:c0:9f:c9:1c:7c: 4b:f9:b4:44:6e:24:de:04:01:c2:3b:9b:7b:88:08:7f:bc:8e: c5:16:d8:8d:d9:e7:c2:30:e3:4c:2f:11:7a:e5:3d:fa:20:64: c7:5d:09:45:cc:f4:77:28:fb:cc:b2:1d:69:c4:69:72:bb:03: d6:a0:ad:7d:a4:2c:da:c3:ad:b3:e3:30:01:5b:62:4b:31:66: cb:98:3b:34:9d:42:b0:4b:d5:2b:4a:59:b9:47:72:ef:97:59: 0b:e2:8e:e3:36:b1:4d:60:ab:f9:7b:60:01:03:1e:81:15:ad: 0f:d9:92:a1:2a:29:25:d4:b0:67:4e:e2:f5:ae:14:82:7b:31: 17:fa:a6:08:ad:c8:78:dc:da:38:04:00:d6:83:41:a2:b4:0a: ab:79:b8:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikrRf+6Kz450/BYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MzU4ODBkNzYtNmU5OC00NmQ5LWE1ZDItMzViODQ1NmY3ZDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkq5p8JwkE0fMWEYREzPCriO9v2Vm9RyJp+Jf TXuZqeY7JgHCTQsYAC9NV1sfpB0ojpcp83dVCxFE99Kx4cS0u3lZ/6gsEI1+BlgA YosVgRAhoBc2HIpMxKR0I1EcooZZjmyOVKh8UcKUX1sz9xyUIeBdAIHXxQvkpsSB ITOrLdu4dNy/2Womr+Z8mntNWsImyYRZlJNvmp8QBBh/Abx1lAdSTZf/asW67Anp 0EX+btNk3AosbAxij3sdGSiHdoblZvQ6ugGxGVN+IHKQrV+ZvaumqTvl0fM/pKXh NsWMkjvt0GySXjAViiM7PRuAdIqmBj2ArBGMbZPHUHCsnjZcowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHR2ISux1RDoHHdoFpNItvUtWDPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNTMzZWZhZjUtYjE5Yy0z MzkwLTg5MmItNWQ1NTNlZGZmOWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF2yAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwPtIrjo04Pg/g4vlXePL4GL00eEYhocmnX2dXaJRzwRV3ekgHy17AH zgAMGsdjq9Ri4TR3xO7X5mnW3YFLbCQxwp56sKqJB8e/+sSlR5Sh58P9XDEFQvhh Wl03IcjSIxmfD3WCNQzAn8kcfEv5tERuJN4EAcI7m3uICH+8jsUW2I3Z58Iw40wv EXrlPfogZMddCUXM9Hco+8yyHWnEaXK7A9agrX2kLNrDrbPjMAFbYksxZsuYOzSd QrBL1StKWblHcu+XWQvijuM2sU1gq/l7YAEDHoEVrQ/ZkqEqKSXUsGdO4vWuFIJ7 MRf6pgityHjc2jgEANaDQaK0Cqt5uFY= -----END CERTIFICATE-----Generated at Wed Oct 14 06:57:33 2026 by rpki-client