$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5dc499aa-c043-3278-a65b-3d3431bf08c7.roa File: 5dc499aa-c043-3278-a65b-3d3431bf08c7.roa (raw, json) Hash identifier: 3a8aePhnDJ4WB9i1Rb+LRSM0J+8iHmfGQmzzYViMFX8= Subject key identifier: DD:1A:7A:01:7A:C3:5E:B3:B5:EC:C6:02:5A:FF:86:EC:5B:36:CB:C6 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584D571FB7173D0BFEFA232B9E80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5dc499aa-c043-3278-a65b-3d3431bf08c7.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 27411 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b7:17:3d:0b:fe:fa:23:2b:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=52b758e2-96fb-4b52-b385-bdb5b6f78a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:72:49:06:77:46:00:b7:8d:c7:7b:1c:0c:63: f8:49:9c:85:2e:3f:63:42:6c:b0:f7:41:f4:31:83: 35:99:4b:c7:05:a2:8e:21:6b:f0:ac:ef:26:8f:92: 21:ab:fa:d5:84:4f:53:41:9a:e2:d6:95:2a:49:3d: a4:21:4c:9d:2c:fa:dc:18:b1:9d:6a:6a:3d:f4:8f: ce:8e:8b:a8:06:84:06:99:6c:64:ad:a6:ec:ff:56: aa:77:86:41:25:59:39:d6:12:60:ba:5e:c1:47:60: 8f:07:19:81:fb:0a:d6:f2:ec:80:bd:d4:97:04:7a: a1:14:c0:f8:72:02:00:3f:32:85:a8:6c:a1:51:6b: e3:59:5c:d8:63:f5:ac:93:5f:8d:b5:f7:a4:71:6a: d9:24:43:63:28:2c:0a:e5:fe:7e:3e:f9:44:f4:58: 1a:f9:36:e8:b5:d2:53:a4:31:f8:f1:46:0e:51:7c: 91:ab:34:18:04:fc:7b:7c:ff:b5:16:c6:3b:53:d6: 74:53:59:cc:ec:e8:34:70:a9:cd:e7:88:e5:1f:b9: 23:4f:86:19:ff:2b:4a:93:b0:a3:db:12:ee:83:2a: 3a:f0:10:2e:79:08:4f:e6:2c:3a:9b:3e:c0:5a:ee: 3e:a1:eb:bf:c5:52:6c:f3:93:59:c6:3e:1e:3c:68: ab:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:1A:7A:01:7A:C3:5E:B3:B5:EC:C6:02:5A:FF:86:EC:5B:36:CB:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5dc499aa-c043-3278-a65b-3d3431bf08c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:d9:a7:3f:63:3f:81:fb:59:af:d3:ac:5b:e2:c1:a2:49:90: ef:a0:c8:e4:3f:1d:98:6c:d0:c0:13:cd:3a:c4:46:c1:79:47: 83:a2:c3:95:5a:5b:be:2a:1c:3f:76:f0:c9:ac:d9:45:4f:0e: e6:28:c7:c4:a4:6b:bc:af:9d:c3:1d:59:d2:c9:3c:75:45:b9: 4f:3d:a4:65:07:5e:6a:1a:9a:9f:70:5a:fc:0c:f9:32:7f:aa: 83:f9:14:09:8d:e5:39:76:e6:4c:8d:e1:75:3f:f3:c4:86:8f: 41:b8:ea:42:b3:1b:e7:23:6c:9c:ef:76:61:29:4b:a5:bd:fc: 20:83:1c:d5:f1:f8:dc:a1:1b:41:94:b0:04:a6:90:cf:03:0b: de:2a:c4:a6:49:1c:e9:1a:8f:a3:cf:c6:80:bb:11:b9:af:40: 25:52:9a:b1:77:60:7c:17:f7:c1:1f:30:27:fb:68:86:64:62: bb:c7:26:68:88:05:20:4f:00:1b:bd:a4:13:fe:f8:67:ca:1a: 0d:6c:f2:39:cd:d3:30:1a:24:8c:a2:b2:75:7f:b0:7e:a5:78: 25:23:76:19:6f:6e:2c:8f:c9:84:c0:59:59:82:d5:7a:c7:3d: 78:3c:c6:c3:76:85:7b:9c:6e:53:fa:c2:12:21:23:a9:6f:b9: 94:04:1c:e9 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE1XH7cXPQv++iMrnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk NTJiNzU4ZTItOTZmYi00YjUyLWIzODUtYmRiNWI2Zjc4YTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXJJBndGALeNx3scDGP4SZyFLj9jQmyw90H0 MYM1mUvHBaKOIWvwrO8mj5Ihq/rVhE9TQZri1pUqST2kIUydLPrcGLGdamo99I/O jouoBoQGmWxkrabs/1aqd4ZBJVk51hJgul7BR2CPBxmB+wrW8uyAvdSXBHqhFMD4 cgIAPzKFqGyhUWvjWVzYY/Wsk1+NtfekcWrZJENjKCwK5f5+PvlE9Fga+TbotdJT pDH48UYOUXyRqzQYBPx7fP+1FsY7U9Z0U1nM7Og0cKnN54jlH7kjT4YZ/ytKk7Cj 2xLugyo68BAueQhP5iw6mz7AWu4+oeu/xVJs85NZxj4ePGirWQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFN0aegF6w16ztezGAlr/huxbNsvGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNWRjNDk5YWEtYzA0My0z Mjc4LWE2NWItM2QzNDMxYmYwOGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEArNmnP2M/gftZr9OsW+LBokmQ76DI5D8d mGzQwBPNOsRGwXlHg6LDlVpbviocP3bwyazZRU8O5ijHxKRrvK+dwx1Z0sk8dUW5 Tz2kZQdeahqan3Ba/Az5Mn+qg/kUCY3lOXbmTI3hdT/zxIaPQbjqQrMb5yNsnO92 YSlLpb38IIMc1fH43KEbQZSwBKaQzwML3irEpkkc6RqPo8/GgLsRua9AJVKasXdg fBf3wR8wJ/tohmRiu8cmaIgFIE8AG72kE/74Z8oaDWzyOc3TMBokjKKydX+wfqV4 JSN2GW9uLI/JhMBZWYLVesc9eDzGw3aFe5xuU/rCEiEjqW+5lAQc6Q== -----END CERTIFICATE-----Generated at Mon Apr 13 12:29:10 2026 by rpki-client