$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5dc499aa-c043-3278-a65b-3d3431bf08c7.roa File: 5dc499aa-c043-3278-a65b-3d3431bf08c7.roa (raw, json) Hash identifier: hCYzQhwG7WpkI8DO0YgOnjmOb/6JQ5KDPstpXwmXRHo= Subject key identifier: 1E:DC:CD:68:BA:64:01:7E:61:A0:32:BE:66:8F:23:6E:6D:38:C0:A0 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F7BB30294C2532CC82A0C3900 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5dc499aa-c043-3278-a65b-3d3431bf08c7.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 27411 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:02:94:c2:53:2c:c8:2a:0c:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=1ef125b5-b3ff-4cc8-9fb4-ac06c3eb4503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e4:3e:52:ef:e4:46:ba:07:56:35:dc:a2:55: 37:15:1a:3d:6b:f3:de:58:36:e7:3d:82:f9:1d:57: 28:5f:7b:89:de:43:3a:7d:73:ff:57:e0:06:ff:7b: de:87:6e:b0:e8:55:0d:a4:65:81:49:f2:1f:e4:18: 45:3a:82:91:b2:49:59:0d:17:ae:b3:df:cb:9a:3d: c3:e8:40:fc:19:99:c2:48:00:bd:a5:dc:f5:5e:df: 56:ef:b7:be:3b:ae:63:71:be:e9:44:a4:ff:50:5f: 2b:18:fd:29:a6:df:17:d9:fc:aa:59:b2:42:4d:c7: bd:32:e0:95:f9:2f:3e:7d:ee:7d:ee:08:40:7c:7e: 7b:54:00:7e:de:a9:0d:46:e2:c9:d9:49:01:f0:e7: 9e:61:20:9f:b2:20:3f:e7:2c:61:32:3d:cf:22:6b: 5e:12:0b:7f:ef:43:46:cb:3f:ba:d9:47:26:4a:10: 2a:02:f1:97:06:cd:8c:ff:7b:23:bb:a8:94:75:bb: 06:4c:79:9b:31:32:54:0a:2e:b6:23:ed:1a:d7:f0: 4e:70:82:f3:d9:25:5e:3b:42:34:d6:0e:98:43:f2: d2:df:53:82:e3:e0:4b:3e:51:da:84:db:cf:ae:07: 41:9c:82:f5:f2:6c:0e:61:46:62:69:e9:3f:77:0d: 6a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:DC:CD:68:BA:64:01:7E:61:A0:32:BE:66:8F:23:6E:6D:38:C0:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5dc499aa-c043-3278-a65b-3d3431bf08c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:ec:f3:80:33:61:fe:63:4e:99:f5:33:f2:ef:fa:65:a3:73: 73:31:29:f4:06:0d:ea:64:ba:7c:08:19:90:12:15:36:a6:20: 17:4f:99:37:36:a2:0b:7c:57:29:ff:59:b5:d9:27:ec:62:b2: 02:f4:ed:bd:23:6d:24:d4:c7:09:9c:52:a7:25:c7:6e:77:8a: 9f:ff:58:64:cd:7a:35:9b:33:36:73:dd:63:ba:ec:0f:cd:4c: be:0c:76:52:a0:b3:ef:5c:9a:a7:72:9d:93:70:f6:37:3f:20: 08:8c:6b:aa:3e:b9:22:88:4f:f1:0f:58:71:a4:91:66:d7:a1: a8:21:af:58:01:2c:55:d5:67:8e:98:fe:83:be:b1:d8:25:f5: 2b:57:11:18:24:a3:ad:1f:bc:bb:da:75:7a:84:9c:e1:6a:de: ed:7f:04:ba:6c:71:60:30:ee:4c:8f:16:17:e4:aa:06:fa:ac: 8e:d4:1f:b3:9f:ea:f6:71:e2:db:54:8a:7e:4c:05:2a:c2:a8: d5:d9:3c:c1:f8:5d:02:4a:ae:c7:f5:24:fc:31:92:97:af:b5: 74:3f:8e:a8:01:9c:0c:15:be:b9:c8:51:fa:90:a4:6b:fd:6a: bc:63:bd:33:c2:c0:aa:9f:68:81:50:cc:f3:26:f0:52:fd:43: 99:7b:f5:15 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE97swKUwlMsyCoMOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk MWVmMTI1YjUtYjNmZi00Y2M4LTlmYjQtYWMwNmMzZWI0NTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOQ+Uu/kRroHVjXcolU3FRo9a/PeWDbnPYL5 HVcoX3uJ3kM6fXP/V+AG/3veh26w6FUNpGWBSfIf5BhFOoKRsklZDReus9/Lmj3D 6ED8GZnCSAC9pdz1Xt9W77e+O65jcb7pRKT/UF8rGP0ppt8X2fyqWbJCTce9MuCV +S8+fe597ghAfH57VAB+3qkNRuLJ2UkB8OeeYSCfsiA/5yxhMj3PImteEgt/70NG yz+62UcmShAqAvGXBs2M/3sju6iUdbsGTHmbMTJUCi62I+0a1/BOcILz2SVeO0I0 1g6YQ/LS31OC4+BLPlHahNvPrgdBnIL18mwOYUZiaek/dw1qqQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFB7czWi6ZAF+YaAyvmaPI25tOMCgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNWRjNDk5YWEtYzA0My0z Mjc4LWE2NWItM2QzNDMxYmYwOGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPuzzgDNh/mNOmfUz8u/6ZaNzczEp9AYN 6mS6fAgZkBIVNqYgF0+ZNzaiC3xXKf9Ztdkn7GKyAvTtvSNtJNTHCZxSpyXHbneK n/9YZM16NZszNnPdY7rsD81Mvgx2UqCz71yap3Kdk3D2Nz8gCIxrqj65IohP8Q9Y caSRZtehqCGvWAEsVdVnjpj+g76x2CX1K1cRGCSjrR+8u9p1eoSc4Wre7X8Eumxx YDDuTI8WF+SqBvqsjtQfs5/q9nHi21SKfkwFKsKo1dk8wfhdAkqux/Uk/DGSl6+1 dD+OqAGcDBW+uchR+pCka/1qvGO9M8LAqp9ogVDM8ybwUv1DmXv1FQ== -----END CERTIFICATE-----Generated at Tue Oct 13 16:04:08 2026 by rpki-client