$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/61d1f620-1d7b-3891-85a6-9459d770a042.roa File: 61d1f620-1d7b-3891-85a6-9459d770a042.roa (raw, json) Hash identifier: oxfesZp8DEaQGAWrBy46pREr9ozc53M2VZLF4Rr9kLc= Subject key identifier: 7D:C7:A2:CC:A5:9B:B6:5C:4C:F5:61:A5:E8:44:A5:ED:43:FA:DC:C9 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584D571FB5C9D65CBA79DD598FE0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/61d1f620-1d7b-3891-85a6-9459d770a042.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 393886 IP address blocks: 23.19.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b5:c9:d6:5c:ba:79:dd:59:8f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=8696dacc-a7de-4d8d-9dd8-b02762db531f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:b7:7e:e9:11:0c:b2:f7:a6:86:dd:f1:98:0a: 9d:ab:f7:18:b6:bc:4f:b9:b2:44:b8:0f:8c:1f:07: 2b:6a:34:d4:f6:33:b9:0a:9e:09:fa:5a:21:3c:42: 89:fd:14:d9:09:ed:ba:44:14:9c:db:23:12:dd:37: 29:1b:a8:51:1b:00:3a:c0:84:da:60:b3:a1:8c:bf: 4e:a4:0e:04:ff:7a:eb:12:42:aa:18:f2:e6:71:a4: a9:67:4b:19:fc:1a:0e:72:60:eb:00:bf:b4:da:51: 9d:d6:9c:47:cb:ed:82:66:2a:fc:ec:cc:c4:c1:47: 2e:b5:e2:35:91:c2:16:45:40:36:92:55:75:c2:82: 56:2b:9b:8b:05:0b:51:67:1e:ec:5b:ae:4d:79:9f: 48:cf:17:1f:8f:90:95:d2:01:eb:5d:87:88:52:ff: c0:9f:ea:b7:bb:6b:87:d6:32:36:3e:c5:cf:57:47: 93:f4:ef:bf:4b:54:85:f5:f6:9e:b8:50:22:aa:42: 68:09:23:63:70:eb:f9:62:d2:b0:7f:57:d4:3f:b5: de:03:1a:06:b5:0a:c7:e6:ec:67:18:3d:f9:b3:f4: 9a:c5:42:1c:f1:20:bd:db:58:8b:45:cc:01:b2:67: b3:6a:3a:4f:87:6a:b5:b8:8d:6b:b4:7b:97:81:67: 93:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C7:A2:CC:A5:9B:B6:5C:4C:F5:61:A5:E8:44:A5:ED:43:FA:DC:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/61d1f620-1d7b-3891-85a6-9459d770a042.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:d6:cc:9a:dc:ac:f2:b4:28:c1:11:71:70:12:1a:28:3d:32: 53:bb:48:0c:3f:dd:04:82:ae:e3:bc:93:4c:55:c6:74:8b:b1: 17:25:dd:2b:61:92:8f:25:e8:57:74:f2:7b:0b:40:65:5d:0b: e4:88:e3:a9:91:b7:02:22:e2:5a:15:46:af:18:8c:f8:66:04: 5f:6c:de:28:14:22:78:c0:96:7a:46:e5:31:aa:41:f1:af:4e: 71:01:bf:76:c7:ca:57:f8:8d:4e:45:f6:09:de:17:db:aa:37: 25:87:c4:03:21:fa:d1:ae:50:67:d9:c3:63:df:cb:dc:19:ff: c4:2a:83:d9:ec:90:f8:14:4f:96:be:e2:46:fc:c0:67:54:8f: f6:d7:f8:00:87:cb:81:ea:60:06:b9:5a:fd:df:6e:99:78:ee: 9a:70:22:65:9c:97:c8:31:f1:4e:46:af:82:a1:c9:32:39:b4: cc:fe:4b:c3:b4:c0:5e:d3:6b:d1:f8:2f:a6:4b:b2:43:a1:3b: 1c:05:db:92:22:12:6d:8c:0a:c2:9e:f0:96:03:fe:66:56:9d: 92:a5:2b:a8:da:10:1d:ef:34:da:e7:42:07:a1:59:e7:f8:bd: 39:8d:1c:91:e9:05:d6:96:ae:3a:a7:8e:8b:4c:76:70:eb:bc: ea:f3:71:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH7XJ1ly6ed1Zj+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk ODY5NmRhY2MtYTdkZS00ZDhkLTlkZDgtYjAyNzYyZGI1MzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/bd+6REMsvemht3xmAqdq/cYtrxPubJEuA+M HwcrajTU9jO5Cp4J+lohPEKJ/RTZCe26RBSc2yMS3TcpG6hRGwA6wITaYLOhjL9O pA4E/3rrEkKqGPLmcaSpZ0sZ/BoOcmDrAL+02lGd1pxHy+2CZir87MzEwUcuteI1 kcIWRUA2klV1woJWK5uLBQtRZx7sW65NeZ9Izxcfj5CV0gHrXYeIUv/An+q3u2uH 1jI2PsXPV0eT9O+/S1SF9faeuFAiqkJoCSNjcOv5YtKwf1fUP7XeAxoGtQrH5uxn GD35s/SaxUIc8SC921iLRcwBsmezajpPh2q1uI1rtHuXgWeT2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3Hosylm7ZcTPVhpehEpe1D+tzJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNjFkMWY2MjAtMWQ3Yi0z ODkxLTg1YTYtOTQ1OWQ3NzBhMDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMLWzJrcrPK0KMERcXASGig9MlO7SAw/3QSCruO8k0xVxnSLsRcl3Sth ko8l6Fd08nsLQGVdC+SI46mRtwIi4loVRq8YjPhmBF9s3igUInjAlnpG5TGqQfGv TnEBv3bHylf4jU5F9gneF9uqNyWHxAMh+tGuUGfZw2Pfy9wZ/8Qqg9nskPgUT5a+ 4kb8wGdUj/bX+ACHy4HqYAa5Wv3fbpl47ppwImWcl8gx8U5Gr4KhyTI5tMz+S8O0 wF7Ta9H4L6ZLskOhOxwF25IiEm2MCsKe8JYD/mZWnZKlK6jaEB3vNNrnQgehWef4 vTmNHJHpBdaWrjqnjotMdnDrvOrzcew= -----END CERTIFICATE-----Generated at Mon Apr 13 12:29:07 2026 by rpki-client