$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/61d1f620-1d7b-3891-85a6-9459d770a042.roa File: 61d1f620-1d7b-3891-85a6-9459d770a042.roa (raw, json) Hash identifier: 2Ninle8xPptVxQb6IwPpybQS8JuCerHlGWjQxJydBJk= Subject key identifier: 68:A2:A9:D6:97:EA:94:74:03:E0:28:5F:B8:B4:DA:C2:23:E5:00:59 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584C76817BBC1DC75E1074269200 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/61d1f620-1d7b-3891-85a6-9459d770a042.roa Signing time: Fri 09 Jan 2026 02:00:31 +0000 ROA not before: Fri 09 Jan 2026 02:00:31 +0000 ROA not after: Thu 09 Apr 2026 01:00:31 +0000 asID: 393886 IP address blocks: 23.19.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:76:81:7b:bc:1d:c7:5e:10:74:26:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Jan 9 02:00:31 2026 GMT Not After : Apr 9 01:00:31 2026 GMT Subject: CN=1474cc92-acab-4f1d-9347-c56a17af5600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ee:8b:b9:93:94:f5:7c:5b:16:4d:f9:50:8e: 08:9b:eb:b8:0e:89:a2:34:bf:ca:2a:6d:db:dc:38: ea:8a:fc:ee:46:d9:7c:2f:87:93:fc:5f:fb:87:18: 95:ca:b7:ba:7f:55:35:4a:a1:2a:09:fe:fa:fa:a8: fd:31:c9:c8:f9:e0:51:60:6d:c2:30:96:40:82:38: 29:91:17:c2:40:d7:6e:d4:c8:a7:ff:89:3d:f4:b0: 59:a0:00:d5:a6:39:2c:14:f7:98:e7:a5:b6:14:75: 26:f1:e1:9f:08:b5:54:2f:3c:b2:e0:ad:57:8e:fd: 5b:c1:c9:20:63:65:3a:11:0f:be:34:ce:72:76:e9: 06:06:7b:7e:e9:14:b3:08:03:9a:3c:fc:cc:4d:23: 81:96:9e:e4:16:ef:89:6a:32:0d:51:70:f4:47:b6: bb:dd:48:32:c9:88:a0:23:63:bc:db:4c:1d:7c:30: 49:b8:0c:6d:e2:51:23:0f:04:dd:72:26:bf:4f:58: e5:80:ef:79:3b:d7:31:00:79:36:df:b5:61:b6:05: c0:cf:86:07:ad:d5:e1:2b:b6:6b:b3:61:ba:ea:65: be:7d:2b:1f:fd:7a:ba:2e:18:ce:31:48:e2:98:d2: 5e:9f:1f:13:67:34:73:90:85:0c:3b:bb:ae:aa:8b: fd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A2:A9:D6:97:EA:94:74:03:E0:28:5F:B8:B4:DA:C2:23:E5:00:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/61d1f620-1d7b-3891-85a6-9459d770a042.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:f9:c2:a2:58:af:ba:49:e1:5f:00:f2:3d:58:6d:89:80:94: 2e:5b:63:32:06:f2:06:5c:56:8f:4c:22:58:9e:ec:f8:d7:1f: cf:f6:1e:ac:57:90:56:30:b4:24:ff:aa:40:ba:55:b2:36:46: bc:99:77:fd:f6:4c:37:f3:9d:50:f3:9f:97:a2:02:b6:c6:d7: a2:fa:44:50:bd:8d:e7:96:04:94:ac:fd:91:74:32:9c:8f:43: 26:84:bc:8d:f2:bc:6e:c3:05:ab:02:e7:1f:2a:c3:88:ac:1f: 86:7f:7a:d1:37:ad:c1:25:a7:51:c9:cf:9b:2e:89:c1:30:56: 86:da:0c:0c:1c:7c:0d:4b:da:bc:89:ad:71:b2:d7:ff:61:02: 95:96:8c:81:7d:b4:88:39:5a:af:ff:a5:6b:bd:e8:e8:8e:fc: d0:1b:df:60:69:6a:e7:36:55:36:f9:fe:34:72:62:6c:61:a7: bc:bb:01:e6:84:1e:36:d9:39:b3:22:f8:9d:2d:4c:93:14:f3: b2:19:bd:ce:72:d9:6f:f3:61:fd:b0:63:d9:d5:41:9b:d6:d9: e5:8a:5f:5e:34:dc:b9:b2:9f:0b:b4:f3:99:b6:d5:ca:13:fd: 45:da:1f:9d:5b:b6:1b:25:56:64:23:b7:19:16:bc:22:f3:c4: a8:c4:e6:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx2gXu8HcdeEHQmkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDEwOTAyMDAzMVoXDTI2MDQwOTAxMDAzMVowLzEtMCsGA1UEAxMk MTQ3NGNjOTItYWNhYi00ZjFkLTkzNDctYzU2YTE3YWY1NjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+6LuZOU9XxbFk35UI4Im+u4DomiNL/KKm3b 3DjqivzuRtl8L4eT/F/7hxiVyre6f1U1SqEqCf76+qj9McnI+eBRYG3CMJZAgjgp kRfCQNdu1Min/4k99LBZoADVpjksFPeY56W2FHUm8eGfCLVULzyy4K1Xjv1bwckg Y2U6EQ++NM5ydukGBnt+6RSzCAOaPPzMTSOBlp7kFu+JajINUXD0R7a73UgyyYig I2O820wdfDBJuAxt4lEjDwTdcia/T1jlgO95O9cxAHk237VhtgXAz4YHrdXhK7Zr s2G66mW+fSsf/Xq6LhjOMUjimNJenx8TZzRzkIUMO7uuqov9FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiiqdaX6pR0A+AoX7i02sIj5QBZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNjFkMWY2MjAtMWQ3Yi0z ODkxLTg1YTYtOTQ1OWQ3NzBhMDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJn5wqJYr7pJ4V8A8j1YbYmAlC5bYzIG8gZcVo9MIlie7PjXH8/2HqxX kFYwtCT/qkC6VbI2RryZd/32TDfznVDzn5eiArbG16L6RFC9jeeWBJSs/ZF0MpyP QyaEvI3yvG7DBasC5x8qw4isH4Z/etE3rcElp1HJz5suicEwVobaDAwcfA1L2ryJ rXGy1/9hApWWjIF9tIg5Wq//pWu96OiO/NAb32Bpauc2VTb5/jRyYmxhp7y7AeaE HjbZObMi+J0tTJMU87IZvc5y2W/zYf2wY9nVQZvW2eWKX1403Lmynwu085m21coT /UXaH51bthslVmQjtxkWvCLzxKjE5vQ= -----END CERTIFICATE-----Generated at Thu Feb 26 12:20:34 2026 by rpki-client