$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/817a7de8-0b60-3ec9-824f-449112c81345.roa File: 817a7de8-0b60-3ec9-824f-449112c81345.roa (raw, json) Hash identifier: GN7tVwyPyGxeNWTJdcm3rAp3C8bZGaMYvhXHQw6jGNk= Subject key identifier: 1A:00:80:A8:96:41:35:B2:57:EB:02:4E:03:18:38:31:1B:15:53:C0 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584D571FB523FF98A6337FCDC480 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/817a7de8-0b60-3ec9-824f-449112c81345.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 7203 IP address blocks: 23.19.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b5:23:ff:98:a6:33:7f:cd:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=f7700ac3-e8fb-414f-af0c-4bff5264cbbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c8:de:e7:c3:39:c9:5c:a7:30:56:42:b1:20: 40:c9:3d:8f:95:5c:1f:80:5a:8e:98:a4:9c:24:40: 8d:6f:e8:9b:3c:3a:37:49:b6:71:1a:66:71:ca:54: cf:10:bb:78:e1:74:9a:4e:61:f2:53:5c:55:bf:93: 5d:d2:1f:82:62:2f:31:43:a6:49:a2:76:f7:8c:50: f4:5c:66:92:50:4b:fb:89:2d:fd:f7:5a:34:d5:9b: 91:5e:8e:97:90:f9:20:85:f6:de:02:ed:2c:6c:fc: 94:76:aa:aa:bd:83:aa:43:f1:30:74:26:01:9e:27: 06:7d:e3:b3:8c:11:07:55:76:7f:eb:af:d6:74:c0: 33:52:b0:1d:d5:8b:6e:ad:30:04:c7:5d:0c:fa:19: ab:f2:15:aa:bd:44:ff:3f:f2:0b:20:db:4a:a7:09: 63:a9:b5:df:ea:33:11:7f:c0:8f:54:0e:4b:a9:0e: d7:76:f3:a4:78:49:2c:16:e6:5e:7d:13:53:9f:e8: b3:57:38:ea:71:24:af:61:d5:96:f1:c0:ae:e5:ad: 50:52:e8:16:d2:ff:41:df:b9:03:bc:61:73:26:1b: 23:72:ca:4f:ae:73:4d:cd:24:f3:d6:d8:8c:bc:fc: c4:8d:fd:87:b1:74:40:99:f0:e5:45:3d:16:04:eb: 43:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:00:80:A8:96:41:35:B2:57:EB:02:4E:03:18:38:31:1B:15:53:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/817a7de8-0b60-3ec9-824f-449112c81345.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:63:aa:3d:93:c3:c0:d7:55:1d:35:27:51:ec:b6:cb:ed:da: 46:cf:59:97:20:29:46:d2:6b:17:a1:8e:b7:a9:21:fb:65:75: 9e:1c:f5:fb:77:ad:78:14:e6:6b:99:56:80:29:43:a9:f8:98: f2:bf:9e:20:dd:cb:70:21:92:58:ac:45:b2:c7:8c:c7:5a:49: 47:bc:94:c8:02:03:ea:51:0c:2e:c8:0c:68:75:a0:ea:ac:5e: a0:5f:32:4f:96:7f:8f:65:8c:50:48:64:f0:c9:3f:f1:6e:ff: 55:9e:81:9f:c5:7b:39:d7:5c:79:27:b3:72:e0:a0:08:cb:60: 99:ca:49:d7:24:b9:09:11:0d:a4:e2:7a:1d:27:f5:ac:fa:00: 57:09:8f:57:f1:c2:64:d1:19:4e:bf:86:77:90:7b:4a:ef:ba: 57:35:ba:25:44:7b:41:52:6f:ed:f2:e1:eb:88:dc:b3:a8:60: b5:2e:c8:a2:87:59:eb:e2:cb:27:2a:ed:32:8a:56:64:86:78: 69:ae:83:35:a2:2f:30:43:f4:ac:df:48:cf:84:21:94:34:4d: e0:6c:74:7d:bf:87:4f:20:10:f4:49:c8:b7:26:6c:ca:9c:10: cf:fb:77:bf:0d:b4:4c:02:8e:7b:fd:64:a8:f7:9c:0d:47:20: a1:20:a3:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH7Uj/5imM3/NxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk Zjc3MDBhYzMtZThmYi00MTRmLWFmMGMtNGJmZjUyNjRjYmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsje58M5yVynMFZCsSBAyT2PlVwfgFqOmKSc JECNb+ibPDo3SbZxGmZxylTPELt44XSaTmHyU1xVv5Nd0h+CYi8xQ6ZJonb3jFD0 XGaSUEv7iS3991o01ZuRXo6XkPkghfbeAu0sbPyUdqqqvYOqQ/EwdCYBnicGfeOz jBEHVXZ/66/WdMAzUrAd1YturTAEx10M+hmr8hWqvUT/P/ILINtKpwljqbXf6jMR f8CPVA5LqQ7XdvOkeEksFuZefRNTn+izVzjqcSSvYdWW8cCu5a1QUugW0v9B37kD vGFzJhsjcspPrnNNzSTz1tiMvPzEjf2HsXRAmfDlRT0WBOtDAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoAgKiWQTWyV+sCTgMYODEbFVPAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvODE3YTdkZTgtMGI2MC0z ZWM5LTgyNGYtNDQ5MTEyYzgxMzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxPEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRjqj2Tw8DXVR01J1Hstsvt2kbPWZcgKUbSaxehjrepIftldZ4c9ft3 rXgU5muZVoApQ6n4mPK/niDdy3AhklisRbLHjMdaSUe8lMgCA+pRDC7IDGh1oOqs XqBfMk+Wf49ljFBIZPDJP/Fu/1WegZ/FeznXXHkns3LgoAjLYJnKSdckuQkRDaTi eh0n9az6AFcJj1fxwmTRGU6/hneQe0rvulc1uiVEe0FSb+3y4euI3LOoYLUuyKKH Weviyycq7TKKVmSGeGmugzWiLzBD9KzfSM+EIZQ0TeBsdH2/h08gEPRJyLcmbMqc EM/7d78NtEwCjnv9ZKj3nA1HIKEgo4E= -----END CERTIFICATE-----Generated at Mon Apr 13 15:33:06 2026 by rpki-client