$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/84bb876e-c47d-33f4-8cd7-1f3bb4b82001.roa File: 84bb876e-c47d-33f4-8cd7-1f3bb4b82001.roa (raw, json) Hash identifier: 2SJenuPhsBsbxmPxxxusyeXh/9H41IKYtF4SoVPMHb8= Subject key identifier: C4:79:F7:9F:84:46:56:2C:1B:12:C1:E8:EC:35:16:63:B3:27:36:83 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584D571FB5E24344BCE406FA6E80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/84bb876e-c47d-33f4-8cd7-1f3bb4b82001.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 7203 IP address blocks: 23.19.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b5:e2:43:44:bc:e4:06:fa:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=82de31f6-14cf-4c4b-a87c-c4d10fedb4c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2b:a0:d1:96:0e:a7:c4:f6:44:61:30:87:de: 07:7d:55:74:47:26:ff:98:ab:e3:ec:7b:65:9f:2c: 9d:45:83:d6:9f:f4:4d:16:3b:15:f5:33:3f:33:b3: 55:06:8f:d8:26:1d:99:25:97:4a:27:5e:cf:57:b4: ab:25:4f:62:fe:64:c5:0e:ab:f9:04:82:af:d8:84: 4a:6a:83:c3:00:90:f0:e6:e6:05:7c:0d:7e:63:67: d9:6e:da:8c:cf:01:1f:a8:b7:6d:06:db:48:52:22: df:98:9b:75:c9:80:a9:ec:30:0d:93:fa:d7:8a:8d: 72:b0:79:43:5f:e5:11:5a:21:58:a4:e2:7f:2a:36: d3:28:31:1a:89:8e:60:71:69:96:98:fc:22:ae:a5: 2b:9c:8d:ae:85:2b:0e:16:67:31:b3:90:1e:ce:b4: 5a:66:45:1f:52:c9:ac:72:84:b4:d7:ad:0a:40:4b: 21:c4:b2:98:42:3f:3a:7b:33:59:e8:f6:d3:82:74: 3b:f5:a6:2e:24:1c:e1:07:ea:b9:a8:42:2f:5d:cb: 7e:be:bb:5b:54:21:0f:94:d2:56:ac:32:e2:5d:04: bf:5c:87:9c:8f:f7:bf:e0:06:db:68:39:49:50:9f: 04:c0:4b:62:1e:7a:16:58:99:8c:6e:f3:a2:be:b8: 12:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:79:F7:9F:84:46:56:2C:1B:12:C1:E8:EC:35:16:63:B3:27:36:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/84bb876e-c47d-33f4-8cd7-1f3bb4b82001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:be:a9:54:2d:f7:10:43:ff:b9:ff:85:96:7b:13:1c:53:30: dd:58:a9:ba:33:db:4f:ac:bb:f5:2f:ce:12:77:16:ab:e3:3f: 1f:87:a2:d5:d5:06:a7:26:41:2e:75:40:ba:42:e6:39:c2:8a: 80:65:40:ca:8e:14:4e:ae:64:f6:c1:f8:e5:f9:ed:e0:5e:bf: 6a:ed:d0:d3:cd:fb:b7:11:8a:06:74:07:84:c1:7c:4b:90:a3: a0:01:03:3c:bc:fa:74:dc:07:de:b8:8e:b3:f8:91:0e:c5:92: dc:84:1a:c1:a6:20:a4:c4:9e:49:8b:3d:7d:09:57:58:44:f5: 42:eb:c8:0c:5d:49:d2:c6:4c:e9:40:6d:ef:e6:b9:bd:f3:23: f1:21:ab:bb:47:2f:1d:ad:d3:d0:1f:61:50:7f:93:5a:e6:ac: 42:a1:c0:cc:83:87:61:21:53:45:04:a4:46:e9:0e:d4:6d:cc: 43:d3:3d:28:58:b5:b1:5d:04:9e:6c:91:c6:6a:72:ce:85:d6: b6:84:23:a8:e3:4f:ac:af:6e:4a:e0:1e:95:ee:df:8f:11:80: 20:2f:39:ed:30:de:8f:dc:00:7e:e8:cc:f2:a3:ff:d2:72:69: 89:c4:27:e5:5d:a1:7e:c0:38:bb:b4:f1:d8:4f:92:44:db:77: 79:a8:f8:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH7XiQ0S85Ab6boAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk ODJkZTMxZjYtMTRjZi00YzRiLWE4N2MtYzRkMTBmZWRiNGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyug0ZYOp8T2RGEwh94HfVV0Ryb/mKvj7Htl nyydRYPWn/RNFjsV9TM/M7NVBo/YJh2ZJZdKJ17PV7SrJU9i/mTFDqv5BIKv2IRK aoPDAJDw5uYFfA1+Y2fZbtqMzwEfqLdtBttIUiLfmJt1yYCp7DANk/rXio1ysHlD X+URWiFYpOJ/KjbTKDEaiY5gcWmWmPwirqUrnI2uhSsOFmcxs5AezrRaZkUfUsms coS0160KQEshxLKYQj86ezNZ6PbTgnQ79aYuJBzhB+q5qEIvXct+vrtbVCEPlNJW rDLiXQS/XIecj/e/4AbbaDlJUJ8EwEtiHnoWWJmMbvOivrgSqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMR595+ERlYsGxLB6Ow1FmOzJzaDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvODRiYjg3NmUtYzQ3ZC0z M2Y0LThjZDctMWYzYmI0YjgyMDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEK+qVQt9xBD/7n/hZZ7ExxTMN1Yqboz20+su/UvzhJ3FqvjPx+HotXV BqcmQS51QLpC5jnCioBlQMqOFE6uZPbB+OX57eBev2rt0NPN+7cRigZ0B4TBfEuQ o6ABAzy8+nTcB964jrP4kQ7FktyEGsGmIKTEnkmLPX0JV1hE9ULryAxdSdLGTOlA be/mub3zI/Ehq7tHLx2t09AfYVB/k1rmrEKhwMyDh2EhU0UEpEbpDtRtzEPTPShY tbFdBJ5skcZqcs6F1raEI6jjT6yvbkrgHpXu348RgCAvOe0w3o/cAH7ozPKj/9Jy aYnEJ+VdoX7AOLu08dhPkkTbd3mo+EY= -----END CERTIFICATE-----Generated at Mon Apr 13 15:32:33 2026 by rpki-client