$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/86cf6b8d-588c-3655-91c4-daa30a58f113.roa File: 86cf6b8d-588c-3655-91c4-daa30a58f113.roa (raw, json) Hash identifier: bk6Fgs/8tEt/DrFxT2rkLRIU+4cPVUp0zElcYlkO5pw= Subject key identifier: 5A:82:DC:68:53:EF:51:38:7B:1C:52:09:02:3E:93:01:8B:B8:6A:9F Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584C76817B2453A1BCEEB4D178C0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/86cf6b8d-588c-3655-91c4-daa30a58f113.roa Signing time: Fri 09 Jan 2026 02:00:31 +0000 ROA not before: Fri 09 Jan 2026 02:00:31 +0000 ROA not after: Thu 09 Apr 2026 01:00:31 +0000 asID: 394380 IP address blocks: 23.19.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:76:81:7b:24:53:a1:bc:ee:b4:d1:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Jan 9 02:00:31 2026 GMT Not After : Apr 9 01:00:31 2026 GMT Subject: CN=fedd7982-d2e7-41b3-908f-3bbb768594f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:19:ff:08:99:a0:d2:0b:d3:e5:a1:c0:3a:91: f2:f2:1e:07:6c:60:20:82:26:e5:9c:a8:00:44:2b: ab:6b:cb:ba:8d:d8:aa:f8:33:fb:ad:75:41:cd:96: 1a:4c:44:b3:61:89:dc:92:45:81:d1:ce:ef:d4:86: 5e:7b:18:8d:9e:7d:57:7e:aa:0a:46:76:16:72:0f: 88:09:e2:c6:39:4e:83:11:fb:60:0c:15:0f:60:7c: 55:04:69:cb:2a:44:3d:ef:de:43:93:a6:54:20:b1: 67:9e:4a:81:45:d0:72:9d:94:a9:76:42:5d:88:2a: d6:6c:26:2a:f4:bb:45:00:bf:f3:5b:a3:56:fc:e8: bf:8e:4a:74:27:23:34:99:76:5b:27:95:aa:89:ef: eb:75:7b:13:52:48:cd:d3:ec:02:ee:e4:b2:ed:ba: 72:9b:04:dd:6b:3f:6f:ab:bd:13:fd:91:4b:86:02: 7e:a8:ab:85:74:e3:b5:fd:c6:22:33:d7:9a:c5:a1: 94:9d:9f:f5:fb:fb:80:f2:67:59:f9:e7:63:eb:e7: ec:99:87:cb:e8:1a:6e:74:4e:a4:01:5e:72:ac:72: a8:56:71:49:1b:d4:8f:ea:52:f8:53:22:51:1b:bc: 54:c8:f3:b1:25:0c:d8:57:d1:fd:78:5b:00:00:7a: f8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:82:DC:68:53:EF:51:38:7B:1C:52:09:02:3E:93:01:8B:B8:6A:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/86cf6b8d-588c-3655-91c4-daa30a58f113.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:89:f6:a1:13:05:f9:0a:18:51:96:94:21:ab:2f:f0:05:6f: 7e:c7:2a:3f:b0:57:b3:53:87:7b:05:59:cd:eb:b3:d7:d8:55: 5b:d8:bb:f0:63:85:5d:49:af:0e:6e:3c:d8:0a:5c:4e:df:9e: f5:35:b9:68:ce:e1:73:a8:68:fd:25:cf:ef:62:49:0b:0c:b7: 03:df:45:2b:81:d7:95:14:11:c7:ff:6f:e3:80:3d:c3:0c:d2: b7:a7:3d:75:63:69:de:9a:ae:eb:67:ea:d6:3a:95:a4:3f:1a: 8b:93:9b:69:c3:b0:96:ea:ea:e4:e6:74:70:a4:ec:bc:2d:5a: 17:75:fb:46:e7:27:b3:1f:36:77:cc:6d:bf:d1:2b:db:d8:d4: 82:49:17:d5:67:c4:58:a7:9f:33:5d:69:39:c5:85:cc:07:c8: f7:21:f1:cb:23:c5:a7:2a:1f:da:dd:be:8d:9a:3d:54:8d:27: fa:57:b9:6e:0c:28:0c:79:ae:18:8b:63:28:73:76:13:71:e5: 44:44:5e:f0:b6:f3:5a:86:01:54:02:fd:03:0c:9f:6c:d3:e1: 69:ba:70:17:36:3e:78:2e:a9:5f:af:77:a6:ee:8e:21:8b:af: 7d:29:61:5c:21:39:f8:c1:59:9a:81:c5:1b:a5:bc:59:69:68: b9:39:b0:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx2gXskU6G87rTReMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDEwOTAyMDAzMVoXDTI2MDQwOTAxMDAzMVowLzEtMCsGA1UEAxMk ZmVkZDc5ODItZDJlNy00MWIzLTkwOGYtM2JiYjc2ODU5NGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Rn/CJmg0gvT5aHAOpHy8h4HbGAggiblnKgA RCura8u6jdiq+DP7rXVBzZYaTESzYYnckkWB0c7v1IZeexiNnn1XfqoKRnYWcg+I CeLGOU6DEftgDBUPYHxVBGnLKkQ9795Dk6ZUILFnnkqBRdBynZSpdkJdiCrWbCYq 9LtFAL/zW6NW/Oi/jkp0JyM0mXZbJ5Wqie/rdXsTUkjN0+wC7uSy7bpymwTdaz9v q70T/ZFLhgJ+qKuFdOO1/cYiM9eaxaGUnZ/1+/uA8mdZ+edj6+fsmYfL6BpudE6k AV5yrHKoVnFJG9SP6lL4UyJRG7xUyPOxJQzYV9H9eFsAAHr4jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqC3GhT71E4exxSCQI+kwGLuGqfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvODZjZjZiOGQtNTg4Yy0z NjU1LTkxYzQtZGFhMzBhNThmMTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACJ9qETBfkKGFGWlCGrL/AFb37HKj+wV7NTh3sFWc3rs9fYVVvYu/Bj hV1Jrw5uPNgKXE7fnvU1uWjO4XOoaP0lz+9iSQsMtwPfRSuB15UUEcf/b+OAPcMM 0renPXVjad6arutn6tY6laQ/GouTm2nDsJbq6uTmdHCk7LwtWhd1+0bnJ7MfNnfM bb/RK9vY1IJJF9VnxFinnzNdaTnFhcwHyPch8csjxacqH9rdvo2aPVSNJ/pXuW4M KAx5rhiLYyhzdhNx5UREXvC281qGAVQC/QMMn2zT4Wm6cBc2PnguqV+vd6bujiGL r30pYVwhOfjBWZqBxRulvFlpaLk5sEk= -----END CERTIFICATE-----Generated at Thu Feb 26 15:00:58 2026 by rpki-client