$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/86f1f5e4-b111-38ca-aa96-1f31a096aded.roa File: 86f1f5e4-b111-38ca-aa96-1f31a096aded.roa (raw, json) Hash identifier: lSkGJ1unh2wHABwXSKTxd5JTAS1G6wRTNpdxRkZGISw= Subject key identifier: 54:79:E1:57:0B:AE:71:D9:64:DB:62:B4:92:30:72:17:2C:E6:4B:A5 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F7BB30137A1E170A9A9D6F900 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/86f1f5e4-b111-38ca-aa96-1f31a096aded.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 396190 IP address blocks: 23.19.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:01:37:a1:e1:70:a9:a9:d6:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=c8726e5e-568a-4a26-8ee4-4f0f3df378b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:60:71:a7:91:00:76:e1:5e:c3:53:d5:cf:2e: 2e:0c:c6:4a:21:43:e3:b8:19:82:f3:0c:1b:83:67: bd:b8:d3:0a:62:f4:df:99:a3:bc:d2:96:77:8f:1e: c0:bd:d0:81:0d:03:71:49:7a:f6:f7:aa:1b:45:4e: 74:f6:95:13:82:52:92:05:9f:a6:77:40:6e:74:07: 79:8f:1a:36:d5:cd:46:f9:93:a1:d3:42:7d:9a:7a: d7:56:bd:3c:85:31:75:5a:6a:fd:28:85:60:c6:b8: 4a:74:9d:90:d0:d4:a0:0c:52:03:fc:93:46:61:40: c5:7d:46:95:f1:bb:75:8b:63:da:9f:c9:89:f9:18: 85:7e:8c:a5:f9:dc:37:63:76:ad:01:9a:ea:bf:2b: f2:f4:a8:04:7f:d6:64:80:94:94:1a:d7:08:c3:70: 0b:3d:cd:b2:6f:3b:dc:c4:ad:fa:cb:73:b3:d9:d0: 14:6c:b5:e2:94:5c:55:ac:1a:3f:44:97:d9:1b:c0: af:09:09:93:f7:5e:40:9f:df:a4:62:35:d6:04:b4: 57:f8:30:e2:85:0e:87:9f:e2:90:b6:fc:e3:c5:d1: 0f:02:8d:b1:65:34:61:68:ed:eb:7b:f1:c4:d9:8a: f2:98:ac:c8:99:85:44:3f:5a:cd:28:23:ce:c3:00: e2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:79:E1:57:0B:AE:71:D9:64:DB:62:B4:92:30:72:17:2C:E6:4B:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/86f1f5e4-b111-38ca-aa96-1f31a096aded.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:6b:52:91:95:df:ca:2f:99:aa:fa:e5:5b:89:c3:d5:df:e4: 76:2e:cd:c3:03:73:63:68:52:3b:98:bf:07:81:9c:3e:d2:5f: ce:ab:4f:56:77:d7:14:b8:3c:61:d3:c9:dd:9b:6a:43:c1:6c: cb:9c:8a:0b:bd:55:a4:57:69:16:a0:8b:22:c0:c5:06:37:28: ed:0c:17:e9:4f:f3:04:cc:dd:10:16:ce:16:73:93:85:a2:ba: f7:72:39:f4:2c:07:34:a4:a7:ab:db:34:a4:cf:e1:a1:0a:05: cd:11:f4:57:f0:52:fb:25:45:6e:1b:3d:26:74:88:5c:43:c1: 88:70:b6:c8:44:65:4d:9f:d4:4c:f2:8e:67:b5:a5:49:7e:2a: 18:00:32:7f:bb:78:47:59:53:e7:06:c4:64:d1:0b:e6:1f:5f: 42:c0:b2:88:7d:80:48:5f:e8:31:6a:6e:c6:f1:b1:c5:d0:62: 4d:b5:17:06:bd:8d:96:97:82:2e:9f:8a:ba:07:cf:91:04:b8: ba:cf:ff:fb:93:e8:67:76:54:af:97:a9:17:8d:e5:6d:1e:d6: 3b:72:f2:27:e5:b6:04:8c:41:f5:a8:9f:8d:b1:88:d3:7e:e7: 39:0b:f7:30:54:75:ad:8b:6e:95:80:29:ac:41:1e:b2:65:7a: 18:9f:b7:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97swE3oeFwqanW+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk Yzg3MjZlNWUtNTY4YS00YTI2LThlZTQtNGYwZjNkZjM3OGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumBxp5EAduFew1PVzy4uDMZKIUPjuBmC8wwb g2e9uNMKYvTfmaO80pZ3jx7AvdCBDQNxSXr296obRU509pUTglKSBZ+md0BudAd5 jxo21c1G+ZOh00J9mnrXVr08hTF1Wmr9KIVgxrhKdJ2Q0NSgDFID/JNGYUDFfUaV 8bt1i2Pan8mJ+RiFfoyl+dw3Y3atAZrqvyvy9KgEf9ZkgJSUGtcIw3ALPc2ybzvc xK36y3Oz2dAUbLXilFxVrBo/RJfZG8CvCQmT915An9+kYjXWBLRX+DDihQ6Hn+KQ tvzjxdEPAo2xZTRhaO3re/HE2YrymKzImYVEP1rNKCPOwwDibQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFR54VcLrnHZZNtitJIwchcs5kulMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvODZmMWY1ZTQtYjExMS0z OGNhLWFhOTYtMWYzMWEwOTZhZGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9rUpGV38ovmar65VuJw9Xf5HYuzcMDc2NoUjuYvweBnD7SX86rT1Z3 1xS4PGHTyd2bakPBbMucigu9VaRXaRagiyLAxQY3KO0MF+lP8wTM3RAWzhZzk4Wi uvdyOfQsBzSkp6vbNKTP4aEKBc0R9FfwUvslRW4bPSZ0iFxDwYhwtshEZU2f1Ezy jme1pUl+KhgAMn+7eEdZU+cGxGTRC+YfX0LAsoh9gEhf6DFqbsbxscXQYk21Fwa9 jZaXgi6firoHz5EEuLrP//uT6Gd2VK+XqReN5W0e1jty8ifltgSMQfWon42xiNN+ 5zkL9zBUda2LbpWAKaxBHrJlehiftxM= -----END CERTIFICATE-----Generated at Wed Oct 14 18:48:56 2026 by rpki-client