$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/86f1f5e4-b111-38ca-aa96-1f31a096aded.roa File: 86f1f5e4-b111-38ca-aa96-1f31a096aded.roa (raw, json) Hash identifier: NNJy6SzyXGO6h9WUc0ldRhjDujjwb/OjhTBMIU6sc98= Subject key identifier: 52:75:04:A8:06:DD:BC:8B:72:26:87:14:CF:5A:F7:E8:2E:FC:D7:A3 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584D571FB5AF4558A8499C532C50 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/86f1f5e4-b111-38ca-aa96-1f31a096aded.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 396190 IP address blocks: 23.19.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b5:af:45:58:a8:49:9c:53:2c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=2dc74e02-8743-4d50-8c1d-c919f0f9a051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c3:6d:47:60:04:35:8e:1f:86:9d:56:cf:17: 2c:eb:06:77:42:c2:d1:5c:56:6a:69:9c:9b:9c:09: 8a:67:28:2d:38:48:d9:f0:7a:4a:c4:86:89:32:3a: 71:76:27:36:a3:9f:69:05:52:bd:d3:2e:21:2e:93: d0:81:4d:f0:ca:a8:b0:d4:c2:cb:bd:9e:5c:16:ed: 5e:3f:77:1d:40:37:b7:cc:7c:b7:52:be:48:3b:a3: e3:61:0e:57:ad:87:e5:f3:c8:0e:ad:c5:54:d0:37: 2b:14:cb:a7:64:4e:7e:cb:e0:c9:05:55:4a:86:be: 47:8e:61:a3:18:be:60:06:cf:74:d4:dd:93:bf:e1: 86:18:59:1b:f3:cb:a6:ed:a5:6f:f7:54:6e:bd:d7: 6c:67:e1:2e:4f:58:7e:0a:c5:2a:65:17:42:53:54: fa:37:53:e8:45:17:73:8a:5a:61:e7:24:65:54:03: 6c:14:89:f7:61:0b:74:af:ee:22:2f:f9:ff:47:87: c5:9a:af:4d:2f:7a:ad:b3:c1:3c:36:28:92:e5:49: 8b:14:1c:8f:6f:2d:d8:13:7e:ae:4c:f7:56:1b:d8: 99:41:9a:e8:1e:d2:21:88:71:c8:9d:c4:fc:ce:9e: 47:56:9f:87:30:19:bc:65:72:c5:71:1e:19:d0:61: a6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:75:04:A8:06:DD:BC:8B:72:26:87:14:CF:5A:F7:E8:2E:FC:D7:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/86f1f5e4-b111-38ca-aa96-1f31a096aded.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:b6:7e:99:b2:77:6e:78:97:89:2a:c4:c4:ea:f9:2c:87:c3: 2b:f5:73:cd:6a:cf:48:8e:c2:e4:2b:0a:5f:74:e7:a7:c1:da: 3a:52:d5:4c:9e:4f:59:4d:24:ac:67:19:f2:70:58:d8:e5:4b: ea:ad:1a:ce:28:71:b6:69:84:59:fc:c8:55:87:65:be:4d:39: ca:49:7b:01:1e:da:52:ac:14:64:05:36:c1:27:8d:99:48:31: 7d:5c:61:49:cc:9d:3b:3c:e6:0e:b2:31:50:11:fe:d1:a4:6f: 28:cb:9e:89:be:8e:88:ad:bb:92:56:09:1e:a9:0d:5e:6b:6a: 9a:41:46:35:2b:60:a9:0b:ae:12:5e:b3:45:87:e8:64:a3:0e: 85:f2:97:85:b7:5f:61:50:bf:51:5f:b1:ae:2e:98:a9:d9:d6: 86:31:d0:71:d5:86:14:b4:e6:d1:21:02:1e:b0:65:10:51:2b: 39:70:61:df:5b:fa:39:bf:b1:e1:9d:4f:f9:dc:36:61:48:54: 7c:ff:b0:9f:e3:a1:cc:e3:a7:83:6e:af:3f:65:f1:c3:66:58: 8a:de:2b:47:17:69:9b:7c:6f:f7:37:20:f1:50:79:97:13:e6: 11:91:4c:3f:be:54:d6:6b:17:c3:e5:1e:a2:71:81:3e:03:61: 87:a9:09:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH7WvRVioSZxTLFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk MmRjNzRlMDItODc0My00ZDUwLThjMWQtYzkxOWYwZjlhMDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MNtR2AENY4fhp1Wzxcs6wZ3QsLRXFZqaZyb nAmKZygtOEjZ8HpKxIaJMjpxdic2o59pBVK90y4hLpPQgU3wyqiw1MLLvZ5cFu1e P3cdQDe3zHy3Ur5IO6PjYQ5XrYfl88gOrcVU0DcrFMunZE5+y+DJBVVKhr5HjmGj GL5gBs901N2Tv+GGGFkb88um7aVv91RuvddsZ+EuT1h+CsUqZRdCU1T6N1PoRRdz ilph5yRlVANsFIn3YQt0r+4iL/n/R4fFmq9NL3qts8E8NiiS5UmLFByPby3YE36u TPdWG9iZQZroHtIhiHHIncT8zp5HVp+HMBm8ZXLFcR4Z0GGmZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJ1BKgG3byLciaHFM9a9+gu/NejMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvODZmMWY1ZTQtYjExMS0z OGNhLWFhOTYtMWYzMWEwOTZhZGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKu2fpmyd254l4kqxMTq+SyHwyv1c81qz0iOwuQrCl9056fB2jpS1Uye T1lNJKxnGfJwWNjlS+qtGs4ocbZphFn8yFWHZb5NOcpJewEe2lKsFGQFNsEnjZlI MX1cYUnMnTs85g6yMVAR/tGkbyjLnom+joitu5JWCR6pDV5rappBRjUrYKkLrhJe s0WH6GSjDoXyl4W3X2FQv1Ffsa4umKnZ1oYx0HHVhhS05tEhAh6wZRBRKzlwYd9b +jm/seGdT/ncNmFIVHz/sJ/joczjp4Nurz9l8cNmWIreK0cXaZt8b/c3IPFQeZcT 5hGRTD++VNZrF8PlHqJxgT4DYYepCa0= -----END CERTIFICATE-----Generated at Mon Apr 13 15:32:44 2026 by rpki-client