$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/956c867f-2ffb-3f6b-aa14-17ca9e90a641.roa File: 956c867f-2ffb-3f6b-aa14-17ca9e90a641.roa (raw, json) Hash identifier: rPvgM8kshnU+iH4ojRh1hemma5Q5BR9OoXVK4P2CiqY= Subject key identifier: C9:18:E3:BE:5B:AE:FB:DA:72:96:DC:31:1E:4B:93:91:3E:DF:7B:A1 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584EBF6B71441E8E705936E07B80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/956c867f-2ffb-3f6b-aa14-17ca9e90a641.roa Signing time: Thu 06 Aug 2026 14:24:23 +0000 ROA not before: Thu 06 Aug 2026 14:24:23 +0000 ROA not after: Wed 04 Nov 2026 15:24:23 +0000 asID: 396190 IP address blocks: 23.19.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bf:6b:71:44:1e:8e:70:59:36:e0:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Aug 6 14:24:23 2026 GMT Not After : Nov 4 15:24:23 2026 GMT Subject: CN=59fb5336-6996-4719-8ee7-45fceabe0d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:18:95:bf:d7:47:b6:97:5e:2a:90:80:d8:5f: 22:c6:98:7f:cb:23:da:bf:89:a3:9f:60:c5:0d:cd: 80:d6:5d:45:f7:14:b9:3e:b7:03:fb:08:6d:2e:80: 3a:d1:f0:53:24:23:17:fc:7c:d2:ce:cb:d7:11:42: 20:56:96:05:f8:fa:18:3b:ad:ab:b0:60:fd:c9:17: cb:c3:86:fc:f1:12:ca:cc:19:c4:9d:85:18:ea:40: c7:a4:58:e8:1a:49:e4:b8:15:59:8c:f0:c0:e7:8b: e8:90:46:50:7f:a5:06:10:45:56:f7:da:d3:bf:27: da:bf:e4:cf:dd:8a:8b:9e:7c:fb:a5:4d:24:d3:c6: b6:65:fa:22:ce:bd:16:ef:79:cb:e2:af:b7:c4:e3: 2f:88:90:56:ed:27:c3:6c:c8:7c:d9:71:f0:dd:b0: 90:79:59:84:2c:53:d1:39:08:81:73:4e:ad:0e:27: 04:dd:92:d7:32:c5:c7:43:cd:ea:40:cf:26:8e:30: 43:34:61:4b:87:a5:a9:4d:60:53:a7:4a:74:1e:5c: 77:b1:60:62:92:ed:e6:3c:80:6e:d9:44:87:1b:81: 4f:c1:6d:72:6f:86:db:25:f9:74:fc:c2:0d:7d:c0: ef:a8:cf:61:8c:46:0e:b3:4b:f3:38:16:52:7b:26: e6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:18:E3:BE:5B:AE:FB:DA:72:96:DC:31:1E:4B:93:91:3E:DF:7B:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/956c867f-2ffb-3f6b-aa14-17ca9e90a641.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:d5:eb:fd:a3:03:31:4c:20:0e:b3:14:ee:14:5e:74:b3:e6: 73:76:8d:8e:ae:66:c3:43:79:75:09:45:1a:1f:9a:88:60:77: 82:ca:33:86:15:0a:b1:47:c9:fd:22:3d:41:c4:38:84:84:ee: e6:49:e0:8b:bd:93:41:94:da:30:c7:21:03:d5:ae:97:fd:fe: 7f:91:a8:6f:f2:f4:7f:f7:eb:a4:a6:e3:99:9a:24:ae:98:ec: 90:76:f4:df:ec:53:b8:f1:87:2b:95:29:4b:d3:03:24:72:b1: f3:08:3c:bf:6d:df:1b:80:d0:f6:db:1b:f6:da:32:b1:9e:c5: 50:22:67:f5:42:a9:e5:ae:8b:e4:32:1b:db:1b:21:35:e8:20: 99:ca:6e:18:7f:be:72:82:35:46:28:e6:27:cc:34:5a:98:21: d6:56:33:d5:d6:54:2a:88:84:38:f6:39:c0:20:23:f7:11:1a: ae:45:a9:49:03:65:2f:86:d3:74:3d:3d:ad:e6:91:f4:27:9d: 83:27:8e:16:86:4f:48:ac:5e:b5:c8:90:90:e5:ff:48:57:9b: 3e:ef:d0:ec:ff:a1:92:c7:ac:1a:a4:9d:70:bd:ed:f1:ac:0a: d8:57:26:11:a9:29:aa:e1:86:ae:e6:21:94:b9:bd:04:fe:4b: da:8a:fb:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6/a3FEHo5wWTbge4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDgwNjE0MjQyM1oXDTI2MTEwNDE1MjQyM1owLzEtMCsGA1UEAxMk NTlmYjUzMzYtNjk5Ni00NzE5LThlZTctNDVmY2VhYmUwZDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRiVv9dHtpdeKpCA2F8ixph/yyPav4mjn2DF Dc2A1l1F9xS5PrcD+whtLoA60fBTJCMX/HzSzsvXEUIgVpYF+PoYO62rsGD9yRfL w4b88RLKzBnEnYUY6kDHpFjoGknkuBVZjPDA54vokEZQf6UGEEVW99rTvyfav+TP 3YqLnnz7pU0k08a2Zfoizr0W73nL4q+3xOMviJBW7SfDbMh82XHw3bCQeVmELFPR OQiBc06tDicE3ZLXMsXHQ83qQM8mjjBDNGFLh6WpTWBTp0p0Hlx3sWBiku3mPIBu 2USHG4FPwW1yb4bbJfl0/MINfcDvqM9hjEYOs0vzOBZSeybm7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkY475brvvacpbcMR5Lk5E+33uhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvOTU2Yzg2N2YtMmZmYi0z ZjZiLWFhMTQtMTdjYTllOTBhNjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFxNoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbV6/2jAzFMIA6zFO4UXnSz5nN2jY6uZsNDeXUJRRofmohgd4LKM4YV CrFHyf0iPUHEOISE7uZJ4Iu9k0GU2jDHIQPVrpf9/n+RqG/y9H/366Sm45maJK6Y 7JB29N/sU7jxhyuVKUvTAyRysfMIPL9t3xuA0PbbG/baMrGexVAiZ/VCqeWui+Qy G9sbITXoIJnKbhh/vnKCNUYo5ifMNFqYIdZWM9XWVCqIhDj2OcAgI/cRGq5FqUkD ZS+G03Q9Pa3mkfQnnYMnjhaGT0isXrXIkJDl/0hXmz7v0Oz/oZLHrBqknXC97fGs CthXJhGpKarhhq7mIZS5vQT+S9qK+3I= -----END CERTIFICATE-----Generated at Thu Aug 27 18:18:33 2026 by rpki-client