$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/956c867f-2ffb-3f6b-aa14-17ca9e90a641.roa File: 956c867f-2ffb-3f6b-aa14-17ca9e90a641.roa (raw, json) Hash identifier: yPnUuCL4TzzQ2AdkX2d/a/6GyGDucNbxBHFdIkNmNV4= Subject key identifier: 2C:80:FB:E4:7D:64:A6:74:8E:C8:32:83:A4:0B:18:1A:32:00:BB:09 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F6292B48815DF874A04A28380 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/956c867f-2ffb-3f6b-aa14-17ca9e90a641.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396190 IP address blocks: 23.19.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:b4:88:15:df:87:4a:04:a2:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=99c8f0d2-709b-462c-8545-1b091cf41f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:55:58:1a:f7:69:f9:8d:7e:8c:85:6f:39:03: 4c:6d:89:e4:6a:0d:6d:d2:bd:9b:40:9c:ac:39:37: a8:bd:cc:62:b4:e8:e8:fb:e2:ba:01:6b:2e:ea:42: ea:4a:5b:04:21:02:61:ea:1c:03:ac:b6:72:8b:2d: e7:ba:1d:7e:04:f6:82:53:67:ac:35:3b:b9:37:ea: 86:80:ee:cc:07:bd:c9:ea:4a:04:71:96:29:4a:9e: b3:ae:5e:4c:d3:b4:6d:52:f8:57:6c:2f:77:16:92: 25:2d:f5:e2:c3:73:c1:e9:f3:c8:5f:68:b6:e4:b2: 99:e4:4b:21:41:11:b3:e7:c2:32:3c:c8:bd:f6:41: 27:14:73:c7:4c:c7:e8:5e:47:21:7a:12:04:6f:4f: e2:f4:65:2f:f5:02:ae:16:07:d6:f8:ed:66:6b:3f: a1:e8:6a:c0:29:95:ac:df:2e:ac:38:3d:ad:7b:d9: dc:49:1a:0a:fd:fd:99:25:64:eb:a0:54:26:6d:a3: 98:e6:b3:e9:ee:32:e9:8e:20:00:b2:54:ce:7e:65: 61:4c:e7:27:db:a6:a3:74:d7:bb:6b:26:8f:87:3d: 30:4f:6e:ee:db:4e:c2:91:cc:df:12:b1:35:0f:da: d8:aa:c4:a6:3f:cb:16:57:9d:4f:a7:c0:71:c3:9e: 6f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:80:FB:E4:7D:64:A6:74:8E:C8:32:83:A4:0B:18:1A:32:00:BB:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/956c867f-2ffb-3f6b-aa14-17ca9e90a641.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:a8:e0:23:db:f8:e0:72:c9:14:c5:a9:0c:bd:8a:9e:db:28: 5b:16:d5:21:5e:6d:ab:c1:a9:d0:0c:b2:a1:11:6a:b9:ec:98: b0:43:54:a2:1d:7e:6f:66:75:4d:a8:4e:97:e0:5f:c7:17:9e: c6:03:08:87:df:9d:da:6d:99:65:86:ef:87:fc:ee:ab:5a:47: eb:d0:07:ea:76:e8:2f:8c:29:a3:d6:ab:30:47:4f:f4:af:80: a6:db:c6:cc:32:1d:0d:9f:24:f6:e3:c3:1b:2a:5e:4a:b3:e0: 61:6d:18:5b:d4:13:5b:21:e4:39:a1:65:03:bf:3e:49:be:9e: e6:c1:79:45:ff:69:ba:aa:4f:c9:6c:1e:ca:16:a7:68:06:a1: ab:6d:14:0b:99:bc:c3:41:f6:db:50:61:ba:2c:02:07:8b:2b: de:ed:26:83:1e:f4:3c:1b:8c:ab:65:de:6f:7e:b1:23:4d:d9: e1:65:8c:e1:e2:c9:a4:7b:2d:d0:91:57:60:54:ca:93:9a:1a: 5a:e2:f6:91:28:4a:7d:3c:6c:ed:c4:eb:d1:44:9c:bd:bd:8b: 44:a2:d5:05:6c:68:e2:3f:c3:c0:eb:f3:01:2f:bc:72:64:94: 8d:55:a2:eb:5b:dd:79:a3:45:83:1d:f5:06:98:9d:a9:6b:1a: 86:99:c3:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikrSIFd+HSgSig4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk OTljOGYwZDItNzA5Yi00NjJjLTg1NDUtMWIwOTFjZjQxZjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlVYGvdp+Y1+jIVvOQNMbYnkag1t0r2bQJys OTeovcxitOjo++K6AWsu6kLqSlsEIQJh6hwDrLZyiy3nuh1+BPaCU2esNTu5N+qG gO7MB73J6koEcZYpSp6zrl5M07RtUvhXbC93FpIlLfXiw3PB6fPIX2i25LKZ5Esh QRGz58IyPMi99kEnFHPHTMfoXkchehIEb0/i9GUv9QKuFgfW+O1maz+h6GrAKZWs 3y6sOD2te9ncSRoK/f2ZJWTroFQmbaOY5rPp7jLpjiAAslTOfmVhTOcn26ajdNe7 ayaPhz0wT27u207CkczfErE1D9rYqsSmP8sWV51Pp8Bxw55vnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyA++R9ZKZ0jsgyg6QLGBoyALsJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvOTU2Yzg2N2YtMmZmYi0z ZjZiLWFhMTQtMTdjYTllOTBhNjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFxNoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSo4CPb+OByyRTFqQy9ip7bKFsW1SFebavBqdAMsqERarnsmLBDVKId fm9mdU2oTpfgX8cXnsYDCIffndptmWWG74f87qtaR+vQB+p26C+MKaPWqzBHT/Sv gKbbxswyHQ2fJPbjwxsqXkqz4GFtGFvUE1sh5DmhZQO/Pkm+nubBeUX/abqqT8ls HsoWp2gGoattFAuZvMNB9ttQYbosAgeLK97tJoMe9DwbjKtl3m9+sSNN2eFljOHi yaR7LdCRV2BUypOaGlri9pEoSn08bO3E69FEnL29i0Si1QVsaOI/w8Dr8wEvvHJk lI1Voutb3XmjRYMd9QaYnalrGoaZw9E= -----END CERTIFICATE-----Generated at Wed Oct 14 10:08:47 2026 by rpki-client