$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/980a16b1-7521-3b19-9838-27c21280ee09.roa File: 980a16b1-7521-3b19-9838-27c21280ee09.roa (raw, json) Hash identifier: CvSyesjeoapWEOEIAPaELvqi/Gq4ALaB/Rb6w1yLg1A= Subject key identifier: AB:0F:2A:6F:E0:C1:0A:9A:96:B4:D5:C2:80:C9:78:76:FE:84:3B:4D Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584D571FB72FAAC866E63CA4E300 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/980a16b1-7521-3b19-9838-27c21280ee09.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 136988 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b7:2f:aa:c8:66:e6:3c:a4:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=9120a39c-8609-4bdc-8b3e-c44cfc27c495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:32:51:98:1b:d3:88:a6:c4:22:45:6c:dd:7d: 0a:2d:14:ab:a4:32:39:7e:0d:63:8c:99:a4:c3:0e: c6:56:8f:7e:7b:03:46:d1:0e:d2:73:70:cd:72:25: 22:f6:5d:5d:1b:86:a5:9f:34:db:6e:63:c5:a7:63: b8:17:37:36:aa:dc:1f:e3:3d:ed:30:c6:62:9c:16: bd:34:81:b3:9c:be:a1:61:cd:0b:4e:6f:17:5c:30: 7f:b8:a4:be:4a:9e:81:f0:96:0c:b6:9d:28:ed:56: c5:ff:ea:60:ae:f8:a9:3b:59:7b:29:97:a4:2a:3d: 97:d6:16:d2:4e:4d:9a:58:3d:95:69:69:d4:23:1f: a6:6b:eb:0d:54:24:9c:06:54:02:31:e9:fb:47:41: 46:a3:53:d1:b3:41:f4:91:84:87:31:a5:e7:34:c8: d8:8e:42:09:31:d2:48:35:59:06:35:46:8c:36:91: c8:63:45:36:e4:05:06:d0:59:52:38:c7:48:c9:31: c0:fd:85:32:60:57:2e:52:f4:a7:51:74:b3:d4:76: be:77:d0:c9:cd:88:2d:60:e5:0c:8f:11:9d:72:12: 22:e2:00:14:ba:b7:9f:c4:3b:48:98:6d:2c:21:31: 05:5e:65:ec:62:77:c9:5b:72:52:aa:96:9e:42:20: 66:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:0F:2A:6F:E0:C1:0A:9A:96:B4:D5:C2:80:C9:78:76:FE:84:3B:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/980a16b1-7521-3b19-9838-27c21280ee09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:e9:b1:75:a5:26:3f:c0:18:2d:22:4f:d0:f4:5a:ad:dd:7a: 47:cc:15:90:b2:13:5e:0b:96:dd:57:62:4c:4b:57:40:9d:31: e0:af:d7:67:c6:02:65:7e:ab:2a:b7:7b:ab:13:1c:65:49:d2: 69:20:05:e3:fd:cc:1e:b7:d3:c7:58:6b:fd:67:c0:4f:b1:3a: 94:86:51:b5:34:24:09:8a:5f:1e:5c:89:5e:34:80:39:46:0a: 02:9b:69:6a:c1:a5:92:4b:0c:58:ff:a8:d2:c4:84:88:84:2a: f4:fb:f5:c1:a7:f7:e8:7d:c0:32:aa:29:62:8b:60:97:95:15: eb:02:c6:4d:3d:39:b8:6c:14:b3:93:1e:09:e0:53:f5:62:70: d7:b0:a9:7a:4b:25:45:07:a2:6b:6c:b9:b0:70:1b:32:c8:6f: be:09:d6:55:d0:f6:8a:58:cc:7c:63:ac:76:bf:d4:e2:d0:04: c9:b3:6b:e9:da:bb:5a:6f:0f:d8:be:14:fd:96:35:3b:67:c7: 4a:69:7d:b8:f6:8f:12:97:9e:94:68:a2:3a:73:5c:29:d3:14: f7:c1:a2:83:36:41:ef:c4:a3:b7:50:06:80:57:e7:d6:b3:63: d6:41:2e:6e:c6:ae:44:17:e1:97:73:f0:21:3f:9b:bc:b9:77: a1:1c:d5:56 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE1XH7cvqshm5jyk4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk OTEyMGEzOWMtODYwOS00YmRjLThiM2UtYzQ0Y2ZjMjdjNDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjJRmBvTiKbEIkVs3X0KLRSrpDI5fg1jjJmk ww7GVo9+ewNG0Q7Sc3DNciUi9l1dG4alnzTbbmPFp2O4Fzc2qtwf4z3tMMZinBa9 NIGznL6hYc0LTm8XXDB/uKS+Sp6B8JYMtp0o7VbF/+pgrvipO1l7KZekKj2X1hbS Tk2aWD2VaWnUIx+ma+sNVCScBlQCMen7R0FGo1PRs0H0kYSHMaXnNMjYjkIJMdJI NVkGNUaMNpHIY0U25AUG0FlSOMdIyTHA/YUyYFcuUvSnUXSz1Ha+d9DJzYgtYOUM jxGdchIi4gAUurefxDtImG0sITEFXmXsYnfJW3JSqpaeQiBm5wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFKsPKm/gwQqalrTVwoDJeHb+hDtNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvOTgwYTE2YjEtNzUyMS0z YjE5LTk4MzgtMjdjMjEyODBlZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZumxdaUmP8AYLSJP0PRard16R8wVkLIT XguW3VdiTEtXQJ0x4K/XZ8YCZX6rKrd7qxMcZUnSaSAF4/3MHrfTx1hr/WfAT7E6 lIZRtTQkCYpfHlyJXjSAOUYKAptpasGlkksMWP+o0sSEiIQq9Pv1waf36H3AMqop Yotgl5UV6wLGTT05uGwUs5MeCeBT9WJw17CpekslRQeia2y5sHAbMshvvgnWVdD2 iljMfGOsdr/U4tAEybNr6dq7Wm8P2L4U/ZY1O2fHSml9uPaPEpeelGiiOnNcKdMU 98GigzZB78Sjt1AGgFfn1rNj1kEubsauRBfhl3PwIT+bvLl3oRzVVg== -----END CERTIFICATE-----Generated at Mon Apr 13 15:33:50 2026 by rpki-client