$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/9e099189-ff60-3c4d-8f39-256374fc62e0.roa File: 9e099189-ff60-3c4d-8f39-256374fc62e0.roa (raw, json) Hash identifier: CF+LToZuRCamGdV72QJmp4bfgzaPcrbzexgNFNHgLiI= Subject key identifier: 17:B3:94:3F:34:DF:59:97:CA:E9:47:75:4C:E0:B3:74:25:83:79:AC Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F0FB979DDA21F6DB4B7802180 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/9e099189-ff60-3c4d-8f39-256374fc62e0.roa Signing time: Fri 04 Sep 2026 08:46:17 +0000 ROA not before: Fri 04 Sep 2026 08:46:17 +0000 ROA not after: Thu 03 Dec 2026 09:46:17 +0000 asID: 395954 IP address blocks: 23.19.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0f:b9:79:dd:a2:1f:6d:b4:b7:80:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Sep 4 08:46:17 2026 GMT Not After : Dec 3 09:46:17 2026 GMT Subject: CN=e172efc5-8ec5-472c-841f-2f69384cb441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:00:3e:5d:b5:bf:d2:e5:a3:a7:f2:cb:c1:70: 85:1d:86:21:35:67:ef:29:b9:f4:7b:02:3b:07:58: 9b:a3:63:47:86:12:37:a8:89:25:6b:6f:37:72:ae: 94:fa:a5:31:29:f3:b5:a6:94:38:75:7f:1a:51:e2: d7:48:c7:8f:c6:6a:fd:74:de:87:66:19:bf:47:02: 5f:56:f5:82:af:6e:b1:02:c5:e7:87:95:5c:fd:89: d1:75:ba:4d:f2:ec:69:2f:00:78:4a:ea:90:96:05: ef:f0:31:f7:a4:cd:ec:e6:f9:5d:aa:45:81:92:5d: ef:40:c4:90:08:52:8f:35:0d:7c:94:9a:86:2a:b8: 2a:77:78:12:d4:60:8e:e3:8e:33:c8:e4:c6:93:77: 1b:db:27:15:eb:15:5e:86:e2:ed:67:8c:60:75:55: 3c:57:95:15:26:73:dc:42:fd:7b:59:f5:01:c6:4e: b7:99:a6:16:51:29:de:90:f6:8c:d5:bc:77:5a:78: 5f:42:17:b5:68:e4:e2:c4:a0:be:58:21:4e:c4:40: 12:19:55:4a:23:4b:96:11:04:09:79:ab:5e:0e:58: d7:17:d9:b2:53:c4:02:af:bc:8c:d8:e7:0b:4e:63: 81:60:54:3e:74:f6:76:4c:68:40:68:d9:a6:ca:ed: 8a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B3:94:3F:34:DF:59:97:CA:E9:47:75:4C:E0:B3:74:25:83:79:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/9e099189-ff60-3c4d-8f39-256374fc62e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:45:8f:c0:83:20:61:0c:93:8b:41:40:50:35:fb:87:fd:1e: a3:44:88:fa:3c:30:7e:19:e0:4e:2a:2d:4d:fb:1d:26:ff:b3: 54:f3:bc:63:d7:27:dc:3a:90:ad:7c:3b:25:2f:66:a6:b7:43: 29:95:02:d1:c1:e2:42:5c:9b:7f:aa:59:9d:c2:37:85:ea:ae: 41:4d:f7:fd:0b:2b:87:93:e3:15:eb:17:35:eb:c9:cb:5c:aa: 14:75:9f:36:d7:2b:d1:39:76:f4:8a:3d:54:60:f2:8f:1e:9b: a3:61:80:52:f6:12:84:e7:dc:69:51:e6:f6:3c:f4:03:4f:81: 04:15:d7:bc:2e:bc:96:c2:77:21:57:d3:26:79:e7:98:09:31: 0f:07:1e:4c:7f:ad:cc:09:a1:df:4c:71:b1:a1:83:2c:a1:8e: 54:a5:d4:20:bf:ff:b2:3d:f4:c1:65:21:ac:cf:2a:83:c3:f5: 58:a6:11:43:d4:d1:04:be:75:f4:02:23:0d:bd:11:e3:6d:e4: a8:78:7c:0a:d5:05:ff:30:6c:13:66:5e:18:b0:24:06:32:07: ed:a4:f3:19:ae:3c:93:9e:0a:a2:44:cf:71:27:a4:5b:3a:a7: 35:7e:1f:b0:e7:03:ce:de:40:ad:7b:79:73:41:d8:d6:a3:a9: 1c:46:b0:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8PuXndoh9ttLeAIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDkwNDA4NDYxN1oXDTI2MTIwMzA5NDYxN1owLzEtMCsGA1UEAxMk ZTE3MmVmYzUtOGVjNS00NzJjLTg0MWYtMmY2OTM4NGNiNDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwA+XbW/0uWjp/LLwXCFHYYhNWfvKbn0ewI7 B1ibo2NHhhI3qIkla283cq6U+qUxKfO1ppQ4dX8aUeLXSMePxmr9dN6HZhm/RwJf VvWCr26xAsXnh5Vc/YnRdbpN8uxpLwB4SuqQlgXv8DH3pM3s5vldqkWBkl3vQMSQ CFKPNQ18lJqGKrgqd3gS1GCO444zyOTGk3cb2ycV6xVehuLtZ4xgdVU8V5UVJnPc Qv17WfUBxk63maYWUSnekPaM1bx3WnhfQhe1aOTixKC+WCFOxEASGVVKI0uWEQQJ eateDljXF9myU8QCr7yM2OcLTmOBYFQ+dPZ2TGhAaNmmyu2KjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBezlD8031mXyulHdUzgs3Qlg3msMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvOWUwOTkxODktZmY2MC0z YzRkLThmMzktMjU2Mzc0ZmM2MmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFxPsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtFj8CDIGEMk4tBQFA1+4f9HqNEiPo8MH4Z4E4qLU37HSb/s1TzvGPX J9w6kK18OyUvZqa3QymVAtHB4kJcm3+qWZ3CN4XqrkFN9/0LK4eT4xXrFzXryctc qhR1nzbXK9E5dvSKPVRg8o8em6NhgFL2EoTn3GlR5vY89ANPgQQV17wuvJbCdyFX 0yZ555gJMQ8HHkx/rcwJod9McbGhgyyhjlSl1CC//7I99MFlIazPKoPD9VimEUPU 0QS+dfQCIw29EeNt5Kh4fArVBf8wbBNmXhiwJAYyB+2k8xmuPJOeCqJEz3EnpFs6 pzV+H7DnA87eQK17eXNB2NajqRxGsFs= -----END CERTIFICATE-----Generated at Thu Sep 10 13:01:11 2026 by rpki-client