$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bb02bbe3-126a-326c-b493-d6ffc832128e.roa File: bb02bbe3-126a-326c-b493-d6ffc832128e.roa (raw, json) Hash identifier: MjLSFIM4fOGBWupel3JAgNWCFvtPtF5HRmVwGIVyZs0= Subject key identifier: D0:56:C4:44:0F:23:1F:F9:49:51:B4:75:23:BC:A0:4F:FE:E3:E8:5C Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F7BB3027C5A5388AD3FC64200 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bb02bbe3-126a-326c-b493-d6ffc832128e.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 134351 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:02:7c:5a:53:88:ad:3f:c6:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=5d8dca67-5841-4ef1-bf80-aff975758fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c7:47:02:80:f8:5c:6f:2e:96:af:13:9b:17: 99:05:70:f7:48:94:aa:5f:fa:a2:24:b1:e1:07:b0: 50:16:3d:b7:1c:7c:1e:c6:ab:f9:6f:44:93:4f:33: 5d:8e:13:c0:a2:dd:14:ec:53:94:9f:9c:8e:44:d3: 15:5f:4c:4b:4a:ec:b3:34:f5:64:81:c6:cd:2a:d4: a1:b2:6a:6c:62:dc:3b:be:0a:c3:bb:f8:0c:ef:62: 11:25:e5:ed:7b:e3:7c:e8:7b:20:ff:aa:3b:b1:04: b0:a0:c2:8f:2c:ec:a8:55:c5:03:e9:61:b9:e9:b3: 25:df:1b:38:80:44:1a:81:55:59:1c:8e:cc:61:45: 6d:8c:d9:96:bf:94:d5:19:eb:30:dd:c1:60:12:29: b0:1c:8d:65:d7:8f:2d:23:b9:46:9b:3f:1e:49:86: 4c:57:6a:21:51:20:01:b5:d9:a3:b6:03:fd:b0:52: 09:72:71:1e:fc:78:55:55:69:91:7b:07:f7:23:54: b5:cd:1f:c4:c7:d4:c4:57:0b:e7:d6:6d:e7:11:62: 32:3c:47:dc:cb:38:35:66:6e:f8:18:68:3d:be:19: c4:26:a6:c7:c3:7d:5a:59:8f:84:4d:c8:0a:ac:9f: 04:98:1c:92:47:15:91:57:81:b8:6d:81:45:7b:e3: 16:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:56:C4:44:0F:23:1F:F9:49:51:B4:75:23:BC:A0:4F:FE:E3:E8:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bb02bbe3-126a-326c-b493-d6ffc832128e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:b8:10:90:48:c5:7a:94:2d:8e:b5:ea:f8:a9:2e:dd:18:e6: 89:af:12:a6:25:f9:eb:f3:2f:e4:95:3a:87:28:74:2e:b9:e1: fa:55:f7:f7:02:fa:4e:6a:6d:c9:4a:ab:f7:4c:56:34:5a:10: aa:f9:e2:a0:0b:de:73:4d:91:4a:bc:70:a2:78:05:9d:9b:8d: 1c:be:f6:04:29:4e:21:f1:d0:bb:f9:d8:ff:e5:2f:c3:08:97: 87:f5:8f:50:a1:51:d5:36:fd:0d:87:6f:99:a4:7b:47:8f:1c: 77:9b:c8:84:3a:28:2e:d6:c4:3c:62:d5:25:c2:9c:57:df:e8: 1d:cf:b3:4e:dd:e9:3b:21:bd:6c:1c:34:82:50:1c:70:90:1d: b0:04:f6:23:a6:2b:97:8c:f5:e6:c1:b3:9e:bf:62:7c:0f:8c: a1:5c:04:60:9a:80:d4:bd:5a:1a:46:ee:33:16:09:0c:e8:87: 0e:52:14:6b:3d:4d:3d:d2:6d:ee:fa:9a:24:df:7d:d0:56:bc: 93:0b:55:dd:db:3a:78:04:e6:3f:94:55:1e:6d:ce:74:25:00: e7:3a:22:15:c9:0a:af:dd:5e:92:8f:9a:9f:58:8d:5b:94:89: e8:af:6e:d1:57:4f:1c:a4:77:ac:0d:3e:32:95:96:32:fe:40: 11:6c:6a:41 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE97swJ8WlOIrT/GQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk NWQ4ZGNhNjctNTg0MS00ZWYxLWJmODAtYWZmOTc1NzU4ZmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8dHAoD4XG8ulq8TmxeZBXD3SJSqX/qiJLHh B7BQFj23HHwexqv5b0STTzNdjhPAot0U7FOUn5yORNMVX0xLSuyzNPVkgcbNKtSh smpsYtw7vgrDu/gM72IRJeXte+N86Hsg/6o7sQSwoMKPLOyoVcUD6WG56bMl3xs4 gEQagVVZHI7MYUVtjNmWv5TVGesw3cFgEimwHI1l148tI7lGmz8eSYZMV2ohUSAB tdmjtgP9sFIJcnEe/HhVVWmRewf3I1S1zR/Ex9TEVwvn1m3nEWIyPEfcyzg1Zm74 GGg9vhnEJqbHw31aWY+ETcgKrJ8EmBySRxWRV4G4bYFFe+MWXwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFNBWxEQPIx/5SVG0dSO8oE/+4+hcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYmIwMmJiZTMtMTI2YS0z MjZjLWI0OTMtZDZmZmM4MzIxMjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAeLgQkEjFepQtjrXq+Kku3Rjmia8SpiX5 6/Mv5JU6hyh0Lrnh+lX39wL6TmptyUqr90xWNFoQqvnioAvec02RSrxwongFnZuN HL72BClOIfHQu/nY/+UvwwiXh/WPUKFR1Tb9DYdvmaR7R48cd5vIhDooLtbEPGLV JcKcV9/oHc+zTt3pOyG9bBw0glAccJAdsAT2I6Yrl4z15sGznr9ifA+MoVwEYJqA 1L1aGkbuMxYJDOiHDlIUaz1NPdJt7vqaJN990Fa8kwtV3ds6eATmP5RVHm3OdCUA 5zoiFckKr91eko+an1iNW5SJ6K9u0VdPHKR3rA0+MpWWMv5AEWxqQQ== -----END CERTIFICATE-----Generated at Wed Oct 14 18:48:26 2026 by rpki-client