$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bb02bbe3-126a-326c-b493-d6ffc832128e.roa File: bb02bbe3-126a-326c-b493-d6ffc832128e.roa (raw, json) Hash identifier: xyie7P6MccmgfE9c3LRK4q6uG+UXys9TbsAafheoses= Subject key identifier: 6F:4F:12:09:74:6E:B9:28:4D:4F:0C:0F:02:EE:1F:44:93:F1:66:8C Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584D571FB6FC1EC321F0CEAD7DF0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bb02bbe3-126a-326c-b493-d6ffc832128e.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 134351 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b6:fc:1e:c3:21:f0:ce:ad:7d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=2dcde7cb-c8c2-4f9b-b9f6-dc2238c93f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:aa:fb:24:89:af:cb:3b:ff:e8:60:58:81:84: 61:ac:c8:dc:01:0b:7d:5f:e2:2e:15:3f:a6:2b:0a: 98:15:f9:de:f0:7d:33:5f:b5:cf:d2:12:21:ff:bb: 13:26:ed:9c:04:c6:2b:e0:2b:f9:79:b3:74:3f:29: 24:6f:4f:d2:0d:15:a4:a8:7a:16:1b:3c:fa:7d:40: 81:4b:2a:0e:4a:2d:f8:9a:0f:29:c8:59:4f:cf:c5: ce:00:7c:05:7a:45:71:c7:56:0e:88:a0:90:3e:94: a2:71:78:04:27:43:9c:9b:d4:cd:e8:aa:ab:3a:a9: 71:64:f7:dd:90:d0:ed:f9:58:b7:a2:f0:29:8f:a8: 3a:57:31:67:63:ce:8d:9f:91:f1:0a:e1:c8:f9:1d: 21:54:b5:12:28:f2:b7:48:62:d6:22:11:d5:50:71: b7:62:ed:40:fb:b4:c2:99:ad:84:57:18:4b:69:8c: 73:3d:1b:a7:3c:18:69:23:3a:b0:21:69:62:f6:e8: 18:75:4c:83:d5:1e:7a:86:ad:56:6a:6f:08:1c:41: d7:e9:8a:7a:b8:b7:ad:d7:0a:d2:53:47:b6:cc:98: 3e:c2:cb:38:18:8a:ff:de:58:83:1c:68:79:32:f9: 49:ef:34:02:55:0a:2d:d6:f4:d1:ad:de:e9:ae:cb: 13:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:4F:12:09:74:6E:B9:28:4D:4F:0C:0F:02:EE:1F:44:93:F1:66:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bb02bbe3-126a-326c-b493-d6ffc832128e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:06:2c:0e:a0:54:27:4a:0a:1a:92:97:dd:5b:57:e4:59:ab: d2:75:a5:56:da:58:78:c4:50:b7:92:1b:f6:5a:c7:7a:86:39: 10:9a:fd:58:23:f3:15:ec:25:5e:9c:4c:2e:c1:1a:69:49:85: ff:11:5d:4c:ed:f9:cc:49:d6:36:22:31:e3:09:29:64:a5:2a: 4e:f9:8f:aa:43:3c:2f:db:3d:3c:f2:2f:03:67:9b:f4:1f:9e: d1:e9:c0:78:db:13:46:ce:83:05:ac:6b:4e:85:38:90:ee:b4: d7:fb:82:7a:b4:c5:c0:21:4f:ef:0b:19:8a:b4:b8:25:50:95: 5a:da:34:57:3a:c8:88:74:7a:91:91:8b:b4:dd:99:e7:ec:b2: 73:4e:bf:ee:ac:b9:51:e4:0d:3d:50:4e:13:60:76:56:9e:a4: b2:12:c9:bd:f2:da:16:8b:73:e2:26:7a:10:f6:72:a0:33:ac: 95:4c:5e:88:79:c8:d5:ae:ca:6e:19:49:7d:c3:df:b6:ae:00: 7d:dc:d1:0b:ce:71:be:c6:76:6f:9c:91:71:18:42:eb:07:d5: 3c:16:83:5e:6f:66:ae:ce:e6:4b:1b:53:52:84:33:b1:92:3d: bb:0d:de:16:04:78:04:2d:8f:10:18:1e:04:76:3f:a9:75:ad: cd:b3:57:d7 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE1XH7b8HsMh8M6tffAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk MmRjZGU3Y2ItYzhjMi00ZjliLWI5ZjYtZGMyMjM4YzkzZjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKr7JImvyzv/6GBYgYRhrMjcAQt9X+IuFT+m KwqYFfne8H0zX7XP0hIh/7sTJu2cBMYr4Cv5ebN0Pykkb0/SDRWkqHoWGzz6fUCB SyoOSi34mg8pyFlPz8XOAHwFekVxx1YOiKCQPpSicXgEJ0Ocm9TN6KqrOqlxZPfd kNDt+Vi3ovApj6g6VzFnY86Nn5HxCuHI+R0hVLUSKPK3SGLWIhHVUHG3Yu1A+7TC ma2EVxhLaYxzPRunPBhpIzqwIWli9ugYdUyD1R56hq1Wam8IHEHX6Yp6uLet1wrS U0e2zJg+wss4GIr/3liDHGh5MvlJ7zQCVQot1vTRrd7prssTRQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFG9PEgl0brkoTU8MDwLuH0ST8WaMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYmIwMmJiZTMtMTI2YS0z MjZjLWI0OTMtZDZmZmM4MzIxMjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAogYsDqBUJ0oKGpKX3VtX5Fmr0nWlVtpY eMRQt5Ib9lrHeoY5EJr9WCPzFewlXpxMLsEaaUmF/xFdTO35zEnWNiIx4wkpZKUq TvmPqkM8L9s9PPIvA2eb9B+e0enAeNsTRs6DBaxrToU4kO601/uCerTFwCFP7wsZ irS4JVCVWto0VzrIiHR6kZGLtN2Z5+yyc06/7qy5UeQNPVBOE2B2Vp6kshLJvfLa Fotz4iZ6EPZyoDOslUxeiHnI1a7KbhlJfcPftq4AfdzRC85xvsZ2b5yRcRhC6wfV PBaDXm9mrs7mSxtTUoQzsZI9uw3eFgR4BC2PEBgeBHY/qXWtzbNX1w== -----END CERTIFICATE-----Generated at Mon Apr 13 15:32:32 2026 by rpki-client