$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/beaa5cfd-2ca5-306e-9d94-088d7c9f721d.roa File: beaa5cfd-2ca5-306e-9d94-088d7c9f721d.roa (raw, json) Hash identifier: Ukf2GyT1ACa+6FBQ1iBWzN2JjKiZOVDyX/3k8vub8e0= Subject key identifier: CE:F6:F7:C8:D7:CC:BD:08:AA:42:90:13:B9:D9:B4:33:8E:ED:90:C2 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584E37647BCF0DC8B1DE0641C180 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/beaa5cfd-2ca5-306e-9d94-088d7c9f721d.roa Signing time: Thu 18 Jun 2026 21:00:12 +0000 ROA not before: Thu 18 Jun 2026 21:00:12 +0000 ROA not after: Wed 16 Sep 2026 21:00:12 +0000 asID: 396362 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:37:64:7b:cf:0d:c8:b1:de:06:41:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Jun 18 21:00:12 2026 GMT Not After : Sep 16 21:00:12 2026 GMT Subject: CN=7fd6ffd4-ab7e-41ab-ba99-509d97377693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:57:c1:44:7b:07:ee:ad:65:ee:22:ee:86:3f: 10:3a:7c:56:3b:f6:fa:03:61:55:4e:5b:b4:d6:05: fb:78:3c:67:e4:59:33:0f:90:9e:13:cc:46:ba:2f: 97:1c:d8:51:70:5b:7b:49:d8:fa:1b:8c:dc:93:b6: c3:20:92:94:32:1a:04:7b:e1:4c:3f:3f:47:1b:02: 8d:53:cf:82:c9:71:fa:9f:85:2d:b2:d1:8e:1b:d8: c6:c8:b0:ce:f2:f5:fc:30:2a:18:2c:18:08:1c:fc: 23:1b:2c:71:89:d5:7f:86:a3:ca:4f:b3:5c:82:e6: 5b:cd:5b:cd:f1:cf:6d:95:12:15:f5:ac:c4:56:28: 77:37:af:a2:2e:35:28:09:17:c3:66:e4:c6:27:d6: f2:d7:4f:f3:a3:10:79:a1:04:cb:c6:09:a3:8d:37: d1:d4:4b:3d:a2:9c:fa:64:3b:45:0e:94:6d:ad:9a: 86:b7:39:d4:e9:c8:ff:7b:e3:3e:09:eb:1a:66:aa: a6:83:cb:cf:d8:e6:3b:7b:ab:6b:a5:20:a3:d6:1e: 49:bb:88:19:dc:08:0c:a8:96:d6:3c:99:66:58:2a: 17:2f:06:0a:0a:16:26:33:1c:13:0e:d8:6a:0b:1a: 69:bd:0d:47:9b:2e:79:56:e3:7c:02:51:42:6c:a1: 9a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F6:F7:C8:D7:CC:BD:08:AA:42:90:13:B9:D9:B4:33:8E:ED:90:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/beaa5cfd-2ca5-306e-9d94-088d7c9f721d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:bb:4e:47:ae:a8:2d:23:34:cb:4e:1f:d4:af:db:74:f1:fd: ba:1a:1b:75:5a:0d:88:89:71:e8:b9:2d:55:cd:74:02:27:53: 35:06:e0:79:bc:73:e2:25:54:19:63:52:89:29:30:de:39:d7: 96:e9:b4:6a:d1:ae:4a:35:38:b4:d7:89:0b:95:a7:8c:b2:8e: b5:af:70:dd:bb:6d:f5:95:89:04:04:0b:9f:02:d9:26:a4:57: 8e:7b:cc:43:fb:a3:ca:9d:8d:ed:0b:f4:94:41:02:5e:df:e5: ce:60:92:1b:ec:60:e9:62:47:d7:f4:5f:09:10:c4:45:3a:72: 09:aa:68:80:e9:fc:28:6b:f9:fa:28:3f:cb:5e:c2:ac:4e:f5: 8f:19:4b:73:a2:a2:3a:d2:93:e0:8e:6e:b7:3f:81:65:5b:bd: 57:4c:68:c9:06:f7:3c:53:2d:51:55:ee:7e:3e:83:32:08:d4: 27:a6:2b:30:d5:7f:4d:81:e8:4b:3e:b9:af:3a:7c:fe:ae:4c: bc:b9:d0:d6:b6:56:23:0f:61:02:84:4c:2f:65:a6:7b:75:d4: 3e:9e:3b:3c:78:21:48:88:69:ff:35:02:e0:a5:21:90:46:34: f4:5e:63:77:1e:22:be:02:04:18:8e:de:04:57:10:d9:c9:82: 25:c4:0a:fe -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE43ZHvPDcix3gZBwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk N2ZkNmZmZDQtYWI3ZS00MWFiLWJhOTktNTA5ZDk3Mzc3NjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlfBRHsH7q1l7iLuhj8QOnxWO/b6A2FVTlu0 1gX7eDxn5FkzD5CeE8xGui+XHNhRcFt7Sdj6G4zck7bDIJKUMhoEe+FMPz9HGwKN U8+CyXH6n4UtstGOG9jGyLDO8vX8MCoYLBgIHPwjGyxxidV/hqPKT7NcguZbzVvN 8c9tlRIV9azEVih3N6+iLjUoCRfDZuTGJ9by10/zoxB5oQTLxgmjjTfR1Es9opz6 ZDtFDpRtrZqGtznU6cj/e+M+CesaZqqmg8vP2OY7e6trpSCj1h5Ju4gZ3AgMqJbW PJlmWCoXLwYKChYmMxwTDthqCxppvQ1Hmy55VuN8AlFCbKGaEQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFM7298jXzL0IqkKQE7nZtDOO7ZDCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYmVhYTVjZmQtMmNhNS0z MDZlLTlkOTQtMDg4ZDdjOWY3MjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAS7tOR66oLSM0y04f1K/bdPH9uhobdVoN iIlx6LktVc10AidTNQbgebxz4iVUGWNSiSkw3jnXlum0atGuSjU4tNeJC5WnjLKO ta9w3btt9ZWJBAQLnwLZJqRXjnvMQ/ujyp2N7Qv0lEECXt/lzmCSG+xg6WJH1/Rf CRDERTpyCapogOn8KGv5+ig/y17CrE71jxlLc6KiOtKT4I5utz+BZVu9V0xoyQb3 PFMtUVXufj6DMgjUJ6YrMNV/TYHoSz65rzp8/q5MvLnQ1rZWIw9hAoRML2Wme3XU Pp47PHghSIhp/zUC4KUhkEY09F5jdx4ivgIEGI7eBFcQ2cmCJcQK/g== -----END CERTIFICATE-----Generated at Mon Jul 13 14:53:15 2026 by rpki-client