$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/beaa5cfd-2ca5-306e-9d94-088d7c9f721d.roa File: beaa5cfd-2ca5-306e-9d94-088d7c9f721d.roa (raw, json) Hash identifier: jbYwrb6/S+q8QDVQ/PCvvJxRBT2RAw5se55suukuJ2g= Subject key identifier: 1A:A7:43:CB:88:28:0B:6A:C1:77:FB:2B:4E:75:42:44:46:D0:23:DB Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584D571FB6D85D2F126FE00EC3C0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/beaa5cfd-2ca5-306e-9d94-088d7c9f721d.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 396362 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b6:d8:5d:2f:12:6f:e0:0e:c3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=3e33c962-cc37-4c7d-b17e-740de1128d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d9:ad:3e:fb:dd:9d:9d:ba:33:9c:47:f8:96: 83:2e:3d:76:17:ae:0c:4f:35:3a:22:b4:80:b2:9d: 62:71:b3:ec:89:ae:6f:6f:fa:ea:af:56:a5:2d:c4: de:9a:31:ff:24:5a:e1:bc:a9:33:6d:cb:b5:0c:3c: 2c:16:db:2c:e5:4c:61:55:86:fe:4e:c9:f2:bc:e9: 4d:9a:a1:ba:ef:8a:bb:cc:6a:55:24:0f:d6:56:c0: 26:28:48:09:78:6c:46:98:99:1f:6f:30:77:09:b0: 09:56:a7:fd:32:ae:f1:25:c8:ce:8f:28:5c:c6:c8: a9:7f:fa:2f:c2:0e:f4:45:fd:a2:26:e7:b7:0f:05: 08:be:81:3f:99:54:30:6d:bf:d6:b1:8e:d6:83:83: d5:ef:c6:d6:0e:61:07:5f:64:cc:17:c2:9f:e6:bf: a1:7c:9f:25:06:9c:fc:e2:05:3c:ce:91:aa:7e:93: dc:9e:2a:a8:09:a3:44:24:13:f7:e5:20:f4:b4:da: 4f:da:c5:8d:d7:93:f5:ec:b6:b4:9c:45:15:67:74: f5:99:f8:68:bf:c0:bf:0b:09:8f:72:1a:76:c1:68: 16:25:f6:30:93:bf:18:13:f8:ab:3b:d3:67:49:6a: 2e:8b:30:7b:4c:ca:45:f8:81:09:7c:c4:9f:d5:cc: 78:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A7:43:CB:88:28:0B:6A:C1:77:FB:2B:4E:75:42:44:46:D0:23:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/beaa5cfd-2ca5-306e-9d94-088d7c9f721d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:fc:01:40:8d:57:f7:76:13:98:5a:aa:16:7f:6c:a6:a5:0f: 2e:a7:84:58:d3:a6:34:23:27:84:1c:b0:b0:9c:be:e7:26:81: a9:c1:cd:f0:c5:96:6a:51:34:ba:b2:ce:67:4d:f5:ed:f1:9c: 65:fc:19:b3:2a:f6:fd:8b:0e:f7:67:96:20:7a:82:7c:67:e2: ca:14:69:8e:8c:85:f3:63:83:7c:af:1f:ce:db:5c:01:58:2a: 77:83:d0:73:43:d3:d1:f4:22:d5:42:fc:c8:82:73:7e:b4:7a: 4f:e7:db:4a:02:66:ce:14:17:b7:eb:f3:57:bf:24:ff:c1:d7: 36:aa:7c:18:4a:84:e3:d4:78:49:8d:13:0c:4f:33:e0:bd:dd: 52:f4:b5:76:79:df:ac:fc:76:46:40:42:88:68:0c:04:15:76: 6b:07:9d:f0:79:8b:b6:d4:3c:39:66:54:08:3e:bf:00:7f:ce: f8:9b:d3:6f:a9:85:6f:9e:ec:bf:9b:f3:bf:be:11:94:87:6d: 89:83:65:78:34:9f:b2:97:40:be:82:da:7c:58:e0:63:b9:89: 4a:46:0c:99:19:26:74:92:7a:57:75:70:a0:3f:af:a9:05:1b: 7a:c3:08:61:6d:93:4d:07:cb:a1:d1:60:f8:14:30:bf:48:1b: 5d:18:6d:f1 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE1XH7bYXS8Sb+AOw8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk M2UzM2M5NjItY2MzNy00YzdkLWIxN2UtNzQwZGUxMTI4ZDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdmtPvvdnZ26M5xH+JaDLj12F64MTzU6IrSA sp1icbPsia5vb/rqr1alLcTemjH/JFrhvKkzbcu1DDwsFtss5UxhVYb+TsnyvOlN mqG674q7zGpVJA/WVsAmKEgJeGxGmJkfbzB3CbAJVqf9Mq7xJcjOjyhcxsipf/ov wg70Rf2iJue3DwUIvoE/mVQwbb/WsY7Wg4PV78bWDmEHX2TMF8Kf5r+hfJ8lBpz8 4gU8zpGqfpPcniqoCaNEJBP35SD0tNpP2sWN15P17La0nEUVZ3T1mfhov8C/CwmP chp2wWgWJfYwk78YE/irO9NnSWouizB7TMpF+IEJfMSf1cx4XQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFBqnQ8uIKAtqwXf7K051QkRG0CPbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYmVhYTVjZmQtMmNhNS0z MDZlLTlkOTQtMDg4ZDdjOWY3MjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPPwBQI1X93YTmFqqFn9spqUPLqeEWNOm NCMnhBywsJy+5yaBqcHN8MWWalE0urLOZ0317fGcZfwZsyr2/YsO92eWIHqCfGfi yhRpjoyF82ODfK8fzttcAVgqd4PQc0PT0fQi1UL8yIJzfrR6T+fbSgJmzhQXt+vz V78k/8HXNqp8GEqE49R4SY0TDE8z4L3dUvS1dnnfrPx2RkBCiGgMBBV2awed8HmL ttQ8OWZUCD6/AH/O+JvTb6mFb57sv5vzv74RlIdtiYNleDSfspdAvoLafFjgY7mJ SkYMmRkmdJJ6V3VwoD+vqQUbesMIYW2TTQfLodFg+BQwv0gbXRht8Q== -----END CERTIFICATE-----Generated at Mon Apr 13 15:32:12 2026 by rpki-client