$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/beaa5cfd-2ca5-306e-9d94-088d7c9f721d.roa File: beaa5cfd-2ca5-306e-9d94-088d7c9f721d.roa (raw, json) Hash identifier: cGsj8bB0NpSAhaLLizfv66aLXIDo8dCEeNQ9gZYHf3w= Subject key identifier: BA:58:A4:19:F2:68:6D:F3:AF:CD:D0:52:EF:58:0F:B8:7B:A9:F6:2A Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F7BB30256F3C89B5DF65EC100 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/beaa5cfd-2ca5-306e-9d94-088d7c9f721d.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 396362 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:02:56:f3:c8:9b:5d:f6:5e:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=9654562e-d58e-49d3-a414-c7315d380949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f4:d4:9f:47:f1:21:30:01:5b:eb:ab:02:44: 45:ba:a1:2c:93:eb:a2:6c:5b:14:bc:61:32:2e:a4: 8b:87:72:3e:b0:20:7b:2c:4a:38:3a:6e:06:5c:8d: 7b:5e:ff:99:81:0e:44:eb:f0:cb:57:0b:66:ad:89: 83:74:e4:a1:1d:ab:bd:4c:d4:00:98:37:32:b3:bc: 2c:66:0c:cc:61:2f:6b:a0:05:ed:48:1a:fc:9e:82: b4:1d:6f:da:6d:ab:1d:95:a8:bb:6a:a6:6f:c8:16: 3a:d9:9f:25:7b:82:48:67:a3:28:c4:82:3b:a5:25: 08:57:5d:1c:db:6e:c8:d5:b9:e5:ee:e9:57:c4:d9: 69:52:4f:32:b3:04:1f:3c:9e:d3:49:fc:d1:38:42: 70:66:91:88:ce:d5:97:ba:5a:a0:de:6b:57:1f:12: df:c8:b4:16:07:e2:d7:23:5a:9c:33:6b:f1:85:9a: 6c:97:68:55:81:88:7a:6b:12:87:ea:0d:0f:73:36: 20:0f:e0:84:d6:2d:46:68:ad:c1:0e:79:e0:7a:b7: e0:fa:56:5e:20:9a:c6:ff:d0:5e:32:ef:8c:c8:8f: 42:4f:7a:19:1a:28:4b:34:ac:5f:6d:08:60:1e:1c: 8d:06:e8:2a:fa:a8:35:73:87:11:c9:17:36:6c:a8: 89:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:58:A4:19:F2:68:6D:F3:AF:CD:D0:52:EF:58:0F:B8:7B:A9:F6:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/beaa5cfd-2ca5-306e-9d94-088d7c9f721d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:49:63:4b:6a:fc:00:38:90:8b:fb:9c:b1:a6:20:34:2f:2c: 95:2b:af:7f:3c:65:8b:18:b2:43:43:e6:b5:4b:77:18:ec:00: a2:79:f2:7c:41:65:f6:cc:3a:32:36:80:35:9f:04:b4:3b:43: 6a:e9:42:62:e2:d6:a7:78:25:ff:89:f1:fb:e2:cd:40:b4:96: 62:19:5d:c5:1a:38:66:40:f4:ce:7d:b5:5b:c0:d1:82:7f:3c: 61:64:79:eb:1b:0d:85:b5:8b:4b:f9:ca:84:f6:b1:ed:f4:3d: d0:ba:5b:1f:c5:88:79:a2:b7:93:2b:37:85:59:1c:92:d6:3c: 63:f7:fb:dd:6d:5e:49:ac:04:45:ad:7c:c6:21:e3:0f:c5:76: 86:b5:4d:47:d2:cc:64:9c:11:62:fe:e2:c0:eb:52:22:de:6e: ea:69:ad:08:f2:f7:49:af:3e:d8:94:cc:64:b6:e3:5f:a4:d5: 76:d1:8e:11:d0:35:f7:d0:6a:a5:a7:67:9e:de:04:26:fa:ac: 7a:15:23:7b:eb:1c:f3:db:1e:b8:f9:d6:ed:8b:c2:d2:85:b7: 1e:f6:15:d5:05:16:5e:6c:d3:c0:46:4a:9d:9f:2d:48:7d:a6: 55:00:b5:d0:47:ce:c2:4f:f1:37:24:b1:63:e6:37:e1:53:7c: c6:9a:a4:4e -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE97swJW88ibXfZewQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk OTY1NDU2MmUtZDU4ZS00OWQzLWE0MTQtYzczMTVkMzgwOTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPTUn0fxITABW+urAkRFuqEsk+uibFsUvGEy LqSLh3I+sCB7LEo4Om4GXI17Xv+ZgQ5E6/DLVwtmrYmDdOShHau9TNQAmDcys7ws ZgzMYS9roAXtSBr8noK0HW/abasdlai7aqZvyBY62Z8le4JIZ6MoxII7pSUIV10c 227I1bnl7ulXxNlpUk8yswQfPJ7TSfzROEJwZpGIztWXulqg3mtXHxLfyLQWB+LX I1qcM2vxhZpsl2hVgYh6axKH6g0PczYgD+CE1i1GaK3BDnngerfg+lZeIJrG/9Be Mu+MyI9CT3oZGihLNKxfbQhgHhyNBugq+qg1c4cRyRc2bKiJLwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFLpYpBnyaG3zr83QUu9YD7h7qfYqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYmVhYTVjZmQtMmNhNS0z MDZlLTlkOTQtMDg4ZDdjOWY3MjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALUljS2r8ADiQi/ucsaYgNC8slSuvfzxl ixiyQ0PmtUt3GOwAonnyfEFl9sw6MjaANZ8EtDtDaulCYuLWp3gl/4nx++LNQLSW YhldxRo4ZkD0zn21W8DRgn88YWR56xsNhbWLS/nKhPax7fQ90LpbH8WIeaK3kys3 hVkcktY8Y/f73W1eSawERa18xiHjD8V2hrVNR9LMZJwRYv7iwOtSIt5u6mmtCPL3 Sa8+2JTMZLbjX6TVdtGOEdA199Bqpadnnt4EJvqsehUje+sc89seuPnW7YvC0oW3 HvYV1QUWXmzTwEZKnZ8tSH2mVQC10EfOwk/xNySxY+Y34VN8xpqkTg== -----END CERTIFICATE-----Generated at Wed Oct 14 01:57:29 2026 by rpki-client