$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c66c74f7-9afe-39d6-8933-71bfdddca698.roa File: c66c74f7-9afe-39d6-8933-71bfdddca698.roa (raw, json) Hash identifier: 8IxbB49GRvQV7Gij4W9rOTTIaxznuerp6TYxSR0lKx0= Subject key identifier: 5E:82:C6:7E:28:8D:2D:6B:91:7C:C2:D1:2D:15:39:FD:00:64:D2:64 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F6292B4C9191BBEFF9FE49ABC Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c66c74f7-9afe-39d6-8933-71bfdddca698.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396190 IP address blocks: 23.19.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:b4:c9:19:1b:be:ff:9f:e4:9a:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=f2d228f2-e616-452c-bdf3-d88556973885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5b:1c:38:d5:0c:60:5b:ed:c4:4f:70:5b:06: f7:82:a6:0f:fe:0b:31:40:5f:f8:64:24:89:b6:11: fe:fb:96:cc:3c:4a:a0:2f:66:18:f1:31:63:e1:2f: 1d:c7:54:77:fa:85:cb:46:77:79:98:e6:56:18:0e: f8:f0:0f:2e:78:b4:03:71:76:78:15:e5:68:e0:7b: 7b:22:35:6b:ce:a9:42:2e:01:05:62:19:fe:44:bf: 4f:83:f4:90:1d:c7:db:e2:4e:3d:80:d7:c5:03:06: dd:d2:54:ca:3c:00:cc:c2:43:4c:3a:81:12:d9:b2: 49:95:6e:fc:65:95:17:fd:04:17:16:b8:64:4a:30: 67:bb:ae:d7:fd:51:bf:e5:0f:d2:43:67:9e:15:81: f1:1a:48:46:11:b1:e1:9a:64:ab:82:20:a8:72:0b: 75:97:19:da:5b:b6:7d:f3:fd:75:7b:fc:5b:c9:a6: 78:e2:7f:5e:e9:b4:ab:cf:27:a0:f1:95:8f:31:75: 2c:b0:ca:8c:44:43:14:a4:80:d1:ab:a8:67:9d:a7: 51:88:e6:d5:4b:5e:65:9a:e4:21:87:80:36:ec:14: 76:d9:35:56:96:23:57:ad:83:5c:0e:b1:d6:5f:7a: 20:3b:f4:0a:4e:f8:8b:92:9e:0f:6f:e5:bc:f5:03: 5a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:82:C6:7E:28:8D:2D:6B:91:7C:C2:D1:2D:15:39:FD:00:64:D2:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c66c74f7-9afe-39d6-8933-71bfdddca698.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:8b:4f:47:64:55:e2:74:77:2e:15:a6:d6:bf:30:cf:fc:f4: 2f:7f:bf:18:1b:98:83:9f:7a:01:a0:fe:67:b2:27:95:43:97: 19:f9:cc:40:10:52:ed:18:ca:6b:20:8b:ce:d3:fe:e0:42:3a: 87:be:4f:94:ee:0f:7c:35:15:0d:2e:78:ba:51:b1:6a:fb:48: 28:44:ea:d8:36:91:98:26:3d:67:99:0e:72:7a:40:7c:1f:7b: d0:f8:bf:97:31:16:a7:45:50:56:e1:df:a0:05:e5:c1:3b:a1: b1:ab:21:af:88:9e:08:c4:fc:9b:ff:ce:b6:17:18:46:ae:b0: 7c:11:f0:de:5c:ab:39:b1:9b:a1:cf:8f:d4:63:0a:dc:e5:13: 13:b0:7c:86:0e:ee:f8:0d:26:fd:4e:e4:2c:4c:3e:41:56:7d: 81:78:d9:a6:7e:96:1e:89:92:c4:a2:42:56:fb:6e:ad:e9:aa: d0:d4:fa:84:d6:ac:d6:e8:d0:2f:87:59:50:55:9b:77:89:ed: c1:68:df:16:7e:c3:15:e7:26:de:e0:61:b2:b9:ae:28:6f:b4: a8:4a:46:8c:b5:dd:bd:c2:0f:dd:43:31:ed:8b:1c:74:21:52: 67:b7:12:ee:d4:29:1e:df:1a:6c:b6:2b:f7:b6:74:c4:2d:18: c3:84:5b:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikrTJGRu+/5/kmrwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZjJkMjI4ZjItZTYxNi00NTJjLWJkZjMtZDg4NTU2OTczODg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVscONUMYFvtxE9wWwb3gqYP/gsxQF/4ZCSJ thH++5bMPEqgL2YY8TFj4S8dx1R3+oXLRnd5mOZWGA748A8ueLQDcXZ4FeVo4Ht7 IjVrzqlCLgEFYhn+RL9Pg/SQHcfb4k49gNfFAwbd0lTKPADMwkNMOoES2bJJlW78 ZZUX/QQXFrhkSjBnu67X/VG/5Q/SQ2eeFYHxGkhGEbHhmmSrgiCocgt1lxnaW7Z9 8/11e/xbyaZ44n9e6bSrzyeg8ZWPMXUssMqMREMUpIDRq6hnnadRiObVS15lmuQh h4A27BR22TVWliNXrYNcDrHWX3ogO/QKTviLkp4Pb+W89QNaFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6Cxn4ojS1rkXzC0S0VOf0AZNJkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYzY2Yzc0ZjctOWFmZS0z OWQ2LTg5MzMtNzFiZmRkZGNhNjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFxPYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+LT0dkVeJ0dy4Vpta/MM/89C9/vxgbmIOfegGg/meyJ5VDlxn5zEAQ Uu0Yymsgi87T/uBCOoe+T5TuD3w1FQ0ueLpRsWr7SChE6tg2kZgmPWeZDnJ6QHwf e9D4v5cxFqdFUFbh36AF5cE7obGrIa+IngjE/Jv/zrYXGEausHwR8N5cqzmxm6HP j9RjCtzlExOwfIYO7vgNJv1O5CxMPkFWfYF42aZ+lh6JksSiQlb7bq3pqtDU+oTW rNbo0C+HWVBVm3eJ7cFo3xZ+wxXnJt7gYbK5rihvtKhKRoy13b3CD91DMe2LHHQh Ume3Eu7UKR7fGmy2K/e2dMQtGMOEW6I= -----END CERTIFICATE-----Generated at Thu Oct 15 05:11:59 2026 by rpki-client