$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/cece05e6-a1b3-3762-b049-db6405fab519.roa File: cece05e6-a1b3-3762-b049-db6405fab519.roa (raw, json) Hash identifier: TBYtIF/Z4mgl9/71APsTzIfuUxavqiKblzAhKruMBxU= Subject key identifier: E8:F3:64:74:EE:3D:E8:36:DA:3C:40:A3:51:19:0E:EC:2F:32:0A:AE Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F6292B591249C0DCB663F9B60 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/cece05e6-a1b3-3762-b049-db6405fab519.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396190 IP address blocks: 23.82.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:b5:91:24:9c:0d:cb:66:3f:9b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=7ef4a253-69b5-4e4b-bb7a-c51d4985cd7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d0:10:78:ad:b1:d3:0b:75:a7:bd:60:be:0b: 0d:f5:5e:6c:90:19:31:5c:0b:e5:29:51:57:df:e5: dc:72:6c:38:15:31:e6:8b:67:b2:2d:ce:0a:e0:5d: 1d:8f:13:85:e2:f5:3a:d5:07:5d:76:c9:82:36:a5: 18:b0:9f:d0:c4:2e:c3:b6:47:7f:24:53:35:bc:b3: c9:ca:ba:a2:05:49:f1:eb:f1:3d:ad:af:1e:bd:f5: fb:98:fd:e1:70:ae:d0:e9:f4:21:ac:e7:c6:96:42: 0f:23:90:ad:2c:97:a0:44:39:1b:f3:91:31:c3:32: f5:8d:aa:56:9f:84:8e:9d:b5:cd:8c:42:37:53:ec: 12:8c:36:e5:d0:6f:3b:cb:f4:5c:5c:55:fe:25:3e: a1:06:a4:5e:c0:92:cc:e3:55:4b:c5:21:24:93:3a: f8:68:20:e4:fb:f3:e8:ac:5a:00:b4:e6:e4:03:2f: ca:b2:01:21:cf:6f:a9:a9:f0:e1:53:e6:b9:0a:2a: 83:be:73:89:c2:90:54:86:c3:ff:46:7b:92:20:39: b2:04:ef:fb:3e:d1:be:01:f3:5b:60:66:a0:53:77: 02:7b:f3:8a:38:59:49:9e:a7:a3:83:f5:9d:41:e0: a8:83:c3:69:3f:77:c9:d6:9e:e4:66:4c:3e:c9:64: 2c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F3:64:74:EE:3D:E8:36:DA:3C:40:A3:51:19:0E:EC:2F:32:0A:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/cece05e6-a1b3-3762-b049-db6405fab519.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.82.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:f7:a4:33:41:12:d4:99:60:b6:8f:13:5b:23:f5:0a:04:8a: 0b:32:17:bf:0c:11:47:fe:4c:32:bf:dd:74:0b:27:76:79:eb: 95:5d:1a:92:b8:75:75:eb:17:a9:ec:50:52:d2:83:ee:67:08: 06:0d:90:4a:f4:f0:09:d0:71:6b:eb:1f:e3:da:bc:b5:78:c5: 76:ae:da:51:3b:9d:02:f5:78:24:21:6f:4c:07:9e:1b:1b:68: 80:a9:0e:44:b3:02:75:71:f0:3a:49:15:9c:d0:d5:f2:00:dc: 69:82:e2:d7:30:d4:88:cb:e9:49:f3:f0:d8:8e:73:6e:ed:19: 77:01:e3:47:17:a9:19:84:c5:42:5b:f6:f7:74:9b:ba:ee:d4: ea:63:5e:72:1b:0d:7b:1f:2a:8d:bd:1a:f4:33:8f:92:e4:28: c2:08:be:b4:ef:74:4e:1a:95:b1:16:37:ec:a0:e1:df:08:d8: 2b:54:9b:7f:ef:0c:cc:03:e4:a3:8c:20:8c:44:d2:22:54:ac: 12:69:4a:d3:9b:ad:c0:63:82:dc:64:ef:47:67:7c:71:f4:8f: d9:1a:f6:80:07:6a:05:43:00:63:36:99:72:78:7d:64:3f:b8: 2c:ab:d0:97:93:26:ea:d4:71:e8:24:69:0b:7f:15:1a:cc:bb: 36:f4:f5:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikrWRJJwNy2Y/m2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk N2VmNGEyNTMtNjliNS00ZTRiLWJiN2EtYzUxZDQ5ODVjZDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNAQeK2x0wt1p71gvgsN9V5skBkxXAvlKVFX 3+Xccmw4FTHmi2eyLc4K4F0djxOF4vU61QdddsmCNqUYsJ/QxC7Dtkd/JFM1vLPJ yrqiBUnx6/E9ra8evfX7mP3hcK7Q6fQhrOfGlkIPI5CtLJegRDkb85ExwzL1japW n4SOnbXNjEI3U+wSjDbl0G87y/RcXFX+JT6hBqRewJLM41VLxSEkkzr4aCDk+/Po rFoAtObkAy/KsgEhz2+pqfDhU+a5CiqDvnOJwpBUhsP/RnuSIDmyBO/7PtG+AfNb YGagU3cCe/OKOFlJnqejg/WdQeCog8NpP3fJ1p7kZkw+yWQswQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjzZHTuPeg22jxAo1EZDuwvMgquMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvY2VjZTA1ZTYtYTFiMy0z NzYyLWIwNDktZGI2NDA1ZmFiNTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF1LgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACb3pDNBEtSZYLaPE1sj9QoEigsyF78MEUf+TDK/3XQLJ3Z565VdGpK4 dXXrF6nsUFLSg+5nCAYNkEr08AnQcWvrH+PavLV4xXau2lE7nQL1eCQhb0wHnhsb aICpDkSzAnVx8DpJFZzQ1fIA3GmC4tcw1IjL6Unz8NiOc27tGXcB40cXqRmExUJb 9vd0m7ru1OpjXnIbDXsfKo29GvQzj5LkKMIIvrTvdE4albEWN+yg4d8I2CtUm3/v DMwD5KOMIIxE0iJUrBJpStObrcBjgtxk70dnfHH0j9ka9oAHagVDAGM2mXJ4fWQ/ uCyr0JeTJurUcegkaQt/FRrMuzb09aY= -----END CERTIFICATE-----Generated at Wed Oct 14 05:05:07 2026 by rpki-client