$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d0e88601-8d43-3d7d-8163-2756a51593f0.roa File: d0e88601-8d43-3d7d-8163-2756a51593f0.roa (raw, json) Hash identifier: yYb83pE4dyHn91jTB7+wD4nYQ7v3WmtDT8FtbA+dn7Y= Subject key identifier: 0B:E5:4C:38:2D:A0:97:52:29:0D:EC:93:DD:F9:36:4E:FA:3A:BE:46 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584D571FB5473960515CA7133380 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d0e88601-8d43-3d7d-8163-2756a51593f0.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 396362 IP address blocks: 23.19.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b5:47:39:60:51:5c:a7:13:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=a1ba1c58-924f-44c0-aee8-ec61e35abd70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1a:c6:e1:66:a8:07:13:20:95:63:98:f5:09: 05:14:cc:fc:8e:4d:2f:e5:e6:26:9f:c3:d9:cd:89: e5:9b:0f:b9:69:f7:18:27:79:82:ec:ff:41:03:99: 52:9d:64:88:3f:6e:88:e0:e5:9d:42:b9:33:10:a1: ec:c5:7e:3e:65:bc:44:01:6d:dd:fc:67:8f:3f:63: dc:5c:d7:25:e3:a2:f5:cc:6f:b7:c7:0a:73:bb:38: c4:28:bb:81:e8:d5:8e:d3:13:76:97:c5:be:07:37: a5:e9:9a:d9:82:7e:6c:51:d0:05:c8:fb:92:c4:ce: d6:fb:3c:c4:9f:b7:40:45:e2:d6:a2:04:27:f9:2a: c3:a9:9f:10:26:25:cf:7b:bb:2d:b8:a8:02:9c:fc: 25:9e:7a:75:52:72:97:7d:60:2e:16:17:d5:c7:e8: d3:38:ff:c3:e8:f7:35:9b:f5:22:fa:8d:0a:09:17: 7a:77:74:8c:b9:6f:62:0e:be:d5:0a:9c:86:7f:1f: 75:82:7e:af:25:be:05:0b:20:f2:9b:8d:f5:d5:3e: e5:df:69:07:97:01:b0:3a:c4:7a:32:60:38:41:dd: 32:97:34:e3:aa:92:af:67:13:13:eb:0a:3e:24:a3: 8c:73:fe:fc:fe:ec:62:50:b7:e3:ab:7c:70:36:c2: 63:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E5:4C:38:2D:A0:97:52:29:0D:EC:93:DD:F9:36:4E:FA:3A:BE:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d0e88601-8d43-3d7d-8163-2756a51593f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:f7:11:ad:20:38:13:9c:49:45:b2:9f:d3:0e:0a:10:7f:3e: db:4a:d6:80:dd:fb:c0:8f:1f:7f:93:66:69:8a:bc:f8:0f:74: a9:99:70:ff:d9:fd:26:1d:72:3b:45:37:dd:69:e6:8f:56:ff: b5:72:92:08:15:2b:b4:f7:d8:24:56:db:07:78:ab:b3:de:6b: c9:0c:a7:76:d9:b0:35:6c:44:97:cb:1d:f4:5d:d8:71:4b:8e: e0:03:77:86:69:f8:fe:95:31:ae:6e:f3:fe:65:02:c6:a9:1a: 6e:43:2b:30:c3:e3:7b:5a:2d:6e:b3:a9:b4:8d:ce:fb:f3:41: e6:02:b4:70:6c:69:b3:a8:36:1f:a3:b2:e3:af:e4:56:da:5b: d2:ec:d8:88:68:13:77:db:7e:b9:48:a5:b3:e1:3e:b0:84:a8: 1a:d9:42:ea:46:0e:15:fc:8d:b2:64:d7:ab:0e:01:78:25:80: 95:08:24:5a:2f:27:53:65:ae:a0:9c:2b:06:89:a2:60:f8:40: 3e:40:f7:d6:91:a4:a5:24:a3:03:c0:09:6e:f0:f4:83:8e:59: 5a:95:f6:42:45:0f:c1:54:5d:c2:24:19:f3:7a:89:f4:a2:dd: 27:b4:a1:a7:e8:02:05:f6:b7:e6:ff:6d:de:78:71:1a:ae:9b: 27:ac:6f:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH7VHOWBRXKcTM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk YTFiYTFjNTgtOTI0Zi00NGMwLWFlZTgtZWM2MWUzNWFiZDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRrG4WaoBxMglWOY9QkFFMz8jk0v5eYmn8PZ zYnlmw+5afcYJ3mC7P9BA5lSnWSIP26I4OWdQrkzEKHsxX4+ZbxEAW3d/GePP2Pc XNcl46L1zG+3xwpzuzjEKLuB6NWO0xN2l8W+Bzel6ZrZgn5sUdAFyPuSxM7W+zzE n7dAReLWogQn+SrDqZ8QJiXPe7stuKgCnPwlnnp1UnKXfWAuFhfVx+jTOP/D6Pc1 m/Ui+o0KCRd6d3SMuW9iDr7VCpyGfx91gn6vJb4FCyDym4311T7l32kHlwGwOsR6 MmA4Qd0ylzTjqpKvZxMT6wo+JKOMc/78/uxiULfjq3xwNsJjcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvlTDgtoJdSKQ3sk935Nk76Or5GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZDBlODg2MDEtOGQ0My0z ZDdkLTgxNjMtMjc1NmE1MTU5M2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMT3Ea0gOBOcSUWyn9MOChB/PttK1oDd+8CPH3+TZmmKvPgPdKmZcP/Z /SYdcjtFN91p5o9W/7VykggVK7T32CRW2wd4q7Pea8kMp3bZsDVsRJfLHfRd2HFL juADd4Zp+P6VMa5u8/5lAsapGm5DKzDD43taLW6zqbSNzvvzQeYCtHBsabOoNh+j suOv5FbaW9Ls2IhoE3fbfrlIpbPhPrCEqBrZQupGDhX8jbJk16sOAXglgJUIJFov J1NlrqCcKwaJomD4QD5A99aRpKUkowPACW7w9IOOWVqV9kJFD8FUXcIkGfN6ifSi 3Se0oafoAgX2t+b/bd54cRqumyesb4A= -----END CERTIFICATE-----Generated at Mon Apr 13 15:33:27 2026 by rpki-client