$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d7fa1618-3b8b-300b-b6b6-f46b616c77d2.roa File: d7fa1618-3b8b-300b-b6b6-f46b616c77d2.roa (raw, json) Hash identifier: 0vZB38MCIJKPMWpXfJmlBc1qDpu5c87GerEv2bcXsMw= Subject key identifier: 8E:AA:EA:52:35:FA:1A:1D:83:AC:35:CE:06:17:E6:22:E8:A4:0C:AE Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F7BB3012B24DC34AAEE619AA0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d7fa1618-3b8b-300b-b6b6-f46b616c77d2.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 136988 IP address blocks: 23.19.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:01:2b:24:dc:34:aa:ee:61:9a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=4d70a065-0f19-41cf-8fdc-43fb1418f233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c7:44:b4:bf:9a:fa:c2:84:d5:a7:43:4b:ba: e2:e8:b9:8a:c0:7f:42:36:95:08:81:ac:99:72:51: 2d:43:3d:9e:f5:cc:17:15:76:90:d5:60:77:45:a1: 84:97:6e:6c:d8:d3:c3:01:3a:c4:7f:f4:9e:09:9e: 54:8b:07:ea:2c:63:17:1c:f8:df:76:e1:0d:4e:ca: 7a:c7:06:d1:33:ad:a4:8e:1c:e8:e7:9d:c1:4f:ec: 4a:21:97:96:c2:30:aa:4f:c1:ac:e1:e7:10:24:cb: 93:9e:64:2c:e0:14:e3:e9:ba:80:bf:1b:e8:3c:e4: 9d:7c:7b:3a:b9:7d:b7:95:21:ff:a3:14:1e:90:94: b2:04:93:a0:3e:bd:1a:64:89:ac:08:32:0b:98:33: 97:52:f8:fa:11:50:b0:69:f5:ae:a1:f2:ec:55:75: 3d:3f:89:7a:97:66:7a:1b:ce:9b:0f:c8:85:bc:93: 06:b4:28:15:98:76:52:83:17:e5:0b:6c:9c:38:6d: 49:48:0b:37:11:93:57:be:3b:73:1c:45:d5:47:22: 0b:d9:fb:4e:8b:49:5a:2f:b1:bc:7f:29:bb:dd:02: 02:47:cc:3d:29:ae:7f:0f:7b:11:e2:c5:b8:c1:ab: 79:4d:eb:23:05:e0:33:10:7a:a4:82:9a:de:35:fa: e4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:AA:EA:52:35:FA:1A:1D:83:AC:35:CE:06:17:E6:22:E8:A4:0C:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d7fa1618-3b8b-300b-b6b6-f46b616c77d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:ed:de:43:63:3b:57:d0:37:f1:76:5e:7f:45:03:84:b0:15: f7:cf:8f:88:52:b4:de:f2:d0:97:e3:07:cf:5e:0f:42:fe:de: 83:16:22:68:0e:89:be:0c:e7:0f:8e:65:39:c0:86:60:21:a2: 7d:60:4d:80:b3:84:2a:bd:b9:a9:ce:60:3e:89:cc:37:93:83: 95:ba:af:5b:db:2d:67:77:93:7a:2b:0e:8d:ae:02:53:4a:ac: 9b:74:c0:ba:62:59:00:2a:3e:84:63:d0:51:19:a2:bb:a4:68: 10:56:79:e9:f6:93:3b:86:31:16:7a:4c:8c:50:77:e8:44:51: 99:57:69:fd:4e:c0:09:93:cf:1a:19:e1:3e:b7:62:8b:33:bb: 84:c2:dc:5d:bf:5b:aa:93:39:c8:de:cf:1c:cd:97:e3:a5:c0: 16:04:1e:b7:78:cf:bc:a0:ca:c8:46:5d:f6:d0:f4:7a:a1:bd: 22:ac:32:3e:d1:34:ea:71:b1:ec:c0:90:87:63:16:e2:2e:11: 16:53:c8:09:37:55:07:0d:58:12:66:94:64:fd:7f:1d:ba:bb: 73:b0:6f:2d:be:0c:ae:4e:85:eb:3a:c6:74:80:86:b7:49:ca: ce:2c:a8:60:6a:bd:b9:71:3f:9d:72:b6:ef:d4:c8:1f:dd:07: a3:13:be:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97swErJNw0qu5hmqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk NGQ3MGEwNjUtMGYxOS00MWNmLThmZGMtNDNmYjE0MThmMjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsdEtL+a+sKE1adDS7ri6LmKwH9CNpUIgayZ clEtQz2e9cwXFXaQ1WB3RaGEl25s2NPDATrEf/SeCZ5UiwfqLGMXHPjfduENTsp6 xwbRM62kjhzo553BT+xKIZeWwjCqT8Gs4ecQJMuTnmQs4BTj6bqAvxvoPOSdfHs6 uX23lSH/oxQekJSyBJOgPr0aZImsCDILmDOXUvj6EVCwafWuofLsVXU9P4l6l2Z6 G86bD8iFvJMGtCgVmHZSgxflC2ycOG1JSAs3EZNXvjtzHEXVRyIL2ftOi0laL7G8 fym73QICR8w9Ka5/D3sR4sW4wat5TesjBeAzEHqkgpreNfrkeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6q6lI1+hodg6w1zgYX5iLopAyuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZDdmYTE2MTgtM2I4Yi0z MDBiLWI2YjYtZjQ2YjYxNmM3N2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrt3kNjO1fQN/F2Xn9FA4SwFffPj4hStN7y0JfjB89eD0L+3oMWImgO ib4M5w+OZTnAhmAhon1gTYCzhCq9uanOYD6JzDeTg5W6r1vbLWd3k3orDo2uAlNK rJt0wLpiWQAqPoRj0FEZorukaBBWeen2kzuGMRZ6TIxQd+hEUZlXaf1OwAmTzxoZ 4T63Yoszu4TC3F2/W6qTOcjezxzNl+OlwBYEHrd4z7ygyshGXfbQ9HqhvSKsMj7R NOpxsezAkIdjFuIuERZTyAk3VQcNWBJmlGT9fx26u3Owby2+DK5Ohes6xnSAhrdJ ys4sqGBqvblxP51ytu/UyB/dB6MTvnE= -----END CERTIFICATE-----Generated at Wed Oct 14 10:10:16 2026 by rpki-client