$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d7fa1618-3b8b-300b-b6b6-f46b616c77d2.roa File: d7fa1618-3b8b-300b-b6b6-f46b616c77d2.roa (raw, json) Hash identifier: HXGJcLMHCtf1ajHZJmYkQPOsFFtVL6NrPkCj7dzl0tk= Subject key identifier: A9:97:E1:6B:C7:CB:AD:61:1D:A8:75:3C:1B:3F:90:A8:43:1F:91:B5 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584D571FB5A1BD2ACF6E08C185C0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d7fa1618-3b8b-300b-b6b6-f46b616c77d2.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 136988 IP address blocks: 23.19.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b5:a1:bd:2a:cf:6e:08:c1:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=8e737c71-fc0b-4c00-b2e7-9666ee765d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:9d:04:b0:4c:12:b2:06:78:5f:ec:44:1d:18: 34:91:a5:35:d9:c5:79:46:fc:a2:29:ef:cb:22:32: 9a:6a:cf:45:1a:36:83:30:65:5a:10:b3:4b:b2:34: d2:bd:7f:c6:eb:eb:fb:b6:07:8b:5f:38:05:5d:69: 99:71:64:86:09:fc:6d:4c:db:1c:40:21:31:8b:26: 30:09:e8:a9:4d:0f:d6:96:40:ea:8c:09:ee:d3:fd: 6c:32:43:20:a8:5d:52:ab:9a:57:1f:d0:71:fd:1b: 7a:89:58:4d:ee:ea:a5:de:73:e3:c7:78:ea:a1:cc: f3:e2:6e:d4:9b:8f:ba:be:a8:a5:7f:ab:93:4d:75: 26:ef:ef:91:35:78:0a:34:12:86:0e:11:4c:a7:2e: 97:b9:a0:f1:77:c4:ec:f4:61:e5:be:83:fe:22:5f: e9:10:53:67:8a:48:c2:5e:36:4b:34:a2:f5:e9:db: a1:cb:e8:7e:5d:bc:f2:98:37:9b:d5:54:b8:1c:16: 87:6d:f6:58:4c:0d:43:b8:ca:c9:21:23:b7:af:53: 71:36:51:7d:f6:27:be:0f:36:ce:65:33:b4:8e:dd: 20:22:8d:e2:c5:c9:e0:7f:81:e9:67:a8:23:7a:74: de:12:8b:14:b3:32:bd:82:be:2e:6e:5c:d1:0e:6a: f0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:97:E1:6B:C7:CB:AD:61:1D:A8:75:3C:1B:3F:90:A8:43:1F:91:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d7fa1618-3b8b-300b-b6b6-f46b616c77d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:1a:74:c7:6e:94:63:ac:70:e3:6b:5a:11:c0:d4:b8:f4:61: f4:43:b8:e3:17:6e:26:b4:07:bb:d7:ba:31:b3:89:11:82:f4: 6f:d6:3b:bf:5f:35:c9:4d:0d:ef:c5:70:bc:26:86:70:c3:b8: f0:d1:5b:1b:75:9f:2c:0c:c2:a4:5b:1d:db:8a:6a:9e:0a:9b: c9:3b:ca:21:fd:20:37:8a:1e:08:e6:b7:42:6c:2a:e2:0c:06: ce:de:20:36:d1:7b:4a:45:8a:41:e5:b7:00:b7:73:b5:5d:65: a8:d4:9b:c5:55:0d:a4:da:1c:c8:56:cc:c8:e5:79:c9:b7:b5: ec:61:ab:4f:33:fc:94:65:6b:51:4c:86:29:2e:58:cb:ab:b3: 24:73:1a:2b:5b:3b:21:6c:5b:6c:f9:5a:27:eb:2a:45:2b:5c: 23:d9:27:31:43:05:41:31:91:59:df:43:50:5d:cc:60:06:9a: 85:f8:1a:35:77:06:f7:97:18:0b:4c:07:80:19:55:d0:75:2c: b7:51:56:50:74:5c:17:5b:14:15:0c:85:06:0e:d3:24:d0:cc: 1c:c7:b2:4d:e3:99:62:3b:ea:7e:f0:73:b5:c9:ab:c1:03:ca: 23:aa:c6:25:40:de:a0:57:fb:9c:d2:ce:2d:04:17:58:c9:b5: 31:4f:e5:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH7WhvSrPbgjBhcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk OGU3MzdjNzEtZmMwYi00YzAwLWIyZTctOTY2NmVlNzY1ZDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA850EsEwSsgZ4X+xEHRg0kaU12cV5RvyiKe/L IjKaas9FGjaDMGVaELNLsjTSvX/G6+v7tgeLXzgFXWmZcWSGCfxtTNscQCExiyYw CeipTQ/WlkDqjAnu0/1sMkMgqF1Sq5pXH9Bx/Rt6iVhN7uql3nPjx3jqoczz4m7U m4+6vqilf6uTTXUm7++RNXgKNBKGDhFMpy6XuaDxd8Ts9GHlvoP+Il/pEFNnikjC XjZLNKL16duhy+h+XbzymDeb1VS4HBaHbfZYTA1DuMrJISO3r1NxNlF99ie+DzbO ZTO0jt0gIo3ixcngf4HpZ6gjenTeEosUszK9gr4ublzRDmrwRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmX4WvHy61hHah1PBs/kKhDH5G1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZDdmYTE2MTgtM2I4Yi0z MDBiLWI2YjYtZjQ2YjYxNmM3N2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8adMdulGOscONrWhHA1Lj0YfRDuOMXbia0B7vXujGziRGC9G/WO79f NclNDe/FcLwmhnDDuPDRWxt1nywMwqRbHduKap4Km8k7yiH9IDeKHgjmt0JsKuIM Bs7eIDbRe0pFikHltwC3c7VdZajUm8VVDaTaHMhWzMjlecm3texhq08z/JRla1FM hikuWMursyRzGitbOyFsW2z5WifrKkUrXCPZJzFDBUExkVnfQ1BdzGAGmoX4GjV3 BveXGAtMB4AZVdB1LLdRVlB0XBdbFBUMhQYO0yTQzBzHsk3jmWI76n7wc7XJq8ED yiOqxiVA3qBX+5zSzi0EF1jJtTFP5Qc= -----END CERTIFICATE-----Generated at Mon Apr 13 15:33:26 2026 by rpki-client