$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/de537886-8589-3acb-bce9-e8d5e7561ee1.roa File: de537886-8589-3acb-bce9-e8d5e7561ee1.roa (raw, json) Hash identifier: ImQXE96QHNeO51GkOcNT/GXbfhrwj4nWF7hDok4dJ64= Subject key identifier: 1B:FE:45:01:A1:C8:3D:25:79:F5:38:8B:2E:A9:CF:6B:C1:1E:FE:8E Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F7BB3008D6317D340CC666D90 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/de537886-8589-3acb-bce9-e8d5e7561ee1.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 60781 IP address blocks: 23.19.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:00:8d:63:17:d3:40:cc:66:6d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=b536cb04-a51a-47d4-917b-8edca358ee70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:99:5e:90:de:43:c3:88:d3:db:02:48:00:2a: 26:3b:b1:ec:95:0d:63:1b:2d:5a:ef:07:66:ee:9b: df:09:6f:14:b2:bd:c2:fd:dc:e8:be:b2:51:48:d4: 71:ee:bf:7a:2e:22:80:05:ca:88:c9:8c:59:fe:b9: c1:7b:0c:ec:e4:1a:21:f0:2e:cf:e4:4a:54:18:14: b2:66:23:5a:b3:cf:f1:32:da:52:1b:fb:f4:34:17: c8:f9:f4:23:4b:eb:d1:e5:1b:6f:9e:69:f3:39:09: 45:ad:90:7e:af:88:89:40:35:40:34:c7:56:4c:ae: 44:4f:7c:33:b4:29:d0:f7:54:27:5b:6c:01:f9:cf: e0:8c:83:24:ba:3c:35:a7:e2:b1:ca:03:52:7d:a7: 9e:58:ce:ed:b5:79:4f:27:03:84:d1:d8:a2:1e:1e: 6e:a7:c6:2e:fd:a6:5f:70:9e:18:a1:13:b4:60:6d: e8:be:9e:50:37:d0:46:50:26:47:88:80:1b:8a:36: 70:a2:b0:fd:f5:58:f0:a6:22:b4:f8:c7:e4:67:37: 38:8a:5f:41:4a:ae:a8:5b:74:e4:85:6e:9e:da:5d: f4:b5:9c:93:7d:bb:1a:2a:0d:b2:cd:de:43:c7:57: 3e:59:ae:85:d3:a7:0f:7d:5e:b0:01:90:37:c1:9e: ec:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:FE:45:01:A1:C8:3D:25:79:F5:38:8B:2E:A9:CF:6B:C1:1E:FE:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/de537886-8589-3acb-bce9-e8d5e7561ee1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:82:df:4f:7f:09:d0:10:11:d6:ea:0d:a7:1c:47:1f:ad:c9: db:65:43:6a:b8:24:8d:49:52:cf:6a:a8:da:77:c8:55:2a:30: 8d:84:5a:4d:9c:1d:8c:9a:19:b4:2f:cc:95:01:62:1e:1e:a4: b5:08:fc:3e:d4:29:63:c1:ac:62:ec:83:06:38:69:a3:c0:79: de:28:e6:3a:7a:6b:6b:ef:50:7a:85:9d:0a:13:6f:b0:c1:c0: 36:c4:ec:1f:4b:a9:74:27:1b:d2:81:ef:75:b2:ef:59:e8:82: 6b:12:6d:40:43:d4:be:41:a7:af:71:51:af:3e:7e:ac:38:53: 51:03:c4:77:e5:0f:ae:9c:9c:d3:e3:8b:60:1e:7b:30:51:8e: d9:40:aa:5c:7d:8c:24:a9:8e:c2:ef:44:0d:8f:f0:93:20:6d: 87:f9:cb:eb:ab:68:f2:d0:7d:5c:92:4d:5a:42:de:b0:4b:b7: 99:79:83:92:90:c0:41:12:bf:7f:77:c5:39:8f:7b:af:5d:51: 4b:fb:c7:9e:1f:90:d4:25:e9:e0:24:02:e9:43:8c:fe:17:fb: 27:91:52:9a:64:5e:a7:18:94:de:5f:a1:cf:4a:c6:58:e0:1c: 63:83:df:df:7a:86:c1:98:7b:ce:55:74:87:60:b2:e3:17:f1: 86:5e:36:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97swCNYxfTQMxmbZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk YjUzNmNiMDQtYTUxYS00N2Q0LTkxN2ItOGVkY2EzNThlZTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJlekN5Dw4jT2wJIAComO7HslQ1jGy1a7wdm 7pvfCW8Usr3C/dzovrJRSNRx7r96LiKABcqIyYxZ/rnBewzs5Boh8C7P5EpUGBSy ZiNas8/xMtpSG/v0NBfI+fQjS+vR5RtvnmnzOQlFrZB+r4iJQDVANMdWTK5ET3wz tCnQ91QnW2wB+c/gjIMkujw1p+KxygNSfaeeWM7ttXlPJwOE0diiHh5up8Yu/aZf cJ4YoRO0YG3ovp5QN9BGUCZHiIAbijZworD99VjwpiK0+MfkZzc4il9BSq6oW3Tk hW6e2l30tZyTfbsaKg2yzd5Dx1c+Wa6F06cPfV6wAZA3wZ7s3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBv+RQGhyD0lefU4iy6pz2vBHv6OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZGU1Mzc4ODYtODU4OS0z YWNiLWJjZTktZThkNWU3NTYxZWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxPEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2C309/CdAQEdbqDaccRx+tydtlQ2q4JI1JUs9qqNp3yFUqMI2EWk2c HYyaGbQvzJUBYh4epLUI/D7UKWPBrGLsgwY4aaPAed4o5jp6a2vvUHqFnQoTb7DB wDbE7B9LqXQnG9KB73Wy71nogmsSbUBD1L5Bp69xUa8+fqw4U1EDxHflD66cnNPj i2AeezBRjtlAqlx9jCSpjsLvRA2P8JMgbYf5y+uraPLQfVySTVpC3rBLt5l5g5KQ wEESv393xTmPe69dUUv7x54fkNQl6eAkAulDjP4X+yeRUppkXqcYlN5foc9Kxljg HGOD3996hsGYe85VdIdgsuMX8YZeNvs= -----END CERTIFICATE-----Generated at Wed Oct 14 01:59:43 2026 by rpki-client