$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/de537886-8589-3acb-bce9-e8d5e7561ee1.roa File: de537886-8589-3acb-bce9-e8d5e7561ee1.roa (raw, json) Hash identifier: 5+pPoZx9u2CdC1qNKd3HsU7sX8Zta4k7LNe9Hwe/N6c= Subject key identifier: F1:06:3B:D6:79:01:05:2B:F5:CA:68:FC:59:44:87:47:62:83:E0:92 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584D571FB4FFA4587E35014BC540 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/de537886-8589-3acb-bce9-e8d5e7561ee1.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 60781 IP address blocks: 23.19.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b4:ff:a4:58:7e:35:01:4b:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=d240ac09-94b8-4ab9-badd-da36a2c53657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:50:1a:7a:60:74:b5:20:b9:ba:ad:bb:25:46: 07:4d:58:24:b9:fa:42:2b:61:74:ae:77:79:73:14: eb:49:c8:18:d4:3c:26:24:11:90:6a:64:f2:58:2d: 0e:d9:35:79:f0:6d:1a:47:8f:c1:b6:f5:5e:02:66: f4:eb:fb:e1:2c:64:ca:09:3e:a3:bd:70:57:f8:f4: 1d:9d:ce:e4:8a:4a:6b:0c:a8:77:95:e0:dd:24:ab: e2:7f:00:71:0c:fc:2b:73:a5:0b:8d:ff:39:df:0e: a1:92:cc:dd:1a:6f:5c:b4:42:63:07:74:3f:d2:8a: 9b:2a:6f:bb:6e:53:fc:bf:a4:6e:79:e6:f5:bd:08: ee:49:0c:a7:b4:51:a8:cb:6f:bc:21:f3:92:b6:fe: f3:6e:84:fd:46:0a:0e:18:af:73:53:4d:84:a8:60: 14:21:bf:44:b9:c2:a3:1b:0b:b9:ef:1a:d8:59:41: 3e:67:b0:79:65:63:d0:83:ff:1c:3f:a3:7d:c6:82: a7:04:e8:52:ad:46:89:82:95:dd:7c:f4:3c:b7:f7: 88:66:94:8d:bb:56:43:fe:6d:58:68:08:d8:c3:09: c7:32:00:6c:16:04:f9:0d:a2:3e:ac:2c:55:d5:3d: 13:96:fa:64:23:f9:24:89:73:0e:f5:f2:70:8b:96: d9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:06:3B:D6:79:01:05:2B:F5:CA:68:FC:59:44:87:47:62:83:E0:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/de537886-8589-3acb-bce9-e8d5e7561ee1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:12:21:51:55:0c:9f:93:f4:75:f5:c2:41:41:d2:b0:3e:8a: 19:6f:b8:99:6d:99:b7:e4:92:e1:3d:63:e6:a5:2a:dd:09:e9: 47:5e:bd:41:95:b7:42:7e:d8:26:af:54:8b:e1:b3:1b:36:63: 34:69:ab:29:77:49:1c:9c:3e:19:0c:ca:31:be:65:2c:7f:c0: 92:14:3d:40:93:fc:60:a2:a1:96:93:78:28:d3:f9:33:aa:ec: 46:79:6a:c7:d5:67:04:b9:25:c2:73:44:16:02:85:79:3f:73: 59:9f:05:7e:ee:0a:ff:77:f6:55:4d:8c:90:47:73:cb:69:88: 3b:f7:bc:d1:eb:ba:af:12:78:f8:44:ba:fc:05:47:30:93:8b: 34:3f:f4:06:74:ac:70:15:ed:8f:69:42:c4:50:28:af:e5:c2: ad:34:73:4f:ff:7e:6c:44:eb:ff:78:57:19:f2:29:50:ca:6e: 14:24:b2:ed:4c:34:1f:55:01:26:be:79:0e:a1:11:c7:69:a0: 32:1a:84:2f:05:bc:42:c2:d7:8c:d9:ef:75:dd:77:d1:0d:f8: 5f:f9:55:76:3a:41:a1:1b:fc:fc:34:1b:44:34:4a:3e:5e:38: 7d:7c:ce:75:03:bc:3e:cb:58:41:fa:73:d9:c8:cc:43:a2:85: d0:9d:4d:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH7T/pFh+NQFLxUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk ZDI0MGFjMDktOTRiOC00YWI5LWJhZGQtZGEzNmEyYzUzNjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41AaemB0tSC5uq27JUYHTVgkufpCK2F0rnd5 cxTrScgY1DwmJBGQamTyWC0O2TV58G0aR4/BtvVeAmb06/vhLGTKCT6jvXBX+PQd nc7kikprDKh3leDdJKvifwBxDPwrc6ULjf853w6hkszdGm9ctEJjB3Q/0oqbKm+7 blP8v6Rueeb1vQjuSQyntFGoy2+8IfOStv7zboT9RgoOGK9zU02EqGAUIb9EucKj Gwu57xrYWUE+Z7B5ZWPQg/8cP6N9xoKnBOhSrUaJgpXdfPQ8t/eIZpSNu1ZD/m1Y aAjYwwnHMgBsFgT5DaI+rCxV1T0TlvpkI/kkiXMO9fJwi5bZ5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEGO9Z5AQUr9cpo/FlEh0dig+CSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZGU1Mzc4ODYtODU4OS0z YWNiLWJjZTktZThkNWU3NTYxZWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxPEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEISIVFVDJ+T9HX1wkFB0rA+ihlvuJltmbfkkuE9Y+alKt0J6UdevUGV t0J+2CavVIvhsxs2YzRpqyl3SRycPhkMyjG+ZSx/wJIUPUCT/GCioZaTeCjT+TOq 7EZ5asfVZwS5JcJzRBYChXk/c1mfBX7uCv939lVNjJBHc8tpiDv3vNHruq8SePhE uvwFRzCTizQ/9AZ0rHAV7Y9pQsRQKK/lwq00c0//fmxE6/94VxnyKVDKbhQksu1M NB9VASa+eQ6hEcdpoDIahC8FvELC14zZ73Xdd9EN+F/5VXY6QaEb/Pw0G0Q0Sj5e OH18znUDvD7LWEH6c9nIzEOihdCdTV8= -----END CERTIFICATE-----Generated at Mon Apr 13 15:32:34 2026 by rpki-client