$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e09c5497-2279-333f-a80e-11090886d149.roa File: e09c5497-2279-333f-a80e-11090886d149.roa (raw, json) Hash identifier: xV7yLaA0Xf8MWTiFjacYUUY+JNpP4WdqyyAM5COGpJo= Subject key identifier: D6:4A:D4:86:2B:BB:E1:AC:0A:24:17:D9:A0:A5:8A:1D:E6:88:49:B9 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F7BB30288CBB20887BF5A9400 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e09c5497-2279-333f-a80e-11090886d149.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 28753 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:02:88:cb:b2:08:87:bf:5a:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=77760ec6-ddcc-4c71-af60-27320ebea757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:53:a7:bc:03:35:14:ee:64:d1:bc:0c:fb:f2: f4:9c:f2:e3:fc:d4:aa:6b:f2:27:fe:9e:0a:83:97: 23:d6:ec:fe:85:cc:7c:32:08:13:f0:78:a9:68:66: aa:32:08:5c:46:79:f7:76:4a:63:a2:92:4c:5a:9b: 1c:b5:f5:95:0c:22:0e:93:13:9f:57:45:b9:0a:f9: ce:55:67:21:7b:d9:08:4b:d8:bd:3d:14:89:0e:f2: 86:63:7b:4f:c4:be:f6:1f:5c:8c:5b:30:04:7f:f6: 23:54:fb:83:31:68:2f:83:2d:8d:4c:3c:d9:c8:63: 78:11:c4:a0:50:7d:e4:0d:fa:ac:4f:16:01:2b:ca: ac:05:85:7c:a5:00:2b:56:53:f6:24:ec:2e:52:9b: bf:50:8b:f2:c4:b3:7e:c2:6f:1f:c1:1d:87:19:d6: de:2f:9a:b5:cc:b6:65:df:22:1c:5d:f0:ea:19:8e: 74:c9:e6:ab:3b:56:b3:c6:0c:86:c4:b4:1a:c1:b6: 14:a2:e8:df:77:05:77:00:a3:c4:6c:50:f0:73:3f: 4b:31:ef:d8:36:ae:6d:53:9b:24:07:95:db:c5:cf: 59:71:2b:78:aa:e3:80:62:5c:fd:79:28:16:dd:d4: 0c:67:77:c5:2b:c5:f6:91:83:4c:d6:91:c5:5b:c9: 38:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4A:D4:86:2B:BB:E1:AC:0A:24:17:D9:A0:A5:8A:1D:E6:88:49:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e09c5497-2279-333f-a80e-11090886d149.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:e6:38:68:55:09:51:f9:d5:95:31:37:74:af:5d:3a:eb:e8: 75:e1:8b:93:ac:89:a0:bc:96:8e:f4:ff:e8:39:aa:92:70:12: b5:63:6a:3c:45:bb:fb:86:28:fb:73:04:3c:20:2e:51:2e:db: b1:59:7a:3f:f0:fb:ac:e7:e7:ce:26:7e:df:5f:01:db:4e:a7: ac:f6:78:39:32:f2:2b:b1:52:b0:68:46:5d:82:ff:c9:37:8d: 4f:39:41:11:8b:4a:26:58:dd:df:a2:d3:4c:51:9b:b2:2f:66: 88:5c:b5:61:d3:28:d9:9f:bb:e1:33:14:0c:d6:25:be:a5:e0: 99:95:1b:af:d4:1a:e7:4b:96:fe:06:5f:3d:3b:dc:83:5a:4b: 5c:48:56:1d:1b:96:c6:c5:a4:03:22:08:dc:03:4e:65:45:d8: 47:d3:67:0a:33:1f:38:fc:66:44:30:ea:c9:cb:c9:cd:96:9d: a2:54:32:d0:4d:8f:b3:8f:f2:a7:42:39:59:03:60:ac:17:d9: 37:6a:68:34:17:32:5a:44:fa:9f:8c:16:32:ca:e4:12:d0:e0: 2d:16:79:3a:86:19:7e:f4:48:62:63:f5:86:2d:7b:ee:b1:9c: 21:07:8f:f7:a3:9a:f0:2c:94:d3:e4:0c:4d:03:82:bd:c7:bb: 92:58:dd:46 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE97swKIy7IIh79alAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk Nzc3NjBlYzYtZGRjYy00YzcxLWFmNjAtMjczMjBlYmVhNzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1OnvAM1FO5k0bwM+/L0nPLj/NSqa/In/p4K g5cj1uz+hcx8MggT8HipaGaqMghcRnn3dkpjopJMWpsctfWVDCIOkxOfV0W5CvnO VWche9kIS9i9PRSJDvKGY3tPxL72H1yMWzAEf/YjVPuDMWgvgy2NTDzZyGN4EcSg UH3kDfqsTxYBK8qsBYV8pQArVlP2JOwuUpu/UIvyxLN+wm8fwR2HGdbeL5q1zLZl 3yIcXfDqGY50yearO1azxgyGxLQawbYUoujfdwV3AKPEbFDwcz9LMe/YNq5tU5sk B5Xbxc9ZcSt4quOAYlz9eSgW3dQMZ3fFK8X2kYNM1pHFW8k47QIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFNZK1IYru+GsCiQX2aClih3miEm5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZTA5YzU0OTctMjI3OS0z MzNmLWE4MGUtMTEwOTA4ODZkMTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAdeY4aFUJUfnVlTE3dK9dOuvodeGLk6yJ oLyWjvT/6DmqknAStWNqPEW7+4Yo+3MEPCAuUS7bsVl6P/D7rOfnziZ+318B206n rPZ4OTLyK7FSsGhGXYL/yTeNTzlBEYtKJljd36LTTFGbsi9miFy1YdMo2Z+74TMU DNYlvqXgmZUbr9Qa50uW/gZfPTvcg1pLXEhWHRuWxsWkAyII3ANOZUXYR9NnCjMf OPxmRDDqycvJzZadolQy0E2Ps4/yp0I5WQNgrBfZN2poNBcyWkT6n4wWMsrkEtDg LRZ5OoYZfvRIYmP1hi177rGcIQeP96Oa8CyU0+QMTQOCvce7kljdRg== -----END CERTIFICATE-----Generated at Wed Oct 14 04:06:29 2026 by rpki-client