$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ea7ca2b1-e689-373f-a9ca-9e3008107917.roa File: ea7ca2b1-e689-373f-a9ca-9e3008107917.roa (raw, json) Hash identifier: asVca4i2KswWiNIBIj+9XP4HauUDkCrsy2bSr/2flv8= Subject key identifier: AC:10:37:A8:12:9A:D6:32:9B:58:CF:35:BF:54:90:FB:82:B4:E2:E0 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584D571FB7B35CE08F22F227D300 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ea7ca2b1-e689-373f-a9ca-9e3008107917.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 28753 IP address blocks: 23.19.197.0/24 maxlen: 24 2607:f5b5:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b7:b3:5c:e0:8f:22:f2:27:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=521671ab-6996-4b12-a5b0-52b6aac7dfea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:64:37:7b:87:ea:94:24:96:af:e2:e2:59:64: a8:07:b7:f8:cd:00:6d:01:14:97:21:e5:15:1e:31: d9:25:9a:61:7e:53:b9:e2:09:02:0b:0d:ad:bf:6c: 00:0d:84:56:18:b9:bc:07:c6:26:4b:9d:f2:1a:86: bf:4b:cf:9a:f2:37:30:26:a4:9a:16:35:53:96:1d: 3e:e0:b4:19:af:af:d9:d7:10:61:87:d9:40:f5:f9: ee:be:01:8f:1f:15:aa:15:9d:8a:9e:05:6b:98:68: 7c:fb:95:90:15:87:e1:06:4f:f6:ce:76:79:4b:c8: 47:29:8f:62:12:22:13:aa:61:75:b9:21:11:fa:33: 0d:cd:18:d8:b5:4d:17:02:25:15:0a:24:74:1b:bc: a6:a1:00:00:13:4b:6a:54:8f:57:e0:0f:df:5b:f5: 74:e8:6a:d6:70:2e:ea:a9:a6:53:85:48:c6:2a:e5: 5d:36:cd:f9:b8:ba:12:75:b4:94:fd:42:08:1f:d5: 13:5f:c9:cd:98:b7:86:d9:29:3a:13:ab:6f:ab:30: 23:b1:e4:87:01:0e:19:95:38:6a:b2:44:32:34:cc: be:9b:3c:aa:1d:b7:f8:05:c0:0f:b1:ae:e4:36:a4: 22:51:3c:60:bb:ba:a7:7d:7e:62:66:c6:0b:bf:63: b6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:10:37:A8:12:9A:D6:32:9B:58:CF:35:BF:54:90:FB:82:B4:E2:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ea7ca2b1-e689-373f-a9ca-9e3008107917.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.197.0/24 IPv6: 2607:f5b5:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:10:c8:fa:88:7e:2a:a6:64:4f:d9:9c:01:ec:52:11:6f:37: 86:b2:c3:3f:aa:33:13:b4:60:e0:00:d2:58:6e:93:cc:ab:bd: 4a:44:3c:77:50:9a:6c:9c:69:05:41:b8:0e:37:19:f9:06:03: a7:92:8f:1b:d8:1a:bf:7d:dc:d8:56:41:d1:cd:82:7f:31:90: fb:14:88:17:90:a6:f9:c3:e3:6e:52:63:ca:95:da:ef:8e:20: 02:df:01:5d:88:78:ee:56:5d:ae:74:cf:8a:ca:50:26:1a:5d: b5:90:d5:c1:07:bd:66:11:be:8f:d8:3f:95:b3:d2:3e:5d:be: fe:7f:b7:7c:e3:0e:fb:2e:75:d0:38:ef:dc:33:f8:35:79:90: 48:19:df:b1:56:ad:46:52:ca:4e:e5:26:f8:c3:0d:66:ef:ff: 9a:1a:1c:ba:10:52:7c:f5:5c:83:89:01:32:1c:50:3e:85:83: b3:b4:86:71:8f:9c:46:0d:84:e0:0a:b7:37:fd:73:b9:34:b0: d9:60:c8:fb:1c:93:5b:f9:44:08:dd:c4:e2:ee:45:16:e7:7b: cf:a2:2f:15:a3:06:49:f2:bf:1b:e9:b7:1c:65:ad:90:92:b5: 3d:32:cc:61:70:4c:e6:9e:5c:c7:ad:6e:bc:ef:ec:3d:1d:2f: af:36:c5:5d -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE1XH7ezXOCPIvIn0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk NTIxNjcxYWItNjk5Ni00YjEyLWE1YjAtNTJiNmFhYzdkZmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWQ3e4fqlCSWr+LiWWSoB7f4zQBtARSXIeUV HjHZJZphflO54gkCCw2tv2wADYRWGLm8B8YmS53yGoa/S8+a8jcwJqSaFjVTlh0+ 4LQZr6/Z1xBhh9lA9fnuvgGPHxWqFZ2KngVrmGh8+5WQFYfhBk/2znZ5S8hHKY9i EiITqmF1uSER+jMNzRjYtU0XAiUVCiR0G7ymoQAAE0tqVI9X4A/fW/V06GrWcC7q qaZThUjGKuVdNs35uLoSdbSU/UIIH9UTX8nNmLeG2Sk6E6tvqzAjseSHAQ4ZlThq skQyNMy+mzyqHbf4BcAPsa7kNqQiUTxgu7qnfX5iZsYLv2O2nwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFKwQN6gSmtYym1jPNb9UkPuCtOLgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZWE3Y2EyYjEtZTY4OS0z NzNmLWE5Y2EtOWUzMDA4MTA3OTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxPFMA8E AgACMAkDBwAmB/W1AAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAlRDI+oh+KqZkT9mcAexSEW83hrLDP6oz E7Rg4ADSWG6TzKu9SkQ8d1CabJxpBUG4DjcZ+QYDp5KPG9gav33c2FZB0c2CfzGQ +xSIF5Cm+cPjblJjypXa744gAt8BXYh47lZdrnTPispQJhpdtZDVwQe9ZhG+j9g/ lbPSPl2+/n+3fOMO+y510Djv3DP4NXmQSBnfsVatRlLKTuUm+MMNZu//mhocuhBS fPVcg4kBMhxQPoWDs7SGcY+cRg2E4Aq3N/1zuTSw2WDI+xyTW/lECN3E4u5FFud7 z6IvFaMGSfK/G+m3HGWtkJK1PTLMYXBM5p5cx61uvO/sPR0vrzbFXQ== -----END CERTIFICATE-----Generated at Mon Apr 13 15:32:12 2026 by rpki-client