$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/f94022c5-3728-3612-b7d8-3d6ab5bdb646.roa File: f94022c5-3728-3612-b7d8-3d6ab5bdb646.roa (raw, json) Hash identifier: 2KgnU+gTNeV1QBTrHiqAizfsMuYWroQFc3nm6Kst14Y= Subject key identifier: 83:88:5F:ED:45:A4:59:02:89:04:8B:6A:2B:3E:B9:B4:E4:4D:62:D5 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F6292B498588CD53AEB7F3400 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/f94022c5-3728-3612-b7d8-3d6ab5bdb646.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396190 IP address blocks: 23.19.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:b4:98:58:8c:d5:3a:eb:7f:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=7bf0161d-7d3d-4bea-85e0-f288c44d02b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f9:2e:03:a1:c8:19:b3:0d:b4:3e:e9:3f:4a: 81:4e:2b:f2:bf:fb:d2:cb:4d:a3:23:3c:ae:93:a0: 09:73:c5:89:9e:7b:61:e1:94:66:28:38:7e:ea:d0: c8:e9:74:77:f5:bb:8d:fd:ac:7f:0c:23:c9:39:d1: 29:25:e2:3a:42:ba:89:6a:10:35:81:a8:5a:1b:b6: 83:31:26:d7:4a:13:b3:87:2d:45:05:fd:48:4f:fb: 2f:ee:49:63:32:ca:f2:9f:5b:25:5d:6a:e8:1d:91: 17:02:ac:08:9d:08:ca:e4:0f:06:09:52:53:f7:9b: 2f:2a:28:3a:31:e6:03:04:bd:19:20:45:09:32:1e: 59:05:03:84:6d:e1:bb:c0:ef:64:2c:12:2d:93:40: 02:e6:48:c4:1d:3e:38:1a:d9:3b:02:d0:aa:84:6b: 94:b6:bb:e3:50:e5:c1:c4:8c:65:dc:b3:8e:c4:24: 60:25:fd:3c:31:3e:a6:a5:ab:4f:80:3b:e4:f8:59: 80:a4:4a:24:47:fe:f8:38:8e:a8:db:c4:0c:ba:87: 1b:fa:ff:89:8e:c8:b4:ea:45:96:83:73:cf:26:60: 86:5b:85:17:80:bb:54:33:2f:a7:50:d7:bb:ca:2b: 03:92:49:24:99:d6:29:97:88:5d:91:b2:de:21:f7: 80:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:88:5F:ED:45:A4:59:02:89:04:8B:6A:2B:3E:B9:B4:E4:4D:62:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/f94022c5-3728-3612-b7d8-3d6ab5bdb646.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:ef:69:71:2d:d4:4f:59:e6:4d:cd:8f:1e:f7:4c:67:ef:0f: 56:af:00:98:a0:fb:65:bc:50:37:7f:fc:c0:e0:17:ab:52:7f: 03:8d:98:be:03:15:a9:84:c7:bc:04:96:11:8c:a4:9c:84:b1: 3b:16:59:b5:4c:07:f1:09:be:41:38:7d:45:b0:c9:ab:4d:2f: 7f:6b:77:ac:70:10:3a:ad:81:f6:65:49:e6:09:55:c9:fd:f8: c0:21:db:67:6a:9e:0d:a7:f2:be:c3:21:01:80:5d:ea:13:f7: 27:85:87:76:c7:5c:14:5f:65:bf:00:6e:25:5b:83:54:62:b3: 3d:60:5c:da:9a:99:ea:97:a1:0a:68:f8:b4:0d:e1:9e:cb:bc: b6:b6:0a:df:39:7f:2f:d5:3d:19:7e:c7:c0:09:52:b7:3a:88: 74:cb:17:da:c1:6f:e8:a7:56:69:a4:b5:97:e0:cd:15:d3:89: 15:7d:1a:a4:5a:69:f5:0e:a2:f4:56:51:8c:cc:fb:16:01:04: 7f:c2:40:55:50:53:d5:17:d1:ab:75:1e:a8:1e:a7:34:f2:f8: 18:5d:e6:d5:b4:b9:f7:1c:09:02:d8:9b:41:e6:fe:be:1f:02: d8:b5:1c:07:e7:45:7e:61:43:5a:29:3e:48:3f:a8:8a:ce:13: 4a:1f:f8:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikrSYWIzVOut/NAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk N2JmMDE2MWQtN2QzZC00YmVhLTg1ZTAtZjI4OGM0NGQwMmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvkuA6HIGbMNtD7pP0qBTivyv/vSy02jIzyu k6AJc8WJnnth4ZRmKDh+6tDI6XR39buN/ax/DCPJOdEpJeI6QrqJahA1gahaG7aD MSbXShOzhy1FBf1IT/sv7kljMsryn1slXWroHZEXAqwInQjK5A8GCVJT95svKig6 MeYDBL0ZIEUJMh5ZBQOEbeG7wO9kLBItk0AC5kjEHT44Gtk7AtCqhGuUtrvjUOXB xIxl3LOOxCRgJf08MT6mpatPgDvk+FmApEokR/74OI6o28QMuocb+v+Jjsi06kWW g3PPJmCGW4UXgLtUMy+nUNe7yisDkkkkmdYpl4hdkbLeIfeASQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOIX+1FpFkCiQSLais+ubTkTWLVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZjk0MDIyYzUtMzcyOC0z NjEyLWI3ZDgtM2Q2YWI1YmRiNjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFxN8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALnvaXEt1E9Z5k3Njx73TGfvD1avAJig+2W8UDd//MDgF6tSfwONmL4D FamEx7wElhGMpJyEsTsWWbVMB/EJvkE4fUWwyatNL39rd6xwEDqtgfZlSeYJVcn9 +MAh22dqng2n8r7DIQGAXeoT9yeFh3bHXBRfZb8AbiVbg1Risz1gXNqameqXoQpo +LQN4Z7LvLa2Ct85fy/VPRl+x8AJUrc6iHTLF9rBb+inVmmktZfgzRXTiRV9GqRa afUOovRWUYzM+xYBBH/CQFVQU9UX0at1HqgepzTy+Bhd5tW0ufccCQLYm0Hm/r4f Ati1HAfnRX5hQ1opPkg/qIrOE0of+BQ= -----END CERTIFICATE-----Generated at Wed Oct 14 04:06:16 2026 by rpki-client