$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ff47c81f-4b13-33bb-9f9d-9c70b4b5653a.roa File: ff47c81f-4b13-33bb-9f9d-9c70b4b5653a.roa (raw, json) Hash identifier: DWqhVz8jLuJX8loOSI2aCRCLlg/JKN7rgWVOjQksJGQ= Subject key identifier: 00:38:30:A4:78:B6:F2:F7:0C:CA:B1:1F:EB:14:30:F1:60:92:E2:82 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F70881E3FB7ED88E01C61DF50 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ff47c81f-4b13-33bb-9f9d-9c70b4b5653a.roa Signing time: Fri 09 Oct 2026 01:00:12 +0000 ROA not before: Fri 09 Oct 2026 01:00:12 +0000 ROA not after: Thu 07 Jan 2027 02:00:12 +0000 asID: 394380 IP address blocks: 23.19.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:70:88:1e:3f:b7:ed:88:e0:1c:61:df:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 9 01:00:12 2026 GMT Not After : Jan 7 02:00:12 2027 GMT Subject: CN=59115fdc-0947-4bad-82ba-a17f85fd5a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5f:e1:43:e6:0c:ab:53:46:53:4f:76:6e:80: bb:65:27:ab:73:a2:1a:fe:00:b3:ea:4c:98:f1:db: 09:9a:90:71:70:d9:4a:aa:d4:be:48:a8:2a:91:9d: 56:44:8e:83:ef:b7:9a:38:8f:4b:82:83:c6:51:58: 4f:81:44:d8:bc:21:34:2e:a9:55:11:3c:ae:2e:3f: 7f:05:b5:d1:cd:4d:d6:50:a0:02:9d:bb:96:21:74: 37:2c:08:29:0a:db:11:56:bb:30:28:8d:3a:ad:02: b6:7c:39:11:73:23:23:ec:79:eb:81:44:21:fe:26: 06:7f:ad:ea:ae:0a:20:32:7d:82:53:d6:20:07:19: 74:e6:69:b6:8b:ca:a8:77:81:22:26:a7:8f:16:5a: 4d:33:08:5b:c8:74:07:f8:d5:45:f2:ec:d4:42:2d: 26:ac:06:e3:8e:23:55:fc:97:28:f7:d4:40:79:fc: 88:f2:17:1e:8e:fa:e9:18:8d:da:b8:7e:3e:e4:58: 47:50:e0:da:45:bb:50:fd:d1:4e:95:18:3b:1b:21: 3e:28:6a:66:c0:b8:c4:05:1e:b3:8b:b4:49:7e:68: c6:90:d2:89:89:e8:dc:2e:d6:1d:c2:f3:65:79:29: af:65:41:aa:aa:f1:43:d1:6f:0d:d8:92:da:e2:fe: aa:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:38:30:A4:78:B6:F2:F7:0C:CA:B1:1F:EB:14:30:F1:60:92:E2:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ff47c81f-4b13-33bb-9f9d-9c70b4b5653a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:d8:ca:ed:36:cf:fc:f7:e4:43:32:f1:1a:2b:33:e2:52:e6: d8:58:34:18:f9:38:1f:96:7a:82:7b:89:11:69:a6:ec:4c:53: 3a:9b:cb:72:b0:92:fe:26:84:a3:49:73:94:d9:1b:cf:10:90: 49:4f:66:ba:f0:c5:9b:2a:38:4d:19:a7:42:b6:e1:cd:4f:17: fa:f7:8e:f3:67:0c:64:e8:5d:89:06:ef:43:ad:b5:e1:c2:7c: df:83:d2:35:85:c0:62:e4:0c:2d:63:da:33:33:6d:08:dc:5c: eb:f8:98:fe:c8:14:e4:25:12:e1:98:c7:c4:b4:e0:54:36:7b: e8:7b:c9:f2:6b:a6:ee:f2:77:1a:2a:06:8f:28:4c:24:ed:63: ea:80:4c:b8:8e:6b:f4:b8:72:46:a9:96:da:18:40:04:98:34: f0:3e:db:9a:5d:34:9a:9e:ec:d7:72:75:59:57:d4:8c:01:8b: 77:78:50:f8:7b:8e:d2:4a:01:81:ba:d4:70:1f:07:e0:df:13: 66:7e:39:35:5c:d9:ce:ab:e6:05:3d:84:6e:2e:e8:af:25:fa: e4:43:ed:1a:21:c4:72:6d:c2:f0:e5:c5:f6:a2:aa:90:68:71: 1c:65:1d:a5:f9:ab:a3:7b:bd:01:a3:39:2c:62:41:fc:e0:b5: 28:36:1e:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9wiB4/t+2I4Bxh31AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwOTAxMDAxMloXDTI3MDEwNzAyMDAxMlowLzEtMCsGA1UEAxMk NTkxMTVmZGMtMDk0Ny00YmFkLTgyYmEtYTE3Zjg1ZmQ1YTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAml/hQ+YMq1NGU092boC7ZSerc6Ia/gCz6kyY 8dsJmpBxcNlKqtS+SKgqkZ1WRI6D77eaOI9LgoPGUVhPgUTYvCE0LqlVETyuLj9/ BbXRzU3WUKACnbuWIXQ3LAgpCtsRVrswKI06rQK2fDkRcyMj7HnrgUQh/iYGf63q rgogMn2CU9YgBxl05mm2i8qod4EiJqePFlpNMwhbyHQH+NVF8uzUQi0mrAbjjiNV /Jco99RAefyI8hcejvrpGI3auH4+5FhHUODaRbtQ/dFOlRg7GyE+KGpmwLjEBR6z i7RJfmjGkNKJiejcLtYdwvNleSmvZUGqqvFD0W8N2JLa4v6qVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAA4MKR4tvL3DMqxH+sUMPFgkuKCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZmY0N2M4MWYtNGIxMy0z M2JiLTlmOWQtOWM3MGI0YjU2NTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFxPcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnYyu02z/z35EMy8RorM+JS5thYNBj5OB+WeoJ7iRFppuxMUzqby3Kw kv4mhKNJc5TZG88QkElPZrrwxZsqOE0Zp0K24c1PF/r3jvNnDGToXYkG70OtteHC fN+D0jWFwGLkDC1j2jMzbQjcXOv4mP7IFOQlEuGYx8S04FQ2e+h7yfJrpu7ydxoq Bo8oTCTtY+qATLiOa/S4ckapltoYQASYNPA+25pdNJqe7NdydVlX1IwBi3d4UPh7 jtJKAYG61HAfB+DfE2Z+OTVc2c6r5gU9hG4u6K8l+uRD7RohxHJtwvDlxfaiqpBo cRxlHaX5q6N7vQGjOSxiQfzgtSg2HhQ= -----END CERTIFICATE-----Generated at Wed Oct 14 11:54:45 2026 by rpki-client