$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0b9192f9-061b-30a2-83f7-063c62014f7a.roa File: 0b9192f9-061b-30a2-83f7-063c62014f7a.roa (raw, json) Hash identifier: Y14M6EOyM+cqyR3ihPuE5xEODQ4pmIbfCcHR/b+F7XM= Subject key identifier: 07:BD:E2:4D:C5:EA:C1:0F:C1:75:3D:9E:16:0E:A2:86:50:92:E3:85 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584B970CF26A37B9AD0981F45EF0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0b9192f9-061b-30a2-83f7-063c62014f7a.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 395954 IP address blocks: 23.19.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f2:6a:37:b9:ad:09:81:f4:5e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=cdfd57d8-9d77-4d82-9443-5fae478d916f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:12:21:67:cd:48:22:94:21:44:56:04:8f:e6: f8:dc:c6:c3:a1:60:b3:a7:4a:ac:42:59:d4:75:23: 99:6b:fd:73:82:63:0a:68:5f:85:53:21:66:1a:f1: a7:9d:87:e2:81:ec:fd:e1:49:1b:28:1e:1c:23:71: 2e:7b:39:08:11:66:78:a3:8c:27:f5:39:d9:e5:2f: b4:38:e5:32:51:e1:62:2f:1a:1d:41:eb:9b:70:50: c5:0b:81:3b:8b:b4:d0:05:d8:05:bb:14:d2:9e:a0: 94:8f:6e:1b:9a:b5:3f:88:9d:be:4a:e3:05:7a:40: b3:5e:bc:4f:6c:e9:ca:cc:f8:04:c9:da:b6:a1:42: e5:37:c8:58:4f:02:ea:13:36:22:28:fe:79:a7:53: 59:08:9d:01:21:4d:2d:a1:96:88:81:84:87:a9:ad: 1c:3b:46:6a:ba:f3:61:8c:68:aa:32:92:47:76:74: 28:19:3a:a0:40:7e:9a:35:7a:6c:12:e9:c1:7e:f1: 42:25:db:92:c9:83:4b:5a:8b:23:fe:05:bb:66:17: 87:9d:14:70:6f:65:1e:c7:86:4c:8b:11:05:98:fb: 20:3a:56:67:a2:4f:39:15:b5:72:41:aa:36:27:17: 8c:88:26:70:69:34:e7:c5:66:e8:c8:3a:10:16:2c: 0c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BD:E2:4D:C5:EA:C1:0F:C1:75:3D:9E:16:0E:A2:86:50:92:E3:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0b9192f9-061b-30a2-83f7-063c62014f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:f2:83:96:3f:d5:d7:45:66:eb:0d:7a:2d:49:93:16:8b:ca: f3:93:ea:aa:87:a5:ff:24:30:8a:ba:50:3f:e5:e9:a6:6f:96: 77:de:05:3e:48:13:d2:df:da:33:72:5f:f6:db:4f:58:02:c1: 5c:94:f7:38:60:fb:c0:96:d4:11:ad:55:92:b6:69:f0:ab:8d: dc:00:71:b8:19:d0:fa:84:e1:fd:e9:85:11:b7:2f:30:51:dd: 89:9f:c7:66:35:6c:07:8c:ba:a7:b9:42:6e:83:17:01:93:6c: 87:4b:35:49:98:b2:1f:e6:56:bd:d6:d0:1d:4a:99:4d:8a:d9: 76:93:5a:b0:5a:97:52:1f:71:f1:ce:d0:02:99:5b:87:c2:9e: 31:2f:4f:9a:e8:0a:e4:9d:cb:ea:4d:5b:de:1b:49:92:35:9b: 6a:d6:40:ba:c0:48:bc:3b:d2:a4:54:50:8b:b3:e7:aa:5d:e4: 98:a3:f7:c2:9b:ce:12:77:fd:46:bc:0c:96:5b:e4:76:28:f9: b5:cc:99:72:02:30:44:64:41:df:ed:01:c1:74:8f:6f:99:82: 47:b2:35:b0:b6:1b:02:82:d0:d7:12:42:e4:dc:fc:d2:3f:09: 8e:43:86:5c:ee:0d:78:26:15:50:62:bd:13:70:b0:f2:8d:0d: a9:49:ee:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDPJqN7mtCYH0XvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk Y2RmZDU3ZDgtOWQ3Ny00ZDgyLTk0NDMtNWZhZTQ3OGQ5MTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhIhZ81IIpQhRFYEj+b43MbDoWCzp0qsQlnU dSOZa/1zgmMKaF+FUyFmGvGnnYfigez94UkbKB4cI3EuezkIEWZ4o4wn9TnZ5S+0 OOUyUeFiLxodQeubcFDFC4E7i7TQBdgFuxTSnqCUj24bmrU/iJ2+SuMFekCzXrxP bOnKzPgEydq2oULlN8hYTwLqEzYiKP55p1NZCJ0BIU0toZaIgYSHqa0cO0ZquvNh jGiqMpJHdnQoGTqgQH6aNXpsEunBfvFCJduSyYNLWosj/gW7ZheHnRRwb2Uex4ZM ixEFmPsgOlZnok85FbVyQao2JxeMiCZwaTTnxWboyDoQFiwMKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAe94k3F6sEPwXU9nhYOooZQkuOFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMGI5MTkyZjktMDYxYi0z MGEyLTgzZjctMDYzYzYyMDE0ZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTyg5Y/1ddFZusNei1JkxaLyvOT6qqHpf8kMIq6UD/l6aZvlnfeBT5I E9Lf2jNyX/bbT1gCwVyU9zhg+8CW1BGtVZK2afCrjdwAcbgZ0PqE4f3phRG3LzBR 3Ymfx2Y1bAeMuqe5Qm6DFwGTbIdLNUmYsh/mVr3W0B1KmU2K2XaTWrBal1IfcfHO 0AKZW4fCnjEvT5roCuSdy+pNW94bSZI1m2rWQLrASLw70qRUUIuz56pd5Jij98Kb zhJ3/Ua8DJZb5HYo+bXMmXICMERkQd/tAcF0j2+ZgkeyNbC2GwKC0NcSQuTc/NI/ CY5DhlzuDXgmFVBivRNwsPKNDalJ7jM= -----END CERTIFICATE-----Generated at Wed Nov 5 06:57:32 2025 by rpki-client