$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1ca5f0e2-7748-372e-b7ee-a2cd46898ac3.roa File: 1ca5f0e2-7748-372e-b7ee-a2cd46898ac3.roa (raw, json) Hash identifier: KMaXMzrlL1I6KpeCmxFAtXVKMJmkyczllBt2Vm/bmqs= Subject key identifier: 7D:CD:03:75:79:38:A3:E5:F3:B8:E4:AD:1C:F1:65:F2:19:58:F1:A2 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584B970CF4C0301432D555671400 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1ca5f0e2-7748-372e-b7ee-a2cd46898ac3.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 30633 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f4:c0:30:14:32:d5:55:67:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=b56f0d61-0fd0-4fd8-8e93-d8e243694b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4d:48:12:dd:29:77:13:7f:53:4b:49:0e:7e: c6:a4:41:23:e3:31:19:fc:2b:91:56:c3:ba:d2:c3: f8:af:cf:83:d3:c2:70:8e:68:3e:a3:bc:af:6a:a2: 8f:46:3a:70:68:46:ba:73:c3:c7:14:6a:39:a2:12: 4e:45:1a:68:08:33:94:6e:03:b5:dd:be:7f:0a:5c: dc:e9:b5:0c:87:5c:c9:ee:49:9c:d3:b6:b3:a5:ca: 3d:c1:25:1a:cb:5d:8d:4c:23:d6:70:2e:0e:28:ba: 60:b6:b3:fa:25:e5:09:80:1e:f6:61:f2:25:c7:bc: 22:d2:6a:61:ae:f4:c6:c3:d7:1c:00:b2:65:00:84: c0:26:53:bb:87:5a:17:25:cb:75:fe:58:f7:09:1c: aa:1e:1c:c5:7d:de:25:ff:e9:4d:04:b9:95:bc:00: 5a:58:3e:a3:f1:84:1a:35:6e:cb:d2:91:63:bb:8f: 5a:ae:0e:00:17:79:fc:dc:14:47:bb:15:87:48:8d: b8:8a:ca:74:42:4b:d9:33:07:06:bd:44:20:6a:cc: d5:fa:60:8b:34:ed:6f:42:fb:3e:b7:58:42:d5:67: 60:10:3a:f4:97:9c:63:fa:f8:e7:9d:37:ae:1f:99: b9:2c:ba:c2:4d:eb:ad:50:99:dc:ab:18:4d:24:c0: fe:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:CD:03:75:79:38:A3:E5:F3:B8:E4:AD:1C:F1:65:F2:19:58:F1:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1ca5f0e2-7748-372e-b7ee-a2cd46898ac3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:d5:d4:7a:11:e0:ec:64:50:ee:a7:5c:4f:de:68:77:c0:08: 2a:cd:5f:30:67:ad:12:49:5b:c7:fb:b8:4e:6d:da:ae:26:fe: b7:e4:50:e7:bb:2a:65:1c:c7:88:76:4a:ff:bf:aa:22:d0:74: 88:1b:10:cf:af:ce:55:40:d6:f8:73:3d:38:f0:44:7e:ff:45: 9f:86:14:e2:06:ed:b3:e7:4c:5e:1b:c6:7a:85:f2:2c:a1:cf: 00:c1:25:af:bd:88:7d:98:b4:de:b2:d8:a0:72:e9:b8:d2:0e: 6d:c8:79:1f:1d:b9:9e:66:a5:89:21:1d:e5:d5:f5:23:1c:49: 7b:cf:e3:0e:aa:b5:ec:21:fc:68:c1:d9:66:60:6b:42:c6:68: e6:bb:42:72:65:a4:5d:05:90:55:1d:74:45:ce:e6:ae:1c:f3: 13:0e:00:0e:ad:68:7a:9f:f0:fd:34:a1:8f:41:98:80:bb:ca: 5d:51:bf:48:c8:bf:ab:5a:c0:0e:e3:12:da:e0:14:ad:4c:33: dd:25:2a:1d:18:5a:c6:34:1f:88:72:15:e1:31:26:9f:eb:83: 0e:87:d9:00:e1:a4:fe:b9:ae:21:47:a9:35:1a:32:79:b9:8c: 91:5e:fc:bb:fb:b5:9c:f6:19:60:61:31:c3:8c:9c:09:b9:15: 3a:f3:ce:32 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEuXDPTAMBQy1VVnFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk YjU2ZjBkNjEtMGZkMC00ZmQ4LThlOTMtZDhlMjQzNjk0Yjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwk1IEt0pdxN/U0tJDn7GpEEj4zEZ/CuRVsO6 0sP4r8+D08Jwjmg+o7yvaqKPRjpwaEa6c8PHFGo5ohJORRpoCDOUbgO13b5/Clzc 6bUMh1zJ7kmc07azpco9wSUay12NTCPWcC4OKLpgtrP6JeUJgB72YfIlx7wi0mph rvTGw9ccALJlAITAJlO7h1oXJct1/lj3CRyqHhzFfd4l/+lNBLmVvABaWD6j8YQa NW7L0pFju49arg4AF3n83BRHuxWHSI24isp0QkvZMwcGvUQgaszV+mCLNO1vQvs+ t1hC1WdgEDr0l5xj+vjnnTeuH5m5LLrCTeutUJncqxhNJMD+pwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFH3NA3V5OKPl87jkrRzxZfIZWPGiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMWNhNWYwZTItNzc0OC0z NzJlLWI3ZWUtYTJjZDQ2ODk4YWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVtXUehHg7GRQ7qdcT95od8AIKs1fMGet Eklbx/u4Tm3arib+t+RQ57sqZRzHiHZK/7+qItB0iBsQz6/OVUDW+HM9OPBEfv9F n4YU4gbts+dMXhvGeoXyLKHPAMElr72IfZi03rLYoHLpuNIObch5Hx25nmaliSEd 5dX1IxxJe8/jDqq17CH8aMHZZmBrQsZo5rtCcmWkXQWQVR10Rc7mrhzzEw4ADq1o ep/w/TShj0GYgLvKXVG/SMi/q1rADuMS2uAUrUwz3SUqHRhaxjQfiHIV4TEmn+uD DofZAOGk/rmuIUepNRoyebmMkV78u/u1nPYZYGExw4ycCbkVOvPOMg== -----END CERTIFICATE-----Generated at Wed Nov 5 01:21:28 2025 by rpki-client