$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2b2559a8-5457-356a-b9b1-c46c289e434a.roa File: 2b2559a8-5457-356a-b9b1-c46c289e434a.roa (raw, json) Hash identifier: vkoIrvF4BX551tKhRsL9kzJCoZj1d7ZnuqN/rJhSKjs= Subject key identifier: 5C:EC:02:34:C4:3C:0E:89:38:59:CA:01:3F:5C:82:F2:C0:ED:9D:30 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584B970CF4685C57421BEE320580 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2b2559a8-5457-356a-b9b1-c46c289e434a.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 59253 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f4:68:5c:57:42:1b:ee:32:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=465fcb14-6ea7-4245-a421-3d6a8b1e693d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c4:aa:66:2a:77:f8:bc:57:69:1f:c4:5c:6f: 30:2a:f6:e9:ae:13:d0:96:b0:fd:62:42:fa:34:af: 1e:8c:91:1d:23:7d:f6:e6:e2:04:3d:e2:dc:3b:a2: 4f:e2:95:93:aa:47:17:21:65:e0:f2:a4:7b:88:b7: 6e:c5:cd:73:3d:20:b6:76:9c:b8:3e:99:d3:15:d4: f4:50:78:0f:f7:d6:81:91:bd:3d:5a:40:2a:1d:e5: 8e:28:be:be:12:ca:e0:12:a4:85:cb:b7:ca:ef:c4: 46:8c:0e:e2:4b:d4:4a:be:27:cc:b9:79:f7:dd:bf: d1:6e:62:ae:04:8b:62:18:5b:a0:b9:3b:10:79:c1: e6:85:08:71:ab:bd:b4:36:02:96:13:26:74:2f:4c: 49:fc:bc:70:46:86:e1:a3:22:fc:84:a0:9d:6b:7b: 8c:0e:10:76:72:0d:5d:e5:ad:c5:b2:6f:6c:0b:96: 5d:53:32:90:e9:b5:e7:51:f4:65:b2:a5:5b:9e:34: b1:e1:3f:89:25:d3:da:6d:08:d2:e1:df:45:54:ec: e7:6f:82:ee:a5:31:da:4b:82:95:05:93:89:8c:c5: e7:b5:27:02:86:e4:db:33:be:d6:18:56:0a:55:8f: cd:bc:d0:cd:70:9b:61:f5:6e:b9:20:ad:49:79:34: b1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EC:02:34:C4:3C:0E:89:38:59:CA:01:3F:5C:82:F2:C0:ED:9D:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2b2559a8-5457-356a-b9b1-c46c289e434a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:30:90:8e:1f:49:a8:06:4a:eb:e6:1d:49:88:09:29:b7:80: b7:b1:52:7f:3f:0e:8b:98:43:b7:c2:04:a1:7d:93:31:9b:4f: 1a:83:37:ef:40:a1:56:e1:31:83:6e:7d:6f:5e:6e:dd:a5:e2: b6:b0:29:63:fe:26:88:33:22:01:0c:cf:4a:b5:21:52:e9:3c: 2e:ff:4a:b3:3b:d9:f1:64:0f:80:fe:42:38:cc:48:8d:36:75: 38:58:c3:01:15:5c:a6:cd:74:94:46:ee:20:16:89:6a:47:dd: ef:da:f7:bd:98:9b:68:04:09:5f:aa:bf:43:16:9c:b2:62:3d: 27:c5:9b:d3:dc:dd:09:c5:90:d5:5a:43:9e:8a:77:33:0a:20: cd:18:62:a4:f6:4b:e0:dd:94:6a:00:68:aa:a8:aa:6c:cf:80: 79:47:57:dd:a4:f6:a7:80:8c:9e:c3:b0:43:43:ef:fb:c3:03: d4:a7:32:ab:1e:3e:a0:4b:ba:05:a9:78:c1:f6:88:cf:44:1b: d0:f2:d5:42:dd:07:30:42:d6:e3:d4:33:42:e3:5e:70:cd:13: 80:e6:25:c5:86:52:de:3d:3d:43:a5:39:b2:6c:ac:81:91:99: f7:35:a6:f5:09:86:01:48:61:10:1d:04:04:49:3d:7b:4c:00: c7:fb:3c:14 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEuXDPRoXFdCG+4yBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk NDY1ZmNiMTQtNmVhNy00MjQ1LWE0MjEtM2Q2YThiMWU2OTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMSqZip3+LxXaR/EXG8wKvbprhPQlrD9YkL6 NK8ejJEdI3325uIEPeLcO6JP4pWTqkcXIWXg8qR7iLduxc1zPSC2dpy4PpnTFdT0 UHgP99aBkb09WkAqHeWOKL6+EsrgEqSFy7fK78RGjA7iS9RKvifMuXn33b/RbmKu BItiGFuguTsQecHmhQhxq720NgKWEyZ0L0xJ/LxwRobhoyL8hKCda3uMDhB2cg1d 5a3Fsm9sC5ZdUzKQ6bXnUfRlsqVbnjSx4T+JJdPabQjS4d9FVOznb4LupTHaS4KV BZOJjMXntScChuTbM77WGFYKVY/NvNDNcJth9W65IK1JeTSxfwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFFzsAjTEPA6JOFnKAT9cgvLA7Z0wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMmIyNTU5YTgtNTQ1Ny0z NTZhLWI5YjEtYzQ2YzI4OWU0MzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACTCQjh9JqAZK6+YdSYgJKbeAt7FSfz8O i5hDt8IEoX2TMZtPGoM370ChVuExg259b15u3aXitrApY/4miDMiAQzPSrUhUuk8 Lv9KszvZ8WQPgP5COMxIjTZ1OFjDARVcps10lEbuIBaJakfd79r3vZibaAQJX6q/ QxacsmI9J8Wb09zdCcWQ1VpDnop3MwogzRhipPZL4N2UagBoqqiqbM+AeUdX3aT2 p4CMnsOwQ0Pv+8MD1Kcyqx4+oEu6Bal4wfaIz0Qb0PLVQt0HMELW49QzQuNecM0T gOYlxYZS3j09Q6U5smysgZGZ9zWm9QmGAUhhEB0EBEk9e0wAx/s8FA== -----END CERTIFICATE-----Generated at Wed Nov 5 01:19:42 2025 by rpki-client