$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2d0afbf4-4e83-32c1-a83a-6fe16b5ce42a.roa File: 2d0afbf4-4e83-32c1-a83a-6fe16b5ce42a.roa (raw, json) Hash identifier: /1030lhNB0DGrIBKEDY6rxnxOCIT6bj+qhhxncgMWFU= Subject key identifier: 85:89:9D:20:7F:CB:63:61:02:4F:34:D1:04:E4:BF:F8:D0:D5:81:6D Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584B970CF49E03390AA1679EF980 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2d0afbf4-4e83-32c1-a83a-6fe16b5ce42a.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 395954 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f4:9e:03:39:0a:a1:67:9e:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=d5100b64-ae1c-45ea-a4b2-b8b271864ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:03:e3:43:3a:5b:49:39:88:28:66:36:31:20: 7c:5a:67:88:71:d5:3f:f6:ae:ff:e6:18:43:18:98: 12:5a:5b:4c:39:65:13:58:10:fc:f0:e0:82:af:4c: f9:2a:c0:f4:be:9e:16:97:68:bf:28:c6:56:cd:97: a8:a0:63:0f:5c:e2:18:67:a9:e4:69:9f:c3:47:e6: 2a:69:37:00:b9:53:af:a9:fe:47:de:9a:0f:00:9e: 57:ef:73:6d:b8:1e:9d:1a:6b:b4:b0:4e:bd:81:f5: 20:5c:26:7b:53:d9:ec:25:f9:21:4e:2c:0b:19:44: 03:8c:ff:52:89:4a:7f:3b:80:e1:26:63:33:ad:fd: f3:74:a1:cf:87:12:d9:33:55:cd:45:f4:51:bd:06: 28:f7:70:76:a0:43:66:15:b5:c4:b0:75:ac:ee:3e: 1b:4a:f7:c5:1e:14:77:fd:43:8e:99:f4:2e:f9:d7: 95:8a:8c:3c:d3:dd:bc:a9:81:c9:dc:1d:92:a7:14: 95:59:6e:34:b3:35:19:6d:67:7f:87:c3:82:47:39: fe:07:1a:3d:17:d2:98:cd:7f:f2:d0:1e:cc:27:f2: dc:74:0e:6e:b0:3d:4a:5b:3b:ea:a2:3e:04:74:03: 45:49:92:d0:93:bd:dc:7d:3a:da:bc:39:95:56:a5: c3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:89:9D:20:7F:CB:63:61:02:4F:34:D1:04:E4:BF:F8:D0:D5:81:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2d0afbf4-4e83-32c1-a83a-6fe16b5ce42a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:b4:72:38:a6:1d:da:6f:5a:1c:36:6b:fe:3e:17:44:6e:db: a4:3b:f1:05:d3:e9:2a:fd:8f:92:07:54:3d:1a:8d:fe:4b:e4: 8c:3a:6a:ed:d4:a1:5a:87:6e:85:2b:da:92:11:9c:94:45:5a: e2:77:06:86:34:3c:dd:fc:35:ee:00:9a:f1:e1:7b:8d:f0:2a: 46:40:cb:27:3e:c5:4b:b8:a3:62:0f:be:a1:73:07:46:b2:36: e3:05:5f:ce:ac:f1:5a:3b:83:35:c1:fb:f3:0f:0a:01:73:ac: 22:29:0e:0b:b3:ff:91:f6:55:e7:09:49:fa:ea:3b:5a:c1:78: 32:24:c5:8b:e1:65:65:d9:6d:15:57:f7:be:76:10:bf:77:fd: c5:23:a7:0d:3d:5b:de:5d:9e:18:24:26:7b:a5:b7:96:e9:0c: 17:ef:f8:2e:0e:9a:f7:17:84:1b:e7:9b:9b:52:de:57:00:bf: 54:f6:f4:4f:b2:fc:3d:1a:df:35:ff:f7:5c:51:c8:d7:f2:f4: 2b:8c:1a:cd:17:6a:81:81:cd:bb:bf:0d:e2:53:bb:09:02:1b: f8:39:04:3a:03:61:07:b5:56:80:ba:14:da:fc:af:41:b4:2a: ef:20:b9:68:9d:12:30:3c:b9:72:3a:07:d3:d2:c3:77:b4:f5: 99:28:87:f8 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEuXDPSeAzkKoWee+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ZDUxMDBiNjQtYWUxYy00NWVhLWE0YjItYjhiMjcxODY0YmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygPjQzpbSTmIKGY2MSB8WmeIcdU/9q7/5hhD GJgSWltMOWUTWBD88OCCr0z5KsD0vp4Wl2i/KMZWzZeooGMPXOIYZ6nkaZ/DR+Yq aTcAuVOvqf5H3poPAJ5X73NtuB6dGmu0sE69gfUgXCZ7U9nsJfkhTiwLGUQDjP9S iUp/O4DhJmMzrf3zdKHPhxLZM1XNRfRRvQYo93B2oENmFbXEsHWs7j4bSvfFHhR3 /UOOmfQu+deViow80928qYHJ3B2SpxSVWW40szUZbWd/h8OCRzn+Bxo9F9KYzX/y 0B7MJ/LcdA5usD1KWzvqoj4EdANFSZLQk73cfTravDmVVqXD+QIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFIWJnSB/y2NhAk800QTkv/jQ1YFtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMmQwYWZiZjQtNGU4My0z MmMxLWE4M2EtNmZlMTZiNWNlNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAkbRyOKYd2m9aHDZr/j4XRG7bpDvxBdPp Kv2PkgdUPRqN/kvkjDpq7dShWoduhSvakhGclEVa4ncGhjQ83fw17gCa8eF7jfAq RkDLJz7FS7ijYg++oXMHRrI24wVfzqzxWjuDNcH78w8KAXOsIikOC7P/kfZV5wlJ +uo7WsF4MiTFi+FlZdltFVf3vnYQv3f9xSOnDT1b3l2eGCQme6W3lukMF+/4Lg6a 9xeEG+ebm1LeVwC/VPb0T7L8PRrfNf/3XFHI1/L0K4wazRdqgYHNu78N4lO7CQIb +DkEOgNhB7VWgLoU2vyvQbQq7yC5aJ0SMDy5cjoH09LDd7T1mSiH+A== -----END CERTIFICATE-----Generated at Wed Nov 5 06:44:04 2025 by rpki-client