$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3e1f93dc-6520-3778-ad3d-37750549a980.roa File: 3e1f93dc-6520-3778-ad3d-37750549a980.roa (raw, json) Hash identifier: dDCU+JAQxXK+PAQEdnijPBDq7bBUvcNZzEJBQibthNA= Subject key identifier: 86:3A:0B:7E:34:1E:BD:20:35:60:A3:5E:CC:0B:5B:BC:2D:94:1C:DB Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584B970CF4AF5D4CAC516AE7D280 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3e1f93dc-6520-3778-ad3d-37750549a980.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 393886 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f4:af:5d:4c:ac:51:6a:e7:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=77fa6b1e-832d-4900-a13f-acce132f9b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:69:46:e8:ae:c8:7a:cf:c5:35:93:11:5c:c2: ba:27:91:80:69:64:8c:28:0a:f3:bf:3e:9a:98:41: 3a:ea:ae:df:3f:74:07:4b:66:41:e4:f1:8a:20:ed: 09:be:9a:df:04:62:e8:7f:ac:c8:16:b1:85:b2:e0: 34:be:99:87:f8:5f:36:da:8d:54:25:60:b8:eb:46: ad:28:c3:40:70:0a:62:53:e0:14:2e:98:d5:2c:e7: 01:01:ff:f8:b0:70:47:45:62:39:6d:ee:fc:a1:a7: 56:a2:7c:00:83:bd:67:63:25:d3:a3:19:79:3a:82: 7c:6f:d6:35:a1:00:92:62:11:99:c4:7b:79:04:b9: 59:e6:89:54:e2:bf:d9:1e:25:0f:e9:1f:52:ab:96: 87:ae:ab:f1:20:a6:51:30:87:79:2d:de:23:4c:ad: 40:a7:fb:ca:6a:98:8e:01:06:91:c2:92:37:ba:c5: c1:68:c7:1b:60:dc:7b:1d:08:25:06:33:9e:e6:0c: e4:5d:8e:bb:13:2b:4c:2e:b9:2f:ff:4c:35:0d:9a: 81:f0:ae:40:1e:b7:92:71:84:11:f2:ac:87:33:f6: f5:4f:d7:8d:d2:b0:2b:83:9d:36:93:fc:e3:ba:49: 04:53:48:89:73:d9:ce:0b:13:cc:81:e7:ad:74:67: 11:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:3A:0B:7E:34:1E:BD:20:35:60:A3:5E:CC:0B:5B:BC:2D:94:1C:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3e1f93dc-6520-3778-ad3d-37750549a980.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:57:4e:e9:07:06:bb:75:ed:c6:0e:27:db:1f:39:95:c7:1f: 51:c3:3d:ba:90:ec:b3:5d:ca:81:03:42:b2:62:8f:eb:52:53: 0b:f5:50:14:57:b3:a3:04:00:4d:72:a5:51:bf:33:9f:12:8b: bb:2c:f7:1d:07:d5:85:0d:d4:52:57:43:f9:57:6b:05:b2:f5: b7:59:0f:60:88:c8:e4:4a:81:70:f4:bf:f5:b6:83:9f:2c:41: a3:5f:ad:a4:f0:b9:80:67:6e:35:c4:20:76:0c:eb:6c:ec:94: f2:d4:cd:6a:4e:16:ec:2e:4e:36:fe:8d:3b:f3:7e:cc:97:51: 16:d5:cc:ff:7d:8b:e2:0e:fc:fa:95:7c:39:c0:f8:f2:47:8f: 89:ae:16:68:d3:bb:c0:cd:cf:32:6b:24:f3:c1:6b:18:45:ec: a6:2f:3c:cb:1a:9b:d9:73:ac:e9:41:94:9d:54:cd:4f:54:86: 56:83:de:51:f9:d8:51:72:73:ce:16:e2:2f:0f:90:85:02:b4: 98:5c:46:5e:04:46:03:4e:d0:38:12:2e:93:3a:43:0d:01:a6: b5:88:8e:6e:f1:f9:45:98:87:6a:b7:bf:c7:62:ce:ae:7e:1b: b1:5b:56:bf:8f:2c:82:ed:1a:4f:b7:98:20:91:23:9f:85:63: d6:cc:08:5d -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEuXDPSvXUysUWrn0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk NzdmYTZiMWUtODMyZC00OTAwLWExM2YtYWNjZTEzMmY5YjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGlG6K7Ies/FNZMRXMK6J5GAaWSMKArzvz6a mEE66q7fP3QHS2ZB5PGKIO0JvprfBGLof6zIFrGFsuA0vpmH+F822o1UJWC460at KMNAcApiU+AULpjVLOcBAf/4sHBHRWI5be78oadWonwAg71nYyXToxl5OoJ8b9Y1 oQCSYhGZxHt5BLlZ5olU4r/ZHiUP6R9Sq5aHrqvxIKZRMId5Ld4jTK1Ap/vKapiO AQaRwpI3usXBaMcbYNx7HQglBjOe5gzkXY67EytMLrkv/0w1DZqB8K5AHreScYQR 8qyHM/b1T9eN0rArg502k/zjukkEU0iJc9nOCxPMgeetdGcRvQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFIY6C340Hr0gNWCjXswLW7wtlBzbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvM2UxZjkzZGMtNjUyMC0z Nzc4LWFkM2QtMzc3NTA1NDlhOTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAlldO6QcGu3Xtxg4n2x85lccfUcM9upDs s13KgQNCsmKP61JTC/VQFFezowQATXKlUb8znxKLuyz3HQfVhQ3UUldD+VdrBbL1 t1kPYIjI5EqBcPS/9baDnyxBo1+tpPC5gGduNcQgdgzrbOyU8tTNak4W7C5ONv6N O/N+zJdRFtXM/32L4g78+pV8OcD48kePia4WaNO7wM3PMmsk88FrGEXspi88yxqb 2XOs6UGUnVTNT1SGVoPeUfnYUXJzzhbiLw+QhQK0mFxGXgRGA07QOBIukzpDDQGm tYiObvH5RZiHare/x2LOrn4bsVtWv48sgu0aT7eYIJEjn4Vj1swIXQ== -----END CERTIFICATE-----Generated at Wed Nov 5 17:51:27 2025 by rpki-client