$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/44a7008f-8c8e-3393-bd69-b78e24b4387a.roa File: 44a7008f-8c8e-3393-bd69-b78e24b4387a.roa (raw, json) Hash identifier: h218hkIsERr3AoHG8gTt8gbSjqQuHTBoRQ7+ELsTunY= Subject key identifier: 44:67:5B:B4:20:0E:6E:01:EC:14:96:B7:A6:3A:4A:F3:5A:18:DD:6B Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584B970CF4E47D9B93B783DF31C0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/44a7008f-8c8e-3393-bd69-b78e24b4387a.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 7203 IP address blocks: 23.19.197.0/24 maxlen: 24 2607:f5b5:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f4:e4:7d:9b:93:b7:83:df:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=710bede9-07bd-4b3f-84b0-3223de3ec8eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dd:0e:c6:2f:47:b9:ab:04:4a:f8:b3:2f:bc: 43:a1:cb:17:fd:14:58:d0:25:2c:e6:1b:2b:a5:ed: 24:22:de:11:d2:fa:94:b0:a8:2a:5d:16:56:74:04: 4d:a0:ac:85:32:6d:8b:71:f6:3b:41:d2:c0:f4:91: 02:bd:dd:d9:91:73:cf:c0:f4:21:05:d2:88:fc:d0: b9:74:dd:ef:4f:5f:cb:05:0c:53:fb:7c:a4:a6:ac: 7a:95:dd:e6:d5:bc:37:02:d6:97:67:d1:4d:be:68: 3d:52:e6:37:2f:a2:20:d5:5e:fc:87:41:54:87:d3: 9c:10:48:85:f4:5b:0d:7d:3f:26:3b:24:f2:29:63: 9a:4b:d1:36:88:89:24:b1:51:ae:42:0f:6e:be:51: f8:e9:8e:8c:3b:c8:36:08:de:3c:80:30:ce:ac:f0: bd:10:91:dc:eb:cf:2c:8f:64:7a:a9:ea:7a:2d:17: c6:be:e7:48:37:2b:e6:99:b0:2a:e7:f6:6b:be:c4: 04:54:c9:84:22:d5:62:71:10:c4:f6:29:e3:79:e7: 63:81:f2:a2:16:ff:76:88:5e:c4:fa:2d:8c:6a:78: 83:6e:76:95:a5:9c:8c:22:af:66:2d:f8:70:9e:67: fd:0a:f2:ba:3f:e0:f4:e7:91:10:7e:2f:0b:d9:e0: 69:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:67:5B:B4:20:0E:6E:01:EC:14:96:B7:A6:3A:4A:F3:5A:18:DD:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/44a7008f-8c8e-3393-bd69-b78e24b4387a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.197.0/24 IPv6: 2607:f5b5:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:4d:e2:af:1b:19:51:18:ce:b8:3a:f7:43:31:92:de:80:25: a0:8e:e9:f9:51:d4:00:9f:3a:28:2c:39:e5:c4:d9:f1:82:19: 42:b3:28:41:ea:ac:5a:a1:e3:26:50:c1:b0:0f:a9:cd:53:9e: bb:9b:a3:8f:32:ad:95:fd:24:bc:2c:00:f3:11:93:73:52:8f: 3a:9b:ce:3e:ac:eb:76:79:af:27:90:87:30:37:a6:ab:28:66: 4a:d9:c6:8f:af:c3:85:f7:66:cc:18:03:07:87:93:a4:e2:53: 46:63:cf:59:9f:f2:05:7b:07:3d:c2:3c:bd:b1:de:1e:71:54: cc:d9:e7:70:a9:47:1b:91:b2:fb:7c:54:f5:0b:92:e6:30:33: 5c:7d:b3:18:c0:25:bf:ee:89:e1:6e:80:8d:81:38:8b:e4:95: bc:b9:ec:c9:23:f7:68:ef:fa:18:b9:c3:0b:1d:d1:33:c3:8f: c6:14:c0:67:14:f7:46:2c:a2:2c:f4:5c:02:05:32:a9:b6:bb: db:88:ff:81:7d:6e:9d:8f:e7:b6:be:9a:b1:98:74:02:0b:0b: a0:f8:90:20:68:27:3a:86:c8:8d:02:b0:18:ea:0e:71:44:4d: 33:6e:e6:1a:45:d4:90:2c:ac:8b:33:29:1b:74:73:52:8e:72: 14:80:3e:10 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEuXDPTkfZuTt4PfMcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk NzEwYmVkZTktMDdiZC00YjNmLTg0YjAtMzIyM2RlM2VjOGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd0Oxi9HuasESvizL7xDocsX/RRY0CUs5hsr pe0kIt4R0vqUsKgqXRZWdARNoKyFMm2LcfY7QdLA9JECvd3ZkXPPwPQhBdKI/NC5 dN3vT1/LBQxT+3ykpqx6ld3m1bw3AtaXZ9FNvmg9UuY3L6Ig1V78h0FUh9OcEEiF 9FsNfT8mOyTyKWOaS9E2iIkksVGuQg9uvlH46Y6MO8g2CN48gDDOrPC9EJHc688s j2R6qep6LRfGvudINyvmmbAq5/ZrvsQEVMmEItVicRDE9injeedjgfKiFv92iF7E +i2ManiDbnaVpZyMIq9mLfhwnmf9CvK6P+D055EQfi8L2eBpEwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFERnW7QgDm4B7BSWt6Y6SvNaGN1rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNDRhNzAwOGYtOGM4ZS0z MzkzLWJkNjktYjc4ZTI0YjQzODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxPFMA8E AgACMAkDBwAmB/W1AAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADE3irxsZURjOuDr3QzGS3oAloI7p+VHU AJ86KCw55cTZ8YIZQrMoQeqsWqHjJlDBsA+pzVOeu5ujjzKtlf0kvCwA8xGTc1KP OpvOPqzrdnmvJ5CHMDemqyhmStnGj6/DhfdmzBgDB4eTpOJTRmPPWZ/yBXsHPcI8 vbHeHnFUzNnncKlHG5Gy+3xU9QuS5jAzXH2zGMAlv+6J4W6AjYE4i+SVvLnsySP3 aO/6GLnDCx3RM8OPxhTAZxT3RiyiLPRcAgUyqba724j/gX1unY/ntr6asZh0AgsL oPiQIGgnOobIjQKwGOoOcURNM27mGkXUkCysizMpG3RzUo5yFIA+EA== -----END CERTIFICATE-----Generated at Wed Nov 5 19:46:16 2025 by rpki-client