$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/494bc969-36fb-3c89-a5c5-f2e89d093b91.roa File: 494bc969-36fb-3c89-a5c5-f2e89d093b91.roa (raw, json) Hash identifier: s6XFsklzbogxMpSYnKG7Vh77FXqyvmzswpyiOSSsjJM= Subject key identifier: BE:FA:33:8F:4E:E8:5C:D9:EE:CF:E0:E2:D1:A9:BC:5B:77:64:6B:2F Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584B970CF48B0FDFF149A5396180 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/494bc969-36fb-3c89-a5c5-f2e89d093b91.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 396190 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f4:8b:0f:df:f1:49:a5:39:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=0fb0e9ef-8c19-419a-80e0-ea35b25582f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:84:c7:cc:3a:21:27:eb:2b:0a:2c:76:fe:a0: d1:2e:8f:83:75:2b:ba:27:39:68:e3:cd:85:b7:ac: 72:3a:e3:29:f5:d0:0c:76:3a:21:e2:f4:26:95:68: a3:7e:55:3c:df:e1:2b:69:95:7f:89:57:25:5a:c2: 50:82:fd:30:fb:67:74:34:81:33:b7:7c:4d:04:1e: 51:9f:60:6d:22:45:9b:a5:f4:fc:18:dc:c9:a4:9d: dd:c4:ba:41:e6:62:f5:f3:b5:4f:98:ea:b0:3d:79: e0:75:e0:b3:bc:98:8e:0f:cd:c8:54:a4:7c:a2:2a: 28:98:2c:75:09:e2:7a:0e:6a:16:4b:b9:52:f9:19: d8:ed:bb:c9:70:5c:ca:31:07:6e:29:b9:50:36:12: 8b:33:a7:7c:b8:91:89:19:73:62:39:c6:7c:c6:e6: 21:e4:8f:55:1d:2b:d0:7c:0a:e6:1d:a4:e3:64:05: c0:35:63:58:61:61:d0:ee:79:c3:79:0e:82:6a:8f: 67:e1:98:ba:c9:86:15:a6:7e:0a:8a:56:03:e3:f5: 6d:40:d3:4d:7e:ae:5d:bb:94:2b:80:11:45:c8:e6: 71:a0:a3:da:e6:41:ff:1a:3b:98:de:32:24:f8:e6: b7:b2:05:8d:07:ba:dd:f8:a3:88:d1:a7:fc:66:44: 1b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:FA:33:8F:4E:E8:5C:D9:EE:CF:E0:E2:D1:A9:BC:5B:77:64:6B:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/494bc969-36fb-3c89-a5c5-f2e89d093b91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:13:d1:ca:1c:57:2e:81:4c:da:0d:fb:70:33:9f:e8:2e:70: c9:27:ef:2c:83:16:ec:6f:dc:52:b3:31:13:de:25:50:98:26: e6:7a:1e:6f:81:2b:5a:39:5d:2c:60:11:bc:ec:c6:1d:c8:d9: 91:d2:b5:c2:87:ea:bb:ee:b0:ab:99:dc:b3:35:8e:1c:d5:ec: b9:92:02:ac:ff:8e:45:b1:89:0e:14:25:3a:a8:3d:ba:0f:7c: 51:80:44:f4:1b:b3:04:7c:b5:c5:b1:e7:62:b3:7b:ed:4a:dc: 44:dd:9b:48:c4:26:5d:44:a6:84:40:2e:53:9c:ea:16:34:eb: 81:62:34:61:e6:5e:23:71:3f:e2:e1:02:ad:6e:b4:63:ad:99: 22:d8:ce:01:2f:99:34:12:a3:11:d9:01:66:a3:3b:59:c2:23: 90:72:cd:20:19:2c:41:bb:ee:b1:31:68:ae:08:83:28:b9:3b: 16:5b:c6:1c:72:6b:6d:38:11:bb:2b:77:9d:97:58:f5:28:88: 9d:a9:41:d2:3f:43:8d:61:4c:64:97:15:fd:4e:64:2e:31:a5: 5f:74:a2:d9:34:e5:bf:41:96:85:63:da:bd:31:8b:60:0d:40: b4:b4:8e:a5:8b:54:05:ed:cd:0e:63:70:6f:f9:a9:18:db:f0: 4b:41:ab:17 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEuXDPSLD9/xSaU5YYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk MGZiMGU5ZWYtOGMxOS00MTlhLTgwZTAtZWEzNWIyNTU4MmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ITHzDohJ+srCix2/qDRLo+DdSu6Jzlo482F t6xyOuMp9dAMdjoh4vQmlWijflU83+EraZV/iVclWsJQgv0w+2d0NIEzt3xNBB5R n2BtIkWbpfT8GNzJpJ3dxLpB5mL187VPmOqwPXngdeCzvJiOD83IVKR8oioomCx1 CeJ6DmoWS7lS+RnY7bvJcFzKMQduKblQNhKLM6d8uJGJGXNiOcZ8xuYh5I9VHSvQ fArmHaTjZAXANWNYYWHQ7nnDeQ6Cao9n4Zi6yYYVpn4KilYD4/VtQNNNfq5du5Qr gBFFyOZxoKPa5kH/GjuY3jIk+Oa3sgWNB7rd+KOI0af8ZkQb+QIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFL76M49O6FzZ7s/g4tGpvFt3ZGsvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNDk0YmM5NjktMzZmYi0z Yzg5LWE1YzUtZjJlODlkMDkzYjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADxPRyhxXLoFM2g37cDOf6C5wySfvLIMW 7G/cUrMxE94lUJgm5noeb4ErWjldLGARvOzGHcjZkdK1wofqu+6wq5ncszWOHNXs uZICrP+ORbGJDhQlOqg9ug98UYBE9BuzBHy1xbHnYrN77UrcRN2bSMQmXUSmhEAu U5zqFjTrgWI0YeZeI3E/4uECrW60Y62ZItjOAS+ZNBKjEdkBZqM7WcIjkHLNIBks QbvusTForgiDKLk7FlvGHHJrbTgRuyt3nZdY9SiInalB0j9DjWFMZJcV/U5kLjGl X3Si2TTlv0GWhWPavTGLYA1AtLSOpYtUBe3NDmNwb/mpGNvwS0GrFw== -----END CERTIFICATE-----Generated at Wed Nov 5 04:38:17 2025 by rpki-client