$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/86cf6b8d-588c-3655-91c4-daa30a58f113.roa File: 86cf6b8d-588c-3655-91c4-daa30a58f113.roa (raw, json) Hash identifier: mSI8LRUurCbZ8RfCJc2wZ2UgySAhPyyisIZS5YOFs50= Subject key identifier: 43:F6:9D:E4:B3:F0:40:49:AB:90:17:9F:DD:72:C9:75:04:27:0A:E7 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584B970CF1DFFC23E4811E3A7520 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/86cf6b8d-588c-3655-91c4-daa30a58f113.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 394380 IP address blocks: 23.19.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f1:df:fc:23:e4:81:1e:3a:75:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=de4279ef-accb-4768-8a09-30cbebf9c579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7d:f6:61:77:43:36:58:51:53:11:81:90:db: 18:2c:6b:86:18:f2:fa:13:17:3f:ae:5c:5d:57:d4: e5:12:2c:17:d7:77:b6:dc:a7:c1:b8:5a:9a:ae:fb: 32:b8:b5:85:7f:f0:77:ab:5c:1b:f6:76:6f:16:c1: ae:09:e1:6f:64:ab:28:53:8f:d2:40:20:d0:86:d8: cf:c7:6d:99:a2:27:49:35:77:64:c9:08:52:ad:47: ef:d2:a3:9c:f0:5b:aa:2f:41:2c:d8:1e:84:2c:c8: 92:90:05:85:79:36:0a:e9:d9:93:e4:73:f2:e1:6e: f4:9b:7a:f4:f5:e2:18:64:f0:1a:d2:50:16:31:f1: 17:6d:91:5a:91:c0:24:ef:09:b8:b5:e7:d4:3b:aa: 6f:1b:da:e6:83:23:3b:a5:6b:6d:3f:42:52:e1:5c: a2:ee:44:1c:f0:bf:39:8a:a9:7c:e4:c2:42:2c:00: b7:43:13:54:c8:bf:06:76:79:b7:76:08:e6:79:33: e5:07:e3:9b:44:fc:22:bc:74:d1:a4:9c:c9:a6:93: 92:09:e5:c3:2d:eb:4a:ff:58:0c:ff:c3:6e:76:f0: 12:a1:47:bf:8f:0b:f7:07:76:c8:71:a8:ef:55:49: 43:5b:9a:b3:3c:da:49:df:d8:a5:67:fd:51:d4:85: 18:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F6:9D:E4:B3:F0:40:49:AB:90:17:9F:DD:72:C9:75:04:27:0A:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/86cf6b8d-588c-3655-91c4-daa30a58f113.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:e5:0c:96:44:49:a7:70:43:3d:7a:af:cf:65:24:26:92:13: fa:01:a4:fd:fb:a0:93:bf:19:a5:39:e6:61:55:e6:6a:8f:9f: c3:48:cd:5d:d7:68:39:3e:7e:88:ee:b3:a7:69:c7:7f:c5:9e: a9:38:fc:07:f5:27:74:f6:15:85:95:7b:b2:22:3a:e4:dd:d2: 8c:16:90:5b:63:7e:6b:e2:11:f1:50:ae:dc:88:15:6b:d4:b8: a6:c8:0e:d5:72:77:9a:61:4f:5c:87:5d:69:c0:57:0c:32:db: fa:b4:94:9e:ec:92:b8:45:ac:bc:79:8d:e8:f1:14:08:27:25: 81:c0:f5:3b:c5:4a:5a:21:88:62:bf:95:ae:bf:ef:cd:a2:29: 10:ed:2b:33:de:25:01:e4:59:af:13:58:95:6f:39:bd:b7:ea: 6b:ae:74:66:b8:6c:c0:cd:fd:f5:76:51:ca:ee:30:89:f2:6f: 57:b9:85:f2:9b:f7:65:f4:98:7c:1e:4d:4c:d0:bd:f6:11:8a: 52:05:52:a9:04:31:5f:dd:5c:cb:d5:5d:b7:57:e9:1e:6c:1c: 7f:fa:38:2e:87:3e:65:7b:90:16:22:9a:af:cf:b4:57:bf:ea: e9:70:75:7d:46:3f:1a:bd:d4:bb:3e:14:f9:ad:6e:9b:e6:a2: 58:f3:3f:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDPHf/CPkgR46dSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ZGU0Mjc5ZWYtYWNjYi00NzY4LThhMDktMzBjYmViZjljNTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH32YXdDNlhRUxGBkNsYLGuGGPL6Exc/rlxd V9TlEiwX13e23KfBuFqarvsyuLWFf/B3q1wb9nZvFsGuCeFvZKsoU4/SQCDQhtjP x22ZoidJNXdkyQhSrUfv0qOc8FuqL0Es2B6ELMiSkAWFeTYK6dmT5HPy4W70m3r0 9eIYZPAa0lAWMfEXbZFakcAk7wm4tefUO6pvG9rmgyM7pWttP0JS4Vyi7kQc8L85 iql85MJCLAC3QxNUyL8Gdnm3dgjmeTPlB+ObRPwivHTRpJzJppOSCeXDLetK/1gM /8NudvASoUe/jwv3B3bIcajvVUlDW5qzPNpJ39ilZ/1R1IUYPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEP2neSz8EBJq5AXn91yyXUEJwrnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvODZjZjZiOGQtNTg4Yy0z NjU1LTkxYzQtZGFhMzBhNThmMTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALjlDJZESadwQz16r89lJCaSE/oBpP37oJO/GaU55mFV5mqPn8NIzV3X aDk+fojus6dpx3/Fnqk4/Af1J3T2FYWVe7IiOuTd0owWkFtjfmviEfFQrtyIFWvU uKbIDtVyd5phT1yHXWnAVwwy2/q0lJ7skrhFrLx5jejxFAgnJYHA9TvFSlohiGK/ la6/782iKRDtKzPeJQHkWa8TWJVvOb236muudGa4bMDN/fV2UcruMInyb1e5hfKb 92X0mHweTUzQvfYRilIFUqkEMV/dXMvVXbdX6R5sHH/6OC6HPmV7kBYimq/PtFe/ 6ulwdX1GPxq91Ls+FPmtbpvmoljzP70= -----END CERTIFICATE-----Generated at Wed Nov 5 15:56:40 2025 by rpki-client