$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/980a16b1-7521-3b19-9838-27c21280ee09.roa File: 980a16b1-7521-3b19-9838-27c21280ee09.roa (raw, json) Hash identifier: ocOcw0eo6wk+S+GwzfF4Qg3cTF4ibXBZt3EWRgpj3Q8= Subject key identifier: A7:80:61:F9:EB:EA:46:1F:3A:B2:A2:2D:5F:CA:62:09:15:F6:92:25 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584B970CF47A3E468AF72A047E80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/980a16b1-7521-3b19-9838-27c21280ee09.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 136988 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f4:7a:3e:46:8a:f7:2a:04:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=c27188c5-4945-4a3b-9792-a7bd6d0ca5dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9c:a3:3f:4a:00:20:79:ed:c0:25:ce:94:94: 38:9e:64:74:62:bf:37:23:cf:b1:45:8d:ec:4b:3a: f9:30:12:cb:98:75:52:a6:c4:0d:90:e2:d5:dd:c2: c3:6c:4c:45:8b:59:62:98:a3:f7:c1:c7:1f:41:b8: dc:cf:01:5b:d7:2e:e8:80:fe:59:ed:08:60:9d:09: c0:f0:17:f3:f0:01:f0:f8:88:f4:e7:77:e3:b9:fc: ee:0c:f7:f1:44:e5:d2:2e:30:ac:89:b5:3d:4d:9c: d0:71:5b:5a:2b:23:5a:09:51:15:49:3d:0d:7e:c5: a1:c7:8a:42:27:8a:34:78:46:bc:4e:dd:55:11:c4: d6:95:e3:38:b7:8b:0a:d1:52:47:1e:22:c8:c3:b7: 66:55:49:ab:ee:05:70:30:8b:84:04:34:c1:05:5e: 1d:b8:f5:a0:d5:b8:21:ce:c7:41:9f:53:6d:c5:71: 83:2d:90:b4:f1:d6:28:6e:93:c1:80:ea:9c:dc:c3: 41:0f:0e:a2:97:b5:2e:91:e6:14:de:d7:4e:45:7d: 19:4f:77:b2:f2:80:e3:6f:4e:66:7e:20:b4:c6:a3: 89:ce:55:15:5a:e0:34:d4:79:ab:31:fd:4e:1a:ea: 49:05:05:b0:c5:dd:18:3f:81:97:15:66:8f:6d:e0: 43:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:80:61:F9:EB:EA:46:1F:3A:B2:A2:2D:5F:CA:62:09:15:F6:92:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/980a16b1-7521-3b19-9838-27c21280ee09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:b7:be:28:77:6f:f9:86:38:d8:6d:09:9e:ad:25:4b:fa:66: 0e:f8:0f:8b:2e:12:f4:8a:b8:d2:67:02:f3:ee:80:d6:fd:75: c9:38:8e:46:0d:73:26:a2:e3:df:fc:92:14:ba:b5:f2:c3:31: b5:10:45:f1:df:b7:8d:73:59:0e:c7:a1:1a:ef:34:76:c8:db: 8e:d9:d8:52:1d:04:a0:28:35:96:9a:4d:15:8e:c6:23:51:aa: c2:59:6b:4d:3a:c9:42:bf:d7:ff:53:7f:3c:50:fb:3f:3e:ca: cb:3a:e7:a7:a6:0e:fa:c8:dc:6a:12:19:45:70:05:2e:94:96: 97:fd:42:b3:4e:a5:48:3d:74:f8:88:b8:40:b7:98:14:c9:7d: 3c:cf:14:05:38:c7:76:ed:ea:45:a7:5c:a4:1d:32:a0:a8:46: 9c:00:75:c0:70:83:17:1d:02:af:19:fa:20:d8:62:59:78:b2: ab:73:28:45:98:a9:de:98:a4:95:eb:12:80:8d:52:5a:93:b5: 5c:7d:39:27:22:36:bc:fa:10:f8:69:92:f9:02:3b:10:06:ae: e9:68:a1:a1:db:f2:9c:f9:ed:3f:90:39:e2:a8:4e:79:f8:81: 4c:f3:a4:ac:81:1f:c5:4a:12:66:4d:16:ba:ad:cb:12:4a:48: 7f:6f:2d:ba -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEuXDPR6PkaK9yoEfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk YzI3MTg4YzUtNDk0NS00YTNiLTk3OTItYTdiZDZkMGNhNWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpyjP0oAIHntwCXOlJQ4nmR0Yr83I8+xRY3s Szr5MBLLmHVSpsQNkOLV3cLDbExFi1limKP3wccfQbjczwFb1y7ogP5Z7QhgnQnA 8Bfz8AHw+Ij053fjufzuDPfxROXSLjCsibU9TZzQcVtaKyNaCVEVST0NfsWhx4pC J4o0eEa8Tt1VEcTWleM4t4sK0VJHHiLIw7dmVUmr7gVwMIuEBDTBBV4duPWg1bgh zsdBn1NtxXGDLZC08dYobpPBgOqc3MNBDw6il7UukeYU3tdORX0ZT3ey8oDjb05m fiC0xqOJzlUVWuA01HmrMf1OGupJBQWwxd0YP4GXFWaPbeBDWQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFKeAYfnr6kYfOrKiLV/KYgkV9pIlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvOTgwYTE2YjEtNzUyMS0z YjE5LTk4MzgtMjdjMjEyODBlZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEArbe+KHdv+YY42G0Jnq0lS/pmDvgPiy4S 9Iq40mcC8+6A1v11yTiORg1zJqLj3/ySFLq18sMxtRBF8d+3jXNZDsehGu80dsjb jtnYUh0EoCg1lppNFY7GI1GqwllrTTrJQr/X/1N/PFD7Pz7Kyzrnp6YO+sjcahIZ RXAFLpSWl/1Cs06lSD10+Ii4QLeYFMl9PM8UBTjHdu3qRadcpB0yoKhGnAB1wHCD Fx0Crxn6INhiWXiyq3MoRZip3piklesSgI1SWpO1XH05JyI2vPoQ+GmS+QI7EAau 6WihodvynPntP5A54qhOefiBTPOkrIEfxUoSZk0Wuq3LEkpIf28tug== -----END CERTIFICATE-----Generated at Wed Nov 5 10:57:36 2025 by rpki-client