$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/beaa5cfd-2ca5-306e-9d94-088d7c9f721d.roa File: beaa5cfd-2ca5-306e-9d94-088d7c9f721d.roa (raw, json) Hash identifier: qFpgI08X84kKZUXBUFD0QT5p5VU6p+0TJFsxpKX+eWI= Subject key identifier: 08:A6:5D:E7:C4:EA:1A:CA:CE:A4:97:03:F1:CC:D1:21:00:3B:78:03 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584B970CF3FCFDCEFCDA2D290163 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/beaa5cfd-2ca5-306e-9d94-088d7c9f721d.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 396362 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f3:fc:fd:ce:fc:da:2d:29:01:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=cdede374-737f-4e73-9673-30db09a65308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:89:2d:d7:b8:ce:55:ca:4d:05:a5:a3:7a:cc: 1a:5d:33:10:9e:d1:b1:3e:92:e4:f3:69:13:ad:17: a6:7a:40:8d:d8:07:fc:97:7f:50:98:11:c9:69:10: 6e:18:26:e3:3e:26:f6:c7:e1:c1:79:83:10:ad:a5: 03:91:59:bd:a9:34:4e:57:43:fc:da:ca:fb:67:02: be:b2:df:13:11:3c:6c:13:03:78:69:39:b4:28:fe: 9e:ad:af:5b:e8:93:4d:6e:24:5b:59:67:7c:4b:2d: 24:f3:53:ee:ad:3d:e2:1f:44:1f:b5:7f:d8:de:d0: 8f:fe:66:40:c3:4b:1b:b4:eb:b0:7c:f8:23:6d:8a: 15:48:2c:5a:f7:59:15:9c:e2:7d:86:47:7e:97:ca: 50:b9:c8:3d:4e:27:ab:eb:83:af:9f:df:80:92:f6: fb:68:74:07:2c:4d:3c:82:9f:9d:e5:75:2d:af:a8: aa:18:73:74:e7:c9:a9:c8:b3:91:50:5d:55:6e:2b: 2e:65:a2:ee:18:fb:ec:59:d5:a1:da:7f:84:8f:5c: 74:7b:e1:85:2a:cb:54:b0:44:af:3d:dc:09:a4:fa: fe:50:ae:54:ba:f5:70:28:d6:e4:df:2a:7e:80:b7: 1d:f9:a9:f8:94:b6:c0:59:fe:2c:54:4f:e7:3e:83: 30:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A6:5D:E7:C4:EA:1A:CA:CE:A4:97:03:F1:CC:D1:21:00:3B:78:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/beaa5cfd-2ca5-306e-9d94-088d7c9f721d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:03:75:3c:7b:19:a1:c6:01:a9:9a:9d:f8:17:37:88:ed:d8: dd:a6:fc:99:e2:4d:20:4f:d1:08:1e:5b:f7:40:6b:77:88:dd: 7f:f1:82:b4:c1:94:dd:d0:b6:84:b0:43:29:fc:29:6e:38:51: f3:1b:f3:cc:3f:cd:ee:a3:4b:36:af:87:bc:b2:c5:0e:47:71: 77:b8:69:40:b1:45:69:29:3f:0f:b4:4c:8a:9e:35:7e:bb:18: 6b:a2:cd:74:7f:14:51:b8:bb:49:09:a1:e2:ed:14:02:d1:af: d0:19:f8:55:2d:17:9a:3a:47:67:d1:58:d2:3b:95:b6:14:9f: 2e:c3:6c:45:59:38:da:e1:9b:d1:cd:92:1b:61:20:eb:48:5f: 40:3d:8e:a2:ad:ec:7d:dc:8c:f9:0f:c8:e3:01:28:da:48:60: d0:9f:e8:a6:ea:d7:b2:32:96:4a:58:16:7a:ed:3f:a3:3f:d6: 03:d4:26:75:79:18:a4:88:77:91:d7:41:a3:43:9f:61:ec:78: e0:7d:92:cd:4e:60:85:8b:c0:df:0c:aa:7a:a4:4a:b0:44:f5: 68:59:47:92:9d:be:bf:67:22:71:15:37:bf:e5:72:49:f8:82: 34:db:42:7e:8d:9b:e3:20:31:26:b3:4e:9e:ad:75:93:c4:14: 3c:32:05:0c -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEuXDPP8/c782i0pAWMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk Y2RlZGUzNzQtNzM3Zi00ZTczLTk2NzMtMzBkYjA5YTY1MzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYkt17jOVcpNBaWjeswaXTMQntGxPpLk82kT rRemekCN2Af8l39QmBHJaRBuGCbjPib2x+HBeYMQraUDkVm9qTROV0P82sr7ZwK+ st8TETxsEwN4aTm0KP6era9b6JNNbiRbWWd8Sy0k81PurT3iH0QftX/Y3tCP/mZA w0sbtOuwfPgjbYoVSCxa91kVnOJ9hkd+l8pQucg9Tier64Ovn9+Akvb7aHQHLE08 gp+d5XUtr6iqGHN058mpyLORUF1VbisuZaLuGPvsWdWh2n+Ej1x0e+GFKstUsESv PdwJpPr+UK5UuvVwKNbk3yp+gLcd+an4lLbAWf4sVE/nPoMwLwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFAimXefE6hrKzqSXA/HM0SEAO3gDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYmVhYTVjZmQtMmNhNS0z MDZlLTlkOTQtMDg4ZDdjOWY3MjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACQN1PHsZocYBqZqd+Bc3iO3Y3ab8meJN IE/RCB5b90Brd4jdf/GCtMGU3dC2hLBDKfwpbjhR8xvzzD/N7qNLNq+HvLLFDkdx d7hpQLFFaSk/D7RMip41frsYa6LNdH8UUbi7SQmh4u0UAtGv0Bn4VS0XmjpHZ9FY 0juVthSfLsNsRVk42uGb0c2SG2Eg60hfQD2Ooq3sfdyM+Q/I4wEo2khg0J/opurX sjKWSlgWeu0/oz/WA9QmdXkYpIh3kddBo0OfYex44H2SzU5ghYvA3wyqeqRKsET1 aFlHkp2+v2cicRU3v+VySfiCNNtCfo2b4yAxJrNOnq11k8QUPDIFDA== -----END CERTIFICATE-----Generated at Wed Nov 5 01:56:49 2025 by rpki-client