$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d0e88601-8d43-3d7d-8163-2756a51593f0.roa File: d0e88601-8d43-3d7d-8163-2756a51593f0.roa (raw, json) Hash identifier: ZzScRfbe3JUNaNChk32ornCOt01BJT+7ThxXzzQr1n4= Subject key identifier: 49:BB:05:29:C3:23:97:97:90:B5:9A:3F:DF:CF:2A:74:F9:E3:E7:F9 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584B970CF1D15E553681B0F3C980 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d0e88601-8d43-3d7d-8163-2756a51593f0.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 396362 IP address blocks: 23.19.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f1:d1:5e:55:36:81:b0:f3:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=4acab1b4-052a-42d0-8c98-bbcd892a41c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1e:c6:a5:41:29:77:8c:b6:bb:b0:6f:ca:49: 15:ad:8c:70:82:67:c8:5c:57:9f:5d:bd:5c:d4:22: 44:37:a1:34:b0:0c:bc:a4:3c:4c:1b:86:12:4b:ef: 62:d5:8b:80:35:55:9a:17:40:a7:56:c3:d3:17:d5: 3a:89:8d:e8:14:76:4d:4a:54:3a:ac:56:5f:2c:fe: 53:5c:b6:2a:15:15:59:e1:e3:7d:16:0d:df:8a:9d: 5a:8e:cf:db:f2:a5:95:4d:6e:88:41:89:b2:b0:88: 5b:90:d3:70:c8:d5:40:47:21:45:ac:87:25:57:e1: b7:e9:2e:4f:52:9a:34:9c:5d:f3:d2:f3:5c:20:ac: d1:53:f9:52:1d:2e:8c:0d:57:02:75:64:f2:21:d3: 4d:61:df:47:94:92:99:8d:e5:2d:2c:ef:3f:2f:4e: 8e:86:71:f9:86:80:b5:37:ba:58:3e:36:f6:6b:05: e1:4b:fa:6c:b5:70:93:c9:e3:42:bf:9b:d6:33:fb: c3:5f:f5:1d:c1:82:64:72:20:88:84:f9:52:c9:d3: d8:95:7d:3c:62:51:e9:d4:1a:5f:b1:e2:aa:b8:e6: 09:7e:1f:ed:e0:94:17:2c:b1:19:70:c9:df:a5:e8: dd:f4:00:ee:41:ef:05:a2:4e:e7:4b:2e:b4:99:ae: 9f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:BB:05:29:C3:23:97:97:90:B5:9A:3F:DF:CF:2A:74:F9:E3:E7:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d0e88601-8d43-3d7d-8163-2756a51593f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:37:6e:d8:3c:91:58:d8:f8:4d:0e:67:71:80:54:5d:7c:e3: 3f:ab:97:81:85:fd:d0:0d:f8:38:1f:ec:6c:72:71:80:88:a1: 01:cc:a4:96:b6:44:0c:2d:76:30:d0:83:d4:ae:e0:ae:9c:1e: 48:20:6a:39:63:64:bc:a7:04:57:64:39:95:81:08:97:ab:ca: 33:2f:59:e3:f2:41:2d:df:be:96:b6:c6:f7:ad:af:0a:f6:a4: a6:e1:9e:b7:f0:b6:19:3c:ce:22:4a:16:e6:60:36:47:88:36: 7f:84:57:b8:2f:4a:da:22:fa:a2:b5:24:2e:5f:4e:ef:01:31: 80:25:8c:f0:10:44:ba:4f:90:8f:f1:12:df:ab:d2:e5:f6:04: 4c:af:84:cd:ed:c6:64:2d:a6:fe:cc:69:47:09:b1:83:28:a5: bc:a9:11:21:87:5d:47:e5:b5:5f:9b:4b:67:8d:46:5a:c7:a9: b7:af:f2:6b:0a:4d:58:40:3e:00:04:37:77:6c:6f:83:51:25: 4d:e2:a0:e6:d7:25:23:e5:16:a8:9e:e1:da:6b:e4:ef:b2:9f: b3:95:19:b7:7a:93:ad:ad:ba:cd:96:09:b3:8d:da:40:ad:56: 19:5b:7f:3e:4d:cc:e7:ea:2e:2c:a5:61:21:cb:3a:d5:c1:9b: b9:44:96:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDPHRXlU2gbDzyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk NGFjYWIxYjQtMDUyYS00MmQwLThjOTgtYmJjZDg5MmE0MWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx7GpUEpd4y2u7BvykkVrYxwgmfIXFefXb1c 1CJEN6E0sAy8pDxMG4YSS+9i1YuANVWaF0CnVsPTF9U6iY3oFHZNSlQ6rFZfLP5T XLYqFRVZ4eN9Fg3fip1ajs/b8qWVTW6IQYmysIhbkNNwyNVARyFFrIclV+G36S5P Upo0nF3z0vNcIKzRU/lSHS6MDVcCdWTyIdNNYd9HlJKZjeUtLO8/L06OhnH5hoC1 N7pYPjb2awXhS/pstXCTyeNCv5vWM/vDX/UdwYJkciCIhPlSydPYlX08YlHp1Bpf seKquOYJfh/t4JQXLLEZcMnfpejd9ADuQe8Fok7nSy60ma6fqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEm7BSnDI5eXkLWaP9/PKnT54+f5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZDBlODg2MDEtOGQ0My0z ZDdkLTgxNjMtMjc1NmE1MTU5M2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG43btg8kVjY+E0OZ3GAVF184z+rl4GF/dAN+Dgf7GxycYCIoQHMpJa2 RAwtdjDQg9Su4K6cHkggajljZLynBFdkOZWBCJeryjMvWePyQS3fvpa2xvetrwr2 pKbhnrfwthk8ziJKFuZgNkeINn+EV7gvStoi+qK1JC5fTu8BMYAljPAQRLpPkI/x Et+r0uX2BEyvhM3txmQtpv7MaUcJsYMopbypESGHXUfltV+bS2eNRlrHqbev8msK TVhAPgAEN3dsb4NRJU3ioObXJSPlFqie4dpr5O+yn7OVGbd6k62tus2WCbON2kCt Vhlbfz5NzOfqLiylYSHLOtXBm7lElsM= -----END CERTIFICATE-----Generated at Wed Nov 5 09:13:14 2025 by rpki-client