$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d6d31bd6-e13a-3d53-ab6c-9794fd535cb0.roa File: d6d31bd6-e13a-3d53-ab6c-9794fd535cb0.roa (raw, json) Hash identifier: x+euKyoWJ/AwrgK0IyQhD9q8WQUZxc+rWP6WepGDd9M= Subject key identifier: E0:52:AE:5E:CD:EF:32:A5:46:EE:32:6B:3A:32:DC:D0:13:94:62:18 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584B970CF40EE2E2507FE2F53C20 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d6d31bd6-e13a-3d53-ab6c-9794fd535cb0.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 394380 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f4:0e:e2:e2:50:7f:e2:f5:3c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=6d9ed9cf-9796-4934-b42c-ed25384f5460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:49:94:21:f3:40:8c:85:88:4d:90:bc:08:b8: 7f:4e:0a:93:34:f0:6e:56:55:59:0a:cd:90:25:1b: 53:b2:2b:ac:4e:e9:3d:b6:34:42:19:e3:00:2a:4d: 5b:dd:56:ac:f5:f4:05:cd:ab:2b:a5:f8:e1:92:b4: 67:d4:bd:71:cb:3b:1e:d4:3f:41:10:05:5a:5a:8a: 9f:43:90:ac:b7:fc:61:a1:00:0e:77:01:08:b4:8d: 6c:bc:a7:82:09:9b:7b:44:67:29:ab:c6:9b:80:81: 75:1a:0b:d0:f0:9b:53:60:a5:14:ed:0b:3e:1c:2f: 81:d3:cd:15:23:0b:de:78:fe:24:19:75:b9:3e:1a: 99:b9:5a:7f:fb:f8:92:e0:3d:bd:7e:d2:39:91:a8: e3:e8:aa:90:1a:87:c9:b1:7d:46:99:20:98:bf:a0: 38:0d:c2:d3:ad:d2:72:a8:b5:28:15:c1:90:3d:c5: 39:6a:51:af:33:78:3d:c5:64:10:2e:8d:6f:f0:da: 98:8c:37:37:22:4d:73:2a:b8:59:25:7c:f4:54:93: e4:03:7b:03:cb:49:5b:96:dd:e8:c8:27:03:0e:80: de:f2:0d:cd:61:c8:e7:68:8d:64:1c:c0:c5:ea:ad: 30:54:be:0e:19:09:5b:c9:6a:78:48:27:e9:49:fd: 63:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:52:AE:5E:CD:EF:32:A5:46:EE:32:6B:3A:32:DC:D0:13:94:62:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d6d31bd6-e13a-3d53-ab6c-9794fd535cb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:03:29:06:2d:9b:5e:c9:f2:b7:0b:0d:e3:0f:01:44:27:6a: 7b:43:de:d8:e9:c3:4f:59:ea:20:ed:98:5a:1c:08:de:42:48: 71:77:d7:93:2e:20:ce:3b:fd:af:6f:68:6a:66:53:69:4b:91: 15:60:94:72:0d:c7:5e:6a:86:36:e8:93:73:55:b1:50:9f:52: c0:0d:7a:70:64:b7:91:a4:94:6a:22:fc:95:02:15:b9:4f:dd: ac:1b:16:5c:6f:71:9a:76:77:ee:e1:2f:22:4e:b0:c7:38:a0: 0c:69:d4:eb:16:ad:4d:e3:0c:40:20:02:e5:6e:0d:fd:e3:e7: 28:45:49:3c:34:ed:b7:02:91:43:99:d4:96:5b:e0:5f:bd:66: 46:6c:49:4e:42:8a:43:b2:39:1f:64:43:15:c1:ac:e9:98:cf: da:8f:e4:43:e7:1c:e9:92:a0:fc:ca:fb:b3:01:82:ca:18:86: d7:f2:d1:82:6d:36:02:ba:42:5b:a3:e4:c1:8d:12:01:25:ea: 8a:3c:d6:83:8e:15:4b:81:cc:42:5c:f6:bc:94:f2:4b:b5:7e: fc:27:fe:99:38:0b:ac:13:eb:2a:a4:75:45:3e:57:b6:c3:b3: 9c:84:e4:32:fd:cb:c9:06:5e:8d:35:05:4b:34:25:8b:da:40: 0e:fc:b6:0b -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEuXDPQO4uJQf+L1PCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk NmQ5ZWQ5Y2YtOTc5Ni00OTM0LWI0MmMtZWQyNTM4NGY1NDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0mUIfNAjIWITZC8CLh/TgqTNPBuVlVZCs2Q JRtTsiusTuk9tjRCGeMAKk1b3Vas9fQFzasrpfjhkrRn1L1xyzse1D9BEAVaWoqf Q5Cst/xhoQAOdwEItI1svKeCCZt7RGcpq8abgIF1GgvQ8JtTYKUU7Qs+HC+B080V IwveeP4kGXW5PhqZuVp/+/iS4D29ftI5kajj6KqQGofJsX1GmSCYv6A4DcLTrdJy qLUoFcGQPcU5alGvM3g9xWQQLo1v8NqYjDc3Ik1zKrhZJXz0VJPkA3sDy0lblt3o yCcDDoDe8g3NYcjnaI1kHMDF6q0wVL4OGQlbyWp4SCfpSf1joQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFOBSrl7N7zKlRu4yazoy3NATlGIYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZDZkMzFiZDYtZTEzYS0z ZDUzLWFiNmMtOTc5NGZkNTM1Y2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEApQMpBi2bXsnytwsN4w8BRCdqe0Pe2OnD T1nqIO2YWhwI3kJIcXfXky4gzjv9r29oamZTaUuRFWCUcg3HXmqGNuiTc1WxUJ9S wA16cGS3kaSUaiL8lQIVuU/drBsWXG9xmnZ37uEvIk6wxzigDGnU6xatTeMMQCAC 5W4N/ePnKEVJPDTttwKRQ5nUllvgX71mRmxJTkKKQ7I5H2RDFcGs6ZjP2o/kQ+cc 6ZKg/Mr7swGCyhiG1/LRgm02ArpCW6PkwY0SASXqijzWg44VS4HMQlz2vJTyS7V+ /Cf+mTgLrBPrKqR1RT5XtsOznITkMv3LyQZejTUFSzQli9pADvy2Cw== -----END CERTIFICATE-----Generated at Wed Nov 5 12:11:40 2025 by rpki-client