$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d7fa1618-3b8b-300b-b6b6-f46b616c77d2.roa File: d7fa1618-3b8b-300b-b6b6-f46b616c77d2.roa (raw, json) Hash identifier: 4WYhac1VO/oGfdTo3y6A+59y4ioAaLw1BY5KGNJH4GI= Subject key identifier: 55:AC:CF:AF:90:0D:F9:5B:B8:44:DF:61:D7:A2:A4:8A:EA:6C:A8:27 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584B970CF247070ADE608836F500 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d7fa1618-3b8b-300b-b6b6-f46b616c77d2.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 136988 IP address blocks: 23.19.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f2:47:07:0a:de:60:88:36:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=96e4d381-765d-40fd-b7f9-af14f5f8330d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6a:73:0d:5c:8e:19:b8:ef:18:3d:d7:b9:86: 68:64:bb:9f:1b:22:d7:6a:3e:88:8f:68:a4:95:c1: dd:6c:42:0c:86:de:7b:55:33:09:00:77:a0:b8:ab: c4:d5:9c:d2:8f:6d:4c:d7:d4:00:49:57:0b:99:36: 8e:c4:ed:4e:81:57:17:51:c2:d3:69:4a:6b:6a:91: 2f:9b:5b:68:50:2b:c8:b9:b3:ed:eb:01:c8:4d:70: a3:6a:0e:de:05:7c:ca:82:74:9c:b6:6d:a8:6f:1d: 51:af:6d:a2:91:bf:42:68:69:14:ce:b0:f9:2b:e6: a0:49:12:d4:c6:18:f0:17:c4:d3:88:b1:3f:22:e9: 87:94:ec:21:93:20:8b:05:8a:c3:12:3c:7d:9a:20: 30:c9:7e:d0:a7:97:3c:72:6b:39:9d:cd:b0:6b:20: 18:3d:0e:76:38:cf:36:63:59:58:88:d8:82:94:fd: 85:02:38:0a:9d:6e:07:00:16:b6:30:8c:ba:5a:cc: fe:5b:eb:9f:8f:ad:a9:b4:49:8f:e6:5a:43:a5:93: bd:7a:44:5b:29:96:ff:b2:25:08:4e:8b:6b:19:cf: 57:6f:f6:cc:ff:77:f9:21:5c:68:d3:89:a1:dc:df: f4:24:ad:ef:9f:b9:7e:ad:68:71:ea:a6:66:50:a4: 81:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:AC:CF:AF:90:0D:F9:5B:B8:44:DF:61:D7:A2:A4:8A:EA:6C:A8:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d7fa1618-3b8b-300b-b6b6-f46b616c77d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:27:c5:e4:b2:6a:d2:8b:c0:da:82:fe:5c:eb:64:9d:f1:4d: 48:7d:b7:41:34:b2:c0:eb:a1:02:2d:73:43:8a:39:b5:d7:96: 98:5d:f6:62:48:4e:63:f8:55:85:0a:d1:21:12:3d:ec:88:8b: e8:35:de:13:1c:9e:d8:62:8e:b3:65:9f:d3:d8:44:2a:4f:f6: 37:c3:f2:19:7e:bb:73:a9:d5:77:3f:41:0c:98:fe:fe:6c:f3: 73:cf:2c:ac:88:bb:17:9b:2a:2b:50:55:bd:23:17:52:af:0c: 1d:7c:48:b4:0b:bd:39:db:56:ac:97:69:82:d1:7f:a7:30:e9: de:49:e5:3f:fc:ed:ed:d4:1f:9f:d1:0b:c3:c7:ae:84:d6:7d: d6:d6:8b:73:69:7b:fa:ec:1f:b8:c4:b7:97:04:2e:0e:68:d3: 77:57:14:a2:8f:db:50:d9:30:0e:1a:72:c6:52:f7:9b:49:55: 0b:c2:b3:d3:35:6c:e5:06:25:69:6d:4f:ef:e0:79:7c:45:e5: 26:1d:a3:e6:96:20:e6:32:73:bb:37:d2:e3:d2:f1:35:dd:b9: 5d:b4:83:43:b0:ea:e2:11:14:5c:16:00:6d:f5:ff:ca:59:9d: ed:7e:ea:49:d0:18:0c:83:f6:75:05:18:f2:24:26:a9:05:e3: 69:5b:33:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDPJHBwreYIg29QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk OTZlNGQzODEtNzY1ZC00MGZkLWI3ZjktYWYxNGY1ZjgzMzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmpzDVyOGbjvGD3XuYZoZLufGyLXaj6Ij2ik lcHdbEIMht57VTMJAHeguKvE1ZzSj21M19QASVcLmTaOxO1OgVcXUcLTaUprapEv m1toUCvIubPt6wHITXCjag7eBXzKgnSctm2obx1Rr22ikb9CaGkUzrD5K+agSRLU xhjwF8TTiLE/IumHlOwhkyCLBYrDEjx9miAwyX7Qp5c8cms5nc2wayAYPQ52OM82 Y1lYiNiClP2FAjgKnW4HABa2MIy6Wsz+W+ufj62ptEmP5lpDpZO9ekRbKZb/siUI TotrGc9Xb/bM/3f5IVxo04mh3N/0JK3vn7l+rWhx6qZmUKSBwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWsz6+QDflbuETfYdeipIrqbKgnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZDdmYTE2MTgtM2I4Yi0z MDBiLWI2YjYtZjQ2YjYxNmM3N2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYnxeSyatKLwNqC/lzrZJ3xTUh9t0E0ssDroQItc0OKObXXlphd9mJI TmP4VYUK0SESPeyIi+g13hMcnthijrNln9PYRCpP9jfD8hl+u3Op1Xc/QQyY/v5s 83PPLKyIuxebKitQVb0jF1KvDB18SLQLvTnbVqyXaYLRf6cw6d5J5T/87e3UH5/R C8PHroTWfdbWi3Npe/rsH7jEt5cELg5o03dXFKKP21DZMA4acsZS95tJVQvCs9M1 bOUGJWltT+/geXxF5SYdo+aWIOYyc7s30uPS8TXduV20g0Ow6uIRFFwWAG31/8pZ ne1+6knQGAyD9nUFGPIkJqkF42lbM4o= -----END CERTIFICATE-----Generated at Wed Nov 5 06:57:59 2025 by rpki-client