$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/de537886-8589-3acb-bce9-e8d5e7561ee1.roa File: de537886-8589-3acb-bce9-e8d5e7561ee1.roa (raw, json) Hash identifier: syWM+a2JuR7dKCIiCWAE/deEmvl4E5ug3va+UkatVF0= Subject key identifier: 9D:F5:DD:E8:03:7F:88:E0:C5:DE:92:08:31:BA:19:B6:64:A7:22:34 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584B970CF171FA99F619458CAC80 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/de537886-8589-3acb-bce9-e8d5e7561ee1.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 60781 IP address blocks: 23.19.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f1:71:fa:99:f6:19:45:8c:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=12f9f697-fc37-4753-b092-618231cea822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:25:f9:95:d6:d4:fa:6d:3d:76:06:69:97:54: a7:67:e0:0f:19:03:e1:94:57:4d:bf:a4:29:27:ef: 26:58:98:1b:27:c7:81:c5:2a:15:5e:ff:7b:72:d9: 51:25:b7:db:ca:e5:a6:14:e9:22:13:36:1e:89:8a: ae:83:1b:b9:c0:b4:15:31:08:84:2d:08:dc:90:00: d1:4c:31:1d:4c:18:30:33:e9:46:cd:09:14:95:94: de:15:f4:b8:5d:a3:d3:89:30:e1:25:c0:a8:20:21: 8e:51:2f:cd:ef:45:29:71:92:1b:5c:9c:46:18:df: a6:53:12:55:18:8d:3a:2f:c1:26:fc:ab:7a:3e:c7: d1:51:8e:ca:96:85:57:98:46:b8:b1:33:dc:2c:b3: 41:39:32:76:b0:c3:9b:97:d0:df:f4:bb:4c:fa:4e: ef:eb:42:b2:e2:bf:1f:ee:86:78:e5:85:c2:8c:09: 73:70:70:d1:ca:88:0d:5b:ac:70:ae:b0:db:ca:9a: 0f:1c:55:a6:26:c9:5b:c1:28:87:9b:fa:55:5d:8d: 69:03:85:e8:b8:bc:55:48:fe:2b:c0:28:0f:39:97: 86:0e:2f:d9:45:71:1a:de:76:2d:a6:08:00:a8:3a: e4:4b:8c:73:75:49:4e:ab:82:16:71:82:f0:a0:b6: b5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F5:DD:E8:03:7F:88:E0:C5:DE:92:08:31:BA:19:B6:64:A7:22:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/de537886-8589-3acb-bce9-e8d5e7561ee1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:09:ab:66:e3:c2:95:c7:15:5e:4f:e5:7b:1a:2e:b6:60:99: cd:6d:65:9a:c8:5a:b1:57:46:73:b6:52:37:dd:f0:bb:ae:50: 0f:5f:6d:cb:61:94:dc:a9:d7:bf:f9:4d:0c:e4:15:f7:67:35: 38:fb:97:2a:df:75:b7:bc:85:63:f9:fd:4d:53:d8:b5:df:91: 78:c9:44:de:f7:12:4b:66:0a:6f:9d:92:c8:59:3b:a0:ce:08: fc:3e:18:ba:ee:fb:00:34:a8:62:21:85:17:10:ce:1c:57:1e: 87:10:51:60:89:da:57:91:62:94:4b:e9:8c:18:da:78:78:0f: e1:20:6f:22:e4:7a:69:57:b5:48:49:60:61:66:59:be:11:88: fe:da:ac:5d:38:a4:e8:fc:45:e1:1a:be:5a:a0:74:56:bc:b8: 2d:8f:a3:50:54:89:61:7e:06:6c:5f:62:01:47:60:78:0d:0c: 56:76:8e:b7:de:f1:ba:d8:28:d6:7e:60:a0:07:57:47:0c:5b: 3c:f6:ee:e0:f4:ae:e3:b4:fe:34:a6:c4:56:37:ff:8c:d2:62: 91:cf:38:3d:e2:b2:aa:3c:61:5d:2d:ba:fd:87:d9:52:69:e8: 02:43:b3:2e:ff:c0:71:6a:74:25:a1:4c:a2:1b:78:63:d0:76: ba:3c:22:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDPFx+pn2GUWMrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk MTJmOWY2OTctZmMzNy00NzUzLWIwOTItNjE4MjMxY2VhODIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviX5ldbU+m09dgZpl1SnZ+APGQPhlFdNv6Qp J+8mWJgbJ8eBxSoVXv97ctlRJbfbyuWmFOkiEzYeiYqugxu5wLQVMQiELQjckADR TDEdTBgwM+lGzQkUlZTeFfS4XaPTiTDhJcCoICGOUS/N70UpcZIbXJxGGN+mUxJV GI06L8Em/Kt6PsfRUY7KloVXmEa4sTPcLLNBOTJ2sMObl9Df9LtM+k7v60Ky4r8f 7oZ45YXCjAlzcHDRyogNW6xwrrDbypoPHFWmJslbwSiHm/pVXY1pA4XouLxVSP4r wCgPOZeGDi/ZRXEa3nYtpggAqDrkS4xzdUlOq4IWcYLwoLa1AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ313egDf4jgxd6SCDG6GbZkpyI0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZGU1Mzc4ODYtODU4OS0z YWNiLWJjZTktZThkNWU3NTYxZWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxPEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAJq2bjwpXHFV5P5XsaLrZgmc1tZZrIWrFXRnO2Ujfd8LuuUA9fbcth lNyp17/5TQzkFfdnNTj7lyrfdbe8hWP5/U1T2LXfkXjJRN73EktmCm+dkshZO6DO CPw+GLru+wA0qGIhhRcQzhxXHocQUWCJ2leRYpRL6YwY2nh4D+EgbyLkemlXtUhJ YGFmWb4RiP7arF04pOj8ReEavlqgdFa8uC2Po1BUiWF+BmxfYgFHYHgNDFZ2jrfe 8brYKNZ+YKAHV0cMWzz27uD0ruO0/jSmxFY3/4zSYpHPOD3isqo8YV0tuv2H2VJp 6AJDsy7/wHFqdCWhTKIbeGPQdro8Is8= -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:43 2025 by rpki-client