$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ea7ca2b1-e689-373f-a9ca-9e3008107917.roa File: ea7ca2b1-e689-373f-a9ca-9e3008107917.roa (raw, json) Hash identifier: tOtaHOGmMaR8hAqYuRmh5zuSi7GgcmwWkO/MPrlgqkQ= Subject key identifier: 4C:63:D4:07:53:DE:E6:66:7C:FF:3E:8C:11:3F:DB:B0:C1:59:E2:37 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584B970CF51AB52273588B0FA1C0 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ea7ca2b1-e689-373f-a9ca-9e3008107917.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 28753 IP address blocks: 23.19.197.0/24 maxlen: 24 2607:f5b5:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f5:1a:b5:22:73:58:8b:0f:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=d7cc7c1d-0d44-4ed0-b42f-b779c2429244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2c:f4:f5:54:99:63:fc:1a:72:2a:55:9f:d6: 5e:b2:52:da:cc:1a:39:70:a7:08:6a:04:07:a8:60: f1:39:41:37:3f:e7:9c:c7:dd:de:8c:18:21:54:76: df:57:1a:ad:bc:68:ce:61:83:87:b5:da:dc:d9:70: b0:48:69:a1:80:2e:46:f4:44:45:51:4f:2d:2f:ff: 7d:a0:8a:92:ec:ae:a0:dd:04:c6:16:40:50:ef:0e: b7:a5:3b:b5:23:31:15:8c:ab:06:3b:8e:09:7b:26: bc:27:ac:17:ac:8d:54:3e:75:cb:9d:85:eb:dd:2a: f8:0a:2b:05:88:a1:c5:e5:ee:88:26:fb:ad:49:63: df:d1:80:a8:47:1c:d1:cd:35:cc:f9:5b:d4:aa:0b: 8c:ae:22:ff:8e:00:e5:b2:41:5e:e1:be:e5:0c:91: 95:6f:bd:58:ca:35:14:75:cc:ff:10:a7:24:9b:d1: 3c:c3:1b:06:c0:37:92:41:97:58:cf:a2:a5:ae:fe: 9f:00:66:34:36:e6:53:fa:3a:3b:87:69:98:0e:8e: da:29:88:c2:5a:8a:4e:70:a1:a2:9c:ee:87:fb:15: 3b:dd:39:5a:a4:fc:59:91:4f:ab:d9:28:d2:bd:30: d2:d8:d7:6b:62:af:72:6e:1d:aa:94:5b:3f:70:6d: 19:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:63:D4:07:53:DE:E6:66:7C:FF:3E:8C:11:3F:DB:B0:C1:59:E2:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ea7ca2b1-e689-373f-a9ca-9e3008107917.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.197.0/24 IPv6: 2607:f5b5:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:1f:d0:75:11:1c:a5:dd:a9:1a:60:e3:38:ef:fb:b3:7e:ae: b6:79:bf:42:a0:21:fd:74:66:42:0c:8e:9f:50:03:7b:cb:ef: b0:3e:48:14:86:05:75:5a:1a:57:9d:1d:50:be:38:9a:54:70: 75:e7:1d:67:4c:50:d7:81:5d:a1:88:9f:dc:42:e5:7c:5e:c1: 22:58:82:93:77:36:8c:34:d8:ad:b2:81:3e:f9:4d:52:c0:8d: 56:f9:14:da:40:84:ea:69:42:d1:47:04:47:e0:ee:69:1f:41: 29:71:df:5f:cf:13:de:74:0a:cb:d9:9b:36:82:53:67:eb:ff: dd:e0:9f:37:6e:7b:86:21:be:9e:6a:47:2b:04:d6:1a:db:05: 3c:42:2c:0b:b0:51:8a:2e:cf:ce:40:b2:80:85:62:78:ae:c3: be:e3:e7:be:28:ea:5c:13:02:5c:60:5b:12:23:62:bd:ed:ff: f7:c3:4d:a6:29:b9:68:f7:92:17:04:13:87:39:0c:08:31:33: 9c:73:0c:62:ca:a7:ff:44:a5:e4:93:b7:93:43:4f:71:a9:2c: 94:01:8c:7a:5b:71:f6:20:6b:00:8c:7a:c8:55:1a:1e:5e:06: f1:79:2a:5e:63:78:ad:44:11:dc:6c:80:74:2a:e4:f0:ae:fb: 80:5b:4a:65 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEuXDPUatSJzWIsPocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ZDdjYzdjMWQtMGQ0NC00ZWQwLWI0MmYtYjc3OWMyNDI5MjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCz09VSZY/wacipVn9ZeslLazBo5cKcIagQH qGDxOUE3P+ecx93ejBghVHbfVxqtvGjOYYOHtdrc2XCwSGmhgC5G9ERFUU8tL/99 oIqS7K6g3QTGFkBQ7w63pTu1IzEVjKsGO44Jeya8J6wXrI1UPnXLnYXr3Sr4CisF iKHF5e6IJvutSWPf0YCoRxzRzTXM+VvUqguMriL/jgDlskFe4b7lDJGVb71YyjUU dcz/EKckm9E8wxsGwDeSQZdYz6Klrv6fAGY0NuZT+jo7h2mYDo7aKYjCWopOcKGi nO6H+xU73TlapPxZkU+r2SjSvTDS2NdrYq9ybh2qlFs/cG0ZlQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFExj1AdT3uZmfP8+jBE/27DBWeI3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZWE3Y2EyYjEtZTY4OS0z NzNmLWE5Y2EtOWUzMDA4MTA3OTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxPFMA8E AgACMAkDBwAmB/W1AAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFh/QdREcpd2pGmDjOO/7s36utnm/QqAh /XRmQgyOn1ADe8vvsD5IFIYFdVoaV50dUL44mlRwdecdZ0xQ14FdoYif3ELlfF7B IliCk3c2jDTYrbKBPvlNUsCNVvkU2kCE6mlC0UcER+DuaR9BKXHfX88T3nQKy9mb NoJTZ+v/3eCfN257hiG+nmpHKwTWGtsFPEIsC7BRii7PzkCygIVieK7DvuPnvijq XBMCXGBbEiNive3/98NNpim5aPeSFwQThzkMCDEznHMMYsqn/0Sl5JO3k0NPcaks lAGMeltx9iBrAIx6yFUaHl4G8XkqXmN4rUQR3GyAdCrk8K77gFtKZQ== -----END CERTIFICATE-----Generated at Wed Nov 5 00:44:42 2025 by rpki-client