$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1a402687-73f0-38f9-b900-9c98f4cd0bd6.roa File: 1a402687-73f0-38f9-b900-9c98f4cd0bd6.roa (raw, json) Hash identifier: CDHpXrO1hBQmza/hsEtAt8qMBtp8gF5t7lWgbkiCkwU= Subject key identifier: 35:87:34:98:A1:81:FC:A7:90:6D:75:31:35:AF:41:73:0F:6B:D2:A8 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584E2809A5AA0AEF3CC6D595CA80 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1a402687-73f0-38f9-b900-9c98f4cd0bd6.roa Signing time: Sat 13 Jun 2026 09:00:12 +0000 ROA not before: Sat 13 Jun 2026 09:00:12 +0000 ROA not after: Fri 11 Sep 2026 09:00:12 +0000 asID: 3356 IP address blocks: 199.35.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:28:09:a5:aa:0a:ef:3c:c6:d5:95:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jun 13 09:00:12 2026 GMT Not After : Sep 11 09:00:12 2026 GMT Subject: CN=3a17981a-bbd0-47b4-9172-36af7b94c826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2c:d3:c4:25:57:d7:c4:ce:81:33:bb:68:37: 6f:29:a0:37:3a:ed:78:ed:8f:eb:1f:a9:7a:97:5d: 09:b2:23:d8:7d:00:29:8f:07:d3:02:b2:48:53:47: 5f:00:38:c6:d4:e9:50:4a:2b:dd:e4:ce:de:ae:64: 43:2d:4d:9f:77:5b:56:89:16:69:91:0f:1b:89:93: 15:e3:29:80:4d:0d:3a:bd:bd:23:d5:bc:b8:3c:e9: 2d:91:67:2b:91:45:94:30:af:4b:f2:43:3d:66:b8: c6:4c:81:09:57:a4:1d:68:7b:e4:8a:e6:74:4f:65: 55:06:28:79:d6:33:71:d1:4b:cf:db:2d:87:8a:ae: 31:25:c3:d3:ae:73:a8:c8:57:f5:11:2b:92:f9:21: 7c:6a:af:41:da:0d:12:44:2b:c9:8d:37:62:6c:12: 1c:6a:b6:13:72:c7:e0:42:71:ec:02:99:a8:dc:66: a6:22:e1:95:ec:77:ff:47:88:e6:15:97:7f:cf:a2: 7d:6a:56:c7:3c:2c:ef:cc:a7:13:09:f2:20:66:e7: d9:b3:5c:c4:f7:1c:f6:e0:54:a5:24:ea:3e:f0:38: 15:62:9d:cf:d5:b1:be:fb:fb:be:76:2a:16:fc:f1: dc:56:fd:1c:22:b8:25:30:81:cd:31:84:57:f7:e9: f3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:87:34:98:A1:81:FC:A7:90:6D:75:31:35:AF:41:73:0F:6B:D2:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1a402687-73f0-38f9-b900-9c98f4cd0bd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 199.35.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:b0:db:b3:6d:0f:9d:17:65:15:34:e0:3e:ea:c3:7f:6d:68: dc:5e:94:ad:79:80:c2:c2:df:e3:fd:2f:a8:a8:e9:f5:4d:a0: cd:7c:0b:02:fe:1f:8a:22:d7:7c:13:75:83:f6:6f:76:77:a1: d3:b4:07:d1:10:1c:f2:37:48:1e:7c:cb:66:65:73:a8:b8:fa: 14:5a:25:9d:fa:0e:88:92:8c:4b:11:5e:37:bc:bd:75:87:be: 6c:6c:01:6e:c7:4e:ab:9a:a3:e9:25:75:ae:2a:45:aa:6f:c3: 0b:4e:2e:42:70:d1:d3:41:76:06:85:64:0a:28:81:59:f8:de: 19:b7:13:8a:00:0b:fd:cc:c5:2c:ce:27:83:82:43:99:a0:a1: bc:48:c7:79:48:0e:53:e6:e9:05:5b:33:f6:79:75:95:30:b0: 52:95:35:dd:98:c5:48:57:b7:d3:dc:12:bb:22:2a:0c:be:ef: c2:f3:25:a8:d7:ff:4f:ff:dd:dd:29:ec:9f:da:23:41:b5:54: 73:52:d2:d4:3f:71:9b:4c:52:c9:0b:41:65:b6:e5:90:71:3f: 1e:44:c8:98:27:60:f5:97:5d:7d:61:3c:58:13:51:86:50:02: 5e:e6:0e:84:93:2e:ba:fc:45:e6:0c:f2:98:c9:34:73:56:79: fa:01:9c:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4oCaWqCu88xtWVyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDYxMzA5MDAxMloXDTI2MDkxMTA5MDAxMlowLzEtMCsGA1UEAxMk M2ExNzk4MWEtYmJkMC00N2I0LTkxNzItMzZhZjdiOTRjODI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSzTxCVX18TOgTO7aDdvKaA3Ou147Y/rH6l6 l10JsiPYfQApjwfTArJIU0dfADjG1OlQSivd5M7ermRDLU2fd1tWiRZpkQ8biZMV 4ymATQ06vb0j1by4POktkWcrkUWUMK9L8kM9ZrjGTIEJV6QdaHvkiuZ0T2VVBih5 1jNx0UvP2y2Hiq4xJcPTrnOoyFf1ESuS+SF8aq9B2g0SRCvJjTdibBIcarYTcsfg QnHsApmo3GamIuGV7Hf/R4jmFZd/z6J9albHPCzvzKcTCfIgZufZs1zE9xz24FSl JOo+8DgVYp3P1bG++/u+dioW/PHcVv0cIrglMIHNMYRX9+nzFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWHNJihgfynkG11MTWvQXMPa9KoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMWE0MDI2ODctNzNmMC0z OGY5LWI5MDAtOWM5OGY0Y2QwYmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHxyOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyw27NtD50XZRU04D7qw39taNxelK15gMLC3+P9L6io6fVNoM18CwL+ H4oi13wTdYP2b3Z3odO0B9EQHPI3SB58y2Zlc6i4+hRaJZ36DoiSjEsRXje8vXWH vmxsAW7HTquao+klda4qRapvwwtOLkJw0dNBdgaFZAoogVn43hm3E4oAC/3MxSzO J4OCQ5mgobxIx3lIDlPm6QVbM/Z5dZUwsFKVNd2YxUhXt9PcErsiKgy+78LzJajX /0//3d0p7J/aI0G1VHNS0tQ/cZtMUskLQWW25ZBxPx5EyJgnYPWXXX1hPFgTUYZQ Al7mDoSTLrr8ReYM8pjJNHNWefoBnAY= -----END CERTIFICATE-----Generated at Sun Jun 14 00:45:50 2026 by rpki-client