$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3598a9a7-9b6c-3188-a0e1-6004914bb3c0.roa File: 3598a9a7-9b6c-3188-a0e1-6004914bb3c0.roa (raw, json) Hash identifier: 4oYUBMgAreGVqr9tcL+eR1bUAKx33gvslE8YaqrZh+U= Subject key identifier: BA:0E:D9:61:F8:FF:73:10:18:FA:37:FE:73:48:D7:57:89:70:95:CB Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584E9A7FBD7DFA67CD6B39005880 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3598a9a7-9b6c-3188-a0e1-6004914bb3c0.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 22898 IP address blocks: 65.77.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:bd:7d:fa:67:cd:6b:39:00:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=0d412200-c109-471e-be8d-1eb56121d717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a8:8d:fb:6d:63:7d:9f:29:0a:10:79:e2:9a: f4:7b:4a:10:10:7d:6e:c4:ed:08:27:90:ee:75:0b: 81:71:8d:79:b4:64:1b:a7:9a:a9:86:2a:4f:08:0a: 9e:2b:47:9c:cd:94:0a:da:f4:4d:12:98:1a:8c:d8: 7e:dc:f4:31:62:40:fb:ee:75:2a:da:d0:3e:18:e3: 13:94:99:ec:40:f2:89:8d:c0:73:6d:53:03:0d:16: 8b:7a:ee:d6:5f:35:8d:0f:ba:30:a0:02:b3:4c:80: d5:1d:cc:10:16:cf:8c:7d:42:9c:dc:5f:3b:15:ba: 7a:c0:fd:23:a9:49:4a:0a:d2:11:ee:a2:8e:68:58: 0c:55:af:ba:f6:00:e1:20:4b:d5:55:f1:3d:a9:a7: ae:52:1f:e4:b3:8b:27:27:ed:e2:ae:b6:ce:5f:a5: ba:f2:48:af:45:df:a7:0b:be:66:ae:07:3f:a3:60: 2a:b0:63:7f:33:db:21:85:41:53:e2:fa:bc:9a:71: 6f:81:e4:0a:a9:e9:63:ee:35:63:04:9f:37:30:73: cf:cd:d0:c1:85:fe:ca:05:fb:4f:74:54:e2:58:f7: b2:dc:12:43:a6:19:90:62:f5:ad:16:36:f1:1d:c5: cc:da:dc:4f:b1:50:94:0b:3e:fc:2f:bf:3d:73:66: 3c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:0E:D9:61:F8:FF:73:10:18:FA:37:FE:73:48:D7:57:89:70:95:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3598a9a7-9b6c-3188-a0e1-6004914bb3c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 65.77.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:5d:04:9f:90:28:dc:c3:23:15:88:2b:1d:94:75:71:04:fc: a9:a8:bb:02:95:43:21:f8:b6:b7:9a:87:32:4b:8b:63:b9:f6: d5:20:16:2d:90:05:10:4d:a0:8c:cc:70:a3:8c:e6:b9:5e:9c: be:26:38:7c:7a:cc:4e:32:ed:8e:1e:3d:23:89:5f:9e:ec:b5: dc:cf:2d:1e:88:95:76:f2:25:62:2a:14:31:c3:46:74:65:5d: ea:93:36:a4:e2:2b:19:d6:10:33:6a:fe:61:df:b6:16:89:a4: 9a:26:49:f3:ca:6b:cb:98:7e:9d:a6:98:20:b2:76:0d:a6:c7: 05:2c:02:25:f6:84:08:bb:a9:85:70:c0:ff:3d:9d:13:e5:b6: e7:6f:6d:15:93:5b:23:26:33:d9:18:7e:2a:5c:5d:53:b7:88: 76:f6:b2:d4:85:d7:4c:db:24:b5:c8:88:82:18:a3:03:ea:eb: d0:ef:e2:a9:4e:e5:c4:6a:07:fd:2b:eb:c3:42:e2:fa:a3:d1: da:08:d3:00:bd:cd:0f:cd:96:b1:be:2f:a4:bb:d3:0b:8f:dc: 55:ae:7b:24:5f:54:88:86:b2:79:15:05:fb:43:ea:36:ab:cf: 15:3e:12:df:7c:2f:c6:3d:3e:cc:2d:5b:23:ee:2b:3d:00:76: 43:0b:93:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af719+mfNazkAWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk MGQ0MTIyMDAtYzEwOS00NzFlLWJlOGQtMWViNTYxMjFkNzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKiN+21jfZ8pChB54pr0e0oQEH1uxO0IJ5Du dQuBcY15tGQbp5qphipPCAqeK0eczZQK2vRNEpgajNh+3PQxYkD77nUq2tA+GOMT lJnsQPKJjcBzbVMDDRaLeu7WXzWND7owoAKzTIDVHcwQFs+MfUKc3F87Fbp6wP0j qUlKCtIR7qKOaFgMVa+69gDhIEvVVfE9qaeuUh/ks4snJ+3irrbOX6W68kivRd+n C75mrgc/o2AqsGN/M9shhUFT4vq8mnFvgeQKqelj7jVjBJ83MHPPzdDBhf7KBftP dFTiWPey3BJDphmQYvWtFjbxHcXM2txPsVCUCz78L789c2Y83QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoO2WH4/3MQGPo3/nNI11eJcJXLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMzU5OGE5YTctOWI2Yy0z MTg4LWEwZTEtNjAwNDkxNGJiM2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQU1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpdBJ+QKNzDIxWIKx2UdXEE/KmouwKVQyH4treahzJLi2O59tUgFi2Q BRBNoIzMcKOM5rlenL4mOHx6zE4y7Y4ePSOJX57stdzPLR6IlXbyJWIqFDHDRnRl XeqTNqTiKxnWEDNq/mHfthaJpJomSfPKa8uYfp2mmCCydg2mxwUsAiX2hAi7qYVw wP89nRPltudvbRWTWyMmM9kYfipcXVO3iHb2stSF10zbJLXIiIIYowPq69Dv4qlO 5cRqB/0r68NC4vqj0doI0wC9zQ/NlrG+L6S70wuP3FWueyRfVIiGsnkVBftD6jar zxU+Et98L8Y9PswtWyPuKz0AdkMLkwQ= -----END CERTIFICATE-----Generated at Wed Jul 29 08:52:52 2026 by rpki-client