$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/36486884-d2cb-36db-8e35-20cc21d19cf3.roa File: 36486884-d2cb-36db-8e35-20cc21d19cf3.roa (raw, json) Hash identifier: Nl0mpDGqudm8nD1FHnnebO0brlsKo/+XDII+zXxbvSU= Subject key identifier: 1B:7F:61:78:19:8E:3D:E0:8D:BC:52:35:43:D8:98:EE:7F:63:74:DF Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584DF2108A18F4A2009D81AAF880 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/36486884-d2cb-36db-8e35-20cc21d19cf3.roa Signing time: Mon 25 May 2026 01:00:24 +0000 ROA not before: Mon 25 May 2026 01:00:24 +0000 ROA not after: Sun 23 Aug 2026 01:00:24 +0000 asID: 33548 IP address blocks: 64.194.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f2:10:8a:18:f4:a2:00:9d:81:aa:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: May 25 01:00:24 2026 GMT Not After : Aug 23 01:00:24 2026 GMT Subject: CN=0f614f95-f617-4720-9030-b2045076822f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b0:b7:34:9d:d2:ce:22:0a:08:c6:ee:1f:3c: ff:0e:3b:0b:0d:f1:52:c1:fc:2f:00:dd:69:1a:26: b3:21:7d:63:52:99:8c:aa:f9:e4:82:a4:1b:14:03: 55:f3:04:82:49:c7:5c:1f:2e:9b:01:0e:2c:29:a5: 72:94:2b:08:f3:df:9a:12:dd:de:bb:24:63:2a:4d: 43:2f:98:33:40:7f:c7:9f:31:59:c0:43:48:2e:6b: 17:99:b9:8f:d5:2a:20:39:53:dc:59:87:e0:b9:e8: f7:24:80:c1:51:bb:81:6e:a8:2e:7f:d8:8b:2b:9b: 1b:d0:14:88:b3:78:8b:49:fc:4d:a2:07:88:f7:81: 96:3e:11:ff:83:95:01:80:6a:ee:6d:eb:af:86:58: 7a:77:f9:fb:34:7f:ad:4c:e4:44:2a:ec:e1:eb:7a: f2:8b:e3:2f:c9:f5:64:01:a4:71:6a:52:eb:b0:b0: 31:68:02:d1:0e:f4:ed:01:46:9b:e5:53:56:89:61: df:34:01:a7:c5:f8:54:10:2e:b6:6b:22:36:b8:17: 4e:8e:bf:83:c3:75:42:d9:18:8c:88:33:d8:df:e2: f3:af:bd:71:ba:c1:67:d7:af:ea:27:54:a2:2c:c5: be:5b:f8:aa:88:4f:b5:6e:4a:4e:ab:f7:8e:21:f4: 73:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7F:61:78:19:8E:3D:E0:8D:BC:52:35:43:D8:98:EE:7F:63:74:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/36486884-d2cb-36db-8e35-20cc21d19cf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 64.194.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:f3:6f:2c:2b:95:aa:b7:4e:7a:3f:ca:80:49:85:42:de:27: e1:9f:f1:38:f2:24:9e:e7:f9:be:08:1f:cf:8b:cc:8c:98:3b: 0a:14:00:a9:82:d2:d9:d6:7c:00:00:5b:9d:4e:b4:a3:de:aa: 1f:61:12:72:70:0a:75:03:04:06:92:66:b4:cb:1f:ce:2a:c1: 2f:4e:66:24:1a:1c:4a:00:0c:fe:72:b6:e0:ad:5b:1f:77:dd: 1b:61:15:c0:c9:18:0b:47:ee:85:b9:c4:b4:0d:68:96:06:e6: b7:34:76:cc:74:26:3d:e2:df:8e:9a:04:5b:01:36:a1:49:ab: 81:1f:e4:be:28:d5:2d:20:c2:12:78:cf:31:85:aa:11:2e:bc: aa:b2:7e:b6:f7:f8:97:83:eb:5e:5e:03:dc:a5:e7:37:b2:82: 62:81:5d:bb:e4:21:6b:8c:ef:c9:1c:39:b7:6b:2f:74:02:51: 31:75:64:3a:d0:8b:cd:bb:49:b8:6e:52:14:59:6e:9c:39:6f: 2f:e3:29:69:1d:aa:4f:60:36:a1:93:9c:63:cc:be:c7:41:eb: 23:95:39:31:d3:91:b9:4c:4b:89:89:ee:d6:2d:30:3d:24:5f: 8f:1f:01:0a:6e:9c:06:ff:e6:bd:14:77:35:0e:d4:83:f9:a5: 4f:23:a4:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3yEIoY9KIAnYGq+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDUyNTAxMDAyNFoXDTI2MDgyMzAxMDAyNFowLzEtMCsGA1UEAxMk MGY2MTRmOTUtZjYxNy00NzIwLTkwMzAtYjIwNDUwNzY4MjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbC3NJ3SziIKCMbuHzz/DjsLDfFSwfwvAN1p GiazIX1jUpmMqvnkgqQbFANV8wSCScdcHy6bAQ4sKaVylCsI89+aEt3euyRjKk1D L5gzQH/HnzFZwENILmsXmbmP1SogOVPcWYfguej3JIDBUbuBbqguf9iLK5sb0BSI s3iLSfxNogeI94GWPhH/g5UBgGrubeuvhlh6d/n7NH+tTOREKuzh63ryi+MvyfVk AaRxalLrsLAxaALRDvTtAUab5VNWiWHfNAGnxfhUEC62ayI2uBdOjr+Dw3VC2RiM iDPY3+Lzr71xusFn16/qJ1SiLMW+W/iqiE+1bkpOq/eOIfRznwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBt/YXgZjj3gjbxSNUPYmO5/Y3TfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMzY0ODY4ODQtZDJjYi0z NmRiLThlMzUtMjBjYzIxZDE5Y2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQMKEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfzbywrlaq3Tno/yoBJhULeJ+Gf8TjyJJ7n+b4IH8+LzIyYOwoUAKmC 0tnWfAAAW51OtKPeqh9hEnJwCnUDBAaSZrTLH84qwS9OZiQaHEoADP5ytuCtWx93 3RthFcDJGAtH7oW5xLQNaJYG5rc0dsx0Jj3i346aBFsBNqFJq4Ef5L4o1S0gwhJ4 zzGFqhEuvKqyfrb3+JeD615eA9yl5zeygmKBXbvkIWuM78kcObdrL3QCUTF1ZDrQ i827SbhuUhRZbpw5by/jKWkdqk9gNqGTnGPMvsdB6yOVOTHTkblMS4mJ7tYtMD0k X48fAQpunAb/5r0UdzUO1IP5pU8jpGY= -----END CERTIFICATE-----Generated at Sun Jun 14 00:12:29 2026 by rpki-client