$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/37f977aa-3d80-31d3-bc7d-f873f3ffa93a.roa File: 37f977aa-3d80-31d3-bc7d-f873f3ffa93a.roa (raw, json) Hash identifier: 0083w+h5SHpUgFGKCtEBV6j43lwYI0qWWPOFXliuMkg= Subject key identifier: 6A:EA:99:86:7C:3B:96:FD:50:6C:6F:C7:C9:EF:FA:6F:C6:37:BA:E4 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584D6AAA733BDDFE1FCCED081800 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/37f977aa-3d80-31d3-bc7d-f873f3ffa93a.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 6404 IP address blocks: 64.209.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:73:3b:dd:fe:1f:cc:ed:08:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=b2ffabac-e59d-4a7c-ae70-d0f9b1ab4d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:34:bb:f4:86:88:be:61:32:50:11:ec:20:50: 02:fb:17:37:7a:59:b9:2f:e6:6b:df:59:5a:29:8a: 34:14:41:78:ae:b3:32:c4:38:3b:75:e9:61:b0:33: 53:91:e8:0f:59:af:d6:d0:24:f6:79:f7:00:30:97: 06:88:00:b1:5e:30:d5:db:7a:c9:31:f2:23:8d:8b: 50:ef:00:67:09:dd:ad:46:ba:c3:f9:60:26:f4:5f: c5:c9:e5:89:a1:dc:2b:8e:5e:0a:dd:13:ab:52:90: 3e:0b:d4:cf:93:3e:7f:15:a5:80:9d:a3:7a:9e:2e: 84:14:84:ac:00:97:8e:3b:75:60:8f:89:aa:19:46: c6:48:56:cd:29:9a:db:92:9d:57:24:02:df:8a:09: 75:1d:88:93:df:fb:90:0f:7d:81:5e:70:2a:3d:0e: 40:bd:25:07:c2:6c:27:fe:b5:2d:8f:8a:87:3d:02: ee:d7:87:30:02:d4:7a:61:19:a9:7e:83:24:ff:cc: 98:41:80:23:5a:73:59:32:f5:f5:73:fa:fe:3a:54: d3:4f:bf:67:ce:a5:0f:78:63:b6:42:56:da:3b:81: 92:55:ef:28:81:f9:f2:41:89:5d:f4:8f:70:5c:35: c6:49:cf:7b:6b:25:76:0c:8e:6d:9a:24:9f:67:b6: 03:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:EA:99:86:7C:3B:96:FD:50:6C:6F:C7:C9:EF:FA:6F:C6:37:BA:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/37f977aa-3d80-31d3-bc7d-f873f3ffa93a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 64.209.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:d9:b5:3a:db:07:8f:6c:9d:f5:4b:05:fe:d1:92:07:70:d3: 29:2c:b0:f0:9a:55:c7:37:f9:6e:fd:df:79:c9:eb:ba:dc:63: 0a:66:59:fd:5f:b1:22:0e:b2:e0:6a:57:31:30:bf:5b:dc:a8: a1:9d:ca:26:b3:d6:93:27:d4:bf:06:9b:0b:e1:be:18:6b:f7: 9d:e6:ba:95:73:db:42:89:03:51:40:a5:e3:3d:dc:ed:ad:95: e2:0c:29:1e:3e:b5:40:1a:39:b5:74:83:74:59:66:fd:4a:6b: 4d:80:80:85:3c:4d:e5:e9:13:0c:3d:d1:90:bb:71:ea:31:d8: 71:2e:fa:d3:3f:0c:83:d0:03:8f:f8:45:f2:70:55:d5:89:91: 4c:bf:d1:76:b3:b4:98:44:cd:f2:66:7a:8e:ed:0d:f3:e7:84: 5d:9a:e9:a0:9b:79:15:59:6f:4a:a3:8e:64:cc:f8:a8:b8:b0: 48:24:14:1b:43:0b:c0:b9:00:76:13:d3:b6:3a:f9:12:f1:c0: f7:1e:04:fd:dd:a1:6c:03:8f:b1:4e:39:4c:fc:c2:4b:a8:6c: 08:04:35:77:81:4a:c9:c9:90:da:4a:f9:2c:4b:38:1b:dc:6a: 2f:dc:7c:f3:c4:ad:3d:6e:2c:da:50:5f:8f:a0:f6:45:fb:40: 23:98:d5:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqnM73f4fzO0IGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk YjJmZmFiYWMtZTU5ZC00YTdjLWFlNzAtZDBmOWIxYWI0ZDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjS79IaIvmEyUBHsIFAC+xc3elm5L+Zr31la KYo0FEF4rrMyxDg7delhsDNTkegPWa/W0CT2efcAMJcGiACxXjDV23rJMfIjjYtQ 7wBnCd2tRrrD+WAm9F/FyeWJodwrjl4K3ROrUpA+C9TPkz5/FaWAnaN6ni6EFISs AJeOO3Vgj4mqGUbGSFbNKZrbkp1XJALfigl1HYiT3/uQD32BXnAqPQ5AvSUHwmwn /rUtj4qHPQLu14cwAtR6YRmpfoMk/8yYQYAjWnNZMvX1c/r+OlTTT79nzqUPeGO2 QlbaO4GSVe8ogfnyQYld9I9wXDXGSc97ayV2DI5tmiSfZ7YD5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrqmYZ8O5b9UGxvx8nv+m/GN7rkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMzdmOTc3YWEtM2Q4MC0z MWQzLWJjN2QtZjg3M2YzZmZhOTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQNFZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXZtTrbB49snfVLBf7Rkgdw0ykssPCaVcc3+W7933nJ67rcYwpmWf1f sSIOsuBqVzEwv1vcqKGdyiaz1pMn1L8Gmwvhvhhr953mupVz20KJA1FApeM93O2t leIMKR4+tUAaObV0g3RZZv1Ka02AgIU8TeXpEww90ZC7ceox2HEu+tM/DIPQA4/4 RfJwVdWJkUy/0XaztJhEzfJmeo7tDfPnhF2a6aCbeRVZb0qjjmTM+Ki4sEgkFBtD C8C5AHYT07Y6+RLxwPceBP3doWwDj7FOOUz8wkuobAgENXeBSsnJkNpK+SxLOBvc ai/cfPPErT1uLNpQX4+g9kX7QCOY1do= -----END CERTIFICATE-----Generated at Fri Apr 17 18:32:04 2026 by rpki-client