$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/49b4da33-d249-30e1-9656-c0e8370b206a.roa File: 49b4da33-d249-30e1-9656-c0e8370b206a.roa (raw, json) Hash identifier: wKOIXaCtn8I/Z/fSyhwzcgQ7M8SX7CpVxdtLmvmrW/Q= Subject key identifier: 8B:1C:61:FD:D6:8C:0D:63:7C:EE:73:9B:C7:4D:A7:01:1C:CB:52:62 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584E0435EF7C19A37D598C639A00 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/49b4da33-d249-30e1-9656-c0e8370b206a.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 3356 IP address blocks: 207.123.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:35:ef:7c:19:a3:7d:59:8c:63:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=126b576a-db8b-4331-b3ab-504416fc5680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bb:b3:d6:3b:11:e0:e5:6e:43:2d:1a:2f:74: a9:df:1c:d0:b0:c7:a4:7c:9e:46:fb:ca:4b:42:c2: 64:1c:93:d9:7d:45:46:15:68:05:eb:4e:ab:65:c4: 23:e0:ae:95:ae:1a:a4:79:d1:c5:43:89:b5:dc:5c: ac:0f:f3:dd:63:ce:ae:a3:13:4d:9a:1b:4b:09:3a: e6:a1:6d:fa:da:e4:dd:98:27:50:34:29:42:c2:8c: 51:d4:dc:b4:18:7c:9d:44:ee:5b:8d:d5:ac:26:a4: e8:48:94:75:31:7c:56:f0:bc:1b:b3:82:09:2a:d1: cc:51:ef:1d:41:c8:6d:d5:fc:9d:28:12:93:17:76: 4a:7f:fd:80:79:eb:56:8b:cd:71:b1:01:00:7a:67: 8f:4e:6e:41:c4:36:e2:b0:0f:a3:e2:d2:3b:bd:32: cb:8d:43:fe:37:76:00:27:d7:b4:cd:82:ea:28:21: ef:ac:7c:42:78:05:57:81:4f:67:b6:01:04:07:49: e3:9e:9f:47:11:d2:7d:21:8b:b2:f9:30:08:b9:4c: 68:fa:0d:32:31:8d:d1:4c:a3:dc:e8:66:00:81:57: ad:47:2c:99:8c:47:88:dd:c0:c4:c2:3c:51:96:36: b9:bf:2f:38:54:3b:e6:3b:48:94:b9:f0:ab:ff:1f: e0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:1C:61:FD:D6:8C:0D:63:7C:EE:73:9B:C7:4D:A7:01:1C:CB:52:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/49b4da33-d249-30e1-9656-c0e8370b206a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 207.123.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:0f:f5:a8:35:d6:31:76:b8:4c:23:5b:2c:98:04:87:57:09: 6f:3a:ca:71:ed:7f:e7:58:05:ab:f9:98:b0:31:d9:20:c4:55: a0:27:0b:32:16:46:4f:bc:b2:92:dc:97:98:d6:49:a0:90:49: ec:78:8f:b0:e2:19:82:0a:20:99:d7:1a:4d:32:3c:1d:fd:9c: d8:54:2a:66:74:e7:3d:98:9a:b9:c7:f0:aa:bd:31:4a:05:1c: 85:18:4d:19:d1:1b:de:76:0d:cf:2e:d0:04:b8:81:62:09:37: 52:ba:c4:b6:df:b5:1e:16:f0:dc:b6:60:44:c3:70:8a:4a:df: 86:58:ce:33:1b:fe:71:f8:2e:6e:f0:47:dc:54:e5:8c:03:d3: d7:fe:df:9e:9e:7f:f8:3d:5a:20:c5:3a:3e:bc:d9:57:0e:84: 7f:54:f7:f2:ad:6f:2a:4d:86:31:13:21:c1:4a:df:7c:94:4d: d8:ea:35:92:08:98:dc:89:26:92:de:a7:c9:0f:b4:72:c6:93: 95:4b:69:2f:06:2b:a0:86:09:6b:c8:68:8e:7e:e0:32:60:51: 9c:b8:d7:e9:86:30:1d:3e:8f:dc:41:e6:e8:2b:a1:ba:1c:4c: a6:95:b7:17:d8:0f:4c:26:4f:59:b9:b0:bb:49:98:0f:ff:45: 4a:33:a5:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENe98GaN9WYxjmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk MTI2YjU3NmEtZGI4Yi00MzMxLWIzYWItNTA0NDE2ZmM1NjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2buz1jsR4OVuQy0aL3Sp3xzQsMekfJ5G+8pL QsJkHJPZfUVGFWgF606rZcQj4K6VrhqkedHFQ4m13FysD/PdY86uoxNNmhtLCTrm oW362uTdmCdQNClCwoxR1Ny0GHydRO5bjdWsJqToSJR1MXxW8Lwbs4IJKtHMUe8d Qcht1fydKBKTF3ZKf/2AeetWi81xsQEAemePTm5BxDbisA+j4tI7vTLLjUP+N3YA J9e0zYLqKCHvrHxCeAVXgU9ntgEEB0njnp9HEdJ9IYuy+TAIuUxo+g0yMY3RTKPc 6GYAgVetRyyZjEeI3cDEwjxRlja5vy84VDvmO0iUufCr/x/gpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIscYf3WjA1jfO5zm8dNpwEcy1JiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNDliNGRhMzMtZDI0OS0z MGUxLTk2NTYtYzBlODM3MGIyMDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz3vIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIP9ag11jF2uEwjWyyYBIdXCW86ynHtf+dYBav5mLAx2SDEVaAnCzIW Rk+8spLcl5jWSaCQSex4j7DiGYIKIJnXGk0yPB39nNhUKmZ05z2YmrnH8Kq9MUoF HIUYTRnRG952Dc8u0AS4gWIJN1K6xLbftR4W8Ny2YETDcIpK34ZYzjMb/nH4Lm7w R9xU5YwD09f+356ef/g9WiDFOj682VcOhH9U9/KtbypNhjETIcFK33yUTdjqNZII mNyJJpLep8kPtHLGk5VLaS8GK6CGCWvIaI5+4DJgUZy41+mGMB0+j9xB5ugroboc TKaVtxfYD0wmT1m5sLtJmA//RUozpds= -----END CERTIFICATE-----Generated at Sun Jun 14 03:41:19 2026 by rpki-client