$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4dba33f7-3802-33de-a38e-8a950fe6b69a.roa File: 4dba33f7-3802-33de-a38e-8a950fe6b69a.roa (raw, json) Hash identifier: saNHcfWES9jlyVcXlT2XtFRFzUpIrs1Tx2WKH06ycX0= Subject key identifier: 38:A1:87:68:3E:2E:EA:48:49:F1:30:12:71:89:B3:4E:96:C9:05:E9 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584DDFEB21D378E025570487D000 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4dba33f7-3802-33de-a38e-8a950fe6b69a.roa Signing time: Mon 18 May 2026 13:00:31 +0000 ROA not before: Mon 18 May 2026 13:00:31 +0000 ROA not after: Sun 16 Aug 2026 13:00:31 +0000 asID: 396246 IP address blocks: 8.17.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:df:eb:21:d3:78:e0:25:57:04:87:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: May 18 13:00:31 2026 GMT Not After : Aug 16 13:00:31 2026 GMT Subject: CN=55d8dc0d-72a1-4742-b4f9-8b3bf4a5c609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:17:d0:b6:e4:c5:14:62:c6:60:8d:89:90:6d: 66:64:74:44:26:f8:d9:73:78:de:8c:e2:c3:96:c2: d8:43:5f:dd:58:48:c7:03:ba:f3:66:21:a9:4d:7e: cc:81:fc:40:32:b4:5d:fe:c4:03:de:e7:eb:1c:2d: e1:44:fb:43:55:3b:a1:0c:85:00:4b:d9:fa:1b:5f: 41:4b:96:78:cd:f6:63:27:b1:8f:e7:45:b1:3c:29: 69:e5:7a:38:f5:b4:d5:9d:60:be:47:70:0c:36:56: d4:3f:12:4f:2e:c9:a1:b8:96:62:a3:94:fb:f0:b1: c8:89:63:c9:53:d0:36:90:6e:04:25:ca:96:75:2a: c7:d4:1a:ab:76:d0:38:a6:88:a8:55:fc:2c:71:16: ac:44:57:83:e2:bd:26:48:84:f9:84:9c:9b:17:c5: aa:35:47:92:69:cd:8d:3c:49:a3:68:e8:49:b0:c8: 0b:36:8c:f1:e4:13:25:59:18:7d:0e:b0:50:2b:61: 6d:5c:2a:5c:25:9d:49:2c:ed:b3:b4:58:73:45:ab: 09:84:95:94:06:2e:2a:d2:ba:f1:00:99:64:4e:08: c0:4d:02:24:ea:18:2a:1b:bf:7d:ef:fd:e5:6e:d6: af:d5:1e:a5:4b:03:c8:8b:d2:9e:f6:4c:55:79:6c: 22:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A1:87:68:3E:2E:EA:48:49:F1:30:12:71:89:B3:4E:96:C9:05:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4dba33f7-3802-33de-a38e-8a950fe6b69a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.17.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:79:f8:02:9e:f6:51:27:71:02:6f:4a:d5:57:49:cb:3c:60: c2:db:ad:fc:fc:fc:09:64:b7:0c:e1:67:6c:9a:56:2f:7b:80: 9b:00:c2:f0:6f:96:18:b5:36:e1:80:8c:a7:d5:d8:b4:31:4a: 3d:89:5b:70:21:fb:69:ff:2a:ea:88:bc:43:d1:7d:dc:37:0a: 50:fd:f5:2d:fa:23:2c:61:3f:4a:a6:50:35:76:0f:25:5f:1c: 2a:24:77:f2:4e:6d:8b:53:f2:0f:51:eb:2b:5a:73:b0:22:ce: cf:fe:3a:bb:a9:e2:69:26:85:5c:86:50:ea:93:00:f4:38:1c: de:7b:3e:e8:ee:51:b6:a5:52:3c:0a:b3:36:39:64:22:8d:4f: 24:0a:29:87:22:1a:7a:10:bb:09:5d:b7:20:d6:b0:ea:48:e4: 1b:e5:da:d7:91:c6:39:cd:00:d5:dc:0b:ca:8d:ca:63:f0:6a: ea:9b:b0:b7:1b:97:e1:4b:a1:a9:36:76:30:0b:a3:e7:ff:a6: a7:1f:07:6a:2e:97:de:fb:e6:4e:b7:9b:bd:3c:f0:f4:50:09: 21:7e:34:01:da:a2:47:6c:be:51:fb:5e:9b:72:c0:3c:fd:83: 7f:60:8a:e1:9b:c2:b7:4b:46:1f:b1:0f:95:99:8c:c9:a9:88: 2d:27:ad:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3f6yHTeOAlVwSH0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDUxODEzMDAzMVoXDTI2MDgxNjEzMDAzMVowLzEtMCsGA1UEAxMk NTVkOGRjMGQtNzJhMS00NzQyLWI0ZjktOGIzYmY0YTVjNjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBfQtuTFFGLGYI2JkG1mZHREJvjZc3jejOLD lsLYQ1/dWEjHA7rzZiGpTX7MgfxAMrRd/sQD3ufrHC3hRPtDVTuhDIUAS9n6G19B S5Z4zfZjJ7GP50WxPClp5Xo49bTVnWC+R3AMNlbUPxJPLsmhuJZio5T78LHIiWPJ U9A2kG4EJcqWdSrH1BqrdtA4poioVfwscRasRFeD4r0mSIT5hJybF8WqNUeSac2N PEmjaOhJsMgLNozx5BMlWRh9DrBQK2FtXCpcJZ1JLO2ztFhzRasJhJWUBi4q0rrx AJlkTgjATQIk6hgqG7997/3lbtav1R6lSwPIi9Ke9kxVeWwiDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDihh2g+LupISfEwEnGJs06WyQXpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNGRiYTMzZjctMzgwMi0z M2RlLWEzOGUtOGE5NTBmZTZiNjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACBFDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJR5+AKe9lEncQJvStVXScs8YMLbrfz8/AlktwzhZ2yaVi97gJsAwvBv lhi1NuGAjKfV2LQxSj2JW3Ah+2n/KuqIvEPRfdw3ClD99S36IyxhP0qmUDV2DyVf HCokd/JObYtT8g9R6ytac7Aizs/+Orup4mkmhVyGUOqTAPQ4HN57PujuUbalUjwK szY5ZCKNTyQKKYciGnoQuwldtyDWsOpI5Bvl2teRxjnNANXcC8qNymPwauqbsLcb l+FLoak2djALo+f/pqcfB2oul9775k63m7088PRQCSF+NAHaokdsvlH7XptywDz9 g39giuGbwrdLRh+xD5WZjMmpiC0nrbA= -----END CERTIFICATE-----Generated at Sat Jun 13 21:36:29 2026 by rpki-client