$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4e9645a3-64e4-31aa-aa53-73ca2588bb12.roa File: 4e9645a3-64e4-31aa-aa53-73ca2588bb12.roa (raw, json) Hash identifier: i+xXtALAf0MJ4XHrUqJF2ksD0DtDUyPvN7xNLGNWaHo= Subject key identifier: 58:13:9A:24:39:23:79:A2:06:43:DA:59:F3:E3:3F:02:E9:3B:6C:EC Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584EA01530A3766955E23B38D400 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4e9645a3-64e4-31aa-aa53-73ca2588bb12.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 26421 IP address blocks: 206.169.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:30:a3:76:69:55:e2:3b:38:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=084e12f6-5bf4-45fa-aed3-2c10811123c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2b:fc:65:e7:d3:be:e2:2b:13:75:b2:4f:7b: d2:49:fa:f2:ce:06:2d:94:9b:0a:53:62:87:01:b8: e5:ad:39:d5:73:16:3b:72:e6:68:4e:50:ee:ee:84: e6:bd:28:c8:3d:cb:87:b8:9f:3a:11:d8:78:cb:13: ac:7a:72:62:55:43:9b:57:04:3e:c2:b5:ce:c6:8a: be:03:39:8d:f9:57:1a:24:02:01:76:37:0c:ca:48: 22:d4:d7:53:c0:5d:b0:23:66:e3:21:45:d6:1c:3c: 70:ea:08:6a:73:45:2d:24:0d:95:75:b8:1c:23:cf: ac:cf:10:6a:2e:9b:2a:69:71:57:23:3a:a4:a2:b4: f0:ce:41:9b:17:bf:ed:cd:10:56:9a:02:70:61:4e: fe:2e:69:e0:ce:50:1f:95:7d:20:bd:dd:31:da:33: 53:48:21:f2:e9:1c:3d:42:07:c3:f3:5f:29:63:45: 0f:b2:b6:16:a3:41:f2:f6:bb:a1:46:5d:a1:b4:25: 67:00:bf:c2:e0:e7:af:75:ff:90:bb:45:be:b9:21: ee:d8:56:69:6e:ee:fa:c4:f6:70:9c:bc:d9:4a:73: c8:da:5d:37:a3:95:c4:ad:b7:31:f0:53:01:53:ce: 65:4e:64:2c:ec:a2:31:82:d2:ab:17:9d:2a:eb:02: 74:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:13:9A:24:39:23:79:A2:06:43:DA:59:F3:E3:3F:02:E9:3B:6C:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4e9645a3-64e4-31aa-aa53-73ca2588bb12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 206.169.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:c7:4b:dc:57:fa:c7:f2:04:83:e5:92:ea:3d:e9:21:04:d9: c9:ba:bf:74:82:5a:5f:d7:dc:af:fa:7b:23:49:e7:d3:6a:f1: fc:bd:52:b2:97:f1:71:b7:c4:b9:5e:49:12:78:72:70:bb:ab: e8:50:57:5a:bc:0f:26:db:51:0a:79:46:0f:1c:f2:10:d6:6e: e2:67:fe:ff:4d:8c:a9:9d:47:2c:be:64:6f:ef:37:c9:e4:0d: a3:42:4c:44:b6:47:7c:39:04:4f:38:5a:73:33:0b:46:45:57: b8:87:53:42:40:9d:2c:c2:db:2a:8f:ca:36:67:6f:8c:ea:43: 5a:f2:41:22:3e:71:32:a1:e5:48:d7:40:5c:c2:94:51:46:ff: 15:ac:a9:46:d3:09:3e:b5:30:0c:07:6b:a0:a5:68:79:69:63: fe:ce:93:12:27:b6:0c:1c:67:b3:45:c4:c0:35:72:47:3e:3c: 15:dd:85:95:db:43:2c:15:e7:8c:d8:3c:a3:d6:50:4a:2d:15: a8:67:99:8d:66:dc:bb:1c:c9:a7:30:d6:32:66:4c:f9:dd:75: 16:64:3e:dd:78:17:cb:50:2c:86:03:aa:3f:e0:3e:b2:da:97: 28:04:e8:77:f1:4e:39:0e:cf:f6:ea:0b:dd:73:c1:92:2d:9b: 2e:22:99:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFTCjdmlV4js41AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk MDg0ZTEyZjYtNWJmNC00NWZhLWFlZDMtMmMxMDgxMTEyM2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCv8ZefTvuIrE3WyT3vSSfryzgYtlJsKU2KH AbjlrTnVcxY7cuZoTlDu7oTmvSjIPcuHuJ86Edh4yxOsenJiVUObVwQ+wrXOxoq+ AzmN+VcaJAIBdjcMykgi1NdTwF2wI2bjIUXWHDxw6ghqc0UtJA2VdbgcI8+szxBq LpsqaXFXIzqkorTwzkGbF7/tzRBWmgJwYU7+LmngzlAflX0gvd0x2jNTSCHy6Rw9 QgfD818pY0UPsrYWo0Hy9ruhRl2htCVnAL/C4Oevdf+Qu0W+uSHu2FZpbu76xPZw nLzZSnPI2l03o5XErbcx8FMBU85lTmQs7KIxgtKrF50q6wJ0MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgTmiQ5I3miBkPaWfPjPwLpO2zsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNGU5NjQ1YTMtNjRlNC0z MWFhLWFhNTMtNzNjYTI1ODhiYjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqnZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALrHS9xX+sfyBIPlkuo96SEE2cm6v3SCWl/X3K/6eyNJ59Nq8fy9UrKX 8XG3xLleSRJ4cnC7q+hQV1q8DybbUQp5Rg8c8hDWbuJn/v9NjKmdRyy+ZG/vN8nk DaNCTES2R3w5BE84WnMzC0ZFV7iHU0JAnSzC2yqPyjZnb4zqQ1ryQSI+cTKh5UjX QFzClFFG/xWsqUbTCT61MAwHa6ClaHlpY/7OkxIntgwcZ7NFxMA1ckc+PBXdhZXb QywV54zYPKPWUEotFahnmY1m3Lscyacw1jJmTPnddRZkPt14F8tQLIYDqj/gPrLa lygE6HfxTjkOz/bqC91zwZItmy4imU4= -----END CERTIFICATE-----Generated at Wed Jul 29 04:38:59 2026 by rpki-client