$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5dc1da98-8f5c-3c0e-9ce8-6dc74879766a.roa File: 5dc1da98-8f5c-3c0e-9ce8-6dc74879766a.roa (raw, json) Hash identifier: n767SrzvIAGWPcfSCP6kcme+6DOsbfc+vgPBI+YsQjY= Subject key identifier: 8A:FF:94:8E:63:ED:8C:6C:2F:9D:04:5C:42:08:26:CB:2F:11:0D:02 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584F225D048B7F73DE1022208DE0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5dc1da98-8f5c-3c0e-9ce8-6dc74879766a.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 202 IP address blocks: 207.67.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:04:8b:7f:73:de:10:22:20:8d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=cc47d2d0-0423-4db7-b1f1-56450925b024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2e:5c:12:2b:25:8c:4a:a6:63:0b:0f:09:68: f8:8b:cd:73:5b:22:97:9b:b1:4f:0f:8b:b8:c7:e4: 31:27:b6:1e:c8:74:e8:32:71:df:54:d6:61:19:a6: 7b:3b:ed:39:de:67:f4:b3:f8:1a:6e:7e:a5:d3:16: 4d:2a:a5:8e:43:e9:c7:b1:99:ed:d3:cf:66:a6:98: 6c:33:5e:5d:cb:93:93:28:bb:0f:2d:3f:52:19:30: 14:89:3d:6a:bb:e4:02:ce:b1:d5:54:e5:50:bc:88: da:35:5f:6f:26:2c:33:da:f4:e1:73:a1:9f:65:e8: a8:a4:74:81:19:bb:c3:cc:5a:a2:bd:a5:8b:f9:68: 1f:8d:e5:20:ba:be:dc:34:fa:13:b2:51:1b:e0:3a: f3:3c:7b:04:dc:d0:fb:64:00:6e:42:d7:8a:ac:c5: 8d:b7:f6:e3:07:ef:3a:39:79:97:1d:c4:da:a4:11: 78:94:be:39:f0:7e:17:7e:37:52:f5:fd:cc:50:af: dd:77:7f:8b:f7:6d:9f:a1:74:2b:38:01:3c:fc:5a: cb:86:84:f5:21:d2:5d:d3:51:09:85:da:d2:a9:8f: 17:38:8f:77:00:42:ae:bf:4e:1a:f4:0c:8f:e3:3b: a9:c2:e0:4c:b4:a9:51:62:b2:98:62:67:0e:d8:81: ee:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:FF:94:8E:63:ED:8C:6C:2F:9D:04:5C:42:08:26:CB:2F:11:0D:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5dc1da98-8f5c-3c0e-9ce8-6dc74879766a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 207.67.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:fe:c9:2f:ec:fa:57:95:2b:54:ff:d7:c3:33:6d:89:8a:aa: 32:1d:74:95:1c:e5:2f:c2:fa:00:c5:1d:5c:e4:23:61:82:b5: 07:b9:25:26:47:39:c4:06:fe:0e:d9:f7:ee:6d:03:e2:9c:dc: 97:f4:08:e4:e3:c6:b2:6e:14:34:1a:2d:55:f4:6d:5f:55:66: 50:7e:23:9d:cf:6e:e2:55:dd:93:a6:51:6b:85:ad:15:12:46: e2:d7:1a:bd:ad:4e:eb:68:1b:a9:53:38:7f:12:93:79:dd:10: b6:31:c7:80:30:ec:18:16:33:9a:e6:e3:ac:48:e6:1a:98:58: 0b:1a:b3:1d:7c:3a:97:10:63:a5:0d:2f:b5:7d:21:3e:8f:ba: 82:7a:e1:0b:dd:92:df:38:a5:2f:2f:e2:0e:db:24:b3:bc:87: 6a:d0:c7:a4:b0:6a:01:fa:93:46:29:11:b3:93:11:52:94:c2: fe:72:ff:26:d0:d8:19:d9:0f:89:74:69:98:dc:d3:66:81:3e: ca:f1:db:a4:04:39:4f:20:f6:2a:f7:cf:39:be:50:01:27:8c: c3:93:bb:dc:1b:61:b2:e9:7d:43:44:11:73:69:78:14:21:8c: ec:8b:cc:aa:0d:7a:ef:7c:ca:78:05:f3:5b:36:b7:17:a6:8d: 92:30:51:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXQSLf3PeECIgjeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk Y2M0N2QyZDAtMDQyMy00ZGI3LWIxZjEtNTY0NTA5MjViMDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS5cEisljEqmYwsPCWj4i81zWyKXm7FPD4u4 x+QxJ7YeyHToMnHfVNZhGaZ7O+053mf0s/gabn6l0xZNKqWOQ+nHsZnt089mpphs M15dy5OTKLsPLT9SGTAUiT1qu+QCzrHVVOVQvIjaNV9vJiwz2vThc6GfZeiopHSB GbvDzFqivaWL+WgfjeUgur7cNPoTslEb4DrzPHsE3ND7ZABuQteKrMWNt/bjB+86 OXmXHcTapBF4lL458H4XfjdS9f3MUK/dd3+L922foXQrOAE8/FrLhoT1IdJd01EJ hdrSqY8XOI93AEKuv04a9AyP4zupwuBMtKlRYrKYYmcO2IHuKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIr/lI5j7YxsL50EXEIIJssvEQ0CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNWRjMWRhOTgtOGY1Yy0z YzBlLTljZTgtNmRjNzQ4Nzk3NjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz0MqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALn+yS/s+leVK1T/18MzbYmKqjIddJUc5S/C+gDFHVzkI2GCtQe5JSZH OcQG/g7Z9+5tA+Kc3Jf0COTjxrJuFDQaLVX0bV9VZlB+I53PbuJV3ZOmUWuFrRUS RuLXGr2tTutoG6lTOH8Sk3ndELYxx4Aw7BgWM5rm46xI5hqYWAsasx18OpcQY6UN L7V9IT6PuoJ64Qvdkt84pS8v4g7bJLO8h2rQx6SwagH6k0YpEbOTEVKUwv5y/ybQ 2BnZD4l0aZjc02aBPsrx26QEOU8g9ir3zzm+UAEnjMOTu9wbYbLpfUNEEXNpeBQh jOyLzKoNeu98yngF81s2txemjZIwUWE= -----END CERTIFICATE-----Generated at Sat Oct 10 13:44:30 2026 by rpki-client