$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/832f289b-57d2-3d20-a42f-eb651d333977.roa File: 832f289b-57d2-3d20-a42f-eb651d333977.roa (raw, json) Hash identifier: M+LaaWxzZVnqPO8+Wj8ZGWs3CbacnzpVe3d6AGbeMJM= Subject key identifier: 7F:41:C3:3A:5E:C5:80:FA:B3:E4:C1:E4:26:C7:81:8E:77:8E:A0:48 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584EA787AF8FC5458AD9D0791888 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/832f289b-57d2-3d20-a42f-eb651d333977.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 3356 IP address blocks: 199.95.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:af:8f:c5:45:8a:d9:d0:79:18:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=05b957b4-300a-49a2-9e6b-fab48539b0fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7f:d2:83:b8:20:bc:91:dc:a1:9f:3b:55:2f: a8:36:1d:5b:c5:e5:72:34:dc:33:12:65:fb:ab:8d: cc:4d:f5:86:0b:65:4c:03:99:46:f7:b5:65:a7:8e: 9c:1c:dc:2f:7a:a3:6c:69:97:91:44:dc:33:c5:d7: 22:07:dc:e6:6a:fb:cd:b8:4a:e6:0d:26:cc:26:e7: fa:a2:f6:f3:71:a5:54:ea:51:f9:9b:a6:72:c0:d9: ac:67:7e:cb:00:55:64:25:80:5e:e3:80:6c:9d:ef: 56:91:1c:b5:7e:a6:6b:f5:97:74:7a:db:ca:78:41: 45:27:86:78:f2:ce:46:da:b3:f8:38:69:44:67:ce: 14:ce:70:be:ea:68:82:a1:4e:0c:21:77:7b:fe:61: fe:2a:5c:57:fd:30:37:07:bb:8b:9a:71:c4:cb:bb: 51:86:cb:dc:21:53:a1:6e:9f:1d:93:bb:20:51:cf: 88:94:3c:2e:a6:0e:56:ca:d3:f6:4a:1f:7e:ed:6e: 8d:9d:c9:10:c1:3d:14:c2:7d:78:d9:cc:81:72:2d: 4b:9f:97:7a:03:a3:8c:09:77:5d:c3:93:c5:75:75: e5:ca:c0:83:9e:79:d4:d1:47:7a:38:2a:4c:11:3c: cb:6e:1f:af:4e:83:ca:a7:66:25:df:6c:15:d2:01: da:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:41:C3:3A:5E:C5:80:FA:B3:E4:C1:E4:26:C7:81:8E:77:8E:A0:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/832f289b-57d2-3d20-a42f-eb651d333977.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 199.95.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:21:e8:4d:61:be:93:3e:a8:a2:ee:fd:03:98:37:31:fa:26: 68:8d:54:d9:27:b9:48:7c:34:12:8f:f8:42:80:cc:23:8e:76: 87:ea:62:17:88:75:36:2e:1c:65:b1:42:bb:9a:33:84:7e:1f: f9:e0:a3:45:ac:c1:77:54:53:01:8e:74:60:64:d4:b6:f2:27: 44:f5:ce:04:d4:7e:bc:e4:59:db:33:c5:48:51:32:cb:c6:8b: 80:66:cf:58:c9:2b:b2:b9:5b:3e:55:e4:1d:59:56:06:d7:56: 35:a8:e3:4d:6b:8a:9e:77:01:b1:50:d4:cd:59:98:90:6b:8b: 06:83:59:00:0b:e7:7b:ff:54:a5:34:c4:7b:eb:15:87:b6:cd: d0:82:7c:59:d1:1d:17:9d:68:a6:88:9a:76:ed:cf:e7:8c:4b: a5:c3:e7:bc:56:e1:31:6b:31:c0:b0:5f:4f:e9:dd:01:95:b5: 43:35:19:40:ee:21:96:8c:9e:22:43:a7:f6:e5:86:cd:b1:55: be:a3:cd:5e:05:03:fe:86:8a:49:c8:1a:eb:1d:88:1d:e6:85: 28:cd:34:3e:a7:7a:1a:2f:91:25:78:05:c1:19:7a:12:d6:fc: a4:37:d5:dc:ff:ec:5d:c0:da:59:85:1b:e2:dc:0b:33:98:15: 11:2a:3d:36 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6nh6+PxUWK2dB5GIgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDViOTU3YjQtMzAwYS00OWEyLTllNmItZmFiNDg1MzliMGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX/Sg7ggvJHcoZ87VS+oNh1bxeVyNNwzEmX7 q43MTfWGC2VMA5lG97Vlp46cHNwveqNsaZeRRNwzxdciB9zmavvNuErmDSbMJuf6 ovbzcaVU6lH5m6ZywNmsZ37LAFVkJYBe44Bsne9WkRy1fqZr9Zd0etvKeEFFJ4Z4 8s5G2rP4OGlEZ84UznC+6miCoU4MIXd7/mH+KlxX/TA3B7uLmnHEy7tRhsvcIVOh bp8dk7sgUc+IlDwupg5WytP2Sh9+7W6NnckQwT0Uwn142cyBci1Ln5d6A6OMCXdd w5PFdXXlysCDnnnU0Ud6OCpMETzLbh+vToPKp2Yl32wV0gHa/wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFH9BwzpexYD6s+TB5CbHgY53jqBIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvODMyZjI4OWItNTdkMi0z ZDIwLWE0MmYtZWI2NTFkMzMzOTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAx18wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAIyHoTWG+kz6oou79A5g3MfomaI1U2Se5SHw0Eo/4QoDMI452h+piF4h1 Ni4cZbFCu5ozhH4f+eCjRazBd1RTAY50YGTUtvInRPXOBNR+vORZ2zPFSFEyy8aL gGbPWMkrsrlbPlXkHVlWBtdWNajjTWuKnncBsVDUzVmYkGuLBoNZAAvne/9UpTTE e+sVh7bN0IJ8WdEdF51opoiadu3P54xLpcPnvFbhMWsxwLBfT+ndAZW1QzUZQO4h loyeIkOn9uWGzbFVvqPNXgUD/oaKScga6x2IHeaFKM00Pqd6Gi+RJXgFwRl6Etb8 pDfV3P/sXcDaWYUb4twLM5gVESo9Ng== -----END CERTIFICATE-----Generated at Wed Jul 29 08:51:32 2026 by rpki-client