$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/87e5dc05-d4f4-377e-a112-331e02304f9e.roa File: 87e5dc05-d4f4-377e-a112-331e02304f9e.roa (raw, json) Hash identifier: DAvjMHEr738QRPHPwRbwxnXDQrM7q/k20BN/xUDvvd0= Subject key identifier: 29:2B:88:ED:02:49:1C:BE:53:FF:04:0E:A6:35:D7:C0:3D:41:8F:F5 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584D80FFF2857F14C8C819895AF0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/87e5dc05-d4f4-377e-a112-331e02304f9e.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 3356 IP address blocks: 216.54.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:f2:85:7f:14:c8:c8:19:89:5a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=3d96516d-f97f-458d-9437-224b1b609648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:60:a2:30:cb:d9:b6:98:d5:b7:90:24:c1:0b: 90:bc:e1:85:c6:86:9a:7d:06:74:75:39:4d:c6:22: 57:3e:1f:12:32:00:c4:90:03:7a:f6:09:1d:17:20: 12:9f:b2:dc:d2:c3:aa:e7:61:78:30:4b:f0:31:68: a2:a3:50:13:1f:e7:48:9f:a8:80:61:e3:32:de:4d: 84:5f:1b:56:14:19:1e:85:70:59:0b:65:63:00:e5: bc:0d:7c:d4:8f:07:4f:ec:69:a3:0a:17:75:78:93: 43:c5:1f:62:5a:d8:3d:6d:a9:f7:0f:a4:07:d1:4f: 82:91:62:c5:3c:16:ab:c9:9c:ae:78:13:f1:67:0a: cd:0b:92:24:82:fa:94:7d:9e:37:d8:0a:68:02:9b: 61:d6:76:1f:95:e5:6e:19:cc:ce:25:5a:f0:d9:ee: ac:a8:7a:75:50:f8:da:51:87:53:c7:ff:d8:a2:d1: b2:a0:70:43:0b:8e:96:ee:62:a5:9f:78:f7:99:d0: 58:5c:ca:72:26:71:fd:71:1c:ac:1f:27:64:67:c3: 3a:94:ee:56:8b:5f:51:fb:0b:58:ea:ff:46:2a:19: 5f:98:56:b5:1a:a1:a7:bc:df:88:3e:9d:8f:9b:7c: 03:f4:f5:00:79:7f:15:03:35:21:78:58:49:30:46: 05:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:2B:88:ED:02:49:1C:BE:53:FF:04:0E:A6:35:D7:C0:3D:41:8F:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/87e5dc05-d4f4-377e-a112-331e02304f9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 216.54.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:0c:0a:94:80:c6:19:2c:66:52:c3:fb:1a:63:c8:03:40:f2: 6d:cf:f9:54:6c:5f:6e:70:f4:4d:aa:6e:ce:3a:2e:fd:83:4d: 70:4a:b2:24:5f:23:cf:ec:4e:f6:3a:d9:ab:14:17:a6:4d:93: 8e:a2:43:12:11:e8:6b:1d:70:ca:25:68:49:6e:7d:d4:d1:4d: 72:c5:1a:83:d9:40:48:52:f2:5e:34:8c:69:39:76:00:eb:17: 01:85:ed:89:67:45:e7:f8:27:01:06:9a:12:7c:17:cc:7b:6a: 4d:69:71:db:f6:cc:48:b1:46:83:93:38:9a:fc:aa:86:42:00: 3e:ad:18:2b:75:4b:f0:e1:dc:e0:70:e1:35:bd:b0:26:9c:59: cb:6f:87:bf:a7:6b:68:5c:d9:62:48:58:c8:1b:10:d4:4e:01: 81:e5:b1:71:3c:4e:9e:4e:3f:42:a3:b9:67:5d:21:07:5e:b6: 0a:3e:65:52:cf:1f:f2:06:dc:86:87:4a:40:be:4b:5d:56:4a: af:7f:02:f9:f1:e6:ad:ef:fb:d3:10:b7:f1:fb:e7:89:90:ca: d0:72:55:e3:a8:e7:2f:9e:00:9d:99:8e:7b:dc:8b:41:84:f5: d0:7c:48:0d:68:e5:03:ee:54:01:19:cd:6e:18:ab:31:16:35: da:f1:45:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A//KFfxTIyBmJWvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk M2Q5NjUxNmQtZjk3Zi00NThkLTk0MzctMjI0YjFiNjA5NjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGCiMMvZtpjVt5AkwQuQvOGFxoaafQZ0dTlN xiJXPh8SMgDEkAN69gkdFyASn7Lc0sOq52F4MEvwMWiio1ATH+dIn6iAYeMy3k2E XxtWFBkehXBZC2VjAOW8DXzUjwdP7GmjChd1eJNDxR9iWtg9ban3D6QH0U+CkWLF PBaryZyueBPxZwrNC5IkgvqUfZ432ApoApth1nYfleVuGczOJVrw2e6sqHp1UPja UYdTx//YotGyoHBDC46W7mKln3j3mdBYXMpyJnH9cRysHydkZ8M6lO5Wi19R+wtY 6v9GKhlfmFa1GqGnvN+IPp2Pm3wD9PUAeX8VAzUheFhJMEYFGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkriO0CSRy+U/8EDqY118A9QY/1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvODdlNWRjMDUtZDRmNC0z NzdlLWExMTItMzMxZTAyMzA0ZjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DbCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8MCpSAxhksZlLD+xpjyANA8m3P+VRsX25w9E2qbs46Lv2DTXBKsiRf I8/sTvY62asUF6ZNk46iQxIR6GsdcMolaElufdTRTXLFGoPZQEhS8l40jGk5dgDr FwGF7YlnRef4JwEGmhJ8F8x7ak1pcdv2zEixRoOTOJr8qoZCAD6tGCt1S/Dh3OBw 4TW9sCacWctvh7+na2hc2WJIWMgbENROAYHlsXE8Tp5OP0KjuWddIQdetgo+ZVLP H/IG3IaHSkC+S11WSq9/Avnx5q3v+9MQt/H754mQytByVeOo5y+eAJ2Zjnvci0GE 9dB8SA1o5QPuVAEZzW4YqzEWNdrxRWU= -----END CERTIFICATE-----Generated at Fri Apr 17 15:24:13 2026 by rpki-client