$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8d87b15f-117c-3ff5-8230-83d46404b101.roa File: 8d87b15f-117c-3ff5-8230-83d46404b101.roa (raw, json) Hash identifier: 1DlPXHVpSb+K5yeNdernlgdDn9C6gYb2czzVafC1tvc= Subject key identifier: 1E:5F:83:22:57:08:87:67:2F:A1:28:6B:AC:03:B4:1A:EB:71:93:2B Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584E082276B93CAC38CDF4846100 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8d87b15f-117c-3ff5-8230-83d46404b101.roa Signing time: Mon 01 Jun 2026 22:44:25 +0000 ROA not before: Mon 01 Jun 2026 22:44:25 +0000 ROA not after: Sun 30 Aug 2026 22:44:25 +0000 asID: 3356 IP address blocks: 67.24.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:22:76:b9:3c:ac:38:cd:f4:84:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jun 1 22:44:25 2026 GMT Not After : Aug 30 22:44:25 2026 GMT Subject: CN=0a7f02a4-e0e5-4975-a255-a8dfdd0e090a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:39:ed:de:7e:f0:87:69:5d:38:bd:58:fe:81: d8:82:2c:52:6a:9d:e6:f8:08:d1:24:79:8b:fc:a4: 5f:9c:01:a5:1f:ac:c9:f8:ba:9e:ee:e0:ea:52:df: 97:42:40:80:73:9b:40:bc:56:30:a0:f3:c1:ea:6c: e0:89:1c:9c:f7:80:3a:86:bf:a5:21:31:6e:51:fa: 0a:66:31:67:59:e9:0c:d1:71:4d:c0:2f:60:6c:c4: c5:0f:19:ad:00:d9:47:b7:95:df:6c:b4:eb:c8:6a: dc:ad:d2:5f:e4:40:66:de:f2:e4:12:88:04:f2:27: eb:3a:8f:fc:8d:21:71:ea:bd:bb:a4:7e:42:b3:ee: 7a:8d:ad:e8:7f:c8:63:c2:14:3c:30:3c:a4:b4:39: 04:85:40:ca:0d:cc:d8:ed:cd:f1:be:cd:42:3a:f4: 08:45:7a:b6:86:02:ea:f6:a1:01:01:04:42:7f:8f: 7f:a8:cf:50:d1:03:fa:4f:d7:da:11:79:40:64:d5: 13:66:b5:3c:cc:cc:05:a8:68:27:fa:2a:c6:4f:66: c6:44:f3:45:56:65:6c:c7:2b:9c:af:03:17:69:50: ad:6e:b1:17:d8:36:b3:31:7f:4b:6f:c4:13:5c:19: 0a:a8:4a:b5:7f:bd:6e:0b:8c:dd:e3:e8:ec:01:55: 60:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5F:83:22:57:08:87:67:2F:A1:28:6B:AC:03:B4:1A:EB:71:93:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8d87b15f-117c-3ff5-8230-83d46404b101.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 67.24.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:b0:75:2e:a0:23:f6:f8:37:fd:e5:46:3a:8f:0a:3d:19:18: bc:83:0a:d7:9a:29:c3:56:09:2f:4e:0d:a9:c3:16:57:d9:ab: 93:06:7a:8d:49:1a:44:a1:60:d6:a4:29:84:1d:8b:33:55:eb: b5:34:0a:fc:4a:4f:30:32:ce:fd:54:ea:ad:75:67:70:e8:4b: 26:df:b8:29:04:ee:b9:9f:39:99:88:f7:bc:5d:dd:62:31:82: 32:21:19:78:de:08:d2:e5:72:15:ae:6c:57:e8:8b:09:c3:56: d2:34:b9:66:13:60:34:ac:49:2a:20:9c:33:c2:e3:bd:c4:a4: 84:c6:ab:42:8d:8f:ed:bb:53:07:7e:22:8c:04:66:f4:4b:35: 52:67:01:11:80:6d:2d:04:75:3d:a6:aa:f7:2f:4d:20:af:ed: 87:d7:36:31:61:53:1d:a5:64:80:ac:26:9e:11:f0:c5:35:4f: 19:01:ad:dd:6b:84:e5:ed:fb:4a:77:8e:7b:c4:7c:07:97:44: be:c0:38:9e:2d:33:20:11:74:35:ee:73:8d:d7:80:c1:8e:b4: 70:13:6b:6f:d4:69:36:54:52:a9:9e:d5:1a:34:6d:37:6b:17: 95:50:5e:c5:bb:5d:91:9a:df:2d:37:3b:84:63:de:67:9d:14: 8f:4e:6b:9c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE4IIna5PKw4zfSEYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDYwMTIyNDQyNVoXDTI2MDgzMDIyNDQyNVowLzEtMCsGA1UEAxMk MGE3ZjAyYTQtZTBlNS00OTc1LWEyNTUtYThkZmRkMGUwOTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTnt3n7wh2ldOL1Y/oHYgixSap3m+AjRJHmL /KRfnAGlH6zJ+Lqe7uDqUt+XQkCAc5tAvFYwoPPB6mzgiRyc94A6hr+lITFuUfoK ZjFnWekM0XFNwC9gbMTFDxmtANlHt5XfbLTryGrcrdJf5EBm3vLkEogE8ifrOo/8 jSFx6r27pH5Cs+56ja3of8hjwhQ8MDyktDkEhUDKDczY7c3xvs1COvQIRXq2hgLq 9qEBAQRCf49/qM9Q0QP6T9faEXlAZNUTZrU8zMwFqGgn+irGT2bGRPNFVmVsxyuc rwMXaVCtbrEX2DazMX9Lb8QTXBkKqEq1f71uC4zd4+jsAVVg0QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFB5fgyJXCIdnL6Eoa6wDtBrrcZMrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvOGQ4N2IxNWYtMTE3Yy0z ZmY1LTgyMzAtODNkNDY0MDRiMTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCQxgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAV7B1LqAj9vg3/eVGOo8KPRkYvIMK15opw1YJL04NqcMWV9mrkwZ6jUka RKFg1qQphB2LM1XrtTQK/EpPMDLO/VTqrXVncOhLJt+4KQTuuZ85mYj3vF3dYjGC MiEZeN4I0uVyFa5sV+iLCcNW0jS5ZhNgNKxJKiCcM8LjvcSkhMarQo2P7btTB34i jARm9Es1UmcBEYBtLQR1Paaq9y9NIK/th9c2MWFTHaVkgKwmnhHwxTVPGQGt3WuE 5e37SneOe8R8B5dEvsA4ni0zIBF0Ne5zjdeAwY60cBNrb9RpNlRSqZ7VGjRtN2sX lVBexbtdkZrfLTc7hGPeZ50Uj05rnA== -----END CERTIFICATE-----Generated at Sun Jun 14 01:23:24 2026 by rpki-client