$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/affdef19-8fb7-342f-80fa-ce7195996ddf.roa File: affdef19-8fb7-342f-80fa-ce7195996ddf.roa (raw, json) Hash identifier: Wo0BmslMVHl5Wch+ur0Sml+WiFYemTpk2VWWOT91kjo= Subject key identifier: 33:75:E9:02:7A:41:5B:94:8E:EA:A7:B2:85:0D:48:BB:87:C0:DD:5F Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584EA7887D69F96D36C3E51B3D40 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/affdef19-8fb7-342f-80fa-ce7195996ddf.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 0 IP address blocks: 170.147.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:7d:69:f9:6d:36:c3:e5:1b:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=deda72e3-3ecf-426a-891d-0d9a187aa705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f2:87:aa:86:15:ed:a9:7e:9b:de:7b:1a:d5: e2:ae:02:60:5d:26:c9:e4:f2:86:23:c1:bd:5d:af: 9b:70:2e:bf:21:ee:6c:76:2c:77:0e:88:b8:06:cf: 29:ec:f8:59:5d:ee:47:3f:6a:91:df:6a:a5:42:da: f1:2c:3c:7c:24:d9:5d:42:7c:ff:e4:fb:c9:0c:99: 60:36:c2:bd:37:7c:bb:d3:97:51:49:f8:c7:d1:bd: 07:d8:30:2d:a2:03:99:23:01:3c:54:7d:aa:59:23: c3:a1:86:60:c6:80:b3:9e:b9:10:cd:b0:33:97:c3: 3b:7c:73:a5:3f:15:21:78:a7:a1:7a:c3:53:ea:12: c6:fd:82:13:a1:21:46:73:38:c0:27:3c:8c:3e:af: db:20:1b:7c:ca:83:a1:fe:9c:87:17:bc:0d:25:7a: 8e:92:53:b8:a8:ed:98:a8:5b:8e:80:59:6e:4c:c6: 16:f1:39:2c:ce:cb:ba:6f:54:84:34:06:5b:4a:3f: 17:b7:a0:66:c0:66:dd:26:56:a1:35:01:ba:66:11: 34:9a:df:42:00:6e:c1:da:4b:cc:e9:c6:65:b0:bf: 30:a9:de:21:2d:02:02:a1:65:da:4d:d2:89:70:0c: 09:c2:eb:1a:1b:7c:ef:90:3e:02:2c:bd:28:2d:85: e3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:75:E9:02:7A:41:5B:94:8E:EA:A7:B2:85:0D:48:BB:87:C0:DD:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/affdef19-8fb7-342f-80fa-ce7195996ddf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 170.147.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:99:51:12:df:ce:ed:04:86:e3:2e:59:fe:1d:18:16:b4:d9: 20:c6:b5:76:e8:4e:52:c6:f8:f4:e7:cf:4c:d9:c2:99:0f:7a: 93:44:a8:12:95:10:0f:3b:c7:50:f3:93:9e:fd:63:d6:65:c4: 05:a5:6b:af:1f:02:73:91:e3:41:11:bb:0a:c9:f3:cf:6b:3d: 3f:c9:dc:b2:97:e0:01:7a:8b:fe:d9:1c:86:ac:34:7b:6b:cf: 9e:4e:d4:41:2d:4e:0a:e7:69:94:d3:8a:f7:b8:ae:ab:fb:9e: 52:5d:97:41:1f:2c:59:cd:7f:2b:52:26:df:3d:27:ce:bf:76: 26:b3:87:02:a9:58:63:87:bc:6b:64:2c:8e:c5:a9:5f:d4:73: 28:fb:95:7b:f7:c6:df:df:49:bc:82:9e:f7:02:46:44:10:7c: e5:4d:a5:63:61:10:c8:c5:0d:a1:67:ee:17:19:1f:ec:33:47: 1b:0a:45:ef:62:7b:20:f6:bd:8e:15:64:21:7c:ac:ca:f8:5f: 16:42:af:45:f3:33:de:d1:24:8a:ed:64:56:02:ff:f4:02:ce: 67:1f:4c:3b:dd:89:d7:18:42:ca:2a:81:25:62:2d:9b:0e:4c: b7:5a:f4:1c:0a:64:30:87:cf:cd:a5:1b:73:42:1a:df:a3:5d: 84:87:81:67 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6niH1p+W02w+UbPUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZGVkYTcyZTMtM2VjZi00MjZhLTg5MWQtMGQ5YTE4N2FhNzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfKHqoYV7al+m957GtXirgJgXSbJ5PKGI8G9 Xa+bcC6/Ie5sdix3Doi4Bs8p7PhZXe5HP2qR32qlQtrxLDx8JNldQnz/5PvJDJlg NsK9N3y705dRSfjH0b0H2DAtogOZIwE8VH2qWSPDoYZgxoCznrkQzbAzl8M7fHOl PxUheKehesNT6hLG/YIToSFGczjAJzyMPq/bIBt8yoOh/pyHF7wNJXqOklO4qO2Y qFuOgFluTMYW8Tkszsu6b1SENAZbSj8Xt6BmwGbdJlahNQG6ZhE0mt9CAG7B2kvM 6cZlsL8wqd4hLQICoWXaTdKJcAwJwusaG3zvkD4CLL0oLYXjawIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDN16QJ6QVuUjuqnsoUNSLuHwN1fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYWZmZGVmMTktOGZiNy0z NDJmLTgwZmEtY2U3MTk1OTk2ZGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqpMwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEABZlREt/O7QSG4y5Z/h0YFrTZIMa1duhOUsb49OfPTNnCmQ96k0SoEpUQ DzvHUPOTnv1j1mXEBaVrrx8Cc5HjQRG7Csnzz2s9P8ncspfgAXqL/tkchqw0e2vP nk7UQS1OCudplNOK97iuq/ueUl2XQR8sWc1/K1Im3z0nzr92JrOHAqlYY4e8a2Qs jsWpX9RzKPuVe/fG399JvIKe9wJGRBB85U2lY2EQyMUNoWfuFxkf7DNHGwpF72J7 IPa9jhVkIXysyvhfFkKvRfMz3tEkiu1kVgL/9ALOZx9MO92J1xhCyiqBJWItmw5M t1r0HApkMIfPzaUbc0Ia36NdhIeBZw== -----END CERTIFICATE-----Generated at Wed Jul 29 05:00:34 2026 by rpki-client