$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f431a01d-ccef-3853-a33e-26804741b948.roa File: f431a01d-ccef-3853-a33e-26804741b948.roa (raw, json) Hash identifier: C4SclkmxolW0/IZyhc6x0puDlVmXXRrgO2YkJ+zNZ7w= Subject key identifier: 02:C1:34:44:6B:7E:AB:D3:B1:D3:C6:65:BE:14:81:BE:7F:65:F8:33 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584D746FBEC4E8AB1101D8A03980 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f431a01d-ccef-3853-a33e-26804741b948.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 18809 IP address blocks: 64.213.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:be:c4:e8:ab:11:01:d8:a0:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=6b71f498-8714-4044-91f0-9515c1c06027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:42:4c:ae:46:d4:49:ac:51:33:0e:52:3e:0a: ba:9a:7b:10:1c:4a:28:04:3e:0e:04:f3:e7:59:c3: f8:3d:af:df:62:7d:89:a2:94:a0:21:89:8e:91:32: 5b:a7:22:d9:0a:a6:6b:55:10:ff:f9:f9:6a:21:26: 59:96:1b:7f:c0:79:67:81:b1:3a:7c:b8:70:90:8f: 78:32:ad:2d:85:43:8d:5a:9a:d8:01:81:19:d2:39: f9:e1:15:4b:c6:d8:b2:b0:b1:54:22:19:9c:04:2a: 9f:c6:82:0f:e1:94:a9:1a:f5:18:68:d5:9c:65:58: d7:a2:28:a2:fe:0f:7f:5a:22:0c:55:ef:7e:f1:65: c4:cb:d0:22:20:c5:59:d5:b5:2c:da:74:59:4b:1b: 29:fb:b0:bc:fd:a4:79:7d:a6:2c:b4:44:b2:f8:6a: a8:de:38:d9:e5:42:e2:31:93:86:1e:b4:a2:84:58: d8:45:70:37:20:bf:38:58:03:10:f7:41:02:85:0a: 91:3f:13:de:6d:d9:6d:89:18:72:3d:17:e4:25:27: d2:c0:82:fd:5e:f7:1b:8b:f9:c2:d3:5f:a3:fd:b1: be:06:97:4c:3c:86:aa:40:5e:2d:ac:0d:41:62:6f: cf:31:2f:a0:bb:48:16:2c:e3:ad:68:71:ac:33:2b: 78:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C1:34:44:6B:7E:AB:D3:B1:D3:C6:65:BE:14:81:BE:7F:65:F8:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f431a01d-ccef-3853-a33e-26804741b948.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 64.213.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:f7:00:74:94:ec:42:39:ec:16:a1:05:0d:55:6f:30:c6:0e: 28:fb:61:34:8e:75:f0:a7:66:aa:44:60:60:09:76:a1:d3:43: de:de:3a:da:19:21:ff:38:cc:80:1d:1c:a3:27:26:7f:78:f4: 2b:11:72:00:66:5a:cb:f7:4b:b2:83:f6:d6:b9:a7:12:ce:66: d4:0c:5d:01:f4:de:c7:f0:c7:bc:48:57:24:f8:61:71:ea:95: 9e:8c:76:10:09:56:4d:94:6c:58:39:69:c7:e3:00:fb:9f:7e: db:2e:81:1e:35:75:d7:e5:36:ea:b2:c1:ae:44:df:aa:fc:74: d5:4f:b4:ba:81:86:17:8c:b0:22:e6:57:de:16:93:17:ff:30: 29:95:88:93:44:2c:cb:d9:45:93:11:a7:b3:7f:d0:0d:58:4e: 47:0a:90:41:10:09:06:ab:4b:10:5b:d6:94:85:20:e9:66:05: dc:1c:0e:42:85:cd:b8:ea:32:fe:81:45:62:22:43:94:97:bb: 4e:08:34:c0:b5:db:dc:19:1d:d7:e6:69:b9:e2:03:d6:24:48: 3f:07:cc:88:ca:a0:1f:1b:6c:79:10:95:58:d4:ce:76:1c:70: 37:1f:f6:89:36:a1:bd:01:e6:03:e0:fc:83:0c:f6:2b:c6:04: ce:86:bd:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b77E6KsRAdigOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk NmI3MWY0OTgtODcxNC00MDQ0LTkxZjAtOTUxNWMxYzA2MDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUJMrkbUSaxRMw5SPgq6mnsQHEooBD4OBPPn WcP4Pa/fYn2JopSgIYmOkTJbpyLZCqZrVRD/+flqISZZlht/wHlngbE6fLhwkI94 Mq0thUONWprYAYEZ0jn54RVLxtiysLFUIhmcBCqfxoIP4ZSpGvUYaNWcZVjXoiii /g9/WiIMVe9+8WXEy9AiIMVZ1bUs2nRZSxsp+7C8/aR5faYstESy+Gqo3jjZ5ULi MZOGHrSihFjYRXA3IL84WAMQ90EChQqRPxPebdltiRhyPRfkJSfSwIL9Xvcbi/nC 01+j/bG+BpdMPIaqQF4trA1BYm/PMS+gu0gWLOOtaHGsMyt4VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALBNERrfqvTsdPGZb4Ugb5/ZfgzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZjQzMWEwMWQtY2NlZi0z ODUzLWEzM2UtMjY4MDQ3NDFiOTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQNU4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALH3AHSU7EI57BahBQ1VbzDGDij7YTSOdfCnZqpEYGAJdqHTQ97eOtoZ If84zIAdHKMnJn949CsRcgBmWsv3S7KD9ta5pxLOZtQMXQH03sfwx7xIVyT4YXHq lZ6MdhAJVk2UbFg5acfjAPufftsugR41ddflNuqywa5E36r8dNVPtLqBhheMsCLm V94Wkxf/MCmViJNELMvZRZMRp7N/0A1YTkcKkEEQCQarSxBb1pSFIOlmBdwcDkKF zbjqMv6BRWIiQ5SXu04INMC129wZHdfmabniA9YkSD8HzIjKoB8bbHkQlVjUznYc cDcf9ok2ob0B5gPg/IMM9ivGBM6GvWY= -----END CERTIFICATE-----Generated at Fri Apr 17 18:45:12 2026 by rpki-client