$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0c396a91-1306-3b66-8418-4bfd2956d110.roa File: 0c396a91-1306-3b66-8418-4bfd2956d110.roa (raw, json) Hash identifier: K/17Gu6UEIzUNEeXXCO+HbjE3kT5EWEF51Oy+xJG0LI= Subject key identifier: 2F:ED:04:F1:58:6B:DA:E5:48:79:08:81:25:E5:E9:CB:64:1B:03:13 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584DA5AEA2F02B1C4F1D2E8C2180 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0c396a91-1306-3b66-8418-4bfd2956d110.roa Signing time: Mon 27 Apr 2026 16:21:49 +0000 ROA not before: Mon 27 Apr 2026 16:21:49 +0000 ROA not after: Sun 26 Jul 2026 16:21:49 +0000 asID: 30227 IP address blocks: 206.35.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a5:ae:a2:f0:2b:1c:4f:1d:2e:8c:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Apr 27 16:21:49 2026 GMT Not After : Jul 26 16:21:49 2026 GMT Subject: CN=3e567225-1277-4b2d-8221-49163c6fe1df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e2:56:13:1b:1c:23:e5:3b:73:99:87:8f:04: 47:78:19:f6:f7:f7:67:b4:4d:c8:ca:b6:24:78:58: a4:9a:f5:50:ff:36:59:f1:a6:58:8b:4d:29:bd:b4: 98:82:da:01:af:84:9d:05:d5:98:da:86:a6:6c:06: ef:a9:ea:12:47:14:26:e0:f3:2a:5a:75:59:02:76: 90:e1:d4:99:90:6a:ac:a2:14:e8:2b:c5:6d:d5:a4: 0a:73:3f:a1:f0:61:0f:5d:36:16:97:ca:85:83:ab: a6:18:16:4f:bd:2b:df:7d:e8:01:11:b2:24:44:e9: 9e:11:de:c8:52:1b:bc:98:82:52:ae:33:4a:e8:cd: 55:05:6c:48:f8:77:28:24:05:c0:53:27:61:2b:3e: 7c:5d:bd:17:0c:b1:f5:34:c2:a6:27:c7:89:94:46: 05:22:41:d4:4d:74:91:37:af:85:5b:1f:27:4c:ee: 07:be:b4:68:fb:8c:7f:e6:7b:0d:e0:b8:96:e1:3d: a8:f6:8a:68:09:0b:8b:76:a8:ab:5e:bf:c7:48:9a: a2:54:1b:25:f9:10:d8:5e:f3:69:a2:4b:55:04:fa: 14:af:a9:07:47:d6:a8:c5:32:90:65:14:89:39:64: 11:f9:bd:9d:d5:60:ae:7b:14:fb:ed:c5:ff:73:d3: 1a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:ED:04:F1:58:6B:DA:E5:48:79:08:81:25:E5:E9:CB:64:1B:03:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0c396a91-1306-3b66-8418-4bfd2956d110.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 206.35.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:e0:28:83:34:79:7c:41:32:5c:62:b0:d4:f3:77:75:33:89: 9a:95:22:58:b4:f2:29:40:cc:ea:4f:20:ea:1a:ac:4b:09:41: 26:33:d8:cb:9d:10:46:39:23:32:45:6e:5c:c2:b1:86:bc:27: 50:37:dd:cc:41:dc:6f:db:f4:98:f5:05:e3:02:5f:90:4a:04: cc:b5:10:37:2a:bd:31:d5:bf:38:1b:e3:3a:c1:3b:92:2d:89: 55:9d:74:f0:c0:0b:d7:52:4b:cd:41:d8:c5:6b:bb:3e:ae:0f: e7:e7:83:7d:df:6b:dd:53:16:f3:a7:38:7b:03:86:99:e1:91: d1:55:e4:3b:12:76:75:05:3e:e6:72:ea:21:ba:81:68:50:65: f1:ce:fd:66:89:e8:b7:e8:5c:3b:93:ed:76:3d:39:3b:bf:28: e9:1f:ef:62:d3:9e:d8:88:35:49:a6:c6:5f:4e:2f:d0:50:ce: a0:bb:91:c1:36:fd:0d:00:b8:0b:fb:27:70:13:62:cc:89:eb: 08:cf:0a:20:6f:1f:a1:dc:25:53:42:74:18:a4:72:53:ee:f4: af:d6:68:3f:98:8e:e0:27:22:1c:19:b8:9f:30:f1:3c:f2:26: 17:3d:98:96:d9:3c:cc:e8:73:e3:b3:b1:4d:d8:e9:51:a1:87: 62:fb:03:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2lrqLwKxxPHS6MIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDQyNzE2MjE0OVoXDTI2MDcyNjE2MjE0OVowLzEtMCsGA1UEAxMk M2U1NjcyMjUtMTI3Ny00YjJkLTgyMjEtNDkxNjNjNmZlMWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuJWExscI+U7c5mHjwRHeBn29/dntE3IyrYk eFikmvVQ/zZZ8aZYi00pvbSYgtoBr4SdBdWY2oambAbvqeoSRxQm4PMqWnVZAnaQ 4dSZkGqsohToK8Vt1aQKcz+h8GEPXTYWl8qFg6umGBZPvSvffegBEbIkROmeEd7I Uhu8mIJSrjNK6M1VBWxI+HcoJAXAUydhKz58Xb0XDLH1NMKmJ8eJlEYFIkHUTXSR N6+FWx8nTO4HvrRo+4x/5nsN4LiW4T2o9opoCQuLdqirXr/HSJqiVBsl+RDYXvNp oktVBPoUr6kHR9aoxTKQZRSJOWQR+b2d1WCuexT77cX/c9MawwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/tBPFYa9rlSHkIgSXl6ctkGwMTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMGMzOTZhOTEtMTMwNi0z YjY2LTg0MTgtNGJmZDI5NTZkMTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAziMkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/gKIM0eXxBMlxisNTzd3UziZqVIli08ilAzOpPIOoarEsJQSYz2Mud EEY5IzJFblzCsYa8J1A33cxB3G/b9Jj1BeMCX5BKBMy1EDcqvTHVvzgb4zrBO5It iVWddPDAC9dSS81B2MVruz6uD+fng33fa91TFvOnOHsDhpnhkdFV5DsSdnUFPuZy 6iG6gWhQZfHO/WaJ6LfoXDuT7XY9OTu/KOkf72LTntiINUmmxl9OL9BQzqC7kcE2 /Q0AuAv7J3ATYsyJ6wjPCiBvH6HcJVNCdBikclPu9K/WaD+YjuAnIhwZuJ8w8Tzy Jhc9mJbZPMzoc+OzsU3Y6VGhh2L7AxY= -----END CERTIFICATE-----Generated at Sat May 9 00:38:54 2026 by rpki-client