$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0ef2162e-9403-3c27-863e-e2a113212b22.roa File: 0ef2162e-9403-3c27-863e-e2a113212b22.roa (raw, json) Hash identifier: cvFccJ8qDLQ00WEIhHyZWXn4VtS8AjovMXek+neVG+w= Subject key identifier: B2:DC:E6:17:F1:FB:21:E5:46:9A:15:D0:D0:0A:FF:C0:59:63:D1:E9 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584EF717602A0B230934204AED80 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0ef2162e-9403-3c27-863e-e2a113212b22.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 18809 IP address blocks: 64.215.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:60:2a:0b:23:09:34:20:4a:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=628cd6d6-33ab-48d8-aa89-607683e0b065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6f:cc:c1:cc:81:11:b3:b9:9d:da:fc:c2:53: 61:ab:0e:9c:eb:ce:78:9d:29:54:68:18:e8:aa:df: 32:fe:85:5a:9b:bf:81:c3:f5:d0:6c:26:17:c8:3a: cc:48:2c:4b:b0:e6:c8:9b:6d:09:1b:b3:ad:9a:c6: 2c:44:a7:da:63:6b:7c:f7:11:f2:42:a6:6a:1e:83: fa:4d:5b:f7:3f:c8:a9:99:ce:a7:06:7a:80:f3:b7: aa:42:c8:d6:be:78:b4:04:16:31:bc:76:12:81:8b: 82:45:0c:1c:13:35:df:01:02:dd:d0:14:45:4e:b9: 16:c2:16:9d:75:e1:2e:d5:87:ee:0b:17:85:70:95: a4:45:cf:90:82:27:a5:6b:e8:0f:77:d7:19:c7:52: 49:26:cc:45:61:fb:54:84:23:86:27:e5:c4:a9:4b: 38:cb:9b:fc:50:6a:c4:fd:2e:40:ca:fe:ac:d8:90: b7:ac:7f:f4:ac:18:7c:11:60:ef:b2:aa:57:92:14: d0:a1:fd:9c:4b:a2:c2:6a:c5:20:50:f4:d3:f9:51: ec:23:82:d5:ee:52:1e:4b:de:71:3c:7e:b6:36:cd: fa:32:70:49:e6:86:05:dd:56:93:ea:64:8c:dd:76: 2a:f2:7e:af:25:83:79:7a:a0:f6:af:a3:2d:57:9b: fb:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DC:E6:17:F1:FB:21:E5:46:9A:15:D0:D0:0A:FF:C0:59:63:D1:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0ef2162e-9403-3c27-863e-e2a113212b22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 64.215.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:d4:91:11:72:cf:89:51:6e:88:6e:22:b8:58:de:35:9c:e0: 93:20:39:78:54:a1:18:28:1e:ee:e4:6a:13:2d:79:80:71:1b: d8:f9:66:07:c7:03:32:6a:56:59:8c:1d:43:39:2e:cb:c0:96: 05:95:6c:1e:a9:31:27:e7:51:0e:49:47:62:ea:f4:f5:00:44: 7d:b7:9d:80:d0:f6:d0:3d:37:dc:3e:43:9d:03:a3:b3:53:0b: df:1e:4e:3a:e3:e2:cc:c4:04:e5:0e:b2:85:cd:7c:96:20:f9: 09:8e:27:61:9b:44:9b:ec:d7:46:ba:a0:3c:5e:61:58:19:b1: 78:c1:f9:da:2f:03:49:9b:9b:25:21:c8:ea:25:02:dc:db:e3: 76:e3:8a:e0:03:1b:cd:f6:9e:bd:39:74:ed:84:8d:83:15:ad: 9d:f4:b1:69:a4:ae:23:93:53:8a:84:57:9d:dd:fe:5b:b4:0b: 90:6a:a2:db:4d:ab:f7:96:b4:f3:1f:45:ba:3f:69:cc:62:ee: 8a:d1:25:78:b7:94:6d:29:59:58:87:9e:9c:45:93:51:cc:62: 9e:8f:f6:90:57:2f:b7:4f:d0:ab:e4:6f:3b:01:b4:ce:6d:26: 4c:21:57:7c:13:ac:3c:5d:a2:4c:09:c2:9c:26:52:94:53:1e: 77:62:5a:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F2AqCyMJNCBK7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk NjI4Y2Q2ZDYtMzNhYi00OGQ4LWFhODktNjA3NjgzZTBiMDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm/MwcyBEbO5ndr8wlNhqw6c6854nSlUaBjo qt8y/oVam7+Bw/XQbCYXyDrMSCxLsObIm20JG7OtmsYsRKfaY2t89xHyQqZqHoP6 TVv3P8ipmc6nBnqA87eqQsjWvni0BBYxvHYSgYuCRQwcEzXfAQLd0BRFTrkWwhad deEu1YfuCxeFcJWkRc+Qgiela+gPd9cZx1JJJsxFYftUhCOGJ+XEqUs4y5v8UGrE /S5Ayv6s2JC3rH/0rBh8EWDvsqpXkhTQof2cS6LCasUgUPTT+VHsI4LV7lIeS95x PH62Ns36MnBJ5oYF3VaT6mSM3XYq8n6vJYN5eqD2r6MtV5v7EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLc5hfx+yHlRpoV0NAK/8BZY9HpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMGVmMjE2MmUtOTQwMy0z YzI3LTg2M2UtZTJhMTEzMjEyYjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQNd4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALPUkRFyz4lRbohuIrhY3jWc4JMgOXhUoRgoHu7kahMteYBxG9j5ZgfH AzJqVlmMHUM5LsvAlgWVbB6pMSfnUQ5JR2Lq9PUARH23nYDQ9tA9N9w+Q50Do7NT C98eTjrj4szEBOUOsoXNfJYg+QmOJ2GbRJvs10a6oDxeYVgZsXjB+dovA0mbmyUh yOolAtzb43bjiuADG832nr05dO2EjYMVrZ30sWmkriOTU4qEV53d/lu0C5BqottN q/eWtPMfRbo/acxi7orRJXi3lG0pWViHnpxFk1HMYp6P9pBXL7dP0KvkbzsBtM5t JkwhV3wTrDxdokwJwpwmUpRTHndiWuk= -----END CERTIFICATE-----Generated at Sun Sep 27 00:09:41 2026 by rpki-client