$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1a402687-73f0-38f9-b900-9c98f4cd0bd6.roa File: 1a402687-73f0-38f9-b900-9c98f4cd0bd6.roa (raw, json) Hash identifier: 5casH5cv5g1AjEOyeTGr8IrMCBRfFHicYNgsGat7/jM= Subject key identifier: FD:3D:90:FF:33:03:7F:9F:22:B0:59:6E:6A:BA:9D:24:33:73:2D:59 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584ECA6C719F87DCA7AC330ED680 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1a402687-73f0-38f9-b900-9c98f4cd0bd6.roa Signing time: Mon 10 Aug 2026 13:00:12 +0000 ROA not before: Mon 10 Aug 2026 13:00:12 +0000 ROA not after: Sun 08 Nov 2026 14:00:12 +0000 asID: 3356 IP address blocks: 199.35.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ca:6c:71:9f:87:dc:a7:ac:33:0e:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 10 13:00:12 2026 GMT Not After : Nov 8 14:00:12 2026 GMT Subject: CN=0e8796f0-760b-464c-be84-bf4a6fcd1420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:59:2f:7d:22:a9:8d:8e:62:a1:48:a9:60:af: 22:ee:0a:79:20:a9:f6:5e:12:ef:35:da:ee:ae:fb: d2:d4:25:77:d3:75:34:bf:af:e3:af:e2:d6:b5:f8: 67:6c:fa:52:a7:2e:c5:32:05:8c:64:df:22:88:a4: e0:28:85:de:73:c9:83:f4:24:48:cc:f0:9f:cf:ff: 07:88:e1:99:c9:46:1a:a8:88:27:c6:51:24:35:fe: 6b:e9:96:46:f3:cc:2f:a7:51:1f:69:6a:9f:aa:7b: 2a:35:05:3f:c7:d9:db:84:6e:2d:20:ca:ba:e0:64: 25:72:85:38:dd:61:82:28:40:fa:f7:d5:25:22:38: ef:ed:e1:c3:74:d0:8a:2f:6a:ff:a3:a9:c0:83:c7: 41:30:f0:0f:5e:61:f2:33:5f:66:19:1e:36:b6:ea: 6e:10:0b:4a:29:cc:1e:9c:cd:aa:d3:2a:7d:37:92: c6:a4:f7:30:bb:3d:90:1d:7e:d1:72:34:26:fa:5f: 74:5b:33:6b:a3:fd:43:fd:23:13:e9:5f:68:e2:3a: 07:d4:2e:68:95:07:fc:da:2c:1f:ef:23:26:0a:66: 67:3c:32:3b:f6:1a:14:9f:47:d9:e9:7d:2c:d2:a2: bf:b6:e9:60:a2:c0:32:8a:a7:ed:83:2f:30:68:18: 40:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:3D:90:FF:33:03:7F:9F:22:B0:59:6E:6A:BA:9D:24:33:73:2D:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1a402687-73f0-38f9-b900-9c98f4cd0bd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 199.35.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:cf:6e:93:c9:8f:d6:bc:e5:85:25:b4:38:21:87:a4:51:7e: 29:87:47:51:be:a9:14:6f:d5:fd:61:3e:8d:6a:72:07:ba:94: 77:60:8e:ce:fe:c6:08:96:df:64:22:7c:9f:15:70:8b:95:cb: 64:10:5e:62:66:14:b9:af:76:3a:ec:1a:3d:db:fd:72:ca:c4: dc:87:a9:5c:a3:7c:4c:6d:f0:b5:79:f1:e2:dc:1b:60:dd:8c: 91:4f:4a:03:54:37:46:e4:ac:85:85:a5:c6:60:85:1e:b1:24: fe:aa:f6:f1:53:cc:9e:4b:01:b6:0d:d9:ac:61:39:89:9f:42: ae:57:a6:03:e0:5c:17:79:ed:da:ff:6c:bf:b4:b4:ba:6e:50: cc:71:d6:f2:0b:a5:f8:75:14:0e:4e:00:39:6e:9c:f7:d0:ab: 1b:ef:fe:37:45:81:1c:95:09:65:b6:27:d7:a1:f4:18:d5:79: ec:06:54:b6:e7:bf:d5:24:8f:12:8b:43:4b:38:3e:23:f3:32: 52:57:3a:5f:f2:bb:d3:33:e2:60:22:50:04:58:db:39:b0:42: 26:71:73:a6:38:bd:87:b6:28:b3:85:5c:09:98:7d:7b:e1:03: c5:36:dc:6b:5c:7b:86:3c:ca:35:00:44:47:99:de:0f:f3:64: 01:ab:e0:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7KbHGfh9ynrDMO1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDgxMDEzMDAxMloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk MGU4Nzk2ZjAtNzYwYi00NjRjLWJlODQtYmY0YTZmY2QxNDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1kvfSKpjY5ioUipYK8i7gp5IKn2XhLvNdru rvvS1CV303U0v6/jr+LWtfhnbPpSpy7FMgWMZN8iiKTgKIXec8mD9CRIzPCfz/8H iOGZyUYaqIgnxlEkNf5r6ZZG88wvp1EfaWqfqnsqNQU/x9nbhG4tIMq64GQlcoU4 3WGCKED699UlIjjv7eHDdNCKL2r/o6nAg8dBMPAPXmHyM19mGR42tupuEAtKKcwe nM2q0yp9N5LGpPcwuz2QHX7RcjQm+l90WzNro/1D/SMT6V9o4joH1C5olQf82iwf 7yMmCmZnPDI79hoUn0fZ6X0s0qK/tulgosAyiqftgy8waBhAIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP09kP8zA3+fIrBZbmq6nSQzcy1ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMWE0MDI2ODctNzNmMC0z OGY5LWI5MDAtOWM5OGY0Y2QwYmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHxyOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/PbpPJj9a85YUltDghh6RRfimHR1G+qRRv1f1hPo1qcge6lHdgjs7+ xgiW32QifJ8VcIuVy2QQXmJmFLmvdjrsGj3b/XLKxNyHqVyjfExt8LV58eLcG2Dd jJFPSgNUN0bkrIWFpcZghR6xJP6q9vFTzJ5LAbYN2axhOYmfQq5XpgPgXBd57dr/ bL+0tLpuUMxx1vILpfh1FA5OADlunPfQqxvv/jdFgRyVCWW2J9eh9BjVeewGVLbn v9UkjxKLQ0s4PiPzMlJXOl/yu9Mz4mAiUARY2zmwQiZxc6Y4vYe2KLOFXAmYfXvh A8U23Gtce4Y8yjUAREeZ3g/zZAGr4PE= -----END CERTIFICATE-----Generated at Fri Aug 21 03:34:00 2026 by rpki-client