$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3a001652-f862-32ab-9d90-aaf50d44a7b3.roa File: 3a001652-f862-32ab-9d90-aaf50d44a7b3.roa (raw, json) Hash identifier: OBy/9TcUg8fHY+ShSzYCswMkt+AnVaVwrBEvw8Hx/aI= Subject key identifier: 23:CF:86:EE:6D:E9:DC:D2:13:DC:54:45:3E:42:E7:7E:D4:72:80:0A Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584DAE278958BEE341ADDE226C00 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3a001652-f862-32ab-9d90-aaf50d44a7b3.roa Signing time: Thu 30 Apr 2026 17:11:53 +0000 ROA not before: Thu 30 Apr 2026 17:11:53 +0000 ROA not after: Wed 29 Jul 2026 17:11:53 +0000 asID: 0 IP address blocks: 64.128.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ae:27:89:58:be:e3:41:ad:de:22:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Apr 30 17:11:53 2026 GMT Not After : Jul 29 17:11:53 2026 GMT Subject: CN=747d3694-ca29-416f-9337-67fa85c638ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:52:27:c1:eb:62:63:c6:26:4f:80:e0:73:f6: 5e:81:5f:2d:db:d0:f5:92:6c:e1:57:52:63:ae:f3: dc:16:32:84:c6:aa:04:02:50:90:98:06:9a:94:47: 50:23:42:72:c3:a6:2c:d2:d2:d7:99:b3:7d:e5:ed: 3d:4d:38:15:4f:c4:27:3f:1f:ed:63:df:57:9c:fb: a8:30:fc:7a:ef:a4:81:9b:fe:73:6e:e4:d3:1d:96: 27:7f:9f:9d:96:8e:f5:34:bd:9d:c0:2b:40:ba:c2: 30:cd:f7:9b:ae:c8:2a:f0:24:be:2b:c9:f0:5f:ec: f7:b4:35:5b:2f:e0:4b:55:f7:e7:51:73:dd:ed:93: 33:87:f1:00:99:9f:f3:60:49:a9:2c:6a:65:62:69: 36:62:4d:b5:f7:57:26:14:49:e5:cf:da:3c:57:23: 96:f8:a8:f2:25:5b:6d:5c:74:a4:04:a4:4f:d5:4d: fb:15:a8:e0:c3:fa:d9:ae:12:67:71:d7:97:f6:a0: 2f:f9:60:12:ae:2a:8a:f4:07:90:fe:cb:e1:bb:dc: d9:1b:9e:7f:8d:cc:83:17:60:9b:b6:31:41:9b:e4: b1:66:cd:1f:68:7d:66:ac:4c:4b:2d:26:5b:19:70: 47:ca:47:ae:e5:50:c2:7d:73:d4:c8:74:b3:e3:ec: 51:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:CF:86:EE:6D:E9:DC:D2:13:DC:54:45:3E:42:E7:7E:D4:72:80:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3a001652-f862-32ab-9d90-aaf50d44a7b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 64.128.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:55:3f:79:50:8f:4f:45:2d:bc:3c:3d:4c:01:ad:e7:82:4c: 00:f0:8d:9e:38:8b:c6:51:ad:7a:af:fe:36:9a:02:2c:21:21: 69:77:31:14:04:cb:b2:c9:9d:4e:9d:7b:74:ef:45:cb:41:c4: 50:3c:d6:d1:0b:b2:bb:a8:68:4e:79:25:36:c2:b3:61:27:59: 2a:cf:a1:99:a1:11:aa:c8:e7:56:15:91:8d:0b:ff:16:aa:a8: 13:b8:cf:ed:5b:f5:b8:81:2d:b6:3c:4b:f0:1d:91:41:f4:9d: 44:c2:e4:92:84:fc:59:63:44:b7:f7:0a:11:d0:b6:c3:39:f0: 34:1f:1b:48:de:d9:95:b2:33:df:42:4b:74:8e:bd:f2:b2:e3: 8a:50:c8:12:53:95:dc:6c:2d:c9:b3:51:ac:df:76:45:2d:11: d3:97:31:03:42:c8:87:0e:b2:ec:aa:69:02:a3:28:1f:61:54: 31:76:71:2a:4d:37:06:45:e2:a9:ee:95:8d:d3:d3:7a:72:87: d3:3c:fe:e4:d8:9d:63:b4:44:69:21:36:41:98:3c:57:6d:c9: f6:46:0b:9c:59:c3:e8:bc:0e:a4:d0:f2:df:b5:09:83:a0:76: e8:f5:83:64:94:e3:95:5d:43:16:12:70:19:24:58:68:cf:81: 1f:bf:66:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2uJ4lYvuNBrd4ibAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDQzMDE3MTE1M1oXDTI2MDcyOTE3MTE1M1owLzEtMCsGA1UEAxMk NzQ3ZDM2OTQtY2EyOS00MTZmLTkzMzctNjdmYTg1YzYzOGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVInwetiY8YmT4Dgc/ZegV8t29D1kmzhV1Jj rvPcFjKExqoEAlCQmAaalEdQI0Jyw6Ys0tLXmbN95e09TTgVT8QnPx/tY99XnPuo MPx676SBm/5zbuTTHZYnf5+dlo71NL2dwCtAusIwzfebrsgq8CS+K8nwX+z3tDVb L+BLVffnUXPd7ZMzh/EAmZ/zYEmpLGplYmk2Yk2191cmFEnlz9o8VyOW+KjyJVtt XHSkBKRP1U37Fajgw/rZrhJncdeX9qAv+WASriqK9AeQ/svhu9zZG55/jcyDF2Cb tjFBm+SxZs0faH1mrExLLSZbGXBHykeu5VDCfXPUyHSz4+xR/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPPhu5t6dzSE9xURT5C537UcoAKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvM2EwMDE2NTItZjg2Mi0z MmFiLTlkOTAtYWFmNTBkNDRhN2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQID9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1VP3lQj09FLbw8PUwBreeCTADwjZ44i8ZRrXqv/jaaAiwhIWl3MRQE y7LJnU6de3TvRctBxFA81tELsruoaE55JTbCs2EnWSrPoZmhEarI51YVkY0L/xaq qBO4z+1b9biBLbY8S/AdkUH0nUTC5JKE/FljRLf3ChHQtsM58DQfG0je2ZWyM99C S3SOvfKy44pQyBJTldxsLcmzUazfdkUtEdOXMQNCyIcOsuyqaQKjKB9hVDF2cSpN NwZF4qnulY3T03pyh9M8/uTYnWO0RGkhNkGYPFdtyfZGC5xZw+i8DqTQ8t+1CYOg duj1g2SU45VdQxYScBkkWGjPgR+/ZsM= -----END CERTIFICATE-----Generated at Sat May 9 00:38:45 2026 by rpki-client