$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5dc1da98-8f5c-3c0e-9ce8-6dc74879766a.roa File: 5dc1da98-8f5c-3c0e-9ce8-6dc74879766a.roa (raw, json) Hash identifier: SxejduOCDQ9wt59W8A8Es3EjFsXphJFSuU5UzsE1Vms= Subject key identifier: D5:BE:E3:AF:48:38:18:EE:8E:45:C3:AE:AA:1D:2D:3E:39:27:36:E8 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584D9FB56F0787E9681B8E973280 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5dc1da98-8f5c-3c0e-9ce8-6dc74879766a.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 202 IP address blocks: 207.67.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:6f:07:87:e9:68:1b:8e:97:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=f061034e-7b96-47cb-8312-0bdd0be7d1fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1e:2a:eb:2a:38:20:a8:f3:40:cd:3d:53:2f: 84:cf:0e:de:fa:95:aa:8d:cd:06:31:14:ef:43:91: c7:57:76:9c:e4:2d:af:21:4b:49:76:a4:43:18:17: ae:09:91:e9:b6:5e:11:0c:8a:64:4f:01:5b:a1:92: bf:4d:38:fa:39:68:27:18:fc:f9:a3:9a:11:cf:26: 06:5b:51:cb:5c:a5:d9:9f:ee:eb:bb:9b:8d:59:b1: 83:b4:01:ba:05:37:bf:af:73:8c:46:21:3d:0e:00: 89:0d:a1:43:6b:12:5a:47:f5:99:9a:78:f6:a5:8b: 78:f2:44:52:f2:9e:1e:1e:ab:d0:46:30:88:d6:1f: 71:ad:02:37:e5:47:d0:1b:67:e9:5f:48:0a:8c:7b: 70:0e:4e:43:dc:fd:3c:39:0b:89:ab:5f:4e:1e:18: 14:ab:85:65:d4:51:b6:f1:ea:fb:78:8f:70:77:ad: d2:be:6b:d1:43:dd:3d:e3:64:be:19:d5:3c:ba:c9: 5a:a3:bc:60:8a:e7:45:4d:94:49:f0:e3:71:05:a0: 3e:ef:87:03:8a:a2:9a:a2:fd:22:5e:3e:9c:fd:9b: 4b:7e:74:f3:14:fa:60:c4:e9:01:81:96:9c:7d:d5: d2:e4:41:53:b6:ae:32:64:a9:bd:f6:a8:aa:91:ef: 17:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BE:E3:AF:48:38:18:EE:8E:45:C3:AE:AA:1D:2D:3E:39:27:36:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5dc1da98-8f5c-3c0e-9ce8-6dc74879766a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 207.67.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:77:f4:95:19:96:70:6a:9b:86:11:d2:4f:3f:f9:1b:9e:db: 49:3c:4b:22:70:e5:bf:df:db:1f:92:2c:fb:fc:7f:bb:ee:a8: 3b:53:8d:05:f6:b9:43:ff:7d:80:81:21:06:af:5a:28:57:5c: 62:a2:d0:00:25:65:64:7b:e5:16:5b:5a:d1:ac:99:2f:f2:40: 92:2d:f5:c4:5d:85:e6:2d:e5:c3:f8:b6:50:8e:77:83:53:98: 54:7b:f9:e5:8d:b2:4a:cf:fd:d7:e1:af:b0:00:d9:d6:b4:e7: 54:8b:3e:33:63:60:af:0c:91:7e:93:dc:43:a6:eb:18:25:50: 8c:be:a2:91:d6:64:4b:00:1e:84:48:9c:6c:92:db:56:4f:5c: 43:ab:ba:0e:c6:ee:53:b6:f0:db:54:6a:01:12:c4:99:b7:ce: 9a:54:54:47:87:32:02:32:21:6f:d7:fd:f7:b1:ba:f4:79:15: 84:e2:14:2a:0e:bd:88:34:a0:63:fd:76:40:87:80:3c:40:64: 5f:95:4f:66:e8:69:07:81:8a:0b:92:bd:ce:f6:2b:38:d0:d2: e8:85:cf:c1:03:a8:e2:6a:26:a7:ef:2e:e5:de:fe:6a:ff:68: 2d:fa:50:9a:d6:af:87:08:87:0d:3f:11:96:59:e6:48:55:b7: 8d:04:1d:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftW8Hh+loG46XMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk ZjA2MTAzNGUtN2I5Ni00N2NiLTgzMTItMGJkZDBiZTdkMWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiB4q6yo4IKjzQM09Uy+Ezw7e+pWqjc0GMRTv Q5HHV3ac5C2vIUtJdqRDGBeuCZHptl4RDIpkTwFboZK/TTj6OWgnGPz5o5oRzyYG W1HLXKXZn+7ru5uNWbGDtAG6BTe/r3OMRiE9DgCJDaFDaxJaR/WZmnj2pYt48kRS 8p4eHqvQRjCI1h9xrQI35UfQG2fpX0gKjHtwDk5D3P08OQuJq19OHhgUq4Vl1FG2 8er7eI9wd63SvmvRQ90942S+GdU8uslao7xgiudFTZRJ8ONxBaA+74cDiqKaov0i Xj6c/ZtLfnTzFPpgxOkBgZacfdXS5EFTtq4yZKm99qiqke8XzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNW+469IOBjujkXDrqodLT45JzboMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNWRjMWRhOTgtOGY1Yy0z YzBlLTljZTgtNmRjNzQ4Nzk3NjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz0MqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJ39JUZlnBqm4YR0k8/+Rue20k8SyJw5b/f2x+SLPv8f7vuqDtTjQX2 uUP/fYCBIQavWihXXGKi0AAlZWR75RZbWtGsmS/yQJIt9cRdheYt5cP4tlCOd4NT mFR7+eWNskrP/dfhr7AA2da051SLPjNjYK8MkX6T3EOm6xglUIy+opHWZEsAHoRI nGyS21ZPXEOrug7G7lO28NtUagESxJm3zppUVEeHMgIyIW/X/fexuvR5FYTiFCoO vYg0oGP9dkCHgDxAZF+VT2boaQeBiguSvc72KzjQ0uiFz8EDqOJqJqfvLuXe/mr/ aC36UJrWr4cIhw0/EZZZ5khVt40EHeg= -----END CERTIFICATE-----Generated at Sat May 9 00:40:43 2026 by rpki-client