$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6b4b2579-2d10-31b3-87a8-a94f7a423020.roa File: 6b4b2579-2d10-31b3-87a8-a94f7a423020.roa (raw, json) Hash identifier: axwnrXuut0sm0V416c5hJ+ofdZFILxqcyWy7EEJ5ess= Subject key identifier: 8B:64:76:94:6A:0F:93:AB:8A:2A:FF:AD:AB:A3:D6:81:65:DA:A9:1E Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584D1707DABA2B747FE5031EE780 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6b4b2579-2d10-31b3-87a8-a94f7a423020.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 7131 IP address blocks: 64.193.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:da:ba:2b:74:7f:e5:03:1e:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=339d4a28-922f-4ace-ba5e-1541796d291b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2d:ca:53:f0:c8:7c:9d:58:4b:0e:ac:ec:e5: 8e:70:f4:ab:ef:8b:71:a3:ae:7a:25:7f:f4:4e:ae: ea:17:45:10:c2:59:e5:1e:49:8f:51:cf:59:0e:2c: 7c:42:cd:22:60:d0:3e:6e:1e:cf:6f:28:0d:20:b6: b4:e1:88:e8:73:8c:ca:1f:ed:e8:e8:4a:b9:81:07: 4b:11:86:e9:ce:57:97:5e:a7:c9:9b:78:08:ba:33: 2f:34:4f:8b:4e:57:82:03:0b:b2:7d:b5:48:86:26: b2:4b:fd:40:e0:a4:7d:26:6d:84:25:87:95:fb:48: e4:dd:43:31:58:f3:b2:8a:03:5f:db:a4:69:ea:12: a3:7c:0e:64:33:9a:29:b2:31:76:59:28:41:bd:9b: 95:6c:03:96:6c:f6:60:06:b3:b1:22:49:0b:3c:18: e3:3a:37:10:42:4f:04:b8:38:83:9b:80:53:5f:b5: 24:b5:53:b6:25:4e:9e:9d:56:d4:32:5d:f6:0c:29: 52:1f:86:e1:ed:ed:de:95:1c:19:23:d1:3b:3d:3b: 88:80:02:b0:8e:b3:57:13:58:61:5d:34:ae:7d:c4: 9d:c5:5a:52:fb:75:f3:0c:1a:20:3b:27:4f:32:38: bd:a9:51:a5:66:b2:23:80:2b:ec:b5:4f:23:bc:6b: 2d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:64:76:94:6A:0F:93:AB:8A:2A:FF:AD:AB:A3:D6:81:65:DA:A9:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6b4b2579-2d10-31b3-87a8-a94f7a423020.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 64.193.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:37:05:54:1e:f4:c5:ef:2f:61:e1:d2:6c:92:8e:3b:c6:94: 7c:f5:01:63:76:f9:a3:23:66:5f:1c:c9:c3:14:ca:9c:ee:81: 7d:9d:6d:36:e2:21:5d:b7:89:77:fb:f1:bb:3e:b2:aa:7f:e6: fe:c5:a1:31:6c:2e:06:e5:b7:50:33:cb:3f:9c:98:8b:1c:ea: 95:87:13:3c:61:65:4f:29:79:a6:c5:1e:85:1c:66:99:a1:9b: 15:a9:b3:fe:d8:03:be:05:da:12:18:d5:c8:27:80:be:f5:0e: 27:ed:8a:8f:e8:72:74:22:2e:6f:83:58:81:75:5c:be:56:99: 0e:d4:d3:d7:df:8b:ef:80:84:b1:9a:a6:36:26:8b:25:71:df: 41:02:87:e1:94:73:e4:ea:1d:b5:b5:19:9c:4a:0e:6c:37:59: 22:0c:e2:2f:ef:c6:f7:2a:f6:52:d6:df:de:bd:cf:cc:a5:42: 0e:d9:11:10:0e:23:35:83:75:79:d0:00:81:1f:0a:29:3d:7b: 04:10:c1:d2:ec:ee:cc:ee:c5:76:61:aa:cc:4b:a0:e0:19:e2: de:e5:25:db:67:57:94:fe:f2:2d:db:9d:6c:32:7b:e0:35:19: f1:ac:40:b9:50:1c:6c:e5:3f:07:90:c5:ad:ad:5b:98:1d:dc: f8:97:35:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0XB9q6K3R/5QMe54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk MzM5ZDRhMjgtOTIyZi00YWNlLWJhNWUtMTU0MTc5NmQyOTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy3KU/DIfJ1YSw6s7OWOcPSr74txo656JX/0 Tq7qF0UQwlnlHkmPUc9ZDix8Qs0iYNA+bh7PbygNILa04Yjoc4zKH+3o6Eq5gQdL EYbpzleXXqfJm3gIujMvNE+LTleCAwuyfbVIhiayS/1A4KR9Jm2EJYeV+0jk3UMx WPOyigNf26Rp6hKjfA5kM5opsjF2WShBvZuVbAOWbPZgBrOxIkkLPBjjOjcQQk8E uDiDm4BTX7UktVO2JU6enVbUMl32DClSH4bh7e3elRwZI9E7PTuIgAKwjrNXE1hh XTSufcSdxVpS+3XzDBogOydPMji9qVGlZrIjgCvstU8jvGstlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItkdpRqD5Oriir/rauj1oFl2qkeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNmI0YjI1NzktMmQxMC0z MWIzLTg3YTgtYTk0ZjdhNDIzMDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQMF6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADE3BVQe9MXvL2Hh0mySjjvGlHz1AWN2+aMjZl8cycMUypzugX2dbTbi IV23iXf78bs+sqp/5v7FoTFsLgblt1Azyz+cmIsc6pWHEzxhZU8peabFHoUcZpmh mxWps/7YA74F2hIY1cgngL71Diftio/ocnQiLm+DWIF1XL5WmQ7U09ffi++AhLGa pjYmiyVx30ECh+GUc+TqHbW1GZxKDmw3WSIM4i/vxvcq9lLW3969z8ylQg7ZERAO IzWDdXnQAIEfCik9ewQQwdLs7szuxXZhqsxLoOAZ4t7lJdtnV5T+8i3bnWwye+A1 GfGsQLlQHGzlPweQxa2tW5gd3PiXNQ4= -----END CERTIFICATE-----Generated at Tue Mar 24 08:53:58 2026 by rpki-client