$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/899fb54c-ba38-3dd2-8a87-fec83a44de68.roa File: 899fb54c-ba38-3dd2-8a87-fec83a44de68.roa (raw, json) Hash identifier: nz1TpIszV3uX6R3UVRp+GKeLiB4awerNhaj1z4wu5kM= Subject key identifier: 1A:61:03:18:DA:59:BE:D5:1D:A9:D7:96:D5:44:26:32:2F:08:41:72 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584DAB146B3FDA5DF28739BCE700 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/899fb54c-ba38-3dd2-8a87-fec83a44de68.roa Signing time: Wed 29 Apr 2026 14:45:57 +0000 ROA not before: Wed 29 Apr 2026 14:45:57 +0000 ROA not after: Tue 28 Jul 2026 14:45:57 +0000 asID: 16493 IP address blocks: 67.97.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ab:14:6b:3f:da:5d:f2:87:39:bc:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Apr 29 14:45:57 2026 GMT Not After : Jul 28 14:45:57 2026 GMT Subject: CN=c27f66eb-85da-4a53-bdd0-75f72a444e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:77:f1:4a:24:d7:7d:5c:41:aa:92:74:9c:7b: 30:63:2c:a4:a0:25:0c:b5:0f:eb:00:c2:8a:76:32: 40:a6:b9:ac:d2:bd:16:e8:dd:fb:4c:d5:99:3a:f8: 80:a6:60:11:7c:cc:62:0f:ac:33:fe:76:0b:2e:14: ab:e6:18:f4:26:43:8d:80:24:33:75:d8:36:0c:66: 45:c5:06:57:b7:a8:ca:37:80:a2:ca:6c:57:17:3e: f8:62:8f:d8:dc:ff:2b:75:55:3a:89:c2:73:08:55: e4:5d:d2:b9:87:70:c3:f6:3b:07:a7:cc:77:91:5c: ab:cb:6b:07:c7:cf:69:4b:7d:42:1b:5e:d4:b9:e6: 45:f3:cd:e7:c7:43:48:33:6f:7d:72:36:e5:7e:fa: 76:6f:ba:fd:79:6b:c8:14:0f:cf:a2:0d:a9:d6:8d: ac:37:e4:4a:d1:8c:d3:18:9b:d4:e4:60:94:48:ff: 2d:4d:25:d5:6d:e4:ee:5e:96:a2:20:2f:04:20:94: d9:c7:12:75:69:c1:8e:72:a2:d9:d4:40:32:45:ad: 57:ea:f7:a4:3a:61:b8:f1:d1:8d:26:b8:29:d3:9c: 90:1b:85:a4:50:f1:cc:54:c5:6e:ca:07:f4:47:b3: d1:c2:a3:79:cc:27:25:8a:19:ba:d6:63:06:eb:9e: df:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:61:03:18:DA:59:BE:D5:1D:A9:D7:96:D5:44:26:32:2F:08:41:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/899fb54c-ba38-3dd2-8a87-fec83a44de68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 67.97.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:3c:71:93:7f:be:48:a9:2f:d3:a2:ff:5a:20:22:bf:5b:fb: a4:9f:89:e1:02:79:c0:d3:e7:72:91:34:18:8c:2b:59:ca:f8: 0c:ad:0a:0a:84:8d:97:74:ee:0f:e4:33:08:86:67:b7:6f:46: 22:70:0f:f5:cb:8c:53:07:b2:d6:c8:2b:04:b0:3c:d4:ce:c1: 07:33:ab:3b:ae:34:52:a9:54:c8:f2:1a:47:e6:85:9f:11:be: 71:55:4a:2c:e5:78:2d:f2:15:fd:80:81:79:3f:b3:2c:7e:41: ff:b5:65:80:ba:2d:15:2b:27:6c:54:1d:0d:87:2d:66:d3:87: cd:99:ce:4f:21:72:a1:82:20:1c:0c:72:75:92:4a:06:0e:69: 47:e3:b3:63:63:75:7d:b5:20:af:67:0c:a6:5c:88:72:7d:c2: 8f:b5:32:b1:0c:89:f7:9a:d0:e2:1c:98:24:b9:c4:7f:e9:49: e4:e6:46:b5:f9:7d:1f:bb:72:8c:49:0e:e1:57:4d:5b:cd:c8: cd:a6:85:ed:97:54:5c:7e:00:56:66:5c:b1:92:09:15:2c:01: 44:b6:90:69:72:9c:7b:36:76:9d:68:3e:0c:dc:f9:28:b5:97: c4:a1:fe:9f:14:da:1a:4c:73:8a:04:de:d7:d4:ef:dd:4c:16: f7:8e:3a:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2rFGs/2l3yhzm85wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDQyOTE0NDU1N1oXDTI2MDcyODE0NDU1N1owLzEtMCsGA1UEAxMk YzI3ZjY2ZWItODVkYS00YTUzLWJkZDAtNzVmNzJhNDQ0ZTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHfxSiTXfVxBqpJ0nHswYyykoCUMtQ/rAMKK djJAprms0r0W6N37TNWZOviApmARfMxiD6wz/nYLLhSr5hj0JkONgCQzddg2DGZF xQZXt6jKN4CiymxXFz74Yo/Y3P8rdVU6icJzCFXkXdK5h3DD9jsHp8x3kVyry2sH x89pS31CG17UueZF883nx0NIM299cjblfvp2b7r9eWvIFA/Pog2p1o2sN+RK0YzT GJvU5GCUSP8tTSXVbeTuXpaiIC8EIJTZxxJ1acGOcqLZ1EAyRa1X6vekOmG48dGN Jrgp05yQG4WkUPHMVMVuygf0R7PRwqN5zCclihm61mMG657fBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBphAxjaWb7VHanXltVEJjIvCEFyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvODk5ZmI1NGMtYmEzOC0z ZGQyLThhODctZmVjODNhNDRkZTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ2H1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF48cZN/vkipL9Oi/1ogIr9b+6SfieECecDT53KRNBiMK1nK+AytCgqE jZd07g/kMwiGZ7dvRiJwD/XLjFMHstbIKwSwPNTOwQczqzuuNFKpVMjyGkfmhZ8R vnFVSizleC3yFf2AgXk/syx+Qf+1ZYC6LRUrJ2xUHQ2HLWbTh82Zzk8hcqGCIBwM cnWSSgYOaUfjs2NjdX21IK9nDKZciHJ9wo+1MrEMifea0OIcmCS5xH/pSeTmRrX5 fR+7coxJDuFXTVvNyM2mhe2XVFx+AFZmXLGSCRUsAUS2kGlynHs2dp1oPgzc+Si1 l8Sh/p8U2hpMc4oE3tfU791MFveOOk8= -----END CERTIFICATE-----Generated at Sat May 9 00:38:28 2026 by rpki-client