$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/9a18dbbc-53ee-3939-8d78-1340b65c0c3a.roa File: 9a18dbbc-53ee-3939-8d78-1340b65c0c3a.roa (raw, json) Hash identifier: 5UmKhqiS+XpbqJAVwPPqsDT7CdqVPYY4WSkkUQalcR0= Subject key identifier: 16:05:DB:63:08:1B:CF:AC:36:D0:71:23:AA:44:41:8F:87:F3:7C:09 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584D300A62F8974CB64F5E3BCE00 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/9a18dbbc-53ee-3939-8d78-1340b65c0c3a.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 31775 IP address blocks: 65.56.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:62:f8:97:4c:b6:4f:5e:3b:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=f66e4bbc-2ebb-475a-b525-b2ab7b6b0b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:00:bf:ec:b0:a6:72:53:03:45:b0:c6:32:53: e6:b0:a7:17:b0:a5:1a:5c:3f:13:28:ca:8a:7a:d1: bf:bf:47:6c:96:de:98:aa:9c:18:9d:10:a7:cf:68: 01:bf:00:98:d5:df:0c:6d:15:77:ad:bf:92:5d:b8: e1:86:e8:7a:d4:09:d7:de:7d:ba:ff:44:bb:b0:3e: e7:f5:e6:59:ce:82:8b:3b:dc:9d:b0:d1:4b:70:97: ba:9b:14:6d:b4:3b:c7:7d:55:4e:93:a6:c8:73:ff: e5:9a:fb:22:3b:f9:29:21:03:a3:0a:22:35:0d:6b: bc:47:f1:6d:aa:13:8a:f3:d8:a8:3c:43:91:88:a3: 50:fb:bf:87:fb:c0:66:1b:fd:ec:c6:6f:aa:1a:80: 31:85:bd:63:c2:da:c5:1c:13:5d:79:5d:b8:36:0b: 5b:48:3d:7e:fa:79:68:c3:f7:61:c2:5a:75:ec:4a: 05:06:1e:91:4c:86:55:d0:6a:c5:87:02:0a:cf:2b: e2:34:2f:5a:ad:b3:fc:61:9e:81:ef:61:17:41:49: 15:e1:c7:bb:45:e2:de:d6:e8:41:c0:53:f6:6a:e3: ac:bb:ed:a0:04:14:cf:8d:13:40:47:ed:eb:69:5a: 59:87:a9:04:78:4e:ac:4e:1f:07:bf:94:44:54:94: 93:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:05:DB:63:08:1B:CF:AC:36:D0:71:23:AA:44:41:8F:87:F3:7C:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/9a18dbbc-53ee-3939-8d78-1340b65c0c3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 65.56.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:86:41:a0:f0:57:af:1b:9e:cf:9e:79:16:32:39:dc:1b:16: 51:d7:0f:e6:d8:5a:a3:9d:85:56:03:b4:04:0e:62:7e:58:27: 88:0a:5c:b6:eb:dc:d6:50:b3:6b:53:8f:3a:62:f5:01:8c:99: d3:9c:46:b3:ac:43:08:ef:ac:5d:1e:63:8f:9b:6b:62:97:a1: 23:9b:77:a6:83:cd:1a:19:13:06:9c:05:d8:e2:b2:b4:76:e0: 01:b0:38:66:60:5c:e4:a5:3a:37:cc:b6:fa:43:a2:21:51:3e: d8:ef:a0:3a:b9:49:d6:aa:ed:62:7e:b5:87:8c:26:71:52:89: 86:6b:57:73:40:55:8b:33:55:33:67:cd:7c:c8:5c:d8:b2:65: ff:35:17:41:c7:d9:15:f8:1e:f4:25:14:3c:67:64:8c:8c:ff: 6c:59:bc:45:26:83:02:ea:67:8c:c7:87:a6:02:a0:d1:96:9e: 36:1e:19:1d:d8:3e:cd:6c:5c:84:5a:53:65:bf:30:0a:c3:55: 43:5f:96:a0:d8:6f:6a:bd:20:dd:09:bc:1c:35:5d:37:4f:83: 9c:e2:72:8b:87:cf:ff:ff:aa:be:5f:a5:7a:a3:44:36:6c:94: 55:f9:0a:b8:aa:62:e4:6a:3e:f8:5e:df:11:4d:b4:bc:8e:d8: 09:3e:a8:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCmL4l0y2T147zgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZjY2ZTRiYmMtMmViYi00NzVhLWI1MjUtYjJhYjdiNmIwYjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwC/7LCmclMDRbDGMlPmsKcXsKUaXD8TKMqK etG/v0dslt6YqpwYnRCnz2gBvwCY1d8MbRV3rb+SXbjhhuh61AnX3n26/0S7sD7n 9eZZzoKLO9ydsNFLcJe6mxRttDvHfVVOk6bIc//lmvsiO/kpIQOjCiI1DWu8R/Ft qhOK89ioPEORiKNQ+7+H+8BmG/3sxm+qGoAxhb1jwtrFHBNdeV24NgtbSD1++nlo w/dhwlp17EoFBh6RTIZV0GrFhwIKzyviNC9arbP8YZ6B72EXQUkV4ce7ReLe1uhB wFP2auOsu+2gBBTPjRNAR+3raVpZh6kEeE6sTh8Hv5REVJST6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYF22MIG8+sNtBxI6pEQY+H83wJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvOWExOGRiYmMtNTNlZS0z OTM5LThkNzgtMTM0MGI2NWMwYzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQTjwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSGQaDwV68bns+eeRYyOdwbFlHXD+bYWqOdhVYDtAQOYn5YJ4gKXLbr 3NZQs2tTjzpi9QGMmdOcRrOsQwjvrF0eY4+ba2KXoSObd6aDzRoZEwacBdjisrR2 4AGwOGZgXOSlOjfMtvpDoiFRPtjvoDq5Sdaq7WJ+tYeMJnFSiYZrV3NAVYszVTNn zXzIXNiyZf81F0HH2RX4HvQlFDxnZIyM/2xZvEUmgwLqZ4zHh6YCoNGWnjYeGR3Y Ps1sXIRaU2W/MArDVUNflqDYb2q9IN0JvBw1XTdPg5zicouHz///qr5fpXqjRDZs lFX5CriqYuRqPvhe3xFNtLyO2Ak+qBE= -----END CERTIFICATE-----Generated at Tue Mar 24 08:56:31 2026 by rpki-client