$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a78b09bb-6be9-3d1a-919d-713b5ed2c06a.roa File: a78b09bb-6be9-3d1a-919d-713b5ed2c06a.roa (raw, json) Hash identifier: iAXp53H6dyAvxm3ajdfUL2Zu/L/lrqFGG38cBxW7irs= Subject key identifier: 87:42:18:A6:3A:8A:46:B2:4C:E3:43:8D:64:A2:6F:91:53:CC:DD:82 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584D3120A698AF33CF9955457600 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a78b09bb-6be9-3d1a-919d-713b5ed2c06a.roa Signing time: Mon 16 Mar 2026 22:21:58 +0000 ROA not before: Mon 16 Mar 2026 22:21:58 +0000 ROA not after: Sun 14 Jun 2026 22:21:58 +0000 asID: 395088 IP address blocks: 65.77.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:20:a6:98:af:33:cf:99:55:45:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Mar 16 22:21:58 2026 GMT Not After : Jun 14 22:21:58 2026 GMT Subject: CN=e4e82a70-2138-4f41-b9fc-e483e08da8d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0f:cb:1d:e6:c5:2a:0c:b7:45:c6:64:d5:ae: 96:11:93:1c:08:fa:e5:4b:49:db:a9:45:16:fa:7d: ae:2c:26:52:3c:96:7b:e7:13:5f:73:3d:8f:8e:46: 05:56:ed:b3:53:e4:92:a7:aa:03:3a:b4:0f:6c:c2: 57:89:ec:78:3c:2c:ac:e3:be:8d:ce:6c:5c:da:a8: 36:4a:9c:a4:51:4c:75:e4:92:07:c7:98:af:8f:1c: 95:c3:0c:d3:b4:86:eb:23:83:15:0d:1b:88:75:0b: 09:90:a8:50:10:cc:c9:86:26:48:93:47:43:e7:50: 8e:21:67:7d:a5:a9:09:c0:69:46:77:7d:b3:67:40: 8e:60:25:ff:df:d3:04:67:08:46:3e:59:aa:39:a7: 37:c0:f4:0c:97:a6:e1:de:fb:bd:c9:ba:01:47:69: 66:77:dd:e6:10:80:5a:b6:8b:19:1d:98:77:cd:90: 16:03:cc:00:f5:44:16:47:09:ab:a9:53:4a:36:12: 2d:19:49:4e:1b:9c:dd:b0:48:aa:cc:5b:8a:c3:47: f8:29:98:fc:be:7a:11:51:f4:0b:04:09:9b:0c:cd: 3f:13:f4:4b:c0:ac:7c:80:93:c9:bf:7e:db:27:fc: 4a:02:c5:90:db:81:34:19:9f:13:e1:be:f9:44:17: e4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:42:18:A6:3A:8A:46:B2:4C:E3:43:8D:64:A2:6F:91:53:CC:DD:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a78b09bb-6be9-3d1a-919d-713b5ed2c06a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 65.77.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:18:f8:40:c6:54:34:99:18:a0:ee:08:2a:74:1b:ce:03:b7: 0c:70:13:71:94:90:99:2d:ec:2c:93:b7:ac:01:c8:0c:80:1b: 5a:48:d9:48:cb:77:2e:6d:6f:3e:f4:a3:7c:7f:91:2f:96:f6: 19:96:79:2c:bd:61:90:69:34:75:3c:eb:9d:62:69:5a:e3:80: 11:82:3e:3f:30:f8:58:e1:55:c5:4a:d4:e5:68:7c:d0:2d:73: b5:c5:88:a1:fe:53:81:ee:1b:9e:d8:c8:05:61:55:29:3b:48: 7e:90:9b:e2:cb:89:6d:a4:d2:e5:4e:04:5d:2b:49:5d:5f:55: 37:48:c5:fb:a9:00:f4:9a:13:2a:a2:79:ab:ef:e1:31:7d:c9: 78:a8:8e:41:ba:2d:1e:3e:41:35:8d:8f:99:ea:82:cc:0a:1e: e2:e7:59:39:fd:fe:d1:12:2b:48:31:ce:8d:46:46:e6:6c:6f: 27:14:0b:a0:d3:c1:af:8e:b4:45:b2:51:b0:2c:17:c3:ae:be: 59:e7:70:0a:c7:c2:d0:4a:8e:35:f9:74:26:d3:7d:70:14:18: c2:98:41:72:1f:62:f4:99:3e:45:57:87:42:94:01:19:5a:0d: 15:a4:b5:6a:6b:a5:5c:df:cb:87:17:08:b3:3b:40:ec:85:89: c0:1e:e3:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xIKaYrzPPmVVFdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDMxNjIyMjE1OFoXDTI2MDYxNDIyMjE1OFowLzEtMCsGA1UEAxMk ZTRlODJhNzAtMjEzOC00ZjQxLWI5ZmMtZTQ4M2UwOGRhOGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlg/LHebFKgy3RcZk1a6WEZMcCPrlS0nbqUUW +n2uLCZSPJZ75xNfcz2PjkYFVu2zU+SSp6oDOrQPbMJXiex4PCys476Nzmxc2qg2 SpykUUx15JIHx5ivjxyVwwzTtIbrI4MVDRuIdQsJkKhQEMzJhiZIk0dD51COIWd9 pakJwGlGd32zZ0COYCX/39MEZwhGPlmqOac3wPQMl6bh3vu9yboBR2lmd93mEIBa tosZHZh3zZAWA8wA9UQWRwmrqVNKNhItGUlOG5zdsEiqzFuKw0f4KZj8vnoRUfQL BAmbDM0/E/RLwKx8gJPJv37bJ/xKAsWQ24E0GZ8T4b75RBfkwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdCGKY6ikayTONDjWSib5FTzN2CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYTc4YjA5YmItNmJlOS0z ZDFhLTkxOWQtNzEzYjVlZDJjMDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQU31MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQY+EDGVDSZGKDuCCp0G84DtwxwE3GUkJkt7CyTt6wByAyAG1pI2UjL dy5tbz70o3x/kS+W9hmWeSy9YZBpNHU8651iaVrjgBGCPj8w+FjhVcVK1OVofNAt c7XFiKH+U4HuG57YyAVhVSk7SH6Qm+LLiW2k0uVOBF0rSV1fVTdIxfupAPSaEyqi eavv4TF9yXiojkG6LR4+QTWNj5nqgswKHuLnWTn9/tESK0gxzo1GRuZsbycUC6DT wa+OtEWyUbAsF8OuvlnncArHwtBKjjX5dCbTfXAUGMKYQXIfYvSZPkVXh0KUARla DRWktWprpVzfy4cXCLM7QOyFicAe4yM= -----END CERTIFICATE-----Generated at Tue Mar 24 08:48:45 2026 by rpki-client