$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c6221ec9-feac-3a26-9d63-107653e5c3c9.roa File: c6221ec9-feac-3a26-9d63-107653e5c3c9.roa (raw, json) Hash identifier: llK8GlxRIjvOL5jxwUDTsaFXCWqEnUD1T5R8r966tFM= Subject key identifier: 1E:8B:9F:7B:0C:61:98:F5:47:BE:94:F1:F2:EB:16:6E:2D:62:EC:52 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584D3F64D36BB43AEF5AC91E0500 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c6221ec9-feac-3a26-9d63-107653e5c3c9.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 3356 IP address blocks: 198.112.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:d3:6b:b4:3a:ef:5a:c9:1e:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=b29c396a-eea8-469c-8d05-36cfed67b580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:96:6d:d2:64:85:7a:c1:e9:07:35:22:5b:8e: 75:7f:51:b1:4a:13:72:7e:28:28:95:00:c0:cf:33: 24:8d:42:00:3e:eb:4b:27:43:92:4b:96:0d:4c:7d: 1e:26:0f:26:23:03:fa:81:bc:d7:2c:aa:b0:1f:87: 2b:c4:76:1e:5b:dc:31:c2:b2:bc:e0:09:c2:59:a7: f7:02:26:d1:b5:9b:02:54:31:a5:61:59:72:b9:cf: 9c:c3:86:da:72:4b:55:75:77:27:61:6e:ef:6e:7c: 18:be:54:69:b3:63:87:58:db:f7:a5:2c:60:e1:31: 86:ca:59:7e:a9:97:9e:ea:d5:ee:84:a9:df:b0:9f: 48:49:40:36:6a:ec:45:0e:d0:3b:ad:0f:ed:1a:66: 1b:7e:02:ae:2c:a8:d9:3c:b6:53:76:cd:c6:8d:d2: e9:fa:13:ef:d3:91:59:de:9b:6e:08:9a:f3:98:a3: d9:6c:d4:db:fd:af:ef:10:17:0e:01:7b:76:f6:ed: 27:09:07:3d:e4:66:02:07:87:00:fa:cd:91:12:86: 9e:05:ba:41:e6:2a:2f:5d:9f:e5:61:51:13:2e:45: 33:ac:be:ee:60:2b:58:fe:71:18:e5:1b:a7:16:3a: 55:85:73:67:a4:34:40:83:22:26:b6:be:eb:d5:fb: c0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:8B:9F:7B:0C:61:98:F5:47:BE:94:F1:F2:EB:16:6E:2D:62:EC:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c6221ec9-feac-3a26-9d63-107653e5c3c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 198.112.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:cc:cf:e2:4a:12:1a:e0:5c:8d:4d:5a:20:ad:06:1d:4c:48: 63:8f:40:97:93:d6:64:0d:0d:44:92:60:8a:70:f4:f0:2d:ad: 78:d8:49:b9:cf:fe:cb:64:d1:cd:67:b8:79:f3:17:3b:fc:de: 41:ee:29:e7:70:86:e9:0b:6f:b9:b2:45:ac:13:91:cb:be:d5: 1f:68:81:9a:42:31:9c:2a:6a:bb:05:85:43:68:dc:b1:db:d0: 3e:b9:7c:05:9c:7b:2a:df:a3:37:70:71:e3:1c:44:aa:1b:68: de:31:f0:63:b3:bc:90:5e:3d:2f:8c:28:c5:bf:69:0f:13:2d: 54:39:24:2a:8c:5e:47:6d:89:ca:b1:c4:4d:be:f3:6e:f3:15: 3c:23:3e:8c:7f:e5:1f:1f:2d:cc:07:5c:0c:3e:12:14:2f:fc: 2a:bc:68:e5:40:3c:3a:f7:b0:be:45:5f:fe:8f:63:94:9e:db: 6e:46:bd:98:9a:0f:e1:55:b3:b9:cd:9b:25:4d:b8:71:ee:85: 34:44:1a:45:47:cf:3a:e2:dc:a0:b4:d5:28:5a:d4:d5:fa:98: 48:11:6b:ff:93:1c:ef:8b:7e:42:8a:a4:29:dc:f8:3a:10:25: b8:ef:c1:42:c7:40:16:5f:35:2d:d6:4c:99:64:d3:11:02:f1: 9b:7f:d7:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZNNrtDrvWskeBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk YjI5YzM5NmEtZWVhOC00NjljLThkMDUtMzZjZmVkNjdiNTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25Zt0mSFesHpBzUiW451f1GxShNyfigolQDA zzMkjUIAPutLJ0OSS5YNTH0eJg8mIwP6gbzXLKqwH4crxHYeW9wxwrK84AnCWaf3 AibRtZsCVDGlYVlyuc+cw4backtVdXcnYW7vbnwYvlRps2OHWNv3pSxg4TGGyll+ qZee6tXuhKnfsJ9ISUA2auxFDtA7rQ/tGmYbfgKuLKjZPLZTds3GjdLp+hPv05FZ 3ptuCJrzmKPZbNTb/a/vEBcOAXt29u0nCQc95GYCB4cA+s2REoaeBbpB5iovXZ/l YVETLkUzrL7uYCtY/nEY5RunFjpVhXNnpDRAgyImtr7r1fvApwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6Ln3sMYZj1R76U8fLrFm4tYuxSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYzYyMjFlYzktZmVhYy0z YTI2LTlkNjMtMTA3NjUzZTVjM2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxnBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALDMz+JKEhrgXI1NWiCtBh1MSGOPQJeT1mQNDUSSYIpw9PAtrXjYSbnP /stk0c1nuHnzFzv83kHuKedwhukLb7myRawTkcu+1R9ogZpCMZwqarsFhUNo3LHb 0D65fAWceyrfozdwceMcRKobaN4x8GOzvJBePS+MKMW/aQ8TLVQ5JCqMXkdticqx xE2+827zFTwjPox/5R8fLcwHXAw+EhQv/Cq8aOVAPDr3sL5FX/6PY5Se225GvZia D+FVs7nNmyVNuHHuhTREGkVHzzri3KC01Sha1NX6mEgRa/+THO+LfkKKpCnc+DoQ JbjvwULHQBZfNS3WTJlk0xEC8Zt/1/c= -----END CERTIFICATE-----Generated at Tue Mar 24 08:56:32 2026 by rpki-client