$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d2efd2f1-1fc6-320f-8ef4-c0e3cc4e62f5.roa File: d2efd2f1-1fc6-320f-8ef4-c0e3cc4e62f5.roa (raw, json) Hash identifier: 6Z3xjMhNfZ85nEsxCHUQ43Egs9g94M/8WHtajx5YOLY= Subject key identifier: 6B:61:6A:17:86:27:E1:40:2F:C5:CB:B5:12:1A:51:F0:92:3F:13:34 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584EE7BCB4ADAE766663E68B6A00 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d2efd2f1-1fc6-320f-8ef4-c0e3cc4e62f5.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 35997 IP address blocks: 207.67.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:b4:ad:ae:76:66:63:e6:8b:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=f3b390f0-a7bd-4ed2-9cac-f93d408e2f2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:af:cb:ea:cd:c8:ea:fe:a8:05:9f:2e:4d:0c: 7c:8d:e7:6b:25:b4:d6:fc:6f:35:61:0e:56:ca:3d: f4:fd:db:1b:2a:75:95:4e:6b:61:36:94:94:84:d2: 2d:02:f4:d7:76:0e:c3:d8:4c:3f:be:83:4c:ad:be: 07:b0:bb:10:31:07:21:45:46:6a:d6:61:58:1f:99: e9:be:a1:f6:67:f7:2c:ae:a3:83:c1:ae:47:4d:cb: f4:2a:17:4c:3e:e0:56:73:04:ea:3e:f2:98:f6:3c: 98:db:89:20:cc:0d:90:51:dd:10:f8:10:09:c2:3a: 1d:e3:31:e9:3d:1e:74:ab:a0:77:7a:12:5c:de:5a: fd:b4:56:76:d5:d1:be:07:4e:8e:ed:f7:f3:85:7b: f8:b7:53:02:e7:08:d2:12:2d:91:e1:0b:b0:99:ff: c5:c1:27:02:e2:b2:55:70:71:85:09:7f:3e:a0:b3: 33:21:c2:e9:9f:87:67:a4:f9:97:ed:71:b7:bc:62: 06:0a:65:d6:5e:96:89:01:ce:e0:4e:03:8c:6e:e3: f1:55:0a:2f:6d:4f:40:86:72:1e:6f:92:b0:ec:5a: 4a:e7:c7:d0:40:e5:11:b1:9f:15:b2:20:69:24:a1: d4:2d:1b:ea:81:c3:fd:3d:4b:e9:b4:7a:bb:3f:d8: df:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:61:6A:17:86:27:E1:40:2F:C5:CB:B5:12:1A:51:F0:92:3F:13:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d2efd2f1-1fc6-320f-8ef4-c0e3cc4e62f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 207.67.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:1c:b8:e2:7a:70:19:b8:94:b3:0c:97:13:4a:68:a1:c4:79: 9f:aa:13:db:61:7a:df:67:ba:a3:35:6d:a1:c6:e6:1c:c5:f0: cc:2d:fa:60:c2:da:f4:29:d6:8b:f0:bc:a8:a2:44:25:8e:9c: 58:b7:bb:54:11:c2:a7:fe:0e:26:42:d3:bb:ec:68:4a:e3:9a: a7:6b:9c:4f:89:a8:85:ab:5c:02:b8:09:c1:40:67:80:5a:91: a9:cd:1f:c7:0d:98:44:a4:cd:9c:30:67:ce:0d:1b:24:7f:79: 4c:69:3c:3e:52:20:76:b0:02:62:ba:95:6b:0c:e6:6e:67:cf: 9d:6d:0b:e7:23:26:fb:9b:fb:e3:49:b2:b7:8d:78:71:eb:8c: ed:b0:60:88:1c:50:44:46:64:45:f6:be:db:d5:9b:cd:a7:63: dc:4c:20:ed:1b:78:84:43:18:5c:30:5a:08:5b:17:88:a9:aa: 3d:d7:56:9c:61:e1:54:e5:2a:e0:30:b4:7d:bf:6c:a4:ac:99: ac:a3:9e:3c:d5:84:22:49:d1:e3:f4:82:ba:ea:cb:34:d2:5b: 9d:6c:31:e3:85:e8:ba:03:fe:7a:4a:29:94:3b:25:b0:9e:e2: f7:a5:ea:c8:fd:b6:b0:c7:d0:1f:00:d3:51:34:ad:ab:29:45: b1:d0:d6:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvLStrnZmY+aLagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk ZjNiMzkwZjAtYTdiZC00ZWQyLTljYWMtZjkzZDQwOGUyZjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq/L6s3I6v6oBZ8uTQx8jedrJbTW/G81YQ5W yj30/dsbKnWVTmthNpSUhNItAvTXdg7D2Ew/voNMrb4HsLsQMQchRUZq1mFYH5np vqH2Z/csrqODwa5HTcv0KhdMPuBWcwTqPvKY9jyY24kgzA2QUd0Q+BAJwjod4zHp PR50q6B3ehJc3lr9tFZ21dG+B06O7ffzhXv4t1MC5wjSEi2R4Quwmf/FwScC4rJV cHGFCX8+oLMzIcLpn4dnpPmX7XG3vGIGCmXWXpaJAc7gTgOMbuPxVQovbU9AhnIe b5Kw7FpK58fQQOURsZ8VsiBpJKHULRvqgcP9PUvptHq7P9jf2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGthaheGJ+FAL8XLtRIaUfCSPxM0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZDJlZmQyZjEtMWZjNi0z MjBmLThlZjQtYzBlM2NjNGU2MmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz0MqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAccuOJ6cBm4lLMMlxNKaKHEeZ+qE9thet9nuqM1baHG5hzF8Mwt+mDC 2vQp1ovwvKiiRCWOnFi3u1QRwqf+DiZC07vsaErjmqdrnE+JqIWrXAK4CcFAZ4Ba kanNH8cNmESkzZwwZ84NGyR/eUxpPD5SIHawAmK6lWsM5m5nz51tC+cjJvub++NJ sreNeHHrjO2wYIgcUERGZEX2vtvVm82nY9xMIO0beIRDGFwwWghbF4ipqj3XVpxh 4VTlKuAwtH2/bKSsmayjnjzVhCJJ0eP0grrqyzTSW51sMeOF6LoD/npKKZQ7JbCe 4vel6sj9trDH0B8A01E0raspRbHQ1kQ= -----END CERTIFICATE-----Generated at Thu Aug 27 17:40:48 2026 by rpki-client