$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/64bb8a2c-5255-37bb-83d3-a15c8a68a40b.roa File: 64bb8a2c-5255-37bb-83d3-a15c8a68a40b.roa (raw, json) Hash identifier: DmrbwdlR305DPb9uIAJ2bSqIhYp9yHxpw2Gh+pWqh+I= Subject key identifier: F4:A7:5A:EE:3F:EA:42:07:0B:66:33:4C:5D:6C:8B:6D:A4:B4:FB:A8 Certificate issuer: /CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Certificate serial: 010D0C9F4328584DF4DB630FD19BC9FB74613B00 Authority key identifier: 8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/64bb8a2c-5255-37bb-83d3-a15c8a68a40b.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 20057 IP address blocks: 23.172.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:63:0f:d1:9b:c9:fb:74:61:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=3db260cd-0648-4594-9e9c-22f4f93e07f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1d:42:2f:99:c2:07:a2:98:2d:a5:32:4c:00: 26:41:04:18:1b:c3:cf:40:cb:6e:74:06:9e:d1:cd: 07:a6:4a:ff:8e:c0:cc:ee:50:de:30:bd:f9:ec:dc: 6f:b9:7b:b3:e6:c3:28:aa:b8:3b:d1:e3:33:9c:89: 18:0e:34:62:e6:3f:70:a0:dc:ac:b2:c0:a2:19:54: 8c:69:5c:47:55:1e:c9:c1:28:03:ef:8f:fe:0f:8a: 0e:97:73:c2:76:87:9d:cf:21:81:86:0c:6e:0d:af: fc:8e:ad:26:1c:82:3d:b2:50:9c:db:43:7e:df:a1: fe:22:79:dd:ab:53:9c:29:5e:1d:4c:41:a5:e0:86: d9:79:50:8b:10:de:c7:6e:c3:a5:2a:c7:07:71:bb: 30:f0:b2:72:bb:b6:8a:18:63:b5:e7:ea:85:89:2b: 46:0f:a4:6c:e1:42:4c:c1:55:be:33:6a:49:96:54: 51:1d:5c:49:6b:75:bd:30:33:18:06:cc:0e:78:86: 4a:ba:a2:e6:ae:b8:21:15:95:4d:20:90:12:7c:ba: 94:9b:f4:31:d7:2c:f0:21:f2:30:04:47:a4:71:d3: 98:63:d6:7f:de:41:f4:49:a6:8f:92:31:b7:fe:55: 94:b3:b2:07:fa:47:f6:1c:c7:15:09:cd:5f:a9:c0: e8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A7:5A:EE:3F:EA:42:07:0B:66:33:4C:5D:6C:8B:6D:A4:B4:FB:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/64bb8a2c-5255-37bb-83d3-a15c8a68a40b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl X509v3 Authority Key Identifier: keyid:8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer sbgp-ipAddrBlock: critical IPv4: 23.172.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:2b:39:2b:32:bb:5d:b7:d9:e7:03:7e:82:e5:07:12:c0:e7: a6:80:53:f1:bf:a8:d6:24:a9:7a:f2:43:66:d3:a9:9b:3f:50: 29:c5:11:f3:24:59:54:a6:f6:81:9a:35:62:b4:e4:9b:57:e5: a0:2d:10:e7:c3:22:1b:de:2c:74:89:d3:f5:20:bb:63:94:fa: af:b4:b9:69:22:55:84:7b:73:8c:01:97:87:24:d3:3f:6d:10: 8d:56:84:85:3d:c4:a8:6b:94:aa:aa:db:a0:e7:54:1b:45:00: 16:10:e9:22:18:a8:58:7e:37:a7:e5:21:d5:f2:d7:e4:d5:e2: 00:1b:a7:48:36:8f:47:61:de:55:43:8a:20:2b:ee:9e:06:64: aa:42:21:2c:71:a1:3a:dc:22:68:b5:60:67:2a:0b:a9:bb:24: 68:b4:7a:04:ff:53:eb:9f:76:45:22:54:2c:58:77:c3:e2:15: e1:34:cc:ef:3e:22:a2:f5:dc:7a:47:46:dc:a0:63:d0:df:0b: c8:e6:e8:5b:78:ea:8d:4a:f2:92:a9:24:a7:5e:d9:55:7d:1a: c9:fb:46:00:84:ba:b1:a8:72:e2:fa:6a:f4:26:5d:8b:67:1f: 64:41:59:23:03:a5:f7:3f:0b:6e:8c:bd:6e:4a:d6:50:60:0c: 46:16:14:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3022MP0ZvJ+3RhOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMzYmI3ZTQtYzk3ZS00M2FiLWE2ZGQtY2JmMGU2NDM0 YzViMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk M2RiMjYwY2QtMDY0OC00NTk0LTllOWMtMjJmNGY5M2UwN2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxh1CL5nCB6KYLaUyTAAmQQQYG8PPQMtudAae 0c0Hpkr/jsDM7lDeML357NxvuXuz5sMoqrg70eMznIkYDjRi5j9woNysssCiGVSM aVxHVR7JwSgD74/+D4oOl3PCdoedzyGBhgxuDa/8jq0mHII9slCc20N+36H+Innd q1OcKV4dTEGl4IbZeVCLEN7HbsOlKscHcbsw8LJyu7aKGGO15+qFiStGD6Rs4UJM wVW+M2pJllRRHVxJa3W9MDMYBswOeIZKuqLmrrghFZVNIJASfLqUm/Qx1yzwIfIw BEekcdOYY9Z/3kH0SaaPkjG3/lWUs7IH+kf2HMcVCc1fqcDocwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSnWu4/6kIHC2YzTF1si22ktPuoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80YzNi YjdlNC1jOTdlLTQzYWItYTZkZC1jYmYwZTY0MzRjNWIvNjRiYjhhMmMtNTI1NS0z N2JiLTgzZDMtYTE1YzhhNjhhNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGMzYmI3ZTQtYzk3ZS00M2FiLWE2 ZGQtY2JmMGU2NDM0YzViLzRjM2JiN2U0LWM5N2UtNDNhYi1hNmRkLWNiZjBlNjQz NGM1Yi5jcmwwHwYDVR0jBBgwFoAUjXaDMJHnSwSEQ/fEjyRQUNGYlvQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80YzNiYjdlNC1jOTdlLTQzYWItYTZkZC1jYmYw ZTY0MzRjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6zZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkrOSsyu1232ecDfoLlBxLA56aAU/G/qNYkqXryQ2bTqZs/UCnFEfMk WVSm9oGaNWK05JtX5aAtEOfDIhveLHSJ0/Ugu2OU+q+0uWkiVYR7c4wBl4ck0z9t EI1WhIU9xKhrlKqq26DnVBtFABYQ6SIYqFh+N6flIdXy1+TV4gAbp0g2j0dh3lVD iiAr7p4GZKpCISxxoTrcImi1YGcqC6m7JGi0egT/U+ufdkUiVCxYd8PiFeE0zO8+ IqL13HpHRtygY9DfC8jm6Ft46o1K8pKpJKde2VV9Gsn7RgCEurGocuL6avQmXYtn H2RBWSMDpfc/C26MvW5K1lBgDEYWFGY= -----END CERTIFICATE-----Generated at Fri Jun 12 02:45:40 2026 by rpki-client