$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1a402687-73f0-38f9-b900-9c98f4cd0bd6.roa File: 1a402687-73f0-38f9-b900-9c98f4cd0bd6.roa (raw, json) Hash identifier: WBlMk93pesb2jdn9jEMB0fe0bi2ZLAaoLcbQYd37cQQ= Subject key identifier: 6B:93:46:90:4A:AC:1A:40:DE:2C:4B:CA:92:EB:F6:B0:C2:05:C3:8D Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584D47C4E572C58DE6B3ACCBC380 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1a402687-73f0-38f9-b900-9c98f4cd0bd6.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 3356 IP address blocks: 199.35.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:e5:72:c5:8d:e6:b3:ac:cb:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=e5a0f410-42df-4a6f-ad6b-8148d2383516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:db:ac:e2:2a:c6:de:13:c2:98:6f:92:7a:dc: 6f:b9:8e:bf:e0:ca:b1:3a:b7:48:02:71:f0:ee:4a: 45:23:d6:c2:9c:b5:8f:7a:2e:9b:09:5c:b8:2b:c6: 69:bd:9d:c8:88:d9:db:30:88:5c:9b:39:b4:e6:ea: c8:87:89:43:74:63:56:5c:52:ec:a9:74:a0:2e:01: 15:03:90:d9:86:1a:41:12:e7:40:81:d0:aa:fe:e7: a3:55:4a:98:ac:46:cb:67:a2:98:c7:64:0c:b7:4a: 03:bc:ff:f3:aa:2f:f7:ef:7b:8c:ad:76:13:07:65: ee:f7:05:8e:31:60:e3:56:9a:a2:bc:ba:c9:f8:0f: 9b:b5:18:b4:e5:39:76:6b:f9:4c:08:83:ff:f1:be: 81:b1:7a:34:d2:56:07:03:e4:51:f0:7a:02:c3:d0: 4d:a6:90:2d:10:e7:0d:90:26:04:6e:97:1f:f3:dd: 1c:f8:92:91:8a:94:64:76:57:e9:1e:55:4f:a1:43: 3b:ae:f3:11:ad:e8:15:49:03:5a:f2:67:81:59:6b: 0b:dd:b7:13:b1:6a:88:c9:f7:98:9c:09:78:4e:9b: 13:45:9d:38:9e:be:51:04:04:28:b4:e1:4a:04:47: 60:cb:e3:de:b3:4e:ab:9b:e7:27:6c:bd:3b:3b:ea: 3e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:93:46:90:4A:AC:1A:40:DE:2C:4B:CA:92:EB:F6:B0:C2:05:C3:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1a402687-73f0-38f9-b900-9c98f4cd0bd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 199.35.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:2e:b0:a9:cc:bd:a0:3d:55:b0:40:bd:2f:d8:b9:d6:d4:a5: 03:b6:c8:8c:e5:db:4c:3b:1e:9c:a8:a1:27:13:dc:b1:fe:10: 4f:f5:7c:26:52:c1:6d:2b:30:c1:2b:3f:60:b4:a0:4a:ed:86: b3:59:ce:4c:c7:79:07:08:1f:45:42:7f:b9:2b:6d:b9:e5:78: bb:40:db:cc:a3:14:63:b6:91:7e:a5:0f:e5:a3:57:f3:0e:2e: 3d:da:10:4e:cf:8c:26:43:fb:80:5a:7f:9e:35:b0:36:94:48: 28:ff:09:57:ca:5d:52:7d:18:c2:d7:b2:de:61:81:b4:11:67: 33:a2:be:78:2b:5b:08:d0:ab:2f:79:4e:2d:99:c5:73:fb:ea: 78:07:6f:81:7a:4d:76:67:51:14:73:de:be:2a:b8:72:61:92: 97:db:6c:db:65:fd:d8:22:8d:4a:15:6e:8c:0f:2b:78:e7:c9: f8:82:18:46:08:ce:00:a6:5a:bc:25:69:e8:e8:b6:0a:97:90: 90:b0:56:e2:cf:8d:ea:b0:70:a6:bb:93:cb:b0:58:02:89:1b: 5e:07:65:60:cb:a2:b0:df:4f:e9:06:4d:ff:91:c7:0f:07:88: cd:69:e5:c9:99:de:de:f8:26:5f:bb:d3:b7:10:30:c3:f4:5a: ba:99:67:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxOVyxY3ms6zLw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk ZTVhMGY0MTAtNDJkZi00YTZmLWFkNmItODE0OGQyMzgzNTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstus4irG3hPCmG+SetxvuY6/4MqxOrdIAnHw 7kpFI9bCnLWPei6bCVy4K8ZpvZ3IiNnbMIhcmzm05urIh4lDdGNWXFLsqXSgLgEV A5DZhhpBEudAgdCq/uejVUqYrEbLZ6KYx2QMt0oDvP/zqi/373uMrXYTB2Xu9wWO MWDjVpqivLrJ+A+btRi05Tl2a/lMCIP/8b6BsXo00lYHA+RR8HoCw9BNppAtEOcN kCYEbpcf890c+JKRipRkdlfpHlVPoUM7rvMRregVSQNa8meBWWsL3bcTsWqIyfeY nAl4TpsTRZ04nr5RBAQotOFKBEdgy+Pes06rm+cnbL07O+o+0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGuTRpBKrBpA3ixLypLr9rDCBcONMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMWE0MDI2ODctNzNmMC0z OGY5LWI5MDAtOWM5OGY0Y2QwYmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHxyOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAusKnMvaA9VbBAvS/YudbUpQO2yIzl20w7HpyooScT3LH+EE/1fCZS wW0rMMErP2C0oErthrNZzkzHeQcIH0VCf7krbbnleLtA28yjFGO2kX6lD+WjV/MO Lj3aEE7PjCZD+4Baf541sDaUSCj/CVfKXVJ9GMLXst5hgbQRZzOivngrWwjQqy95 Ti2ZxXP76ngHb4F6TXZnURRz3r4quHJhkpfbbNtl/dgijUoVbowPK3jnyfiCGEYI zgCmWrwlaejotgqXkJCwVuLPjeqwcKa7k8uwWAKJG14HZWDLorDfT+kGTf+Rxw8H iM1p5cmZ3t74Jl+707cQMMP0WrqZZ5U= -----END CERTIFICATE-----Generated at Thu Mar 26 21:39:52 2026 by rpki-client