$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/34a15df3-ae78-372e-8160-e71d118b8d2e.roa File: 34a15df3-ae78-372e-8160-e71d118b8d2e.roa (raw, json) Hash identifier: qaE4yNxMrk0Nm2kxPO11G6FSUe82Bh0tjwFrePpsXAY= Subject key identifier: 3D:15:7C:A5:12:05:C8:0F:AB:44:33:61:DE:A3:47:0A:71:CE:79:F5 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584D47C4E283668E388240948440 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/34a15df3-ae78-372e-8160-e71d118b8d2e.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 3356 IP address blocks: 209.224.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:e2:83:66:8e:38:82:40:94:84:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=656b621d-6588-4a38-8880-caed97a0e93c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:da:62:e6:7c:5a:73:04:e7:d2:e2:b6:f4:8f: fd:21:70:48:20:49:e3:30:c1:55:ef:1d:9a:6c:8c: a4:ee:39:a8:28:43:17:a9:e6:c2:3f:ec:c7:d3:5a: ee:13:67:a3:34:da:af:d8:90:fa:b5:b8:65:94:83: ef:53:a1:3c:ff:91:d9:26:50:de:6f:73:9d:b8:ac: c1:4e:60:8e:33:e5:37:32:b9:72:1a:a7:50:97:94: d0:8b:8a:36:b9:85:d0:4f:96:32:a6:39:05:2b:8b: 1f:3f:a7:16:0a:39:e2:eb:51:84:65:15:29:b4:a0: 7d:8a:96:21:4c:f1:4b:d2:25:5e:f3:c7:99:0e:9a: 4b:a7:74:a0:46:8c:73:96:4d:65:a9:e5:b2:a1:40: 6b:e5:93:65:e3:91:4f:48:3f:12:85:6a:01:06:af: 81:f7:04:e4:a3:18:57:5c:d7:27:33:e0:c1:79:8c: 21:72:f9:14:b1:c6:89:76:2e:43:54:76:78:f1:9a: e6:1e:28:b7:95:9e:81:1f:f8:02:fa:9f:52:54:27: 5b:59:25:07:da:96:b4:19:2c:c8:b1:fe:f7:dd:ee: fd:70:85:99:b3:41:7c:7d:44:04:60:a7:7e:50:91: c7:71:aa:d5:e7:58:9d:61:a8:43:e7:d5:35:6c:cf: 40:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:15:7C:A5:12:05:C8:0F:AB:44:33:61:DE:A3:47:0A:71:CE:79:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/34a15df3-ae78-372e-8160-e71d118b8d2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 209.224.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:8f:9c:1b:76:8b:2d:43:e0:93:19:1a:67:7a:b7:17:01:75: cb:22:94:86:92:b6:8e:4b:63:eb:0e:4a:a5:95:81:23:08:05: 2f:94:69:0b:0f:06:f6:27:d7:e7:66:9c:b6:33:50:45:b6:08: 74:55:7f:80:fb:d1:5c:88:7f:3f:54:48:a5:97:d2:6c:f7:79: 5b:fb:87:63:ba:a4:c0:fb:46:dd:4b:cc:8c:cc:f7:40:5e:8d: 88:01:34:bc:de:46:3d:f2:53:00:f1:eb:c6:f9:18:76:a0:5f: ce:ab:a2:45:04:cf:43:d6:00:6c:c1:e9:13:99:05:3d:35:b9: 41:48:70:fd:82:d3:e1:3d:2a:e2:24:d8:54:ef:eb:20:a0:9f: c8:89:bb:5f:c2:28:5e:ea:2f:f4:77:52:ad:c8:15:62:f4:57: e8:f8:f1:9b:60:47:df:02:1e:a7:49:3b:b3:1f:14:0c:89:f3: 0e:97:4a:a4:81:c6:f7:95:d7:10:b1:1c:37:5d:ca:24:da:25: fd:95:96:3a:03:5f:5f:4f:bb:d6:a3:5f:2e:2a:64:34:2f:db: bd:7a:69:3d:02:8a:26:15:c5:19:94:5f:0c:0f:7a:75:ad:f9: 72:de:f5:a5:79:17:f0:df:ff:f0:ed:5a:a2:2b:bb:df:28:c7: e2:44:11:c3 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1HxOKDZo44gkCUhEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk NjU2YjYyMWQtNjU4OC00YTM4LTg4ODAtY2FlZDk3YTBlOTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtpi5nxacwTn0uK29I/9IXBIIEnjMMFV7x2a bIyk7jmoKEMXqebCP+zH01ruE2ejNNqv2JD6tbhllIPvU6E8/5HZJlDeb3OduKzB TmCOM+U3MrlyGqdQl5TQi4o2uYXQT5YypjkFK4sfP6cWCjni61GEZRUptKB9ipYh TPFL0iVe88eZDppLp3SgRoxzlk1lqeWyoUBr5ZNl45FPSD8ShWoBBq+B9wTkoxhX XNcnM+DBeYwhcvkUscaJdi5DVHZ48ZrmHii3lZ6BH/gC+p9SVCdbWSUH2pa0GSzI sf733e79cIWZs0F8fUQEYKd+UJHHcarV51idYahD59U1bM9AcwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFD0VfKUSBcgPq0QzYd6jRwpxznn1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMzRhMTVkZjMtYWU3OC0z NzJlLTgxNjAtZTcxZDExOGI4ZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0eAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAPo+cG3aLLUPgkxkaZ3q3FwF1yyKUhpK2jktj6w5KpZWBIwgFL5RpCw8G 9ifX52actjNQRbYIdFV/gPvRXIh/P1RIpZfSbPd5W/uHY7qkwPtG3UvMjMz3QF6N iAE0vN5GPfJTAPHrxvkYdqBfzquiRQTPQ9YAbMHpE5kFPTW5QUhw/YLT4T0q4iTY VO/rIKCfyIm7X8IoXuov9HdSrcgVYvRX6Pjxm2BH3wIep0k7sx8UDInzDpdKpIHG 95XXELEcN13KJNol/ZWWOgNfX0+71qNfLipkNC/bvXppPQKKJhXFGZRfDA96da35 ct71pXkX8N//8O1aoiu73yjH4kQRww== -----END CERTIFICATE-----Generated at Thu Mar 26 19:27:34 2026 by rpki-client