$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3a001652-f862-32ab-9d90-aaf50d44a7b3.roa File: 3a001652-f862-32ab-9d90-aaf50d44a7b3.roa (raw, json) Hash identifier: mjAsBIm6BUUwO2xx+FzuVPEOmH3HXhqaA50T4YIIAig= Subject key identifier: 35:57:74:98:26:4D:EC:7D:E2:5D:90:D7:86:A3:43:43:82:52:51:52 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584E8DEFBCFE5446BEB15721E560 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3a001652-f862-32ab-9d90-aaf50d44a7b3.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 0 IP address blocks: 64.128.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:bc:fe:54:46:be:b1:57:21:e5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=bc0ab5c4-461d-4cb5-9980-3b4f227fcb7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:96:9c:7d:6c:70:cf:1c:3e:20:9d:41:56:4e: f2:58:e6:fe:8f:62:ad:30:80:55:82:1e:13:f6:e8: a3:89:9c:27:0b:cf:71:e4:d5:fe:c5:7c:44:df:8d: 6c:55:93:bf:d6:a4:0f:47:5a:1c:32:c8:04:33:cd: be:b5:df:82:d5:39:1e:7f:c2:90:2d:1d:a3:7e:ea: 27:0c:10:4a:14:52:3c:e3:9a:80:6d:c4:6f:71:d5: df:09:79:32:7a:de:77:e2:f1:80:d1:65:d3:d0:81: 58:cf:d7:ec:f2:4b:1f:1b:11:6e:d5:a8:d8:04:2b: 3f:ed:bc:5e:d0:fe:6d:13:fd:8e:3e:f8:77:c1:97: eb:6d:fc:4e:bd:70:30:cc:5b:72:c0:19:9e:f5:63: fd:80:08:68:10:23:e1:a9:c3:21:ee:0b:19:8c:8c: ea:a0:91:73:d4:3a:a9:af:99:5f:52:ae:2a:63:52: 57:97:a8:01:90:46:2a:99:56:b6:85:c0:6a:94:a2: 00:f6:df:f6:90:bb:8a:b2:f1:11:f4:32:b9:16:b4: 0b:a1:81:ec:96:6c:c7:d6:57:e2:cd:db:1d:32:48: 89:d0:62:46:53:67:1b:27:4e:ae:f5:0c:66:29:34: 66:2a:4e:7d:1d:6e:5c:bc:6b:79:63:66:e5:4f:f8: e9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:57:74:98:26:4D:EC:7D:E2:5D:90:D7:86:A3:43:43:82:52:51:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3a001652-f862-32ab-9d90-aaf50d44a7b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 64.128.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:a6:58:11:4f:85:55:fe:be:b2:1e:b8:f6:f1:24:02:3c:f4: 75:77:69:03:62:f4:90:c0:cb:93:33:20:ce:a7:00:d3:38:c5: 5a:d6:78:12:7e:dc:88:4f:41:ef:44:b6:15:a6:07:a4:6f:f9: b8:e2:80:94:aa:11:bb:25:34:8a:f6:f3:66:15:6a:fd:94:71: 48:0b:65:1e:5c:4e:37:21:35:c1:d7:37:3c:02:e3:39:95:4d: b5:b3:b1:81:9c:fc:91:e8:39:7d:b4:74:81:70:4c:5e:f6:57: 41:a9:5c:00:da:8c:48:80:6b:82:7e:45:5c:4c:ef:70:53:41: 08:de:f6:0a:85:12:73:44:ff:97:c7:45:b1:60:c2:91:69:ba: 22:43:0e:30:b4:fb:d6:fc:51:ac:bd:e2:e0:5c:9d:fe:3b:ac: 7a:59:d2:1e:25:34:72:c2:0d:16:89:76:f8:b3:42:47:9c:13: e5:47:d5:38:b3:96:ca:ff:57:94:ad:7a:80:5f:64:c7:35:8e: 24:8d:b7:17:60:66:db:fb:9d:29:8a:42:39:0c:d7:45:4e:3b: 5b:27:b5:14:da:50:00:ed:81:6d:33:5c:2d:78:25:e1:cb:66: 6a:99:64:c0:33:36:85:06:e0:b7:16:65:98:e4:ba:a1:88:a7: 67:71:4b:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N77z+VEa+sVch5WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk YmMwYWI1YzQtNDYxZC00Y2I1LTk5ODAtM2I0ZjIyN2ZjYjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZacfWxwzxw+IJ1BVk7yWOb+j2KtMIBVgh4T 9uijiZwnC89x5NX+xXxE341sVZO/1qQPR1ocMsgEM82+td+C1Tkef8KQLR2jfuon DBBKFFI845qAbcRvcdXfCXkyet534vGA0WXT0IFYz9fs8ksfGxFu1ajYBCs/7bxe 0P5tE/2OPvh3wZfrbfxOvXAwzFtywBme9WP9gAhoECPhqcMh7gsZjIzqoJFz1Dqp r5lfUq4qY1JXl6gBkEYqmVa2hcBqlKIA9t/2kLuKsvER9DK5FrQLoYHslmzH1lfi zdsdMkiJ0GJGU2cbJ06u9QxmKTRmKk59HW5cvGt5Y2blT/jpZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVXdJgmTex94l2Q14ajQ0OCUlFSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvM2EwMDE2NTItZjg2Mi0z MmFiLTlkOTAtYWFmNTBkNDRhN2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQID9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKymWBFPhVX+vrIeuPbxJAI89HV3aQNi9JDAy5MzIM6nANM4xVrWeBJ+ 3IhPQe9EthWmB6Rv+bjigJSqEbslNIr282YVav2UcUgLZR5cTjchNcHXNzwC4zmV TbWzsYGc/JHoOX20dIFwTF72V0GpXADajEiAa4J+RVxM73BTQQje9gqFEnNE/5fH RbFgwpFpuiJDDjC0+9b8Uay94uBcnf47rHpZ0h4lNHLCDRaJdvizQkecE+VH1Tiz lsr/V5SteoBfZMc1jiSNtxdgZtv7nSmKQjkM10VOO1sntRTaUADtgW0zXC14JeHL ZmqZZMAzNoUG4LcWZZjkuqGIp2dxSx8= -----END CERTIFICATE-----Generated at Fri Jul 24 18:12:50 2026 by rpki-client