$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5954475b-f6ad-37fb-b987-bbbe07a3d6e9.roa File: 5954475b-f6ad-37fb-b987-bbbe07a3d6e9.roa (raw, json) Hash identifier: J2bX3Uv0xA08EMvdFnjZoiOh1Snj7L8C2bF5yo9UH0g= Subject key identifier: CC:9A:0B:EA:F3:E4:06:19:81:A6:46:D7:71:BD:B5:7B:77:42:93:02 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584DBA3AE80B03E59CB9344B7C40 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5954475b-f6ad-37fb-b987-bbbe07a3d6e9.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 22898 IP address blocks: 64.193.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3a:e8:0b:03:e5:9c:b9:34:4b:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=dcef8740-0bf1-4057-ad67-7bc87c67ce8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:96:31:69:1f:84:58:98:89:4b:a9:ce:a1:33: d5:4b:c0:c5:ab:17:d8:0d:f7:8f:b9:3e:fa:2d:4a: 8c:4f:ab:f2:1c:55:d4:01:f9:18:9a:f4:9a:01:2b: 5e:f7:40:42:53:a1:21:bf:73:f3:06:a3:60:82:c0: 33:62:7d:cd:0f:7f:3e:4c:33:ee:b3:79:91:03:52: 3a:f6:60:e4:df:d0:22:9c:3e:8b:7e:a9:14:db:26: 74:e5:5b:6e:56:ec:a1:ac:58:1a:c9:6c:b4:2a:53: 8e:13:59:ea:9f:2d:9c:9c:a1:dd:35:ef:e9:52:26: 9d:23:80:9f:c0:69:21:f5:7a:91:64:de:9b:12:f7: 52:f6:75:cd:71:17:31:25:81:6e:36:3e:99:e0:ef: 58:b8:78:9d:6b:e7:bb:11:af:af:1b:fe:e5:75:06: 18:b5:89:b1:43:44:bc:2b:33:11:8f:b7:75:4e:e8: b9:fc:06:c8:bc:26:b3:42:9b:da:6d:82:c9:8b:1e: 1a:90:ee:cd:1d:e2:7e:37:6d:dd:10:05:d0:85:7f: 20:47:dc:ff:66:49:72:68:cb:c1:aa:46:5b:99:36: b3:be:24:d5:14:37:38:98:fb:02:72:fd:d4:dc:c5: 48:97:49:92:f8:94:54:d3:73:bb:0e:03:b2:0b:d7: ba:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:9A:0B:EA:F3:E4:06:19:81:A6:46:D7:71:BD:B5:7B:77:42:93:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5954475b-f6ad-37fb-b987-bbbe07a3d6e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 64.193.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:de:9b:e5:e2:4f:d5:60:6c:27:f5:42:aa:53:9f:63:d1:87: 3c:24:f1:f8:65:40:60:fc:a2:4f:53:e5:a4:3e:72:26:a0:71: f2:d3:5b:a6:50:0d:01:c6:a4:e8:9c:c0:6a:75:7e:9e:bf:93: c3:4d:d1:ab:98:ca:29:3b:13:9a:14:7e:a9:b1:0b:8b:24:36: 95:07:95:e7:dd:5e:26:1d:6d:91:d5:45:92:95:5d:b9:d1:a7: c3:29:42:81:29:2c:ea:8b:15:e7:26:17:02:81:71:0b:70:44: 68:28:d7:5e:c4:67:71:88:a7:8e:ca:f1:ab:58:d9:9a:e0:43: 01:0c:43:46:7d:77:4b:33:01:97:6f:60:93:c3:72:ff:b6:c7: b8:e5:35:55:09:65:31:1b:fb:6d:cd:52:a9:8a:30:27:52:b1: f6:d2:38:3f:d7:20:ed:20:fc:e3:3a:23:84:44:df:4c:a8:6c: 8a:df:2a:54:8e:67:d9:00:b4:90:b0:32:87:fe:a6:32:ad:d3: 27:a6:f0:81:c3:71:6b:8e:5c:28:da:43:e9:71:55:bc:95:af: 47:81:ea:7a:7c:e2:85:f8:2e:1a:f3:3d:3e:e9:b3:64:e2:f9: fa:1b:48:61:0b:5b:85:f2:b6:8b:0e:5d:17:3a:f8:4a:81:c6: 07:4c:e6:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OugLA+WcuTRLfEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk ZGNlZjg3NDAtMGJmMS00MDU3LWFkNjctN2JjODdjNjdjZThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5YxaR+EWJiJS6nOoTPVS8DFqxfYDfePuT76 LUqMT6vyHFXUAfkYmvSaASte90BCU6Ehv3PzBqNggsAzYn3ND38+TDPus3mRA1I6 9mDk39AinD6LfqkU2yZ05VtuVuyhrFgayWy0KlOOE1nqny2cnKHdNe/pUiadI4Cf wGkh9XqRZN6bEvdS9nXNcRcxJYFuNj6Z4O9YuHida+e7Ea+vG/7ldQYYtYmxQ0S8 KzMRj7d1Tui5/AbIvCazQpvabYLJix4akO7NHeJ+N23dEAXQhX8gR9z/ZklyaMvB qkZbmTazviTVFDc4mPsCcv3U3MVIl0mS+JRU03O7DgOyC9e6FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyaC+rz5AYZgaZG13G9tXt3QpMCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNTk1NDQ3NWItZjZhZC0z N2ZiLWI5ODctYmJiZTA3YTNkNmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQMF8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzem+XiT9VgbCf1QqpTn2PRhzwk8fhlQGD8ok9T5aQ+ciagcfLTW6ZQ DQHGpOicwGp1fp6/k8NN0auYyik7E5oUfqmxC4skNpUHlefdXiYdbZHVRZKVXbnR p8MpQoEpLOqLFecmFwKBcQtwRGgo117EZ3GIp47K8atY2ZrgQwEMQ0Z9d0szAZdv YJPDcv+2x7jlNVUJZTEb+23NUqmKMCdSsfbSOD/XIO0g/OM6I4RE30yobIrfKlSO Z9kAtJCwMof+pjKt0yem8IHDcWuOXCjaQ+lxVbyVr0eB6np84oX4LhrzPT7ps2Ti +fobSGELW4XytosOXRc6+EqBxgdM5ow= -----END CERTIFICATE-----Generated at Wed May 13 15:45:35 2026 by rpki-client