$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/832f289b-57d2-3d20-a42f-eb651d333977.roa File: 832f289b-57d2-3d20-a42f-eb651d333977.roa (raw, json) Hash identifier: movl3W77Ao8V2VSVPdBjFswILsdVfYXVFz2bEOpvFTQ= Subject key identifier: 11:DB:87:DD:71:F7:7C:7F:DF:83:9E:11:54:FA:96:53:BD:1D:9A:A5 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584DCF564DF517DF02CCA19C6880 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/832f289b-57d2-3d20-a42f-eb651d333977.roa Signing time: Tue 12 May 2026 14:27:48 +0000 ROA not before: Tue 12 May 2026 14:27:48 +0000 ROA not after: Mon 10 Aug 2026 14:27:48 +0000 asID: 3356 IP address blocks: 199.95.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:56:4d:f5:17:df:02:cc:a1:9c:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: May 12 14:27:48 2026 GMT Not After : Aug 10 14:27:48 2026 GMT Subject: CN=bb6e3b73-72bb-4bbe-88e6-30a513ecdb4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:21:ad:23:7d:3c:d2:e0:15:9f:93:01:2b:a3: d0:5a:b9:d6:ea:ed:e0:80:77:70:5e:23:6e:ae:e1: ea:be:86:3e:dc:d1:59:8e:62:cc:3c:c6:cd:9c:17: 6a:ad:42:cd:55:cf:49:16:b3:42:ab:80:07:2b:30: da:4e:69:11:7b:f0:7a:d5:c7:16:1c:28:76:3e:fc: a3:18:56:58:7f:6e:91:bf:1a:97:bd:a6:61:ec:18: d1:04:2c:a5:15:2d:05:3b:13:1f:6c:2c:45:40:cb: 16:12:8a:71:3a:3b:37:d1:86:64:07:e1:b1:6e:b5: f5:6a:38:ca:a9:9d:7d:c2:9a:94:65:2b:63:d1:9a: 52:90:a9:8b:42:b1:3c:3d:fb:0d:23:27:2c:97:ff: 93:24:ea:68:84:9b:b4:e6:c8:b2:1c:33:d1:ba:b6: 10:29:d4:8c:bf:85:25:eb:64:5b:6d:ab:be:7f:1c: 75:fe:ca:91:76:ad:05:49:de:46:7c:9e:f9:05:82: be:7d:58:4a:42:e9:9e:7c:a4:2d:af:9f:b3:26:d9: d2:41:c6:2d:a4:c5:d9:9d:9d:0e:5c:f2:78:15:c1: 2a:e3:8f:b2:b8:61:14:98:0c:4a:cb:0e:d1:9a:df: 8d:1b:54:ca:3e:4b:4c:4d:d1:4b:e3:24:f4:bd:54: 88:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:DB:87:DD:71:F7:7C:7F:DF:83:9E:11:54:FA:96:53:BD:1D:9A:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/832f289b-57d2-3d20-a42f-eb651d333977.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 199.95.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:13:1e:c0:27:46:6c:b7:4d:25:f7:37:b7:f2:22:a8:63:00: 5f:6b:6e:00:30:56:65:d5:1b:81:26:63:eb:79:23:51:ea:7c: 4b:41:80:b3:46:2a:2c:8f:6a:23:ec:44:cb:bb:b7:17:35:14: b9:a2:7a:28:30:07:99:5c:37:a2:43:e9:a2:ea:8e:a5:28:96: de:2d:ff:3c:6d:82:a9:81:70:e0:cc:89:0f:c5:38:c3:f1:d0: d3:a3:aa:e8:32:6c:5d:fd:ac:1f:fc:19:2a:77:ce:10:15:06: 59:6c:89:3e:56:57:62:66:31:ef:d6:0a:9a:4f:e3:77:47:18: 6a:66:36:b8:3b:36:22:93:0d:9a:a0:bd:15:07:22:59:76:18: d7:ca:53:2f:b2:18:f5:17:b0:db:ec:2f:83:32:be:98:f0:4c: af:cc:e4:68:e2:5d:f7:69:38:a6:54:a8:10:8c:5a:f7:c9:52: 5c:b7:b4:08:16:01:c7:41:2e:0a:af:9a:a8:9a:d2:64:fd:93: 34:8a:34:7b:47:b6:b9:19:ef:49:fe:ab:f0:a8:e3:da:e6:c1: 17:2e:4d:88:c6:7b:34:2e:54:a3:21:0c:67:78:42:14:96:98: e8:59:8f:ca:26:b1:fe:35:02:c0:22:7f:e1:1b:d2:be:4b:ca: 91:00:6e:b5 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE3PVk31F98CzKGcaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDUxMjE0Mjc0OFoXDTI2MDgxMDE0Mjc0OFowLzEtMCsGA1UEAxMk YmI2ZTNiNzMtNzJiYi00YmJlLTg4ZTYtMzBhNTEzZWNkYjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyGtI3080uAVn5MBK6PQWrnW6u3ggHdwXiNu ruHqvoY+3NFZjmLMPMbNnBdqrULNVc9JFrNCq4AHKzDaTmkRe/B61ccWHCh2Pvyj GFZYf26RvxqXvaZh7BjRBCylFS0FOxMfbCxFQMsWEopxOjs30YZkB+GxbrX1ajjK qZ19wpqUZStj0ZpSkKmLQrE8PfsNIycsl/+TJOpohJu05siyHDPRurYQKdSMv4Ul 62Rbbau+fxx1/sqRdq0FSd5GfJ75BYK+fVhKQumefKQtr5+zJtnSQcYtpMXZnZ0O XPJ4FcEq44+yuGEUmAxKyw7Rmt+NG1TKPktMTdFL4yT0vVSIoQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBHbh91x93x/34OeEVT6llO9HZqlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvODMyZjI4OWItNTdkMi0z ZDIwLWE0MmYtZWI2NTFkMzMzOTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAx18wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAnhMewCdGbLdNJfc3t/IiqGMAX2tuADBWZdUbgSZj63kjUep8S0GAs0Yq LI9qI+xEy7u3FzUUuaJ6KDAHmVw3okPpouqOpSiW3i3/PG2CqYFw4MyJD8U4w/HQ 06Oq6DJsXf2sH/wZKnfOEBUGWWyJPlZXYmYx79YKmk/jd0cYamY2uDs2IpMNmqC9 FQciWXYY18pTL7IY9Rew2+wvgzK+mPBMr8zkaOJd92k4plSoEIxa98lSXLe0CBYB x0EuCq+aqJrSZP2TNIo0e0e2uRnvSf6r8Kjj2ubBFy5NiMZ7NC5UoyEMZ3hCFJaY 6FmPyiax/jUCwCJ/4RvSvkvKkQButQ== -----END CERTIFICATE-----Generated at Wed May 13 14:17:10 2026 by rpki-client