$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a2af7c81-aa82-3c15-a78f-d69453ae61d1.roa File: a2af7c81-aa82-3c15-a78f-d69453ae61d1.roa (raw, json) Hash identifier: Z1tpc0KjCef15cJkuB2J+knqV/YQyipOvzyR5bOMpPw= Subject key identifier: 33:F0:3E:0F:92:71:A4:BC:62:7C:EC:D6:68:D4:72:81:33:F6:77:1B Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584E5A49F6E4DCEA1FC87B2AA180 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a2af7c81-aa82-3c15-a78f-d69453ae61d1.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 20473 IP address blocks: 64.156.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:49:f6:e4:dc:ea:1f:c8:7b:2a:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=b2aefaff-cf45-4d97-982d-e86a2d4817e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ce:11:77:85:15:2e:a1:2d:19:ec:a2:7f:e6: da:f1:9c:d0:6d:93:ed:76:da:4c:43:59:60:b7:4f: ef:0b:22:b7:5d:89:e8:87:ab:3b:e0:f7:b9:06:23: 64:ad:e0:28:98:57:dd:fc:b1:ec:85:5b:02:f1:4b: 42:dc:80:01:7b:35:e2:88:e4:d9:bd:be:50:1a:1c: d4:f7:47:b6:83:3b:ae:0c:84:b4:ba:85:66:c7:26: cf:4f:7b:d5:e0:01:44:61:2f:33:92:eb:c2:c0:21: 78:e0:c0:93:6b:8a:a1:9f:7b:bd:b9:d2:1a:68:aa: 52:8b:cc:8f:4f:b0:b8:32:80:3d:b3:a9:ec:e5:e8: 40:e8:07:de:65:ca:21:21:e2:7d:51:9c:48:20:22: ef:4a:58:02:4b:8b:51:74:94:45:7d:7c:a0:31:ea: 36:02:85:a9:79:dc:33:48:07:35:89:5f:c2:4d:62: 73:92:05:20:c5:28:47:0f:04:3e:b0:4a:2d:eb:4a: 0c:f5:e8:6d:96:88:e0:83:7b:19:58:b8:ea:1b:17: 7a:18:1a:8e:48:98:e9:0d:db:ef:ba:76:a8:c7:82: 02:25:de:49:9c:98:dc:e9:13:1f:81:c9:c4:f1:80: 9d:56:35:47:a6:ab:ac:3f:cd:cb:a7:61:2d:77:a4: 63:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F0:3E:0F:92:71:A4:BC:62:7C:EC:D6:68:D4:72:81:33:F6:77:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a2af7c81-aa82-3c15-a78f-d69453ae61d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 64.156.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:bd:9f:71:cf:42:32:d7:83:c4:a7:96:0c:d8:5a:45:e7:3b: ee:5c:f9:ed:32:de:b9:37:d6:1e:23:7f:c9:9c:7b:4c:02:40: 6b:70:58:b8:56:21:9a:15:f7:e4:3b:2c:7e:e3:91:8b:cd:79: 3f:08:22:c8:03:ac:2d:fd:52:91:c7:8a:04:de:37:fc:03:77: af:31:85:d1:b3:04:ee:ac:b2:c5:c6:4a:12:03:07:1e:47:87: 9c:5f:7b:e3:5b:02:30:06:25:3f:3e:ff:04:37:eb:78:81:33: b9:b5:5d:15:63:8b:94:8b:52:4c:ce:db:08:a0:d9:92:ad:d9: d9:88:e6:60:be:f1:d9:ab:69:03:2d:8d:69:c0:e1:56:60:95: ed:ce:6a:3f:62:ff:6f:44:62:b9:22:b8:95:1a:c6:fd:f7:08: df:5d:db:67:cf:24:9f:7f:24:1a:e1:5d:e7:df:4f:80:21:9e: 39:0b:83:8c:77:c2:7d:76:1e:5b:4f:11:cd:c7:1c:9f:1b:20: c9:cf:1b:2e:48:ee:f9:92:0d:bc:c0:91:ba:67:95:08:e0:c9: 56:64:cf:1c:7f:32:01:b0:86:9b:2c:cc:19:82:88:9c:9e:f1: 30:ef:52:bb:22:e0:ab:2e:10:81:3f:a9:df:d4:ba:f2:aa:0b: 4c:bb:de:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSfbk3OofyHsqoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk YjJhZWZhZmYtY2Y0NS00ZDk3LTk4MmQtZTg2YTJkNDgxN2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM4Rd4UVLqEtGeyif+ba8ZzQbZPtdtpMQ1lg t0/vCyK3XYnoh6s74Pe5BiNkreAomFfd/LHshVsC8UtC3IABezXiiOTZvb5QGhzU 90e2gzuuDIS0uoVmxybPT3vV4AFEYS8zkuvCwCF44MCTa4qhn3u9udIaaKpSi8yP T7C4MoA9s6ns5ehA6AfeZcohIeJ9UZxIICLvSlgCS4tRdJRFfXygMeo2AoWpedwz SAc1iV/CTWJzkgUgxShHDwQ+sEot60oM9ehtlojgg3sZWLjqGxd6GBqOSJjpDdvv unaox4ICJd5JnJjc6RMfgcnE8YCdVjVHpqusP83Lp2Etd6RjCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPwPg+ScaS8Ynzs1mjUcoEz9ncbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYTJhZjdjODEtYWE4Mi0z YzE1LWE3OGYtZDY5NDUzYWU2MWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQJwOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAu9n3HPQjLXg8SnlgzYWkXnO+5c+e0y3rk31h4jf8mce0wCQGtwWLhW IZoV9+Q7LH7jkYvNeT8IIsgDrC39UpHHigTeN/wDd68xhdGzBO6sssXGShIDBx5H h5xfe+NbAjAGJT8+/wQ363iBM7m1XRVji5SLUkzO2wig2ZKt2dmI5mC+8dmraQMt jWnA4VZgle3Oaj9i/29EYrkiuJUaxv33CN9d22fPJJ9/JBrhXeffT4AhnjkLg4x3 wn12HltPEc3HHJ8bIMnPGy5I7vmSDbzAkbpnlQjgyVZkzxx/MgGwhpsszBmCiJye 8TDvUrsi4KsuEIE/qd/UuvKqC0y73oA= -----END CERTIFICATE-----Generated at Fri Jul 24 15:14:13 2026 by rpki-client