$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c3167584-7303-3c3b-be68-827c9bcba3d2.roa File: c3167584-7303-3c3b-be68-827c9bcba3d2.roa (raw, json) Hash identifier: FdIySYsJKfzwXsX2wxTy88Fl4BWVT2yY8knxvCSVrr4= Subject key identifier: 2E:F9:93:7B:50:EC:B7:E1:A5:F4:CC:C3:95:71:EE:72:FE:43:D4:73 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584E8DEFBD0B592D654F2309E2C0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c3167584-7303-3c3b-be68-827c9bcba3d2.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 0 IP address blocks: 64.132.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:bd:0b:59:2d:65:4f:23:09:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=586d32e3-c7f8-4a53-85f8-f844ed39b7bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:10:e0:99:70:73:a1:5a:6a:17:6c:81:06:f6: 39:a5:34:81:f8:55:ed:fa:da:7b:0b:ad:61:65:f2: 6c:13:e6:2a:ab:c9:fe:f7:d9:48:cb:7d:d6:c0:a3: 1c:98:d5:9f:a8:db:2e:41:14:9b:b3:7f:b5:25:48: c4:68:b1:f0:cc:6c:58:07:b5:8b:5c:43:4f:53:df: 12:2a:6d:1c:a8:94:e8:29:b9:b4:91:54:b1:d5:15: 34:cf:66:3e:72:35:ab:f7:b9:16:58:4a:ea:6b:a2: 6e:05:3a:d0:9e:15:9f:cb:11:e1:bc:de:bf:c9:37: 25:62:72:ef:61:a7:2a:33:61:6f:4f:b8:a4:07:5c: 74:6f:61:29:66:47:15:d2:3c:20:38:57:40:f4:46: ef:59:f7:00:50:7d:6b:5e:e3:da:ba:b2:33:c2:0a: 4a:d1:44:06:11:85:ae:44:da:1c:2a:5c:e7:90:ac: bb:9e:dc:fd:d6:97:ea:a5:39:23:46:5f:9d:d9:00: fe:a5:d7:87:80:df:74:91:f5:e1:ca:97:af:12:fc: b3:35:4b:10:ce:9e:fa:aa:d1:5a:da:ab:46:6d:3d: 0a:49:ef:3c:91:10:18:e5:cc:dc:d4:fb:82:1b:df: c0:80:4f:f8:ee:60:20:0d:db:f6:9c:67:89:15:03: 72:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F9:93:7B:50:EC:B7:E1:A5:F4:CC:C3:95:71:EE:72:FE:43:D4:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c3167584-7303-3c3b-be68-827c9bcba3d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 64.132.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:97:54:0c:7f:f6:da:32:3f:02:ae:1c:1a:55:1f:2c:ff:a6: ca:0a:86:f3:56:ce:a3:b6:ca:1c:83:cc:b3:f3:33:02:55:fa: a6:08:d6:2d:d6:13:7e:bc:6f:86:42:8f:a1:0d:7e:25:48:71: c5:7d:e6:a0:7f:6b:85:c6:eb:0c:1e:cf:84:fb:4f:0f:d3:e8: 6c:2c:c5:07:d6:3a:c2:a2:86:4c:cd:c9:ef:74:5c:4d:52:30: ca:fe:77:1c:b5:de:9b:fd:58:36:d8:39:d3:54:f6:ab:e4:0c: 96:6b:cd:3c:14:d0:19:84:9d:81:bd:88:4e:69:0b:ea:2c:1d: 5b:9c:a4:59:ca:ab:c1:3d:e7:27:17:ff:c3:b4:5a:3b:01:79: 42:9d:9f:57:ad:c8:e8:a1:9b:ee:64:2f:c0:bd:e9:c9:f4:2e: 15:5d:85:ab:71:c6:8b:56:75:fa:57:72:3c:30:71:51:e1:37: 94:4b:32:95:db:d5:b6:cb:88:97:56:a1:c3:e9:88:64:e9:0a: 9b:53:1e:c0:f4:fd:79:2d:6f:7a:8d:01:a1:86:86:10:f3:77: 3b:36:b3:3c:12:26:2e:0d:38:ee:92:b7:ae:5a:cf:2e:02:b1: ee:d5:05:4f:4e:79:3e:fa:87:90:aa:7f:e2:8a:18:19:c4:d5: 10:29:21:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N770LWS1lTyMJ4sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk NTg2ZDMyZTMtYzdmOC00YTUzLTg1ZjgtZjg0NGVkMzliN2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxDgmXBzoVpqF2yBBvY5pTSB+FXt+tp7C61h ZfJsE+Yqq8n+99lIy33WwKMcmNWfqNsuQRSbs3+1JUjEaLHwzGxYB7WLXENPU98S Km0cqJToKbm0kVSx1RU0z2Y+cjWr97kWWErqa6JuBTrQnhWfyxHhvN6/yTclYnLv YacqM2FvT7ikB1x0b2EpZkcV0jwgOFdA9EbvWfcAUH1rXuPaurIzwgpK0UQGEYWu RNocKlznkKy7ntz91pfqpTkjRl+d2QD+pdeHgN90kfXhypevEvyzNUsQzp76qtFa 2qtGbT0KSe88kRAY5czc1PuCG9/AgE/47mAgDdv2nGeJFQNypQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC75k3tQ7LfhpfTMw5Vx7nL+Q9RzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYzMxNjc1ODQtNzMwMy0z YzNiLWJlNjgtODI3YzliY2JhM2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQIR7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyXVAx/9toyPwKuHBpVHyz/psoKhvNWzqO2yhyDzLPzMwJV+qYI1i3W E368b4ZCj6ENfiVIccV95qB/a4XG6wwez4T7Tw/T6GwsxQfWOsKihkzNye90XE1S MMr+dxy13pv9WDbYOdNU9qvkDJZrzTwU0BmEnYG9iE5pC+osHVucpFnKq8E95ycX /8O0WjsBeUKdn1etyOihm+5kL8C96cn0LhVdhatxxotWdfpXcjwwcVHhN5RLMpXb 1bbLiJdWocPpiGTpCptTHsD0/Xktb3qNAaGGhhDzdzs2szwSJi4NOO6St65azy4C se7VBU9OeT76h5Cqf+KKGBnE1RApIYk= -----END CERTIFICATE-----Generated at Thu Jul 23 23:32:23 2026 by rpki-client