$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c51fbc72-ded8-3108-9edf-ab64557e0219.roa File: c51fbc72-ded8-3108-9edf-ab64557e0219.roa (raw, json) Hash identifier: 8+iY2QbURspiTeeEaZ7TG0Y5xnFjoynf4CAgKjwX8HU= Subject key identifier: DF:EE:0F:28:75:B9:73:EE:DF:02:93:6E:38:54:11:9D:65:B3:D3:EB Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584F27F258828C3424B4E9C77F70 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c51fbc72-ded8-3108-9edf-ab64557e0219.roa Signing time: Sun 13 Sep 2026 01:00:12 +0000 ROA not before: Sun 13 Sep 2026 01:00:12 +0000 ROA not after: Sat 12 Dec 2026 02:00:12 +0000 asID: 3356 IP address blocks: 206.32.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:27:f2:58:82:8c:34:24:b4:e9:c7:7f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Sep 13 01:00:12 2026 GMT Not After : Dec 12 02:00:12 2026 GMT Subject: CN=e9f4b4ba-e2cf-48e4-a5e6-a1d35cdbe224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:89:df:eb:75:13:94:fb:16:6d:cc:b6:a8:fc: 18:d5:5b:57:40:b4:01:b9:47:a6:72:5a:5f:ce:6c: 69:ae:98:51:82:c4:0c:10:39:95:fa:f9:92:1a:9c: 7f:dc:44:9e:38:4b:96:77:18:cd:96:fa:96:e5:50: 1a:40:b1:ac:bf:17:46:63:2e:73:71:c7:4a:40:df: aa:8f:64:ee:0e:52:53:d8:32:86:dc:ca:66:5b:fa: 5f:b2:2c:56:92:d4:1a:45:49:a6:07:07:3d:6d:9c: 19:de:14:28:3b:98:9b:40:8e:e7:bb:66:5c:a8:5e: 64:8f:3d:e3:08:2e:eb:95:41:dc:76:0c:74:8a:29: 1c:f0:d9:31:6e:7d:0b:81:1f:d1:a4:6b:0d:3f:fd: 67:8d:d4:c7:56:98:11:31:d7:dc:7c:2f:9a:b3:d1: fb:1c:b0:4d:6f:25:1f:00:0c:a4:45:17:20:a3:ff: 77:b1:df:2d:44:b1:c4:17:13:59:c2:82:a0:a3:53: 26:23:c0:0f:55:1b:a6:88:5f:97:8e:d3:a7:50:bc: f4:28:66:0e:f2:67:74:4a:6b:8d:e6:54:aa:24:99: 73:59:b7:60:49:05:cf:d7:c2:5b:4a:fb:11:0c:e7: c2:58:52:c0:53:97:3b:58:5d:57:14:bd:70:ef:30: b1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EE:0F:28:75:B9:73:EE:DF:02:93:6E:38:54:11:9D:65:B3:D3:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c51fbc72-ded8-3108-9edf-ab64557e0219.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 206.32.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:2d:b0:c6:20:d7:03:82:c0:bd:ae:51:7c:81:a0:a2:7f:0b: 58:49:0e:94:60:8e:7d:da:06:05:88:2d:38:d4:50:3d:e3:90: 9b:3a:fb:bc:c0:02:29:4d:66:1f:7e:c0:3b:1d:8f:d2:65:7d: 9e:b7:28:d7:6b:01:6a:62:0a:d0:61:ad:bb:64:48:fd:6e:64: b7:bf:73:5c:7e:9b:91:6e:48:25:b3:56:14:88:28:ce:74:a6: 33:86:86:9e:d9:d8:7a:92:0e:ba:5f:a6:9c:99:35:d1:e4:5a: 40:30:b0:cc:4d:63:5a:64:05:26:d4:a0:fe:19:b9:c2:6e:66: f4:ff:f0:b2:ff:8f:01:87:00:83:6c:ec:e7:08:c0:71:d0:54: f4:5c:f8:35:98:f6:09:7b:b8:b9:20:32:d9:36:d8:dc:32:cd: 07:43:bb:2f:48:a9:3c:4d:88:e8:73:a1:dc:bc:ff:ec:a6:5c: 16:04:ab:b8:b8:68:7f:25:99:0a:e0:81:cc:76:fa:70:b5:01: 41:d5:6c:d2:ae:12:1e:9a:3a:4b:ad:a9:ba:68:7d:76:7b:ec: b2:8d:f9:c3:54:5c:42:1b:a6:79:8c:d5:21:8e:5a:83:28:4e: 6c:d8:51:09:d1:29:b4:d3:ff:3c:7d:fd:9b:bd:9f:44:2b:fa: 39:03:53:6e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8n8liCjDQktOnHf3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDkxMzAxMDAxMloXDTI2MTIxMjAyMDAxMlowLzEtMCsGA1UEAxMk ZTlmNGI0YmEtZTJjZi00OGU0LWE1ZTYtYTFkMzVjZGJlMjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYnf63UTlPsWbcy2qPwY1VtXQLQBuUemclpf zmxprphRgsQMEDmV+vmSGpx/3ESeOEuWdxjNlvqW5VAaQLGsvxdGYy5zccdKQN+q j2TuDlJT2DKG3MpmW/pfsixWktQaRUmmBwc9bZwZ3hQoO5ibQI7nu2ZcqF5kjz3j CC7rlUHcdgx0iikc8Nkxbn0LgR/RpGsNP/1njdTHVpgRMdfcfC+as9H7HLBNbyUf AAykRRcgo/93sd8tRLHEFxNZwoKgo1MmI8APVRumiF+XjtOnULz0KGYO8md0SmuN 5lSqJJlzWbdgSQXP18JbSvsRDOfCWFLAU5c7WF1XFL1w7zCxXwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFN/uDyh1uXPu3wKTbjhUEZ1ls9PrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYzUxZmJjNzItZGVkOC0z MTA4LTllZGYtYWI2NDU1N2UwMjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCziAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAsy2wxiDXA4LAva5RfIGgon8LWEkOlGCOfdoGBYgtONRQPeOQmzr7vMAC KU1mH37AOx2P0mV9nrco12sBamIK0GGtu2RI/W5kt79zXH6bkW5IJbNWFIgoznSm M4aGntnYepIOul+mnJk10eRaQDCwzE1jWmQFJtSg/hm5wm5m9P/wsv+PAYcAg2zs 5wjAcdBU9Fz4NZj2CXu4uSAy2TbY3DLNB0O7L0ipPE2I6HOh3Lz/7KZcFgSruLho fyWZCuCBzHb6cLUBQdVs0q4SHpo6S62pumh9dnvsso35w1RcQhumeYzVIY5agyhO bNhRCdEptNP/PH39m72fRCv6OQNTbg== -----END CERTIFICATE-----Generated at Wed Oct 14 03:52:49 2026 by rpki-client