$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ebd13848-94a1-385e-8f89-0b0272159551.roa File: ebd13848-94a1-385e-8f89-0b0272159551.roa (raw, json) Hash identifier: QkP9MGubLYzB9FEkOo7kDuMcJsaWo5M0m2b3mTuIYRo= Subject key identifier: 8C:DE:B6:02:C7:58:63:BC:6C:21:36:55:B6:27:80:10:A9:67:8F:76 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584DCF508047514B8BF998B3D480 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ebd13848-94a1-385e-8f89-0b0272159551.roa Signing time: Tue 12 May 2026 14:16:06 +0000 ROA not before: Tue 12 May 2026 14:16:06 +0000 ROA not after: Mon 10 Aug 2026 14:16:06 +0000 asID: 21889 IP address blocks: 209.84.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:50:80:47:51:4b:8b:f9:98:b3:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: May 12 14:16:06 2026 GMT Not After : Aug 10 14:16:06 2026 GMT Subject: CN=275bde21-f9e8-484a-a4cb-245ff52ea52b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:03:e0:40:8d:86:9f:76:40:9b:59:5b:44:34: d5:77:e8:06:26:96:6b:ab:3f:c1:63:39:2d:f6:5c: c5:08:af:23:7b:af:3b:57:2b:ac:21:90:6a:32:68: ef:42:1c:41:e4:28:48:31:cd:eb:a5:96:d1:f2:60: e1:13:89:18:de:d1:6d:10:f6:ee:19:ac:aa:6e:5a: 63:12:b5:9b:99:b1:b4:96:a6:cd:4e:11:9d:09:d7: 34:fb:ca:e5:98:ee:69:dd:63:d9:62:b9:e8:f6:95: ba:dd:9d:e3:4e:2d:62:27:03:de:bd:9c:5e:8d:0f: dc:f7:b0:f6:b5:9b:60:d0:2a:13:14:9c:e2:c9:60: 99:47:d0:f9:94:c4:7a:1b:eb:53:e0:96:de:2e:cb: 0e:d7:b7:76:e6:2a:aa:af:54:03:58:98:63:ca:88: 8b:4c:86:67:f0:da:9b:b4:61:6b:1c:bd:dd:f6:6f: 66:04:b6:b7:9b:8f:17:b2:51:67:5e:93:57:64:12: ba:5a:5d:b2:65:d4:9c:a2:43:3f:48:a8:64:c3:f1: 8a:a9:2c:9f:f7:76:17:f8:78:b8:5f:da:dc:17:a8: f1:15:48:2f:11:b2:63:12:9f:c9:aa:db:80:55:60: 3a:5c:ae:af:a3:8f:18:e1:28:eb:82:03:ea:59:51: a0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DE:B6:02:C7:58:63:BC:6C:21:36:55:B6:27:80:10:A9:67:8F:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ebd13848-94a1-385e-8f89-0b0272159551.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 209.84.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:af:82:58:77:71:b0:d5:f1:bb:2d:28:8b:da:e2:3c:b5:a5: 79:57:cd:6e:99:c6:1c:e8:7b:a8:3a:52:9c:79:18:78:e6:85: 58:6f:7b:36:f8:d7:1d:ea:72:56:da:bc:f4:f1:4a:74:a5:90: 90:bd:30:34:04:7e:0f:25:72:df:07:12:74:d2:ff:dc:32:69: 98:ff:c5:41:c5:d0:f9:d7:26:3b:76:80:d6:d7:cf:84:ad:09: bb:a5:9b:14:43:d0:b9:1f:35:e4:23:8b:40:b0:22:5d:13:27: bc:7c:94:b6:bd:ef:86:93:2c:d5:ed:13:9b:68:32:89:f4:87: 03:2f:6b:82:b7:d7:19:fc:55:fe:d8:40:e9:78:89:2f:73:b7: bc:f7:44:fe:ea:78:66:b8:c3:af:e2:54:4f:a8:1f:b9:13:86: bb:c8:42:ef:35:44:86:bb:f7:61:63:39:92:3d:ab:6e:bb:01: d2:da:28:37:c0:f7:1c:7b:d4:53:1a:49:77:7d:a9:d5:87:d6: 97:1a:51:92:91:c4:49:2c:2f:ef:10:50:fd:7b:6a:6c:38:7e: 66:fd:73:a7:ae:ff:7a:c1:84:f3:3d:40:00:df:b6:68:1b:2a: 45:73:df:0e:17:2b:09:2d:2e:d4:7a:0e:e7:00:00:a6:ad:b4: bc:86:a3:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PUIBHUUuL+Ziz1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDUxMjE0MTYwNloXDTI2MDgxMDE0MTYwNlowLzEtMCsGA1UEAxMk Mjc1YmRlMjEtZjllOC00ODRhLWE0Y2ItMjQ1ZmY1MmVhNTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAPgQI2Gn3ZAm1lbRDTVd+gGJpZrqz/BYzkt 9lzFCK8je687VyusIZBqMmjvQhxB5ChIMc3rpZbR8mDhE4kY3tFtEPbuGayqblpj ErWbmbG0lqbNThGdCdc0+8rlmO5p3WPZYrno9pW63Z3jTi1iJwPevZxejQ/c97D2 tZtg0CoTFJziyWCZR9D5lMR6G+tT4JbeLssO17d25iqqr1QDWJhjyoiLTIZn8Nqb tGFrHL3d9m9mBLa3m48XslFnXpNXZBK6Wl2yZdScokM/SKhkw/GKqSyf93YX+Hi4 X9rcF6jxFUgvEbJjEp/JqtuAVWA6XK6vo48Y4SjrggPqWVGgFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzetgLHWGO8bCE2VbYngBCpZ492MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZWJkMTM4NDgtOTRhMS0z ODVlLThmODktMGIwMjcyMTU5NTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VT9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGivglh3cbDV8bstKIva4jy1pXlXzW6Zxhzoe6g6Upx5GHjmhVhvezb4 1x3qclbavPTxSnSlkJC9MDQEfg8lct8HEnTS/9wyaZj/xUHF0PnXJjt2gNbXz4St CbulmxRD0LkfNeQji0CwIl0TJ7x8lLa974aTLNXtE5toMon0hwMva4K31xn8Vf7Y QOl4iS9zt7z3RP7qeGa4w6/iVE+oH7kThrvIQu81RIa792FjOZI9q267AdLaKDfA 9xx71FMaSXd9qdWH1pcaUZKRxEksL+8QUP17amw4fmb9c6eu/3rBhPM9QADftmgb KkVz3w4XKwktLtR6DucAAKattLyGo90= -----END CERTIFICATE-----Generated at Wed May 13 14:36:34 2026 by rpki-client