$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f31d056e-d8a1-373b-9fe3-9240ab23b5c2.roa File: f31d056e-d8a1-373b-9fe3-9240ab23b5c2.roa (raw, json) Hash identifier: mCF61n8QFfXUqMnG9IDMidYcOudZsmunxu012jCHUBs= Subject key identifier: 48:F7:99:B5:8D:FD:6B:7C:BA:0A:61:CF:49:74:10:C3:85:7A:56:44 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584DCAFAFE1B80ADE6DEB84FAE80 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f31d056e-d8a1-373b-9fe3-9240ab23b5c2.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 19905 IP address blocks: 207.218.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fa:fe:1b:80:ad:e6:de:b8:4f:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=318e16d7-e6e3-492f-a44c-c424f41e3a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4d:e1:fe:29:2f:26:d4:36:ea:6b:a6:66:31: 58:ee:a9:0c:f0:77:6d:a3:88:a1:83:6c:4f:74:bf: 16:ae:49:ed:22:36:85:79:55:bf:11:27:87:71:10: 18:e5:7e:80:63:9d:02:e8:74:16:e5:bc:e7:37:0c: 20:68:10:f0:6f:fd:5d:d1:6a:67:8d:fc:04:42:3d: ea:68:61:73:13:fe:9b:4e:65:f4:29:2d:d7:f7:1a: f3:2d:c9:fa:22:a6:eb:dc:3f:b3:37:fd:e7:1a:b4: 0c:3e:cb:68:21:bc:bb:05:22:32:65:53:9f:81:eb: ac:f1:7a:9e:ba:41:73:7c:09:bd:ea:80:74:59:91: 18:a6:b5:95:7a:26:95:3f:03:29:9f:b2:2c:f9:f0: eb:d1:88:57:c3:de:a9:ea:ea:74:cf:f4:55:db:52: a3:87:48:be:aa:7c:4d:b8:0f:0c:4d:68:7e:28:6d: d7:3d:c8:6b:37:43:2e:ea:2e:0c:72:e0:5a:83:cb: 5d:86:75:1e:dc:b1:5d:1c:af:22:49:b4:9e:ef:7f: 9d:51:45:bc:d5:bc:19:73:52:84:41:e9:6d:29:8b: ce:d5:84:79:2e:fc:a6:51:61:67:da:49:a7:e6:43: e2:50:ab:e8:f4:25:26:0c:79:3b:4b:8c:3d:75:61: ad:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F7:99:B5:8D:FD:6B:7C:BA:0A:61:CF:49:74:10:C3:85:7A:56:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f31d056e-d8a1-373b-9fe3-9240ab23b5c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 207.218.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:58:9b:5d:8f:ad:00:76:60:2a:c4:32:c9:1c:82:4c:fb:3d: df:a5:66:6e:b2:fa:74:a5:53:56:e0:ce:af:b2:ad:f4:5e:88: 3b:d6:04:a8:a1:4a:e9:ca:6d:7c:51:10:e7:5d:d4:fd:6a:42: 9e:6f:0d:d6:d0:a4:80:c5:e9:de:6d:b2:d7:64:cb:3e:14:0d: b5:55:a8:3c:b9:a5:5c:76:25:ff:18:04:ad:ad:91:96:f5:6b: b9:ce:66:3e:2c:94:75:e4:b1:75:d5:df:95:39:55:9d:b4:bf: b8:71:0c:d0:4e:75:1c:1d:79:cb:19:a4:43:a0:18:a4:69:cd: 2f:1e:97:42:db:c5:59:b8:a3:e8:4d:57:a6:d5:af:0b:15:45: 4c:74:98:16:63:ae:7a:34:c9:37:75:f6:d1:41:93:99:d4:3e: 07:ec:a4:4d:e3:9d:1d:9d:63:82:c3:2a:4c:99:02:3a:44:68: aa:2a:86:63:32:2b:2d:46:62:f8:4e:15:6e:1c:86:41:a3:e6: f1:5a:0b:69:8e:3b:10:0e:cc:2f:1f:d3:de:96:52:f3:1f:8d: 63:f2:0d:6d:cb:fe:c4:5b:64:ca:6e:de:37:57:0e:0a:12:41: ca:ee:42:08:e9:81:14:68:84:be:ab:a6:32:8b:ba:bb:40:b7: 58:5b:dc:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+v4bgK3m3rhProAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk MzE4ZTE2ZDctZTZlMy00OTJmLWE0NGMtYzQyNGY0MWUzYTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk3h/ikvJtQ26mumZjFY7qkM8Hdto4ihg2xP dL8WrkntIjaFeVW/ESeHcRAY5X6AY50C6HQW5bznNwwgaBDwb/1d0WpnjfwEQj3q aGFzE/6bTmX0KS3X9xrzLcn6Iqbr3D+zN/3nGrQMPstoIby7BSIyZVOfgeus8Xqe ukFzfAm96oB0WZEYprWVeiaVPwMpn7Is+fDr0YhXw96p6up0z/RV21Kjh0i+qnxN uA8MTWh+KG3XPchrN0Mu6i4McuBag8tdhnUe3LFdHK8iSbSe73+dUUW81bwZc1KE QeltKYvO1YR5LvymUWFn2kmn5kPiUKvo9CUmDHk7S4w9dWGtAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEj3mbWN/Wt8ugphz0l0EMOFelZEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZjMxZDA1NmUtZDhhMS0z NzNiLTlmZTMtOTI0MGFiMjNiNWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz9qaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5Ym12PrQB2YCrEMskcgkz7Pd+lZm6y+nSlU1bgzq+yrfReiDvWBKih SunKbXxREOdd1P1qQp5vDdbQpIDF6d5tstdkyz4UDbVVqDy5pVx2Jf8YBK2tkZb1 a7nOZj4slHXksXXV35U5VZ20v7hxDNBOdRwdecsZpEOgGKRpzS8el0LbxVm4o+hN V6bVrwsVRUx0mBZjrno0yTd19tFBk5nUPgfspE3jnR2dY4LDKkyZAjpEaKoqhmMy Ky1GYvhOFW4chkGj5vFaC2mOOxAOzC8f096WUvMfjWPyDW3L/sRbZMpu3jdXDgoS QcruQgjpgRRohL6rpjKLurtAt1hb3Cc= -----END CERTIFICATE-----Generated at Wed May 13 14:05:18 2026 by rpki-client