$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e/bb553ce9-58e8-35fa-9f33-0e83f284e60a.roa File: bb553ce9-58e8-35fa-9f33-0e83f284e60a.roa (raw, json) Hash identifier: sqj/9nv8k1yjj+MToqH9jPCc0Up+R5oU7eCMYzj8W/E= Subject key identifier: 85:66:C1:1C:1F:74:C3:CF:F3:9C:89:23:E5:77:01:48:CA:EC:38:F2 Certificate issuer: /CN=917f6233-a0b4-4398-980d-f443910c2d2e Certificate serial: 010D0C9F4328584D2A74D73A0AB6CF333114BC80 Authority key identifier: 0D:5F:05:D2:AF:C1:9E:BC:96:90:B6:FB:6A:DF:B1:9C:13:53:29:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e/bb553ce9-58e8-35fa-9f33-0e83f284e60a.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 979 IP address blocks: 23.144.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e/917f6233-a0b4-4398-980d-f443910c2d2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e/917f6233-a0b4-4398-980d-f443910c2d2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:d7:3a:0a:b6:cf:33:31:14:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917f6233-a0b4-4398-980d-f443910c2d2e Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=5f8cb027-d5f3-4f67-87cd-b391dfa3dba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5f:c5:5a:d0:41:be:b1:44:2f:56:5a:78:ed: df:08:f9:89:3b:c8:93:ef:69:53:14:02:eb:ce:a2: 3e:70:1d:d5:90:e5:59:db:50:34:16:c3:34:cd:fc: 6d:21:23:b5:01:26:e3:87:dd:ad:25:45:a3:96:18: 1f:4a:96:6f:a6:52:06:89:62:ef:6d:52:d9:4d:77: 88:73:f4:db:47:ba:79:bf:f5:05:fd:c3:8f:84:94: 28:d1:aa:15:98:d7:d8:15:de:57:ca:e9:50:64:d0: bd:3a:73:99:1f:4c:d0:9e:41:47:f2:e5:f5:ed:50: 33:b7:0f:0f:11:7d:5b:c1:ce:3b:64:d2:03:ef:12: 47:c7:7f:bb:fc:31:6f:c4:93:83:db:c7:4e:4a:4d: 3d:9f:17:a2:85:72:db:8f:a7:54:4d:d6:9d:6f:15: ce:05:41:39:f5:46:c6:1c:cc:ed:91:4d:86:ce:52: b3:0d:9f:fa:c0:8e:d9:de:be:0b:a1:e9:45:28:9c: 01:ce:dd:04:46:fe:72:e6:b8:8f:3a:5a:bb:05:8a: e8:66:25:51:98:26:fe:82:29:e4:c1:98:c9:6b:6a: 37:59:c3:37:14:36:d6:95:8d:b8:86:04:83:3c:f9: 34:7c:43:79:5b:ed:3a:ca:5c:76:e9:ba:32:b0:20: 29:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:66:C1:1C:1F:74:C3:CF:F3:9C:89:23:E5:77:01:48:CA:EC:38:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e/bb553ce9-58e8-35fa-9f33-0e83f284e60a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e/917f6233-a0b4-4398-980d-f443910c2d2e.crl X509v3 Authority Key Identifier: keyid:0D:5F:05:D2:AF:C1:9E:BC:96:90:B6:FB:6A:DF:B1:9C:13:53:29:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e.cer sbgp-ipAddrBlock: critical IPv4: 23.144.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:89:78:ce:a6:cd:ce:b0:99:5f:67:b6:01:e4:ee:13:f4:2b: fd:31:64:a8:9f:6b:ca:df:f7:8d:53:9a:8c:59:4d:b6:ce:70: ab:d0:0d:95:8b:aa:f2:64:51:1e:49:90:80:c2:63:5e:8f:ac: cf:ff:0a:a5:f9:28:e2:15:7f:b4:91:0a:71:1d:65:46:aa:d7: ef:b7:2a:ec:8c:2d:de:9d:a4:9f:00:c5:25:db:cd:99:ac:55: 5d:a3:9f:a8:53:62:58:ed:1c:c8:3d:7d:df:a1:94:02:be:2b: a7:7b:25:bd:a9:ec:a5:85:16:c4:bc:b4:b7:4e:da:f2:50:0a: 0f:3a:c5:67:9e:14:4f:11:84:d6:b1:aa:41:19:ff:fd:45:7b: 80:cd:ed:fc:76:d1:11:32:0d:da:68:45:a5:d1:80:b0:a8:a7: 76:41:ff:f3:e3:f7:25:2d:58:2b:36:a8:9b:9b:25:9a:80:dd: cd:04:55:e8:65:21:f1:27:00:18:f8:e0:cd:c2:6b:db:76:b9: ba:fa:56:f9:12:7b:69:30:d9:16:46:44:5a:0e:b5:db:2f:2a: 07:6b:c2:e6:0c:4f:23:68:46:5d:32:ef:0b:2d:93:66:4c:bd: 0d:b4:43:c5:66:b6:52:4c:c3:1b:18:6a:dd:17:70:34:e3:aa: f3:37:ed:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdNc6CrbPMzEUvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE3ZjYyMzMtYTBiNC00Mzk4LTk4MGQtZjQ0MzkxMGMy ZDJlMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk NWY4Y2IwMjctZDVmMy00ZjY3LTg3Y2QtYjM5MWRmYTNkYmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiV/FWtBBvrFEL1ZaeO3fCPmJO8iT72lTFALr zqI+cB3VkOVZ21A0FsM0zfxtISO1ASbjh92tJUWjlhgfSpZvplIGiWLvbVLZTXeI c/TbR7p5v/UF/cOPhJQo0aoVmNfYFd5XyulQZNC9OnOZH0zQnkFH8uX17VAztw8P EX1bwc47ZNID7xJHx3+7/DFvxJOD28dOSk09nxeihXLbj6dUTdadbxXOBUE59UbG HMztkU2GzlKzDZ/6wI7Z3r4LoelFKJwBzt0ERv5y5riPOlq7BYroZiVRmCb+gink wZjJa2o3WcM3FDbWlY24hgSDPPk0fEN5W+06ylx26boysCApGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVmwRwfdMPP85yJI+V3AUjK7DjyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85MTdm NjIzMy1hMGI0LTQzOTgtOTgwZC1mNDQzOTEwYzJkMmUvYmI1NTNjZTktNThlOC0z NWZhLTlmMzMtMGU4M2YyODRlNjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTE3ZjYyMzMtYTBiNC00Mzk4LTk4 MGQtZjQ0MzkxMGMyZDJlLzkxN2Y2MjMzLWEwYjQtNDM5OC05ODBkLWY0NDM5MTBj MmQyZS5jcmwwHwYDVR0jBBgwFoAUDV8F0q/BnryWkLb7at+xnBNTKcYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85MTdmNjIzMy1hMGI0LTQzOTgtOTgwZC1mNDQz OTEwYzJkMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5AEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+JeM6mzc6wmV9ntgHk7hP0K/0xZKifa8rf941TmoxZTbbOcKvQDZWL qvJkUR5JkIDCY16PrM//CqX5KOIVf7SRCnEdZUaq1++3KuyMLd6dpJ8AxSXbzZms VV2jn6hTYljtHMg9fd+hlAK+K6d7Jb2p7KWFFsS8tLdO2vJQCg86xWeeFE8RhNax qkEZ//1Fe4DN7fx20REyDdpoRaXRgLCop3ZB//Pj9yUtWCs2qJubJZqA3c0EVehl IfEnABj44M3Ca9t2ubr6VvkSe2kw2RZGRFoOtdsvKgdrwuYMTyNoRl0y7wstk2ZM vQ20Q8VmtlJMwxsYat0XcDTjqvM37SQ= -----END CERTIFICATE-----Generated at Thu Mar 26 17:10:35 2026 by rpki-client