$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/09b08d25-ab61-3729-8875-d835cf3edfda.roa File: 09b08d25-ab61-3729-8875-d835cf3edfda.roa (raw, json) Hash identifier: d59Z/1lBE7XUrF5D0r7ZrWrYg5jSYi5scPP+CZndV4M= Subject key identifier: 87:AD:4E:CE:62:23:21:09:AA:8A:0B:EE:1A:43:86:E5:F1:CA:A6:28 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584CFF4CD308EBA670A3C31BDBA0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/09b08d25-ab61-3729-8875-d835cf3edfda.roa Signing time: Fri 27 Feb 2026 02:00:31 +0000 ROA not before: Fri 27 Feb 2026 02:00:31 +0000 ROA not after: Thu 28 May 2026 01:00:31 +0000 asID: 54514 IP address blocks: 8.15.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ff:4c:d3:08:eb:a6:70:a3:c3:1b:db:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Feb 27 02:00:31 2026 GMT Not After : May 28 01:00:31 2026 GMT Subject: CN=35ce886a-ad71-4eb6-bdb0-e78a4a5aff07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c8:50:86:ef:58:49:93:b7:d7:65:4a:16:8f: 65:d7:01:32:33:76:f8:8b:af:d1:a5:76:d7:4d:21: c0:d3:3c:1b:45:48:59:a2:2f:24:c3:f6:7c:9f:07: ce:97:8f:07:cb:13:c7:70:90:94:1b:c8:b8:3d:f2: 9a:53:02:c1:7b:93:2e:de:a3:9e:54:1f:0b:67:08: 59:28:cd:75:75:19:f4:67:79:a5:d6:00:9d:33:83: 88:8d:ab:48:00:46:ac:88:41:9e:0a:bf:3e:db:cc: cf:26:38:ec:12:66:8f:36:60:a5:cf:5c:ab:03:cc: a1:85:10:eb:c3:8e:f6:06:6f:86:02:d8:6d:ff:3d: 0b:10:30:99:e1:38:08:da:9f:96:45:8b:9f:2f:94: 95:7d:60:46:d4:74:eb:a5:45:e6:15:c3:c1:b9:b5: da:bf:fe:ad:aa:5c:5d:d4:b5:16:33:bf:ac:fd:82: 9e:42:9e:45:83:d4:50:ba:23:86:ab:bb:58:ff:a8: 8b:f2:4c:6a:31:51:19:db:4d:4e:d3:a5:3f:54:b0: f2:0b:8a:e9:05:a5:0d:1d:da:04:59:55:b8:4a:f8: 04:92:0e:7c:2e:04:4c:d1:5c:58:7d:24:d4:7f:ae: 5c:3b:2c:c3:bc:99:be:20:ff:9a:07:37:2e:91:6a: 21:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:AD:4E:CE:62:23:21:09:AA:8A:0B:EE:1A:43:86:E5:F1:CA:A6:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/09b08d25-ab61-3729-8875-d835cf3edfda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.15.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:3a:e6:51:a6:6b:0a:3b:b0:14:30:62:b5:f0:cd:0b:23:22: db:fb:a0:a6:89:f9:2a:de:85:80:86:af:af:44:93:e4:d5:cc: 2b:8c:ef:a6:21:05:37:d3:7e:61:36:57:80:17:d1:e8:a8:c7: e1:26:64:e9:cb:db:c0:c1:55:95:c8:49:ee:60:da:e1:26:b5: 28:cb:49:7c:7e:f1:e5:aa:41:20:f8:50:54:47:66:72:31:1c: 34:67:e8:9f:64:18:04:3e:69:4f:b8:b7:71:ef:63:9a:7e:57: df:6a:4b:ef:20:91:d4:a8:19:71:13:fd:6c:69:51:85:c9:13: 3f:af:50:a4:04:e8:93:bd:70:dc:3d:5d:31:d0:43:3c:c8:c4: fb:5b:86:f0:6a:26:ee:21:c6:3f:11:21:8f:46:b1:33:49:38: ee:fe:9c:f8:6a:93:1b:9c:33:5b:2b:1d:ff:b9:22:0a:44:c4: e5:9d:9b:d9:ef:b8:52:75:3e:97:5f:db:63:dc:6e:86:44:cf: f5:0c:da:7e:9c:4b:c7:d6:82:d3:6f:8a:1b:c0:92:f9:74:44: e5:8a:b3:9d:7d:59:7e:71:d3:d6:c1:cb:33:07:06:f1:fc:d3: bc:b8:13:2a:83:03:27:13:8a:e9:25:0e:64:2e:40:e6:10:9d: 1f:26:4c:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz/TNMI66Zwo8Mb26AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDIyNzAyMDAzMVoXDTI2MDUyODAxMDAzMVowLzEtMCsGA1UEAxMk MzVjZTg4NmEtYWQ3MS00ZWI2LWJkYjAtZTc4YTRhNWFmZjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8hQhu9YSZO312VKFo9l1wEyM3b4i6/RpXbX TSHA0zwbRUhZoi8kw/Z8nwfOl48HyxPHcJCUG8i4PfKaUwLBe5Mu3qOeVB8LZwhZ KM11dRn0Z3ml1gCdM4OIjatIAEasiEGeCr8+28zPJjjsEmaPNmClz1yrA8yhhRDr w472Bm+GAtht/z0LEDCZ4TgI2p+WRYufL5SVfWBG1HTrpUXmFcPBubXav/6tqlxd 1LUWM7+s/YKeQp5Fg9RQuiOGq7tY/6iL8kxqMVEZ201O06U/VLDyC4rpBaUNHdoE WVW4SvgEkg58LgRM0VxYfSTUf65cOyzDvJm+IP+aBzcukWohfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIetTs5iIyEJqooL7hpDhuXxyqYoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMDliMDhkMjUtYWI2MS0z NzI5LTg4NzUtZDgzNWNmM2VkZmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACA8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIo65lGmawo7sBQwYrXwzQsjItv7oKaJ+SrehYCGr69Ek+TVzCuM76Yh BTfTfmE2V4AX0eiox+EmZOnL28DBVZXISe5g2uEmtSjLSXx+8eWqQSD4UFRHZnIx HDRn6J9kGAQ+aU+4t3HvY5p+V99qS+8gkdSoGXET/WxpUYXJEz+vUKQE6JO9cNw9 XTHQQzzIxPtbhvBqJu4hxj8RIY9GsTNJOO7+nPhqkxucM1srHf+5IgpExOWdm9nv uFJ1Ppdf22PcboZEz/UM2n6cS8fWgtNvihvAkvl0ROWKs519WX5x09bByzMHBvH8 07y4EyqDAycTiuklDmQuQOYQnR8mTIQ= -----END CERTIFICATE-----Generated at Mon Mar 2 16:47:52 2026 by rpki-client