$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/09b08d25-ab61-3729-8875-d835cf3edfda.roa File: 09b08d25-ab61-3729-8875-d835cf3edfda.roa (raw, json) Hash identifier: TN/yoRBQKSmdgrO3M0VVeGreMjNSWr0gQKxy83SmaS8= Subject key identifier: 5E:99:6F:89:85:D7:D5:50:DF:B3:1A:A8:62:FA:0A:BC:63:6A:46:25 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584EA78F1110CEEADB210DA13C00 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/09b08d25-ab61-3729-8875-d835cf3edfda.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 54514 IP address blocks: 8.15.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:11:10:ce:ea:db:21:0d:a1:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1e796a9b-0de8-419b-9177-4de06fcd5eec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:00:e9:d0:e2:36:d6:46:17:2e:0a:f9:d3:e4: ac:af:32:be:56:fe:f8:a1:67:a7:2d:43:cc:7b:1d: b6:bd:4b:78:fe:5d:49:3a:ed:bb:89:e7:7b:c1:ac: f8:b3:8c:f9:46:fa:08:47:ff:85:4b:47:d6:bc:9c: 91:6c:83:a4:01:6a:45:6d:72:5c:d5:bf:c4:0b:93: b1:ae:4f:b6:b2:24:ce:c6:93:12:b0:cc:df:e3:70: 7d:15:0e:68:87:1b:6e:38:37:1b:84:f6:f5:ce:62: 1e:30:29:e3:0b:84:b1:ad:ad:65:91:38:6e:0b:90: 9f:81:99:bf:91:3e:22:26:be:c5:ae:61:91:a7:f1: 56:7f:cb:ec:e0:a6:21:24:1f:d1:99:e0:5c:4d:bd: da:6e:8c:43:29:9e:74:4c:1d:67:7f:c2:0a:a8:80: 20:a7:d4:2e:40:fc:b3:64:ae:81:b6:80:48:15:b8: b1:44:ee:94:b1:f3:db:d7:60:9b:bc:a2:0d:2d:24: 90:40:f4:80:9f:0b:d6:9d:41:0e:24:75:40:43:19: c2:32:5f:ea:ad:49:f7:b6:3b:18:29:86:4e:d0:46: b1:4a:8e:ff:ae:7d:ef:44:ad:18:4c:0b:dd:91:74: b2:2e:53:ba:c4:92:d6:f6:4e:b0:11:d1:b7:99:d1: b8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:99:6F:89:85:D7:D5:50:DF:B3:1A:A8:62:FA:0A:BC:63:6A:46:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/09b08d25-ab61-3729-8875-d835cf3edfda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.15.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:63:42:22:8e:f0:54:fb:7c:3b:69:83:5a:f0:b5:b8:33:05: 8a:38:67:a0:64:b1:5a:0a:26:85:78:84:54:1d:05:4f:48:61: ee:df:f4:d4:25:97:7d:a5:1c:d0:ba:f1:de:78:68:64:e3:aa: 45:ed:0a:bf:77:f4:ba:04:8a:60:36:4d:b8:ae:d1:9c:3c:23: 46:0b:20:b2:78:87:31:6c:c3:3a:89:c5:6e:b1:5e:cf:80:4e: b8:ff:6d:62:96:73:bb:1f:09:09:7f:12:0e:f0:59:e4:9d:72: 05:3d:be:4c:f0:34:52:07:c9:b3:ef:46:9c:55:32:3b:e9:48: ce:d9:ef:bd:85:4b:25:46:c8:b5:b3:36:46:e5:33:db:de:1e: cd:ec:e8:fa:e0:04:97:ca:9f:40:6b:f7:f1:65:8b:a3:8c:5b: 0b:47:cc:fe:46:94:35:74:7b:fc:90:c1:a3:e9:ca:1e:ce:a7: ef:1c:c8:03:95:6a:51:a1:6a:23:cc:93:34:29:09:ab:8f:7c: 65:6e:1f:0a:11:c7:cd:1a:91:ae:f2:23:08:9c:ab:f6:d9:95: 37:0c:26:ea:6b:a7:30:b7:6f:fd:7d:9f:7b:53:91:61:e1:a0: 48:b3:05:00:01:11:a2:80:0c:8b:4b:7c:fa:9d:fe:5a:7a:48: af:09:54:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njxEQzurbIQ2hPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MWU3OTZhOWItMGRlOC00MTliLTkxNzctNGRlMDZmY2Q1ZWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwADp0OI21kYXLgr50+SsrzK+Vv74oWenLUPM ex22vUt4/l1JOu27ied7waz4s4z5RvoIR/+FS0fWvJyRbIOkAWpFbXJc1b/EC5Ox rk+2siTOxpMSsMzf43B9FQ5ohxtuODcbhPb1zmIeMCnjC4Sxra1lkThuC5CfgZm/ kT4iJr7FrmGRp/FWf8vs4KYhJB/RmeBcTb3aboxDKZ50TB1nf8IKqIAgp9QuQPyz ZK6BtoBIFbixRO6UsfPb12CbvKINLSSQQPSAnwvWnUEOJHVAQxnCMl/qrUn3tjsY KYZO0EaxSo7/rn3vRK0YTAvdkXSyLlO6xJLW9k6wEdG3mdG47wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6Zb4mF19VQ37MaqGL6CrxjakYlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMDliMDhkMjUtYWI2MS0z NzI5LTg4NzUtZDgzNWNmM2VkZmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACA8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALRjQiKO8FT7fDtpg1rwtbgzBYo4Z6BksVoKJoV4hFQdBU9IYe7f9NQl l32lHNC68d54aGTjqkXtCr939LoEimA2Tbiu0Zw8I0YLILJ4hzFswzqJxW6xXs+A Trj/bWKWc7sfCQl/Eg7wWeSdcgU9vkzwNFIHybPvRpxVMjvpSM7Z772FSyVGyLWz NkblM9veHs3s6PrgBJfKn0Br9/Fli6OMWwtHzP5GlDV0e/yQwaPpyh7Op+8cyAOV alGhaiPMkzQpCauPfGVuHwoRx80aka7yIwicq/bZlTcMJuprpzC3b/19n3tTkWHh oEizBQABEaKADItLfPqd/lp6SK8JVDE= -----END CERTIFICATE-----Generated at Wed Jul 29 06:14:10 2026 by rpki-client