$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/09be98d9-8271-3ee7-8888-5c6d680ed3ab.roa File: 09be98d9-8271-3ee7-8888-5c6d680ed3ab.roa (raw, json) Hash identifier: 7EpIONIgRE2qKM/nSY09FpMGzhlJoNnWLH+1RygiICY= Subject key identifier: CD:58:A8:24:1C:2B:70:64:DE:E2:A6:2A:83:1C:A9:86:C8:57:B0:17 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584D7A051C16F771932A3252D900 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/09be98d9-8271-3ee7-8888-5c6d680ed3ab.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 20473 IP address blocks: 8.3.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:1c:16:f7:71:93:2a:32:52:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=8ca61228-8f4a-470b-a51b-7b1589f6ad28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8e:47:f5:20:12:68:38:98:e6:3c:a1:57:56: e7:a9:5b:d5:e9:c7:94:bc:fb:17:6e:ae:20:15:4a: 3d:4e:72:67:f8:57:da:3e:e7:3c:37:6d:fe:9e:8e: 04:79:58:65:c0:3f:22:63:8c:bf:fd:02:da:d5:91: 03:a4:cb:c8:72:4f:33:a8:8f:01:a5:9c:6d:af:5c: bc:cc:da:69:d0:05:25:a1:53:8b:e3:89:d2:87:1d: 8a:2d:ed:a9:d1:01:70:cf:83:3c:cc:a0:43:63:7b: d9:36:24:80:4a:77:9e:51:c5:ef:6c:52:ac:9d:84: d1:c5:9b:c8:5c:1e:a5:dc:2f:4a:78:f4:9b:84:bc: 57:c8:36:e0:ab:04:95:60:ca:a3:37:fd:a9:c2:82: ba:91:0f:81:11:b9:27:aa:b0:2c:62:5e:1e:22:8c: e2:a8:5f:09:ee:e3:12:2f:ca:cc:c7:8f:dc:4b:15: e0:23:5b:49:83:ba:f8:13:89:90:5b:a8:58:e3:cc: 45:f5:54:bf:09:2b:d6:0f:f4:45:a1:79:ea:1a:f7: 4a:12:3f:a5:86:60:6a:c3:a1:68:3a:82:0e:2f:ea: 78:73:b9:e0:64:5a:df:91:02:51:6e:9c:bd:a7:16: da:a5:e7:1b:ad:11:30:67:c5:b9:eb:76:14:8c:61: 8c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:58:A8:24:1C:2B:70:64:DE:E2:A6:2A:83:1C:A9:86:C8:57:B0:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/09be98d9-8271-3ee7-8888-5c6d680ed3ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.3.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:26:00:a5:15:dd:bc:c9:63:c4:61:a8:7c:33:9a:ac:70:8f: 12:bf:de:e9:87:48:bb:7d:90:4a:2d:f1:18:7f:d3:fb:f4:84: b4:67:77:e5:71:33:75:ea:2b:e2:ee:16:e9:d2:75:71:c8:4c: a0:40:51:fc:99:50:fb:df:e5:74:12:95:ca:e1:e3:19:82:d2: b9:00:d5:38:c5:8a:ea:bc:b2:83:02:1a:79:11:a5:dd:3d:54: 5e:64:b2:23:3d:96:55:66:a7:16:e7:8f:e4:5c:c1:dd:9b:4b: dd:95:fd:58:59:4b:ce:55:dc:1b:67:07:9d:37:73:38:2a:7a: 03:d7:da:af:d7:11:76:cc:61:51:9f:bb:d5:62:c9:9d:6a:56: d0:b0:d5:91:52:43:eb:25:db:23:f7:8d:42:8e:f3:bd:34:57: 1e:f4:8d:b1:03:f5:50:86:fb:b2:26:94:e9:ae:59:c4:96:55: 83:0c:9c:0e:1c:f4:a3:d0:96:df:c4:02:b5:46:3a:75:aa:60: 60:d0:b3:4c:4c:9c:d4:23:3a:59:6d:ff:b0:70:1a:46:27:4e: 8f:c4:ae:83:86:6c:e7:e1:94:fd:35:3d:fe:da:8b:06:8e:6f: de:f3:c2:a7:3b:3f:34:88:19:bc:30:f9:74:bf:78:6a:6f:7d: d3:dd:f2:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BRwW93GTKjJS2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk OGNhNjEyMjgtOGY0YS00NzBiLWE1MWItN2IxNTg5ZjZhZDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo5H9SASaDiY5jyhV1bnqVvV6ceUvPsXbq4g FUo9TnJn+FfaPuc8N23+no4EeVhlwD8iY4y//QLa1ZEDpMvIck8zqI8BpZxtr1y8 zNpp0AUloVOL44nShx2KLe2p0QFwz4M8zKBDY3vZNiSASneeUcXvbFKsnYTRxZvI XB6l3C9KePSbhLxXyDbgqwSVYMqjN/2pwoK6kQ+BEbknqrAsYl4eIoziqF8J7uMS L8rMx4/cSxXgI1tJg7r4E4mQW6hY48xF9VS/CSvWD/RFoXnqGvdKEj+lhmBqw6Fo OoIOL+p4c7ngZFrfkQJRbpy9pxbapecbrREwZ8W563YUjGGMdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1YqCQcK3Bk3uKmKoMcqYbIV7AXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMDliZTk4ZDktODI3MS0z ZWU3LTg4ODgtNWM2ZDY4MGVkM2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAMdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4mAKUV3bzJY8RhqHwzmqxwjxK/3umHSLt9kEot8Rh/0/v0hLRnd+Vx M3XqK+LuFunSdXHITKBAUfyZUPvf5XQSlcrh4xmC0rkA1TjFiuq8soMCGnkRpd09 VF5ksiM9llVmpxbnj+Rcwd2bS92V/VhZS85V3BtnB503czgqegPX2q/XEXbMYVGf u9ViyZ1qVtCw1ZFSQ+sl2yP3jUKO8700Vx70jbED9VCG+7ImlOmuWcSWVYMMnA4c 9KPQlt/EArVGOnWqYGDQs0xMnNQjOllt/7BwGkYnTo/EroOGbOfhlP01Pf7aiwaO b97zwqc7PzSIGbww+XS/eGpvfdPd8s8= -----END CERTIFICATE-----Generated at Fri Apr 17 01:59:35 2026 by rpki-client