$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2dc38d89-4e2b-32ab-94d9-e7d405861259.roa File: 2dc38d89-4e2b-32ab-94d9-e7d405861259.roa (raw, json) Hash identifier: XeAANjr8dxBv5u09sIHQlpbbhjDrPRMxgK611DW7rHY= Subject key identifier: EF:EA:3B:36:89:C7:BE:EE:72:7C:88:96:6A:97:C6:89:AF:40:24:25 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584CEFF2399860C6A444BA6AB300 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2dc38d89-4e2b-32ab-94d9-e7d405861259.roa Signing time: Sat 21 Feb 2026 14:00:41 +0000 ROA not before: Sat 21 Feb 2026 14:00:41 +0000 ROA not after: Fri 22 May 2026 13:00:41 +0000 asID: 25871 IP address blocks: 8.42.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ef:f2:39:98:60:c6:a4:44:ba:6a:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Feb 21 14:00:41 2026 GMT Not After : May 22 13:00:41 2026 GMT Subject: CN=b42e2415-03a5-4129-89d4-26d13a1c49c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9b:97:1b:07:25:ba:62:57:4b:e5:41:07:54: 63:a8:d2:99:38:ba:52:36:d9:5b:b4:b3:87:20:6e: 73:4d:bc:d3:e3:b2:e9:bf:eb:58:c3:0a:92:92:c5: 4a:e2:30:ac:80:be:20:ea:8a:5d:d1:5a:79:8d:fd: 2d:e3:6b:7e:51:6b:ce:b7:f7:6e:e0:52:18:a2:6e: db:7b:a3:01:fe:22:a1:dd:61:ed:b8:76:8a:fa:bb: 3b:8b:39:18:b3:9e:3d:ae:3d:f0:9f:89:b9:31:b8: a0:9d:d7:85:eb:91:15:3c:de:f0:1b:95:36:14:19: d4:47:75:4a:4d:4f:06:8e:6a:48:d2:5f:02:ed:2e: b8:06:7a:91:78:8d:1b:08:5c:e5:b1:e3:27:22:f1: 02:e3:a2:7f:fa:25:28:11:49:de:77:34:3e:b3:6c: 1b:d7:45:5c:83:59:77:b0:72:e7:b7:57:cc:33:80: 33:ad:53:e8:81:eb:b8:89:df:f0:ca:97:fb:75:ef: f8:bc:b1:5c:32:58:3f:f1:a3:e6:29:5e:92:0b:77: 77:51:db:cf:92:b5:20:0e:08:1e:2e:09:47:0d:bb: a9:68:bd:ae:5b:29:26:31:14:03:5d:2c:40:af:f5: cb:ef:04:1d:b6:60:45:e6:cd:54:28:d5:d7:97:4f: 52:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:EA:3B:36:89:C7:BE:EE:72:7C:88:96:6A:97:C6:89:AF:40:24:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2dc38d89-4e2b-32ab-94d9-e7d405861259.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.42.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:9d:c0:a3:d1:07:67:ca:1d:ef:09:36:9d:fd:00:e1:5f:aa: 59:7d:59:df:71:f7:12:8d:60:d8:83:cd:4c:2b:c3:be:75:a9: 16:09:d6:b3:e6:30:b5:43:b1:62:32:e9:32:e6:04:35:5d:e4: 12:89:dc:13:dc:51:1d:63:e8:67:1f:53:e7:0e:16:2d:45:68: eb:b2:57:ea:f5:bf:68:1f:07:a6:bd:9f:eb:67:f4:51:f1:08: 13:6e:b1:bc:c3:cf:c6:99:31:93:c3:50:d9:77:b7:43:67:82: 02:fc:20:e4:40:a3:4d:29:9b:50:19:2a:b7:59:68:36:d9:69: 72:72:c2:e1:72:42:a0:ef:26:79:c0:16:7f:16:05:3c:65:1c: 96:2c:19:8c:30:8f:04:6e:e8:f9:14:7f:6a:46:bf:34:cf:ba: 66:9c:a2:5a:8e:29:41:4e:3e:68:7d:c5:f3:f7:76:d5:4a:2f: 0e:bb:d4:e0:e8:e5:8b:91:54:09:f9:48:38:c6:aa:bd:a9:56: f7:ae:cf:37:6e:5b:1c:79:f1:e6:0a:5e:0d:ce:d3:23:97:c9: 3a:ce:96:f5:f1:d1:81:0d:8a:c4:73:1b:11:df:d3:c7:a0:8f: 31:51:66:0a:37:68:21:8d:89:e5:65:74:7f:83:22:f2:b3:d7: 01:15:e7:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzv8jmYYMakRLpqswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk YjQyZTI0MTUtMDNhNS00MTI5LTg5ZDQtMjZkMTNhMWM0OWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopuXGwclumJXS+VBB1RjqNKZOLpSNtlbtLOH IG5zTbzT47Lpv+tYwwqSksVK4jCsgL4g6opd0Vp5jf0t42t+UWvOt/du4FIYom7b e6MB/iKh3WHtuHaK+rs7izkYs549rj3wn4m5MbigndeF65EVPN7wG5U2FBnUR3VK TU8GjmpI0l8C7S64BnqReI0bCFzlseMnIvEC46J/+iUoEUnedzQ+s2wb10Vcg1l3 sHLnt1fMM4AzrVPogeu4id/wypf7de/4vLFcMlg/8aPmKV6SC3d3UdvPkrUgDgge LglHDbupaL2uWykmMRQDXSxAr/XL7wQdtmBF5s1UKNXXl09SfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/qOzaJx77ucnyIlmqXxomvQCQlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMmRjMzhkODktNGUyYi0z MmFiLTk0ZDktZTdkNDA1ODYxMjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACCoVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFudwKPRB2fKHe8JNp39AOFfqll9Wd9x9xKNYNiDzUwrw751qRYJ1rPm MLVDsWIy6TLmBDVd5BKJ3BPcUR1j6GcfU+cOFi1FaOuyV+r1v2gfB6a9n+tn9FHx CBNusbzDz8aZMZPDUNl3t0NnggL8IORAo00pm1AZKrdZaDbZaXJywuFyQqDvJnnA Fn8WBTxlHJYsGYwwjwRu6PkUf2pGvzTPumacolqOKUFOPmh9xfP3dtVKLw671ODo 5YuRVAn5SDjGqr2pVveuzzduWxx58eYKXg3O0yOXyTrOlvXx0YENisRzGxHf08eg jzFRZgo3aCGNieVldH+DIvKz1wEV5x0= -----END CERTIFICATE-----Generated at Mon Mar 2 18:33:31 2026 by rpki-client