$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/32bad782-d59d-36d3-943d-cf1d16fc0bd3.roa File: 32bad782-d59d-36d3-943d-cf1d16fc0bd3.roa (raw, json) Hash identifier: flZG66tMwQoJpx70tFYzRvMmRXWQQNn3cJQoiupKtdI= Subject key identifier: C7:1B:4E:6C:90:03:E2:ED:F1:23:2F:F0:AB:F5:59:11:01:31:B4:E1 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584D7A051C484849B96DE51B1900 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/32bad782-d59d-36d3-943d-cf1d16fc0bd3.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 20473 IP address blocks: 8.9.30.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:1c:48:48:49:b9:6d:e5:1b:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=479f56ca-9257-4804-ad25-1fd8c9e1e6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4e:0a:b6:48:aa:04:ee:d1:9c:88:7a:b3:b8: 99:29:46:7d:d4:03:20:88:7b:d7:1e:8d:85:8b:b5: d6:8e:d0:d3:9c:04:1c:43:5e:af:e7:60:f7:42:b1: b1:39:e2:e6:a2:9b:6c:cc:28:7a:49:a2:a6:8a:a7: 82:5d:85:15:3a:92:a9:cd:72:54:d8:1e:2b:ca:c5: 00:ca:1e:cd:04:52:ab:7a:bd:77:6c:2e:68:98:b9: 64:14:1a:7e:08:6e:65:96:e5:c9:29:e4:09:0c:a1: c4:3c:4f:83:de:36:3f:64:0b:b1:23:7b:9d:20:15: 5f:29:55:18:bc:66:7f:cc:58:99:67:06:cc:b2:ee: 78:43:5d:ce:23:f5:1d:e0:86:ba:d9:cf:c2:70:89: 1f:28:7b:92:45:a5:e5:08:4f:05:d8:09:33:9b:22: ef:4d:99:30:0a:ab:c2:90:02:f6:b6:0d:4d:22:ef: 2a:ad:81:d0:dc:53:47:d6:63:a2:4f:3b:1d:6f:42: 69:37:b5:4c:f9:25:26:9d:64:cd:73:ee:9e:51:ba: e0:78:68:96:72:a3:00:77:ba:32:0a:30:48:51:04: 32:e6:ac:ba:10:02:73:35:2f:34:30:7e:7c:0c:37: cd:c9:e5:0e:48:22:7d:35:ca:fe:ae:25:10:b9:08: c7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:1B:4E:6C:90:03:E2:ED:F1:23:2F:F0:AB:F5:59:11:01:31:B4:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/32bad782-d59d-36d3-943d-cf1d16fc0bd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.9.30.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:63:8c:6e:25:d6:90:ec:8c:a1:93:88:ef:3d:29:86:2f:a6: 7f:32:d3:04:12:68:27:fe:f9:c2:00:6f:0e:91:d9:b8:f9:72: 0e:7a:6b:21:fa:e3:cd:ea:82:ec:ed:a5:c4:d9:1c:8e:f4:a5: 5f:a7:17:9f:26:fd:9b:02:1c:0f:b8:23:fd:63:1f:59:3b:bd: b9:be:5b:d3:6f:f2:0a:2b:37:9e:a7:15:c8:72:78:23:62:98: 3b:d4:54:44:08:08:95:0b:80:4d:91:27:04:09:58:9e:0b:19: 9f:88:e7:8f:2d:6c:14:ab:92:46:42:55:8b:ea:49:82:a5:a0: 65:58:09:d3:0d:8b:cd:cc:12:f1:16:37:07:ce:6f:be:38:d7: 03:00:ec:cd:84:5c:8f:bf:88:c6:2b:d2:a7:b7:40:5b:fd:1e: dd:71:52:30:8d:42:07:0e:53:a9:62:7b:48:44:a5:bf:fa:e3: a8:c5:86:00:8d:42:46:25:1d:dc:13:36:49:b8:05:49:68:5f: 46:ea:7c:30:ec:d2:92:b4:5d:71:1f:87:48:9f:17:58:0f:0a: 1e:50:5e:d7:9b:52:a5:a7:c4:1b:ee:82:e5:c6:b2:49:8f:5f: 80:e7:ab:01:34:b8:63:d6:6d:15:07:f6:2d:cc:0d:73:28:b5: 05:54:11:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BRxISEm5beUbGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk NDc5ZjU2Y2EtOTI1Ny00ODA0LWFkMjUtMWZkOGM5ZTFlNmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi04KtkiqBO7RnIh6s7iZKUZ91AMgiHvXHo2F i7XWjtDTnAQcQ16v52D3QrGxOeLmoptszCh6SaKmiqeCXYUVOpKpzXJU2B4rysUA yh7NBFKrer13bC5omLlkFBp+CG5lluXJKeQJDKHEPE+D3jY/ZAuxI3udIBVfKVUY vGZ/zFiZZwbMsu54Q13OI/Ud4Ia62c/CcIkfKHuSRaXlCE8F2AkzmyLvTZkwCqvC kAL2tg1NIu8qrYHQ3FNH1mOiTzsdb0JpN7VM+SUmnWTNc+6eUbrgeGiWcqMAd7oy CjBIUQQy5qy6EAJzNS80MH58DDfNyeUOSCJ9Ncr+riUQuQjHYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcbTmyQA+Lt8SMv8Kv1WREBMbThMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMzJiYWQ3ODItZDU5ZC0z NmQzLTk0M2QtY2YxZDE2ZmMwYmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBCAkeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNjjG4l1pDsjKGTiO89KYYvpn8y0wQSaCf++cIAbw6R2bj5cg56ayH6 483qguztpcTZHI70pV+nF58m/ZsCHA+4I/1jH1k7vbm+W9Nv8gorN56nFchyeCNi mDvUVEQICJULgE2RJwQJWJ4LGZ+I548tbBSrkkZCVYvqSYKloGVYCdMNi83MEvEW NwfOb7441wMA7M2EXI+/iMYr0qe3QFv9Ht1xUjCNQgcOU6lie0hEpb/646jFhgCN QkYlHdwTNkm4BUloX0bqfDDs0pK0XXEfh0ifF1gPCh5QXtebUqWnxBvuguXGskmP X4DnqwE0uGPWbRUH9i3MDXMotQVUEZU= -----END CERTIFICATE-----Generated at Fri Apr 17 18:38:26 2026 by rpki-client