$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3393df71-bd4b-3c0f-9280-c17f1f2fd838.roa File: 3393df71-bd4b-3c0f-9280-c17f1f2fd838.roa (raw, json) Hash identifier: t9ECmVXYbWtDu8l5jxMAN0bQCpo3xahd5ZaKJ5Gceto= Subject key identifier: C0:BC:95:17:AB:96:26:77:DB:DC:2D:83:BE:ED:BA:95:17:04:2D:55 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584BA39D2A327CD2957B93D16080 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3393df71-bd4b-3c0f-9280-c17f1f2fd838.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 13781 IP address blocks: 8.8.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:2a:32:7c:d2:95:7b:93:d1:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=b473279a-e15c-482e-9ed5-b67e8203813f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7b:fa:44:3c:ac:1c:36:3e:6a:42:db:bf:66: e7:3b:4f:62:0a:69:ce:cf:65:82:5f:bc:80:74:da: c8:29:f9:7f:04:1d:a4:92:7c:89:44:af:57:d1:12: 82:a5:62:dd:64:f5:95:be:6d:8a:e2:cd:40:51:b0: 56:57:b1:88:2f:4f:83:d7:29:76:16:e4:1a:ae:4e: 48:13:00:06:21:8f:eb:75:9e:b8:ab:b6:78:57:48: c9:3c:ff:6c:3b:9a:e6:83:82:05:61:bf:12:20:3f: 40:66:05:7a:67:15:e6:5a:7d:95:92:44:c1:29:fa: 43:f5:c3:5b:db:eb:3f:00:36:30:bc:7b:e3:7c:dc: 64:07:8c:00:d1:bf:7f:dc:74:5a:a2:46:87:db:b9: 6e:51:81:ec:41:b4:07:96:88:7d:ae:59:22:14:8b: 4a:b5:be:bc:1a:46:65:17:d5:f2:b3:2a:cd:c7:09: ab:7c:93:ff:27:5f:e3:36:a4:8e:1c:0f:11:d2:5d: 71:a3:40:26:86:04:f2:8a:bf:85:1d:92:54:91:61: db:2a:74:80:e5:94:3e:a2:a2:dc:ed:b7:36:17:09: 5f:7c:eb:67:28:ee:a4:41:6f:30:7e:4c:43:08:ee: 50:e3:57:17:8b:6f:85:8b:d2:77:50:24:8c:bb:75: 4c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:BC:95:17:AB:96:26:77:DB:DC:2D:83:BE:ED:BA:95:17:04:2D:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3393df71-bd4b-3c0f-9280-c17f1f2fd838.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.8.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:06:c4:fa:78:af:ea:3d:e4:3f:3c:c6:9b:22:d2:46:5d:43: 7c:da:15:43:1f:c0:81:cc:01:87:86:e4:27:96:dc:4a:ab:05: 39:cc:1b:78:f8:db:51:c4:e5:1f:5b:3a:f3:0a:b1:a5:fc:db: c7:93:03:01:cb:65:30:7e:d8:5c:a2:e0:be:05:1b:bd:a2:59: 04:7b:62:bd:43:55:c2:fe:51:9b:e8:aa:31:b5:f6:ca:07:f3: e0:fb:7e:58:65:5a:4d:d7:86:6d:dd:f7:6f:50:ff:40:cb:54: 60:da:11:3f:ce:ad:cd:e5:0e:4e:41:38:a1:9b:06:66:6c:da: 00:d3:a4:30:b1:ec:54:9e:00:47:fe:d2:87:92:c2:2a:0a:59: 44:a1:b6:74:82:bd:f3:13:7d:7a:13:82:c2:c6:9f:1b:a0:c1: 40:29:2e:ab:51:77:3c:97:5b:f8:a7:2b:c3:e1:43:23:b1:be: d1:73:2e:49:c3:4c:e0:8c:85:4a:04:ae:e0:3c:c0:97:a9:9e: 93:4c:be:c6:3c:6b:f2:35:08:fa:55:aa:b5:83:96:5b:a6:99: a0:26:90:84:04:88:47:53:63:58:23:81:88:fb:c6:2f:41:da: 5c:a1:ad:96:83:14:73:5e:4d:7a:22:4f:52:db:2f:45:ed:2b: 6f:24:6d:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSoyfNKVe5PRYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YjQ3MzI3OWEtZTE1Yy00ODJlLTllZDUtYjY3ZTgyMDM4MTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43v6RDysHDY+akLbv2bnO09iCmnOz2WCX7yA dNrIKfl/BB2kknyJRK9X0RKCpWLdZPWVvm2K4s1AUbBWV7GIL0+D1yl2FuQark5I EwAGIY/rdZ64q7Z4V0jJPP9sO5rmg4IFYb8SID9AZgV6ZxXmWn2VkkTBKfpD9cNb 2+s/ADYwvHvjfNxkB4wA0b9/3HRaokaH27luUYHsQbQHloh9rlkiFItKtb68GkZl F9XysyrNxwmrfJP/J1/jNqSOHA8R0l1xo0AmhgTyir+FHZJUkWHbKnSA5ZQ+oqLc 7bc2FwlffOtnKO6kQW8wfkxDCO5Q41cXi2+Fi9J3UCSMu3VMzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMC8lRerliZ329wtg77tupUXBC1VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMzM5M2RmNzEtYmQ0Yi0z YzBmLTkyODAtYzE3ZjFmMmZkODM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCCAjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUGxPp4r+o95D88xpsi0kZdQ3zaFUMfwIHMAYeG5CeW3EqrBTnMG3j4 21HE5R9bOvMKsaX828eTAwHLZTB+2Fyi4L4FG72iWQR7Yr1DVcL+UZvoqjG19soH 8+D7flhlWk3Xhm3d929Q/0DLVGDaET/Orc3lDk5BOKGbBmZs2gDTpDCx7FSeAEf+ 0oeSwioKWUShtnSCvfMTfXoTgsLGnxugwUApLqtRdzyXW/inK8PhQyOxvtFzLknD TOCMhUoEruA8wJepnpNMvsY8a/I1CPpVqrWDllummaAmkIQEiEdTY1gjgYj7xi9B 2lyhrZaDFHNeTXoiT1LbL0XtK28kbbs= -----END CERTIFICATE-----Generated at Wed Nov 5 01:25:22 2025 by rpki-client