$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/35c067f0-3efd-3363-93e0-a8537ed06e64.roa File: 35c067f0-3efd-3363-93e0-a8537ed06e64.roa (raw, json) Hash identifier: fTxG7xr/Eg2pNyAKOqGYZ09owitC4o4R1szcFaPlSsg= Subject key identifier: B2:92:ED:59:8F:26:AC:F9:9F:D5:44:B1:AD:89:F7:98:9B:E4:FD:33 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584CDF323FDC1FB2D2DCF32005E0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/35c067f0-3efd-3363-93e0-a8537ed06e64.roa Signing time: Sun 15 Feb 2026 14:00:41 +0000 ROA not before: Sun 15 Feb 2026 14:00:41 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 989 IP address blocks: 8.18.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:32:3f:dc:1f:b2:d2:dc:f3:20:05:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Feb 15 14:00:41 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=52d00f84-42cf-41a3-a0af-20581566a25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:71:a7:05:b4:e0:be:2a:6b:8e:ec:42:94:41: b3:cb:c2:d0:bf:82:ec:04:8d:a2:5f:a0:e8:d8:fb: 0e:13:47:f7:67:52:48:45:4b:8e:92:4e:30:e1:74: d0:f0:40:ee:ff:08:92:f0:bf:a8:e5:f5:17:5d:f2: 19:20:44:ed:1f:56:d9:1c:79:55:c3:09:71:53:db: b0:f6:a6:bc:40:88:3a:d8:22:fa:eb:9d:80:a5:41: e4:65:3d:88:cf:30:a7:cb:85:fd:ed:f5:bf:8d:3e: 87:f0:31:65:32:9a:47:95:db:1a:84:d6:39:26:dd: 16:12:a5:6b:2e:65:e4:8a:14:f9:db:38:6f:df:84: 9a:a9:57:a4:37:b0:1e:cd:90:7d:b4:3d:74:be:27: 04:a8:ee:39:11:3a:02:98:cc:bb:b3:b2:25:04:4f: 8b:61:63:30:e0:11:a9:9b:b7:7f:33:8e:7b:0b:5d: 60:89:04:c1:44:59:5f:c6:fc:7f:55:e0:47:43:46: 71:4f:9c:d2:28:e0:03:e5:2e:9b:e1:4c:b7:19:1e: e6:b8:9c:d0:4d:f0:bc:c5:0c:b6:5b:36:96:03:2d: da:cc:67:36:e9:59:f7:16:91:66:72:08:c6:a1:c3: 86:12:bb:a1:56:7e:16:45:c7:bb:fd:a8:e2:3a:08: 3d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:92:ED:59:8F:26:AC:F9:9F:D5:44:B1:AD:89:F7:98:9B:E4:FD:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/35c067f0-3efd-3363-93e0-a8537ed06e64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.18.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:ee:91:f9:41:77:4b:f2:98:c9:f9:39:6d:20:31:1f:87:eb: fa:16:6a:24:7f:e8:0a:2e:d5:76:ef:3e:9f:bd:e2:64:bc:f4: 5f:39:92:ee:d0:5b:d8:d6:ff:96:eb:c9:66:21:91:85:51:72: cf:97:4f:fa:aa:1f:4e:9d:35:61:64:30:4d:13:dc:fe:d4:e1: b7:7d:2a:b2:65:21:03:b9:13:0a:d6:fb:44:b5:7d:dc:2a:82: 6c:b2:24:5d:d4:31:5c:60:d2:b0:aa:bf:da:73:46:b0:64:b2: d5:f6:6a:48:e1:be:fc:df:90:38:42:ec:0b:30:9f:a7:fa:3b: bf:6f:3c:71:90:2f:fc:60:d0:45:ad:b3:ad:ca:df:f0:84:ff: ec:d0:6c:12:89:09:8e:12:8b:7f:85:70:d4:76:62:c5:6f:3f: a8:7b:b3:18:03:7b:03:76:9d:89:8d:b1:5c:3a:a3:3f:34:c1: 25:ae:59:a0:76:f3:59:3e:97:59:42:3f:de:48:ab:ed:7d:2a: 42:ab:5e:96:c2:16:3d:89:e6:16:4a:61:71:54:b1:d4:03:6c: a3:c6:55:a0:00:50:f9:83:cf:1b:33:19:f4:91:f1:92:03:21: 00:71:b0:b3:89:92:08:35:e0:51:68:13:fd:d5:51:e1:12:21: a2:8c:1b:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMj/cH7LS3PMgBeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk NTJkMDBmODQtNDJjZi00MWEzLWEwYWYtMjA1ODE1NjZhMjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXGnBbTgviprjuxClEGzy8LQv4LsBI2iX6Do 2PsOE0f3Z1JIRUuOkk4w4XTQ8EDu/wiS8L+o5fUXXfIZIETtH1bZHHlVwwlxU9uw 9qa8QIg62CL6652ApUHkZT2IzzCny4X97fW/jT6H8DFlMppHldsahNY5Jt0WEqVr LmXkihT52zhv34SaqVekN7AezZB9tD10vicEqO45EToCmMy7s7IlBE+LYWMw4BGp m7d/M457C11giQTBRFlfxvx/VeBHQ0ZxT5zSKOAD5S6b4Uy3GR7muJzQTfC8xQy2 WzaWAy3azGc26Vn3FpFmcgjGocOGEruhVn4WRce7/ajiOgg9RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKS7VmPJqz5n9VEsa2J95ib5P0zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMzVjMDY3ZjAtM2VmZC0z MzYzLTkzZTAtYTg1MzdlZDA2ZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBCBJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjukflBd0vymMn5OW0gMR+H6/oWaiR/6Aou1XbvPp+94mS89F85ku7Q W9jW/5bryWYhkYVRcs+XT/qqH06dNWFkME0T3P7U4bd9KrJlIQO5EwrW+0S1fdwq gmyyJF3UMVxg0rCqv9pzRrBkstX2akjhvvzfkDhC7Aswn6f6O79vPHGQL/xg0EWt s63K3/CE/+zQbBKJCY4Si3+FcNR2YsVvP6h7sxgDewN2nYmNsVw6oz80wSWuWaB2 81k+l1lCP95Iq+19KkKrXpbCFj2J5hZKYXFUsdQDbKPGVaAAUPmDzxszGfSR8ZID IQBxsLOJkgg14FFoE/3VUeESIaKMG/A= -----END CERTIFICATE-----Generated at Mon Mar 2 16:47:43 2026 by rpki-client