$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3a6e0a4e-33eb-3382-bd82-fc8bf82cefe5.roa File: 3a6e0a4e-33eb-3382-bd82-fc8bf82cefe5.roa (raw, json) Hash identifier: qUXTvynqlhgIn8cMVyE3aCy9wMT9RVCFnvaTNrhsoe8= Subject key identifier: 15:FD:E0:17:54:3C:3D:03:C5:EF:66:07:81:DE:25:F9:66:AA:0A:A1 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584DE5807F5766C66386ED5B06C0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3a6e0a4e-33eb-3382-bd82-fc8bf82cefe5.roa Signing time: Wed 20 May 2026 13:00:31 +0000 ROA not before: Wed 20 May 2026 13:00:31 +0000 ROA not after: Tue 18 Aug 2026 13:00:31 +0000 asID: 40311 IP address blocks: 8.17.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e5:80:7f:57:66:c6:63:86:ed:5b:06:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: May 20 13:00:31 2026 GMT Not After : Aug 18 13:00:31 2026 GMT Subject: CN=d53d59e5-cce3-4abc-b07b-8f0818539da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:46:3c:c8:fc:3d:e7:24:22:fd:e2:db:1a:46: eb:56:4f:10:bd:9f:dc:56:3d:4d:c5:16:ec:0a:a7: 45:45:5f:01:fa:f1:31:87:af:f2:dc:9c:c1:ed:e6: a5:42:e5:6d:6e:91:6f:da:37:ed:de:f2:b7:ce:43: db:86:ca:1d:31:6f:b1:ce:e2:f2:45:70:03:b7:f1: 74:c4:34:3d:f9:8d:45:66:7f:1d:4b:9d:b2:bf:40: 00:8a:60:97:0e:f3:9f:ec:71:0c:32:14:49:d8:03: c6:d4:72:02:67:4c:61:be:82:d9:3d:47:7f:5b:be: 3b:92:33:cc:a2:3b:c2:ea:ee:95:17:2a:41:14:12: fa:24:67:58:d0:d8:f6:96:48:d3:46:77:dc:10:e5: 80:2f:41:6d:a6:0d:9b:48:e7:71:5d:b5:49:10:a0: c6:d8:bf:87:12:9f:3c:36:9c:fb:9e:2c:b8:b5:6a: 8f:13:c7:21:82:cc:02:e4:26:b5:b5:d1:4d:3e:35: 40:48:77:1c:b1:9f:b5:f5:20:7c:b1:e3:e8:2a:41: f6:08:0b:3d:61:28:61:bb:a5:ab:c4:dd:f4:d8:24: a2:72:10:b4:00:36:22:4b:ff:ef:c8:02:81:fd:6e: 59:41:27:af:eb:ca:14:e4:3a:5e:27:f1:27:61:ba: 9f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:FD:E0:17:54:3C:3D:03:C5:EF:66:07:81:DE:25:F9:66:AA:0A:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3a6e0a4e-33eb-3382-bd82-fc8bf82cefe5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.17.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:65:07:4b:53:60:df:67:21:b6:8b:c8:ce:4a:38:84:a2:2a: 69:95:5f:10:a2:c4:00:1c:66:3b:27:0c:24:0a:17:8f:0d:6e: f7:57:dd:09:d2:2a:8a:33:dc:27:f4:0d:b6:7e:ed:32:f8:05: 22:c7:20:d6:e3:71:b8:92:de:94:30:9f:a3:c0:f1:4e:b1:48: ae:ae:f0:60:ab:27:b7:f5:81:b0:0b:99:0f:94:78:39:e8:6b: ac:2e:82:5a:94:ab:8f:bc:34:80:db:bd:99:c1:8e:80:5f:bd: 16:16:7d:55:1c:65:40:d4:dc:32:94:18:da:97:dd:da:06:fc: e9:e3:6b:19:d1:da:66:47:6b:bb:13:46:4c:ef:06:dc:7c:78: 68:4c:5c:36:c8:e4:23:d4:12:ed:2e:d2:3f:1c:4d:10:42:60: d9:97:56:09:c1:7c:a0:88:ff:a9:01:3d:32:1a:71:80:5f:21: ff:35:13:d7:5b:ab:b3:21:c3:fd:d5:94:1a:b9:75:15:6b:b3: ca:bd:82:ad:ac:f3:b0:da:08:cd:28:7b:0d:8b:83:5a:6e:c4: a2:56:bc:d6:76:6e:12:6a:d7:50:0e:d5:44:b7:99:74:44:a2: 1d:b0:99:3d:0a:af:57:ca:a9:b8:1e:db:64:d6:67:4c:29:84: 26:16:d1:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3lgH9XZsZjhu1bBsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDUyMDEzMDAzMVoXDTI2MDgxODEzMDAzMVowLzEtMCsGA1UEAxMk ZDUzZDU5ZTUtY2NlMy00YWJjLWIwN2ItOGYwODE4NTM5ZGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEY8yPw95yQi/eLbGkbrVk8QvZ/cVj1NxRbs CqdFRV8B+vExh6/y3JzB7ealQuVtbpFv2jft3vK3zkPbhsodMW+xzuLyRXADt/F0 xDQ9+Y1FZn8dS52yv0AAimCXDvOf7HEMMhRJ2APG1HICZ0xhvoLZPUd/W747kjPM ojvC6u6VFypBFBL6JGdY0Nj2lkjTRnfcEOWAL0Ftpg2bSOdxXbVJEKDG2L+HEp88 Npz7niy4tWqPE8chgswC5Ca1tdFNPjVASHccsZ+19SB8sePoKkH2CAs9YShhu6Wr xN302CSichC0ADYiS//vyAKB/W5ZQSev68oU5DpeJ/EnYbqf8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBX94BdUPD0Dxe9mB4HeJflmqgqhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvM2E2ZTBhNGUtMzNlYi0z MzgyLWJkODItZmM4YmY4MmNlZmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACBFtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtlB0tTYN9nIbaLyM5KOISiKmmVXxCixAAcZjsnDCQKF48NbvdX3QnS Kooz3Cf0DbZ+7TL4BSLHINbjcbiS3pQwn6PA8U6xSK6u8GCrJ7f1gbALmQ+UeDno a6wuglqUq4+8NIDbvZnBjoBfvRYWfVUcZUDU3DKUGNqX3doG/OnjaxnR2mZHa7sT RkzvBtx8eGhMXDbI5CPUEu0u0j8cTRBCYNmXVgnBfKCI/6kBPTIacYBfIf81E9db q7Mhw/3VlBq5dRVrs8q9gq2s87DaCM0oew2Lg1puxKJWvNZ2bhJq11AO1US3mXRE oh2wmT0Kr1fKqbge22TWZ0wphCYW0Tg= -----END CERTIFICATE-----Generated at Sun Jun 14 03:41:21 2026 by rpki-client