$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3ef7df66-94b2-3a2d-860f-be895b43888e.roa File: 3ef7df66-94b2-3a2d-860f-be895b43888e.roa (raw, json) Hash identifier: 0Hgmk3mC4a2e0UqnCDLfxWEOMKw6N84Dl6e+Bbr0zRI= Subject key identifier: 08:9D:92:54:B3:3C:90:7A:E2:95:37:62:AB:8F:BC:C8:D5:74:F4:98 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584D746FBF16C14A34A3AEE66480 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3ef7df66-94b2-3a2d-860f-be895b43888e.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 13984 IP address blocks: 8.34.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:bf:16:c1:4a:34:a3:ae:e6:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=ed32d471-2142-42d5-9230-b120679bbc1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:22:b9:ba:d0:89:01:25:33:cc:28:ed:86:9a: 6d:0f:de:63:a6:de:20:a1:ef:f9:ca:74:34:f1:6c: 05:dd:a1:ff:22:74:ac:4b:fa:45:57:84:15:8b:49: c2:49:7b:a8:35:44:db:45:2f:7c:6f:7b:de:0b:0f: 98:ba:64:b2:d6:30:e1:69:ac:85:20:af:82:35:a9: 54:15:82:44:ec:11:4c:7b:2a:a8:43:3d:c5:40:34: cd:e7:89:12:dd:84:52:e6:dd:01:91:de:88:2c:7c: 62:75:d1:bc:42:0d:9b:79:16:c3:54:f4:24:43:2a: 9c:b4:b8:30:1b:5c:75:69:82:f8:5d:84:2b:d9:db: 95:d8:72:67:12:08:d5:49:f8:c9:ce:85:25:b5:75: d8:5a:75:b1:20:be:8e:d9:d0:ea:29:b0:35:70:91: b1:dd:e7:19:be:50:09:40:5b:be:98:34:1d:ad:cc: 1b:b2:39:10:a6:2a:ec:2f:cb:ee:ea:29:8d:bc:00: a3:1e:cf:58:cc:51:fc:a9:c3:b6:31:11:dd:df:c4: 91:38:bc:5e:a3:dc:dc:5e:a0:26:b1:9e:e7:de:9f: 8a:1f:9f:dc:2d:e4:a8:e5:1b:11:d0:8f:46:4e:cf: 0c:2f:4a:95:3e:43:6b:c1:2d:f4:5c:c3:5a:3e:2d: 24:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:9D:92:54:B3:3C:90:7A:E2:95:37:62:AB:8F:BC:C8:D5:74:F4:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3ef7df66-94b2-3a2d-860f-be895b43888e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.34.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:09:fe:e0:39:66:c5:1a:4b:dc:ac:30:cf:87:64:59:61:9f: 68:3e:ef:54:62:3a:eb:3d:58:69:2d:99:1d:f6:7f:e6:5e:6c: 3a:61:1c:f3:85:c1:a4:07:db:e8:7c:e1:0a:21:25:b8:3f:9f: 43:fe:1c:52:4a:26:4e:7f:56:c8:90:52:f3:2e:61:00:68:8f: 89:9d:b8:c6:75:4a:b1:32:1a:36:df:ea:89:d3:7a:3f:91:30: 49:01:f7:07:c7:65:46:59:1f:95:04:d5:3d:3c:e5:39:33:c3: 6e:be:75:6e:d5:b7:c3:b2:81:85:02:e1:fb:6a:81:c1:5c:81: 3c:8e:36:b7:06:ee:71:bd:07:d0:59:38:f4:a5:b3:b0:bf:38: e7:35:56:02:6b:5e:df:50:81:68:68:87:c4:02:40:97:42:e4: 6a:9e:1f:ed:ea:a6:db:8b:6f:8e:be:a4:e0:05:67:74:c3:fd: ec:4d:76:2a:ae:25:00:c9:86:ca:f9:be:8e:17:4e:35:ee:dd: f1:35:ad:5a:f3:65:49:fd:42:6d:5c:f6:bc:d6:de:52:55:f4: 1e:0b:9f:53:0d:6f:79:76:49:4f:f7:be:6d:c5:fe:33:3b:4f: 7f:ce:4a:28:7d:8c:3a:83:ec:b0:40:48:6f:5f:81:87:03:c5: 5c:33:e6:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b78WwUo0o67mZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk ZWQzMmQ0NzEtMjE0Mi00MmQ1LTkyMzAtYjEyMDY3OWJiYzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyK5utCJASUzzCjthpptD95jpt4goe/5ynQ0 8WwF3aH/InSsS/pFV4QVi0nCSXuoNUTbRS98b3veCw+YumSy1jDhaayFIK+CNalU FYJE7BFMeyqoQz3FQDTN54kS3YRS5t0Bkd6ILHxiddG8Qg2beRbDVPQkQyqctLgw G1x1aYL4XYQr2duV2HJnEgjVSfjJzoUltXXYWnWxIL6O2dDqKbA1cJGx3ecZvlAJ QFu+mDQdrcwbsjkQpirsL8vu6imNvACjHs9YzFH8qcO2MRHd38SROLxeo9zcXqAm sZ7n3p+KH5/cLeSo5RsR0I9GTs8ML0qVPkNrwS30XMNaPi0kEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAidklSzPJB64pU3YquPvMjVdPSYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvM2VmN2RmNjYtOTRiMi0z YTJkLTg2MGYtYmU4OTViNDM4ODhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACCIbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoJ/uA5ZsUaS9ysMM+HZFlhn2g+71RiOus9WGktmR32f+ZebDphHPOF waQH2+h84QohJbg/n0P+HFJKJk5/VsiQUvMuYQBoj4mduMZ1SrEyGjbf6onTej+R MEkB9wfHZUZZH5UE1T085Tkzw26+dW7Vt8OygYUC4ftqgcFcgTyONrcG7nG9B9BZ OPSls7C/OOc1VgJrXt9QgWhoh8QCQJdC5GqeH+3qptuLb46+pOAFZ3TD/exNdiqu JQDJhsr5vo4XTjXu3fE1rVrzZUn9Qm1c9rzW3lJV9B4Ln1MNb3l2SU/3vm3F/jM7 T3/OSih9jDqD7LBASG9fgYcDxVwz5sA= -----END CERTIFICATE-----Generated at Sat Apr 18 02:33:32 2026 by rpki-client