$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/40d14a07-2a69-39da-8798-607612ab874b.roa File: 40d14a07-2a69-39da-8798-607612ab874b.roa (raw, json) Hash identifier: 6Pu9nJqNXIlNiPfgNIjfhTsiWfw6WhG2L7PeLXRfhf4= Subject key identifier: FA:1C:31:DC:B0:A3:D4:9F:D1:99:6A:0B:AE:8E:25:0F:46:C1:AC:A3 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584D04E231216655C1484B4F8240 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/40d14a07-2a69-39da-8798-607612ab874b.roa Signing time: Sun 01 Mar 2026 02:00:31 +0000 ROA not before: Sun 01 Mar 2026 02:00:31 +0000 ROA not after: Sat 30 May 2026 01:00:31 +0000 asID: 40311 IP address blocks: 8.17.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:04:e2:31:21:66:55:c1:48:4b:4f:82:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Mar 1 02:00:31 2026 GMT Not After : May 30 01:00:31 2026 GMT Subject: CN=e87f7865-4bb7-4bc8-abfd-4edbf3324ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e0:4c:07:7c:30:8a:27:4e:f9:39:92:db:d7: f0:8e:96:62:1c:41:5a:18:f4:35:ed:89:ac:83:55: 77:e6:34:0a:45:51:fc:41:3c:4f:9d:da:13:7c:59: 62:ef:9d:8a:73:03:ef:ab:11:65:57:14:5e:f7:c8: ae:56:23:6e:8f:a3:68:74:f2:2d:dc:6a:6c:02:00: 27:34:35:78:dc:e0:74:09:d3:77:e3:56:f8:1d:56: 4f:8b:f9:50:21:20:68:a3:32:c4:7e:91:e0:d0:96: 33:87:8f:e3:fe:b6:ba:3c:df:47:ae:aa:df:61:30: 2d:b1:b0:76:b8:cf:bd:ab:dc:2d:ce:ab:ad:87:1f: 4f:66:c6:08:cc:eb:0f:87:79:81:f1:10:52:b6:13: 38:39:d4:75:fb:32:ab:19:ff:cd:4f:17:3c:0a:56: a3:07:60:f6:fb:c9:81:18:44:e7:65:5c:97:57:bf: 42:2b:cf:4b:e3:15:d6:14:a4:d6:04:48:10:b4:9a: e1:5b:fb:44:1f:fa:d4:76:ba:39:28:e0:38:af:1b: af:b3:21:b9:ab:39:32:ab:8f:06:e5:31:f3:98:82: 6d:98:5f:b4:5c:ab:de:f3:bf:ef:4e:82:24:d1:bf: 89:7a:8e:42:29:8f:cf:de:a2:4c:18:b4:90:54:06: ba:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:1C:31:DC:B0:A3:D4:9F:D1:99:6A:0B:AE:8E:25:0F:46:C1:AC:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/40d14a07-2a69-39da-8798-607612ab874b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.17.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:ea:be:a6:34:59:5a:10:37:b6:0a:2d:66:bf:4c:98:f9:da: 21:20:fe:53:65:de:e7:63:e6:6e:8f:46:9e:54:f9:86:65:9c: ff:90:36:1c:b3:ba:43:1b:f5:2f:1e:a3:b1:7b:87:0a:f1:c4: d7:88:e0:1a:c3:86:63:65:ac:72:1e:04:fa:34:2a:b8:18:27: 3e:43:d0:80:3c:2b:0a:15:ad:f4:80:32:5b:92:93:5d:e4:17: 5c:fd:df:d4:31:02:94:f9:72:bc:99:30:3b:53:84:f7:72:64: 35:7e:48:12:8d:69:32:25:9d:14:53:0f:4d:c1:00:75:12:5b: ae:cc:cf:00:1e:8b:04:39:64:a2:be:de:e5:04:c5:b2:cf:25: 4e:b5:77:df:5c:47:47:83:ef:f8:7b:b8:15:bc:84:b5:ec:83: 26:01:99:8d:3a:d2:a8:33:e7:69:80:d5:ea:bf:58:ed:54:94: e7:83:1b:fb:21:cc:41:71:4b:1a:6d:c9:8a:55:28:69:7f:e2: 9b:ca:34:8f:5b:be:a5:32:34:1a:bb:cc:8f:17:94:f7:0e:e6: 95:1b:37:48:bf:a2:5d:53:c2:ff:92:72:0d:c0:bc:31:66:89: bd:85:4d:52:04:77:65:d7:60:5a:16:08:7a:3d:cf:ae:b2:13: 2c:f1:74:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0E4jEhZlXBSEtPgkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDMwMTAyMDAzMVoXDTI2MDUzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZTg3Zjc4NjUtNGJiNy00YmM4LWFiZmQtNGVkYmYzMzI0Y2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuBMB3wwiidO+TmS29fwjpZiHEFaGPQ17Yms g1V35jQKRVH8QTxPndoTfFli752KcwPvqxFlVxRe98iuViNuj6NodPIt3GpsAgAn NDV43OB0CdN341b4HVZPi/lQISBoozLEfpHg0JYzh4/j/ra6PN9HrqrfYTAtsbB2 uM+9q9wtzquthx9PZsYIzOsPh3mB8RBSthM4OdR1+zKrGf/NTxc8ClajB2D2+8mB GETnZVyXV79CK89L4xXWFKTWBEgQtJrhW/tEH/rUdro5KOA4rxuvsyG5qzkyq48G 5THzmIJtmF+0XKve87/vToIk0b+Jeo5CKY/P3qJMGLSQVAa6FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPocMdywo9Sf0ZlqC66OJQ9GwayjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNDBkMTRhMDctMmE2OS0z OWRhLTg3OTgtNjA3NjEyYWI4NzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACBFrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzqvqY0WVoQN7YKLWa/TJj52iEg/lNl3udj5m6PRp5U+YZlnP+QNhyz ukMb9S8eo7F7hwrxxNeI4BrDhmNlrHIeBPo0KrgYJz5D0IA8KwoVrfSAMluSk13k F1z939QxApT5cryZMDtThPdyZDV+SBKNaTIlnRRTD03BAHUSW67MzwAeiwQ5ZKK+ 3uUExbLPJU61d99cR0eD7/h7uBW8hLXsgyYBmY060qgz52mA1eq/WO1UlOeDG/sh zEFxSxptyYpVKGl/4pvKNI9bvqUyNBq7zI8XlPcO5pUbN0i/ol1Twv+Scg3AvDFm ib2FTVIEd2XXYFoWCHo9z66yEyzxdDk= -----END CERTIFICATE-----Generated at Mon Mar 2 16:50:14 2026 by rpki-client