$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/47a696d8-8aac-3fdd-bb6e-4da5be746267.roa File: 47a696d8-8aac-3fdd-bb6e-4da5be746267.roa (raw, json) Hash identifier: g1yTePQY9b7Hv46eNAYHpTZPaVHLkgtxu5O9PpZh0Bc= Subject key identifier: 9C:F5:60:DF:20:51:16:4A:DB:C2:F6:58:FB:4A:0B:2D:F0:A0:B7:B2 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584F225CFD82A62A3930A754BAC0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/47a696d8-8aac-3fdd-bb6e-4da5be746267.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 11178 IP address blocks: 8.20.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5c:fd:82:a6:2a:39:30:a7:54:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=db8f8aef-6fa3-4f98-b31c-2994e50f6dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c5:72:2a:15:16:4e:65:f7:8e:bb:23:1a:02: 20:ff:ca:0a:ef:e8:bc:d5:6a:84:bf:f3:f9:21:42: 65:3b:37:a9:9d:57:43:e4:a7:56:1e:b1:ca:ef:18: e9:e2:f2:be:d6:9f:ce:3d:c3:c4:bd:d1:e3:02:d3: 10:e5:a0:6b:09:5b:a9:8a:04:f4:06:5b:1a:31:96: 1c:0e:ab:9c:93:bf:a6:7b:62:82:29:9e:87:a5:f1: e1:22:07:59:88:52:24:5f:23:d4:9d:20:38:71:20: 92:1a:5a:22:e8:6f:e5:08:e0:d2:4e:91:d8:77:76: 2f:ad:10:44:23:fc:2e:bf:1f:0f:71:b4:f8:f2:35: 9c:1c:5c:e9:5b:b4:c0:ef:46:ac:54:19:2a:44:0c: 6b:20:9a:cb:da:b9:25:21:8b:e3:fb:14:ce:09:b7: e7:81:ef:38:62:80:8a:df:e0:59:82:b3:31:d2:66: d9:ec:4e:ef:b1:78:87:d7:ec:ad:d4:92:9c:e1:54: 63:ef:ba:1d:74:66:94:4d:9d:1b:89:e4:ad:aa:6f: cf:5c:72:b6:34:e4:63:38:3f:e4:4d:6b:c8:44:72: 96:6e:a9:51:cb:c0:2b:71:83:5b:88:8d:ab:53:30: 03:80:55:fe:24:48:fe:41:d6:8a:29:9c:c7:54:67: 23:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F5:60:DF:20:51:16:4A:DB:C2:F6:58:FB:4A:0B:2D:F0:A0:B7:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/47a696d8-8aac-3fdd-bb6e-4da5be746267.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.20.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:38:ec:22:f1:50:ac:9f:7c:9b:26:fb:9b:7a:de:75:b7:52: 2b:ac:20:94:0b:f1:0c:ff:0f:3f:0c:9b:ef:cf:b1:1c:bc:b3: 7a:46:a8:56:e1:55:03:cb:96:36:e6:a5:33:d0:bb:63:6c:2c: b8:7f:96:81:c4:dc:95:9d:65:21:51:02:82:cf:7f:17:7c:35: 2e:d4:66:50:ef:9e:dd:0a:bd:61:c8:1c:20:03:db:d2:92:69: a3:4d:d9:ea:3a:94:ae:c1:93:21:86:f7:79:37:88:31:ff:5e: 47:8d:f4:29:40:5b:00:6a:ca:bc:06:2a:bb:38:4e:28:27:9c: bf:00:39:6a:dd:9a:d0:c8:d7:98:c6:84:ac:14:06:23:ae:de: 6e:32:ea:8b:b8:fd:50:a7:d3:33:4c:08:63:c6:44:88:a6:2d: 41:db:ac:cd:cd:09:6a:fa:94:db:9f:26:e3:32:0d:8d:0d:a0: 1b:1b:1f:aa:4f:f0:be:fd:92:c8:24:12:bc:36:47:2b:1e:f0: 84:cc:fc:ef:f0:46:c8:70:93:3f:23:3f:83:45:09:3a:5d:60: 33:0c:5e:69:2d:96:72:5c:b4:c0:1c:15:ba:10:c7:09:06:6f: bf:b6:cd:ca:73:f2:49:02:f9:90:e1:57:af:b1:d8:e7:17:eb: e5:72:a1:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXP2Cpio5MKdUusAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk ZGI4ZjhhZWYtNmZhMy00Zjk4LWIzMWMtMjk5NGU1MGY2ZGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsVyKhUWTmX3jrsjGgIg/8oK7+i81WqEv/P5 IUJlOzepnVdD5KdWHrHK7xjp4vK+1p/OPcPEvdHjAtMQ5aBrCVupigT0BlsaMZYc Dquck7+me2KCKZ6HpfHhIgdZiFIkXyPUnSA4cSCSGloi6G/lCODSTpHYd3YvrRBE I/wuvx8PcbT48jWcHFzpW7TA70asVBkqRAxrIJrL2rklIYvj+xTOCbfnge84YoCK 3+BZgrMx0mbZ7E7vsXiH1+yt1JKc4VRj77oddGaUTZ0bieStqm/PXHK2NORjOD/k TWvIRHKWbqlRy8ArcYNbiI2rUzADgFX+JEj+QdaKKZzHVGcj8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJz1YN8gURZK28L2WPtKCy3woLeyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNDdhNjk2ZDgtOGFhYy0z ZmRkLWJiNmUtNGRhNWJlNzQ2MjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACBS+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIk47CLxUKyffJsm+5t63nW3UiusIJQL8Qz/Dz8Mm+/PsRy8s3pGqFbh VQPLljbmpTPQu2NsLLh/loHE3JWdZSFRAoLPfxd8NS7UZlDvnt0KvWHIHCAD29KS aaNN2eo6lK7BkyGG93k3iDH/XkeN9ClAWwBqyrwGKrs4TignnL8AOWrdmtDI15jG hKwUBiOu3m4y6ou4/VCn0zNMCGPGRIimLUHbrM3NCWr6lNufJuMyDY0NoBsbH6pP 8L79ksgkErw2Ryse8ITM/O/wRshwkz8jP4NFCTpdYDMMXmktlnJctMAcFboQxwkG b7+2zcpz8kkC+ZDhV6+x2OcX6+VyoaA= -----END CERTIFICATE-----Generated at Sun Sep 20 17:49:17 2026 by rpki-client