$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4dba33f7-3802-33de-a38e-8a950fe6b69a.roa File: 4dba33f7-3802-33de-a38e-8a950fe6b69a.roa (raw, json) Hash identifier: GFtYkePqSODOP8PTYXKTDSfVKVlHRYmBpcJja2lJM7I= Subject key identifier: F2:8C:3B:73:7C:26:9B:BB:6F:10:5B:E5:D1:9C:CF:7E:0D:7D:CA:A6 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584CFF4CD37BD9029922110D8930 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4dba33f7-3802-33de-a38e-8a950fe6b69a.roa Signing time: Fri 27 Feb 2026 02:00:31 +0000 ROA not before: Fri 27 Feb 2026 02:00:31 +0000 ROA not after: Thu 28 May 2026 01:00:31 +0000 asID: 396246 IP address blocks: 8.17.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ff:4c:d3:7b:d9:02:99:22:11:0d:89:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Feb 27 02:00:31 2026 GMT Not After : May 28 01:00:31 2026 GMT Subject: CN=0533fcf1-5630-4ac0-b87e-69faf09a53e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ed:d7:a8:3d:b6:c1:a5:2a:b4:bb:0f:4f:93: 27:7a:bf:b8:76:31:a9:ae:e5:b8:36:20:86:da:11: da:23:9e:dc:06:77:1f:5c:ab:7c:a2:53:1e:12:c0: 38:64:5c:f2:bb:a3:02:e5:e3:52:91:e9:dd:69:50: dc:ee:4b:7e:31:1b:e3:59:f6:ea:7b:d9:98:9a:fd: 89:76:3e:19:86:84:5d:fa:fa:1e:b1:df:71:10:30: 50:f9:b6:31:d3:07:ec:50:8c:1c:7c:4c:84:34:76: 79:b5:b3:14:d9:42:c4:3b:80:6e:81:6c:4e:a7:15: 44:ee:04:26:9c:16:15:db:50:df:2d:5b:31:37:dd: b9:1c:a7:fe:5f:c8:55:e6:35:76:de:d5:42:4f:b5: 40:64:ed:b8:07:ed:3d:83:f0:83:94:17:4c:7f:8e: b1:e4:2c:ff:5d:3a:40:0f:0e:30:87:bc:1f:ec:df: 11:6f:98:33:77:3a:fe:73:3e:05:94:8d:9d:99:cb: 6f:3a:27:7e:29:48:02:98:4b:0f:47:a2:34:78:ad: 24:fb:ac:1f:f1:15:c8:8c:88:34:42:22:63:da:7b: e1:6a:f9:3d:ba:43:ab:bf:71:38:b4:eb:61:3f:25: c5:01:d8:b6:11:c5:ef:1d:fc:ed:e1:cb:ef:0c:4c: d4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:8C:3B:73:7C:26:9B:BB:6F:10:5B:E5:D1:9C:CF:7E:0D:7D:CA:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4dba33f7-3802-33de-a38e-8a950fe6b69a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.17.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:7b:ae:ff:2e:3f:b0:01:5f:e8:e5:9b:4d:98:17:3c:8d:63: 46:fa:b4:13:4d:45:76:08:d6:91:1c:50:6c:00:6d:9c:45:31: 28:27:2d:08:55:64:c0:2a:90:64:2c:45:6a:a7:c6:d1:4d:5e: 92:c5:44:32:d7:a2:0d:ab:fe:06:f9:33:2e:63:7a:22:b5:ab: dc:6f:ef:cb:4d:3b:b4:4e:14:ce:5a:01:f5:39:75:8c:24:11: cf:e7:c8:b9:7a:92:7e:06:0a:e9:33:bc:67:ad:16:b5:03:eb: 5f:e0:24:44:cc:47:d4:fa:a7:b6:78:76:85:6d:33:cd:e5:86: 0d:45:14:31:b6:62:6d:20:75:b1:52:65:e3:92:9e:6e:ce:a1: 57:61:9d:65:7c:e3:4d:79:c8:6e:72:de:db:ae:34:e3:88:47: c6:ed:a4:e3:a0:f2:cd:b5:c4:58:03:21:67:83:0d:5d:ab:5d: c0:90:9e:d5:0d:64:ba:67:9c:90:d2:6a:64:19:10:eb:52:8d: 3f:fb:c0:07:5b:4f:ac:de:d9:ae:53:fc:53:5e:90:c0:34:49: f1:15:89:a6:33:37:a1:30:28:e1:84:82:8b:bb:99:2c:2c:bc: 01:14:17:ff:7c:c7:27:b6:a4:40:bf:dc:e1:a7:19:dd:62:69: 4a:e7:26:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz/TNN72QKZIhENiTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDIyNzAyMDAzMVoXDTI2MDUyODAxMDAzMVowLzEtMCsGA1UEAxMk MDUzM2ZjZjEtNTYzMC00YWMwLWI4N2UtNjlmYWYwOWE1M2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu3XqD22waUqtLsPT5Mner+4djGpruW4NiCG 2hHaI57cBncfXKt8olMeEsA4ZFzyu6MC5eNSkendaVDc7kt+MRvjWfbqe9mYmv2J dj4ZhoRd+voesd9xEDBQ+bYx0wfsUIwcfEyENHZ5tbMU2ULEO4BugWxOpxVE7gQm nBYV21DfLVsxN925HKf+X8hV5jV23tVCT7VAZO24B+09g/CDlBdMf46x5Cz/XTpA Dw4wh7wf7N8Rb5gzdzr+cz4FlI2dmctvOid+KUgCmEsPR6I0eK0k+6wf8RXIjIg0 QiJj2nvhavk9ukOrv3E4tOthPyXFAdi2EcXvHfzt4cvvDEzU8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKMO3N8Jpu7bxBb5dGcz34NfcqmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNGRiYTMzZjctMzgwMi0z M2RlLWEzOGUtOGE5NTBmZTZiNjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACBFDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEB7rv8uP7ABX+jlm02YFzyNY0b6tBNNRXYI1pEcUGwAbZxFMSgnLQhV ZMAqkGQsRWqnxtFNXpLFRDLXog2r/gb5My5jeiK1q9xv78tNO7ROFM5aAfU5dYwk Ec/nyLl6kn4GCukzvGetFrUD61/gJETMR9T6p7Z4doVtM83lhg1FFDG2Ym0gdbFS ZeOSnm7OoVdhnWV84015yG5y3tuuNOOIR8btpOOg8s21xFgDIWeDDV2rXcCQntUN ZLpnnJDSamQZEOtSjT/7wAdbT6ze2a5T/FNekMA0SfEViaYzN6EwKOGEgou7mSws vAEUF/98xye2pEC/3OGnGd1iaUrnJj8= -----END CERTIFICATE-----Generated at Mon Mar 2 09:51:21 2026 by rpki-client