$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/50bfa01a-3e5a-3d74-9716-6fb5778bfe34.roa File: 50bfa01a-3e5a-3d74-9716-6fb5778bfe34.roa (raw, json) Hash identifier: 8WZgnauvpjQPFP7KEyeZQ6InpE69MrzLme4DN6KQ7Js= Subject key identifier: 89:39:11:BE:21:93:0E:64:1D:A5:85:C1:0C:84:D5:AF:09:45:FA:3F Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584F4988CC2BB9EA413BEE6DE0B8 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/50bfa01a-3e5a-3d74-9716-6fb5778bfe34.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 23089 IP address blocks: 8.8.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:cc:2b:b9:ea:41:3b:ee:6d:e0:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=abb935af-a3eb-4238-ba3d-00d77adb0fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9c:33:92:24:fe:1c:bf:19:c2:ab:a1:65:ba: 5d:3d:b1:fa:b7:31:af:d8:55:93:2e:5d:f1:11:2a: 14:6d:d0:85:c8:8e:00:2e:93:93:f8:7c:49:7c:11: 71:d9:eb:a6:60:9a:16:a8:40:9e:a0:a9:f7:74:25: 31:06:16:0b:4f:3c:c4:9d:15:55:15:0b:3a:79:4b: a0:4c:04:d8:d4:1e:07:87:d3:6c:72:ac:73:7a:0d: 2e:c9:f0:97:d7:40:00:ce:3d:e3:ef:3b:48:20:a0: 08:d7:16:80:ed:fe:9c:3b:1c:4c:ea:12:d2:f3:4a: 02:36:75:ae:22:a1:db:41:27:91:33:d3:1d:58:22: d0:95:2f:5d:15:29:6c:86:97:3c:2c:00:2c:95:b8: 62:88:de:28:a7:c8:d9:08:14:7f:6a:b1:57:cb:3d: df:d2:96:ae:8d:fa:37:55:8c:9b:59:22:a5:c9:c7: 6c:10:a1:ab:90:ae:5c:14:67:15:f2:a2:36:dc:82: 4d:a1:c2:fe:59:23:bb:2b:2e:4f:c4:3a:7c:1a:9e: 7e:b7:25:27:da:4b:fc:00:99:ac:06:f7:5e:14:24: 3d:d1:ba:f5:af:e5:58:4c:e9:3f:0c:83:8a:c8:56: 66:33:a9:c4:85:ff:d7:24:b8:c2:f4:9a:74:3c:9b: e4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:39:11:BE:21:93:0E:64:1D:A5:85:C1:0C:84:D5:AF:09:45:FA:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/50bfa01a-3e5a-3d74-9716-6fb5778bfe34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.8.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:70:5e:2a:1e:39:92:cc:52:32:d0:01:77:da:14:7b:5e:b9: 02:9a:6b:60:d0:83:a6:2c:13:96:f9:45:f0:62:32:37:79:cf: 1c:f8:6e:5e:bd:28:51:e9:fd:bf:65:51:88:11:be:4f:45:ca: 57:33:ba:98:32:08:30:0d:30:53:59:b8:85:1c:30:46:28:1c: 38:45:83:49:63:1a:9c:25:ae:f6:ad:21:93:ad:56:50:00:97: 59:0f:e8:a8:d8:ca:42:3a:67:70:97:ff:64:d1:9a:94:e4:a6: 26:22:05:21:a9:a3:9b:98:3d:70:e4:5c:91:ee:4c:56:8d:17: 2b:33:b6:d2:89:80:f7:62:64:1c:2b:68:50:13:c8:3f:54:63: d2:65:4a:ad:fa:59:4e:0b:1a:35:5b:11:07:7d:db:4f:39:a1: 49:2c:34:75:3d:16:e0:84:ba:a6:dd:3d:ae:ad:cc:44:9d:f5: c0:c1:0a:4d:f9:64:37:30:a1:ab:eb:94:4e:f4:7e:27:73:6e: 64:78:ac:6b:25:01:21:d4:05:90:98:31:ce:b1:e0:d2:12:a8: 30:d2:f1:b7:4b:7e:3d:27:14:2e:18:f5:d8:fe:ab:cf:eb:7b: 4e:91:b6:f2:c9:b5:ee:c4:ee:17:f1:0d:d9:60:14:93:35:56: 22:97:e2:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiMwruepBO+5t4LgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWJiOTM1YWYtYTNlYi00MjM4LWJhM2QtMDBkNzdhZGIwZmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJwzkiT+HL8ZwquhZbpdPbH6tzGv2FWTLl3x ESoUbdCFyI4ALpOT+HxJfBFx2eumYJoWqECeoKn3dCUxBhYLTzzEnRVVFQs6eUug TATY1B4Hh9Nscqxzeg0uyfCX10AAzj3j7ztIIKAI1xaA7f6cOxxM6hLS80oCNnWu IqHbQSeRM9MdWCLQlS9dFSlshpc8LAAslbhiiN4op8jZCBR/arFXyz3f0paujfo3 VYybWSKlycdsEKGrkK5cFGcV8qI23IJNocL+WSO7Ky5PxDp8Gp5+tyUn2kv8AJms BvdeFCQ90br1r+VYTOk/DIOKyFZmM6nEhf/XJLjC9Jp0PJvkwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIk5Eb4hkw5kHaWFwQyE1a8JRfo/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNTBiZmEwMWEtM2U1YS0z ZDc0LTk3MTYtNmZiNTc3OGJmZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAgJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhwXioeOZLMUjLQAXfaFHteuQKaa2DQg6YsE5b5RfBiMjd5zxz4bl69 KFHp/b9lUYgRvk9FylczupgyCDANMFNZuIUcMEYoHDhFg0ljGpwlrvatIZOtVlAA l1kP6KjYykI6Z3CX/2TRmpTkpiYiBSGpo5uYPXDkXJHuTFaNFyszttKJgPdiZBwr aFATyD9UY9JlSq36WU4LGjVbEQd92085oUksNHU9FuCEuqbdPa6tzESd9cDBCk35 ZDcwoavrlE70fidzbmR4rGslASHUBZCYMc6x4NISqDDS8bdLfj0nFC4Y9dj+q8/r e06RtvLJte7E7hfxDdlgFJM1ViKX4ns= -----END CERTIFICATE-----Generated at Mon Sep 28 10:28:31 2026 by rpki-client