$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/50bfa01a-3e5a-3d74-9716-6fb5778bfe34.roa File: 50bfa01a-3e5a-3d74-9716-6fb5778bfe34.roa (raw, json) Hash identifier: JEHrZeFH/QCrqjUsGBZs6bqVGTf3Ab02X0pIcL3zvCs= Subject key identifier: 39:CA:B0:67:A6:65:0F:04:51:A4:FB:F6:2A:0A:36:EE:90:AA:F1:AC Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584DEC7B4862CBF25A0F823FAE20 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/50bfa01a-3e5a-3d74-9716-6fb5778bfe34.roa Signing time: Sat 23 May 2026 01:00:25 +0000 ROA not before: Sat 23 May 2026 01:00:25 +0000 ROA not after: Fri 21 Aug 2026 01:00:25 +0000 asID: 23089 IP address blocks: 8.8.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ec:7b:48:62:cb:f2:5a:0f:82:3f:ae:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: May 23 01:00:25 2026 GMT Not After : Aug 21 01:00:25 2026 GMT Subject: CN=8d9f55de-6d33-421e-a04e-77bf16c8d220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:89:74:2c:f5:48:13:47:7b:52:87:a9:7f:04: a8:e2:63:1e:14:3a:31:e7:ce:a1:07:94:f8:3f:3b: 40:44:a0:54:94:89:be:42:d9:0f:5e:f1:86:9c:ef: e5:a6:a2:ca:f5:26:12:ad:f0:88:1c:fd:f0:99:6e: bb:5f:bc:fa:e5:64:de:18:70:f3:4a:f3:8b:87:7f: 68:0e:44:e2:05:6b:5e:b8:d9:96:b3:b7:f1:fb:22: 79:98:1b:cf:2b:02:78:2a:62:e0:7b:19:8d:32:4b: bd:ca:02:85:c9:d3:ca:f8:a8:d4:ff:76:2d:d7:d8: 6a:65:36:a0:6c:85:9c:47:f3:e3:eb:17:de:41:30: 5d:5f:34:f2:31:2b:c5:95:7c:da:18:98:d7:2d:ad: cb:72:ad:4a:14:aa:0c:a3:24:79:09:5e:92:95:b0: 2e:ab:fd:a2:dc:2b:65:a0:c5:9d:cb:20:4e:f2:c3: 16:4d:aa:51:66:fb:92:9e:bd:0e:22:c7:c8:4d:ed: d1:a6:c2:45:b2:65:df:47:16:6a:a4:d5:c0:08:90: c4:6c:c8:0f:7f:eb:53:ca:46:b2:20:11:50:89:2e: e7:d1:6c:91:7a:78:3a:5e:4e:76:52:1c:2d:58:6e: d6:97:c6:93:ed:f4:8e:e2:96:11:9d:b8:24:0f:64: 27:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CA:B0:67:A6:65:0F:04:51:A4:FB:F6:2A:0A:36:EE:90:AA:F1:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/50bfa01a-3e5a-3d74-9716-6fb5778bfe34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.8.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:36:16:2f:9e:90:26:aa:f4:bc:1b:8c:85:f4:a6:f2:f6:20: 6f:7f:7d:c3:d3:d4:6e:15:8b:7d:da:36:07:31:8f:d5:f2:df: 6d:a5:18:b9:5d:5f:cc:3c:77:c9:8d:94:cc:a2:5c:da:14:a4: f1:64:4e:37:3e:96:88:95:62:a1:a7:4e:d7:d5:85:fa:91:f1: 72:fa:54:82:8b:7d:be:af:4d:6a:d4:30:4c:94:34:46:cc:15: 7a:f9:f8:d5:cd:25:17:fe:66:1b:5c:c2:31:fe:de:e0:40:96: ca:9a:f7:fe:3e:f1:1f:97:a2:d4:0a:f8:85:bf:59:1a:1a:b4: 69:d0:49:8a:28:35:61:10:41:67:64:cc:2f:ee:6b:be:1e:d1: 13:64:b0:f6:1a:b3:de:e7:13:de:71:c9:e9:45:17:d2:2f:ea: 06:00:7c:75:0a:c1:94:fd:6a:0b:44:fe:00:ce:50:6a:f0:9d: fc:b8:f0:37:f3:18:9e:ef:24:06:17:18:20:46:d5:ff:54:42: 22:27:37:5e:50:a2:1d:9b:c1:db:28:ac:c4:72:2d:19:59:f0: e4:4f:76:f9:4d:d7:f1:3a:a6:84:07:8f:f1:7f:5a:76:03:20: 19:62:9f:a6:b5:b1:64:8e:4e:62:b5:16:3a:ff:90:24:6d:9d: 66:0d:b8:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3se0hiy/JaD4I/riAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDUyMzAxMDAyNVoXDTI2MDgyMTAxMDAyNVowLzEtMCsGA1UEAxMk OGQ5ZjU1ZGUtNmQzMy00MjFlLWEwNGUtNzdiZjE2YzhkMjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4l0LPVIE0d7UoepfwSo4mMeFDox586hB5T4 PztARKBUlIm+QtkPXvGGnO/lpqLK9SYSrfCIHP3wmW67X7z65WTeGHDzSvOLh39o DkTiBWteuNmWs7fx+yJ5mBvPKwJ4KmLgexmNMku9ygKFydPK+KjU/3Yt19hqZTag bIWcR/Pj6xfeQTBdXzTyMSvFlXzaGJjXLa3Lcq1KFKoMoyR5CV6SlbAuq/2i3Ctl oMWdyyBO8sMWTapRZvuSnr0OIsfITe3RpsJFsmXfRxZqpNXACJDEbMgPf+tTykay IBFQiS7n0WyReng6Xk52UhwtWG7Wl8aT7fSO4pYRnbgkD2QnSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnKsGemZQ8EUaT79ioKNu6QqvGsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNTBiZmEwMWEtM2U1YS0z ZDc0LTk3MTYtNmZiNTc3OGJmZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAgJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABY2Fi+ekCaq9LwbjIX0pvL2IG9/fcPT1G4Vi33aNgcxj9Xy322lGLld X8w8d8mNlMyiXNoUpPFkTjc+loiVYqGnTtfVhfqR8XL6VIKLfb6vTWrUMEyUNEbM FXr5+NXNJRf+ZhtcwjH+3uBAlsqa9/4+8R+XotQK+IW/WRoatGnQSYooNWEQQWdk zC/ua74e0RNksPYas97nE95xyelFF9Iv6gYAfHUKwZT9agtE/gDOUGrwnfy48Dfz GJ7vJAYXGCBG1f9UQiInN15Qoh2bwdsorMRyLRlZ8ORPdvlN1/E6poQHj/F/WnYD IBlin6a1sWSOTmK1Fjr/kCRtnWYNuFI= -----END CERTIFICATE-----Generated at Sat Jun 13 23:11:15 2026 by rpki-client