$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5d3abe4d-41f6-3352-83e0-81e0a2ca3653.roa File: 5d3abe4d-41f6-3352-83e0-81e0a2ca3653.roa (raw, json) Hash identifier: xIXguSxxIG7BBF5Iayb9KIEY2UocBhk2qpxwXD+mcNM= Subject key identifier: 6F:4D:37:A2:2A:DF:E4:81:F6:23:D3:DE:9A:4E:98:A3:33:09:E8:9E Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584F4277F5FE202EEA6FFE7A7580 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5d3abe4d-41f6-3352-83e0-81e0a2ca3653.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 989 IP address blocks: 8.36.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:f5:fe:20:2e:ea:6f:fe:7a:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=c7fe8b3a-4b78-45f0-9fd6-9d422537cd67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f8:62:ff:18:d8:73:1e:f4:59:8b:15:c7:a4: f1:e4:b8:c4:90:5b:46:09:94:20:4e:09:09:dc:a9: e8:78:8a:4a:f9:34:1d:3f:18:4a:99:12:f9:66:74: 05:ef:80:b6:95:a6:91:6e:e0:35:ff:f4:cf:16:06: 9f:d1:e6:81:0a:c5:6b:29:94:a9:fb:65:a9:6c:33: 84:c2:27:81:ca:ae:9c:44:e7:c6:a5:41:96:ad:6e: 1e:54:71:84:f4:60:b9:34:06:a3:d6:05:54:4f:94: b3:ee:d6:69:c0:63:c8:8d:fb:14:f0:0a:d1:f6:4e: e5:11:14:47:d0:1e:05:05:1e:2f:b9:7d:84:52:d8: d5:15:40:bc:ac:c2:55:e1:63:8d:63:94:55:df:b7: 60:a8:f4:9c:a7:0a:60:6a:0d:7b:9f:f2:d4:ea:62: 42:f9:83:ed:92:a6:35:06:29:14:89:79:fd:34:81: 0a:cf:88:c7:35:8d:7e:47:69:1f:21:51:d5:1f:c4: 31:69:50:2b:85:6f:cb:77:3d:25:ce:94:1b:14:90: 2e:d2:9a:d5:99:99:66:5a:1e:a2:34:16:5b:60:4c: 9b:2b:df:09:86:13:12:20:22:58:e7:0e:d4:31:d0: 85:f6:10:7b:7d:55:54:19:6e:43:bc:c9:c4:b1:2b: 00:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:4D:37:A2:2A:DF:E4:81:F6:23:D3:DE:9A:4E:98:A3:33:09:E8:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5d3abe4d-41f6-3352-83e0-81e0a2ca3653.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.36.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:b0:56:25:c8:2d:9f:a1:0f:c5:a8:d4:5d:60:5f:5b:cb:5b: a1:fa:65:4a:3f:7d:f1:62:b6:64:12:96:d0:58:d7:fb:b2:32: 1e:93:ab:c3:f3:4a:e3:1f:4d:f2:5f:bf:8f:76:d3:f8:33:54: 3b:c8:dd:54:d2:f0:dd:e8:23:65:8d:bd:f2:30:ea:4a:54:36: df:6c:e2:6f:f9:ac:e6:a5:77:73:7d:d1:31:3f:99:4d:52:fd: b0:22:7f:f7:93:20:6a:e3:39:83:84:e6:c4:e0:17:3d:49:07: ee:60:15:ed:8a:27:66:19:6d:1e:47:53:e5:d0:ce:d5:42:f8: 95:07:49:48:04:40:5b:f8:c2:a6:e8:6b:70:df:26:ef:c8:c7: 5b:d6:28:fa:44:3f:c9:5c:44:e3:fd:49:db:b4:12:17:8d:85: d8:48:11:9f:13:2a:38:f4:ed:39:fe:18:e0:bc:5f:73:95:93: a7:72:31:46:9d:5f:8d:d4:24:9a:03:f2:f6:2a:e7:26:02:6b: 68:e0:a0:41:7f:d5:cd:92:10:1a:00:5f:73:90:2e:30:9e:4a: c4:90:99:c8:31:a8:07:b4:3d:fe:3c:5a:5a:91:ae:19:17:55: 4c:b0:37:ce:49:e2:b1:1f:69:88:4d:37:1a:cd:c9:74:27:0a: 00:66:c8:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Cd/X+IC7qb/56dYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk YzdmZThiM2EtNGI3OC00NWYwLTlmZDYtOWQ0MjI1MzdjZDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Phi/xjYcx70WYsVx6Tx5LjEkFtGCZQgTgkJ 3KnoeIpK+TQdPxhKmRL5ZnQF74C2laaRbuA1//TPFgaf0eaBCsVrKZSp+2WpbDOE wieByq6cROfGpUGWrW4eVHGE9GC5NAaj1gVUT5Sz7tZpwGPIjfsU8ArR9k7lERRH 0B4FBR4vuX2EUtjVFUC8rMJV4WONY5RV37dgqPScpwpgag17n/LU6mJC+YPtkqY1 BikUiXn9NIEKz4jHNY1+R2kfIVHVH8QxaVArhW/Ldz0lzpQbFJAu0prVmZlmWh6i NBZbYEybK98JhhMSICJY5w7UMdCF9hB7fVVUGW5DvMnEsSsARQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9NN6Iq3+SB9iPT3ppOmKMzCeieMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNWQzYWJlNGQtNDFmNi0z MzUyLTgzZTAtODFlMGEyY2EzNjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBCCTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALawViXILZ+hD8Wo1F1gX1vLW6H6ZUo/ffFitmQSltBY1/uyMh6Tq8Pz SuMfTfJfv4920/gzVDvI3VTS8N3oI2WNvfIw6kpUNt9s4m/5rOald3N90TE/mU1S /bAif/eTIGrjOYOE5sTgFz1JB+5gFe2KJ2YZbR5HU+XQztVC+JUHSUgEQFv4wqbo a3DfJu/Ix1vWKPpEP8lcROP9Sdu0EheNhdhIEZ8TKjj07Tn+GOC8X3OVk6dyMUad X43UJJoD8vYq5yYCa2jgoEF/1c2SEBoAX3OQLjCeSsSQmcgxqAe0Pf48WlqRrhkX VUywN85J4rEfaYhNNxrNyXQnCgBmyEM= -----END CERTIFICATE-----Generated at Tue Oct 13 19:09:39 2026 by rpki-client