$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7163da47-11da-32a3-b412-2ab9cc0719a1.roa File: 7163da47-11da-32a3-b412-2ab9cc0719a1.roa (raw, json) Hash identifier: VZJ9eWhsd/8SttpBv4DcTNCOZPm1E8QEsNJmvryW7ds= Subject key identifier: 4D:E2:51:39:4F:5C:AD:ED:40:AF:EE:38:0B:D8:2B:97:D0:88:85:00 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584EF500E2294AB57466FB115F80 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7163da47-11da-32a3-b412-2ab9cc0719a1.roa Signing time: Tue 25 Aug 2026 19:03:20 +0000 ROA not before: Tue 25 Aug 2026 19:03:20 +0000 ROA not after: Mon 23 Nov 2026 20:03:20 +0000 asID: 40526 IP address blocks: 8.21.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f5:00:e2:29:4a:b5:74:66:fb:11:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 25 19:03:20 2026 GMT Not After : Nov 23 20:03:20 2026 GMT Subject: CN=b58e4603-c10f-4c86-b22f-aab085bae6bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c1:9b:84:34:e1:cb:ee:c9:95:63:be:51:39: c6:c2:18:0b:dc:4a:ec:c4:0d:f2:eb:55:dd:9a:36: ce:03:b3:dc:b3:35:16:38:38:38:12:89:97:ed:10: e9:68:2d:c8:a5:32:10:f3:1a:c3:5a:43:ec:c3:a7: 57:7e:2c:11:e4:ce:bd:90:1e:dc:59:74:44:72:08: 74:c0:15:9d:82:d9:43:9c:05:21:8f:b3:19:27:8f: db:52:35:e8:63:69:7a:29:df:24:c6:94:0a:29:f9: 19:2a:ad:6d:6e:fd:58:03:31:82:db:56:46:cb:15: 8b:23:dc:2a:7f:4a:82:81:0c:a2:11:3f:a9:95:d1: 0e:e0:b0:44:c4:53:c9:1d:7c:32:18:7e:b9:ba:81: a9:6b:05:6d:e4:1e:c5:2c:93:08:0f:d7:2a:32:8d: 1b:4f:72:80:83:cf:85:65:34:76:a5:c9:cb:88:7b: 10:f5:e5:d2:68:9c:f7:9e:58:fa:48:3b:c3:b5:9f: dd:62:ec:b3:f3:de:bc:38:1a:b1:a9:0e:76:9d:a1: 50:a0:b6:23:54:e6:65:dc:df:aa:54:bb:8d:ce:6f: 9d:0d:56:cc:70:01:8b:f5:20:8d:2c:95:a5:81:a4: 44:18:42:52:1d:da:6f:b3:60:a9:7b:b1:45:72:26: 77:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E2:51:39:4F:5C:AD:ED:40:AF:EE:38:0B:D8:2B:97:D0:88:85:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7163da47-11da-32a3-b412-2ab9cc0719a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.21.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:67:02:e4:b9:25:c1:0d:b5:ba:41:f1:8c:83:20:01:f8:a4: 26:fe:b7:6e:5c:19:9b:45:47:66:ba:66:7e:64:47:f7:b0:6a: 78:ff:95:cd:49:f5:c8:29:80:8f:a9:79:b6:41:fa:43:00:3c: 12:8c:17:08:c7:50:3e:90:0b:63:4f:31:cb:7f:af:ca:a6:aa: a5:69:34:cc:1e:f3:16:1d:34:63:c3:12:5d:77:97:0d:af:53: d5:91:1e:f9:b7:6b:a7:44:27:2d:4d:e8:72:56:b3:28:6e:8a: cf:31:a8:3c:78:8e:4b:5f:25:c2:6c:22:f9:ab:3b:26:42:52: 37:94:92:a1:f7:e8:57:5e:fa:2d:dc:6e:c0:a0:7c:90:87:61: 9a:d5:9e:5f:88:04:da:c4:f8:89:f6:6a:39:b5:2b:b1:8a:c1: ca:61:6e:ff:83:63:ea:ae:cf:64:1c:45:42:da:f1:e9:31:d0: 81:73:5b:e8:5e:2b:d9:dc:f3:e5:67:97:67:df:6b:b5:f0:25: 72:84:13:f3:57:1e:6f:99:42:a8:ed:c2:8f:1c:c3:68:4a:61: e5:2e:22:64:cd:e3:94:63:82:f5:db:8b:b2:15:40:5d:8d:97: 65:d7:a6:fe:cf:5e:82:0b:34:c7:e5:fb:3b:38:4f:14:97:39: 62:11:6d:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE71AOIpSrV0ZvsRX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDgyNTE5MDMyMFoXDTI2MTEyMzIwMDMyMFowLzEtMCsGA1UEAxMk YjU4ZTQ2MDMtYzEwZi00Yzg2LWIyMmYtYWFiMDg1YmFlNmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cGbhDThy+7JlWO+UTnGwhgL3ErsxA3y61Xd mjbOA7PcszUWODg4EomX7RDpaC3IpTIQ8xrDWkPsw6dXfiwR5M69kB7cWXREcgh0 wBWdgtlDnAUhj7MZJ4/bUjXoY2l6Kd8kxpQKKfkZKq1tbv1YAzGC21ZGyxWLI9wq f0qCgQyiET+pldEO4LBExFPJHXwyGH65uoGpawVt5B7FLJMID9cqMo0bT3KAg8+F ZTR2pcnLiHsQ9eXSaJz3nlj6SDvDtZ/dYuyz8968OBqxqQ52naFQoLYjVOZl3N+q VLuNzm+dDVbMcAGL9SCNLJWlgaREGEJSHdpvs2Cpe7FFciZ3UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3iUTlPXK3tQK/uOAvYK5fQiIUAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNzE2M2RhNDctMTFkYS0z MmEzLWI0MTItMmFiOWNjMDcxOWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCCBVEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBnAuS5JcENtbpB8YyDIAH4pCb+t25cGZtFR2a6Zn5kR/ewanj/lc1J 9cgpgI+pebZB+kMAPBKMFwjHUD6QC2NPMct/r8qmqqVpNMwe8xYdNGPDEl13lw2v U9WRHvm3a6dEJy1N6HJWsyhuis8xqDx4jktfJcJsIvmrOyZCUjeUkqH36Fde+i3c bsCgfJCHYZrVnl+IBNrE+In2ajm1K7GKwcphbv+DY+quz2QcRULa8ekx0IFzW+he K9nc8+Vnl2ffa7XwJXKEE/NXHm+ZQqjtwo8cw2hKYeUuImTN45RjgvXbi7IVQF2N l2XXpv7PXoILNMfl+zs4TxSXOWIRbbQ= -----END CERTIFICATE-----Generated at Sun Sep 20 15:00:43 2026 by rpki-client