$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7a78821a-8f23-3da9-bc7f-917597af54ea.roa File: 7a78821a-8f23-3da9-bc7f-917597af54ea.roa (raw, json) Hash identifier: fM2D7yYNgJ2dKdVl8ApPWoWlaHCmd0yynrlagsC3VjI= Subject key identifier: 12:71:A3:65:48:57:26:86:6A:5A:33:00:1A:27:36:E0:9B:C4:A3:A9 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584CD99CC6458E3E2AED257CBE20 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7a78821a-8f23-3da9-bc7f-917597af54ea.roa Signing time: Fri 13 Feb 2026 14:00:41 +0000 ROA not before: Fri 13 Feb 2026 14:00:41 +0000 ROA not after: Thu 14 May 2026 13:00:41 +0000 asID: 22898 IP address blocks: 8.40.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d9:9c:c6:45:8e:3e:2a:ed:25:7c:be:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Feb 13 14:00:41 2026 GMT Not After : May 14 13:00:41 2026 GMT Subject: CN=8c3c664f-d1ea-41f4-b244-69da0e53d050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:40:f0:c4:34:78:c4:5f:2c:c6:68:1d:8c:6c: 44:65:6d:cc:9a:0e:f2:a7:5e:55:8f:d9:13:f5:cd: 8a:c3:98:6b:9e:7a:44:14:80:22:be:78:22:e3:27: f6:4f:2e:76:f3:6f:ca:f1:07:8b:be:bc:52:b4:9d: fa:53:83:41:7e:98:26:20:06:7b:1f:3d:97:e5:18: 3f:c2:9c:12:96:e2:5c:8f:4d:49:38:6d:f3:6f:0d: 75:db:d1:6f:0f:37:05:ec:b3:d3:f3:c8:e6:e1:8d: 02:00:c0:de:55:2b:f4:ce:02:b3:0a:c9:af:40:03: 0d:86:23:28:58:33:ba:29:f5:9b:e0:c3:7a:6d:8c: c4:c0:15:b1:e6:72:36:48:2f:4f:a6:cc:1f:78:42: 85:6b:97:18:b4:8b:5b:44:71:94:02:c4:bc:cf:b6: e3:31:85:86:f7:b6:4b:3e:3d:a3:10:f8:e4:5c:a3: 3c:d1:4d:a1:6b:34:31:27:a2:27:55:9a:ab:69:63: 03:6f:4a:f6:fc:c7:5f:e0:da:5f:63:4b:aa:61:63: 04:0b:ed:51:f7:46:a7:7e:96:0a:58:eb:4a:7f:9a: aa:10:6d:3e:48:2a:47:e6:0d:ac:6e:eb:c4:c0:e0: c4:11:b5:e3:90:fa:22:bd:32:53:04:7b:ed:f0:87: f0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:71:A3:65:48:57:26:86:6A:5A:33:00:1A:27:36:E0:9B:C4:A3:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7a78821a-8f23-3da9-bc7f-917597af54ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.40.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:15:69:2c:bf:d9:ec:36:3e:6c:3f:9b:64:14:e1:4a:d8:6e: ee:a4:1c:bd:cc:e5:a3:7d:77:ff:19:e1:e4:2a:62:40:1d:3c: 7a:51:32:3b:c4:4d:5f:37:bd:d8:2f:04:c7:22:42:b0:a2:18: e2:8a:3d:84:7c:28:dd:fc:7c:6f:48:ed:9f:96:22:04:fc:b7: ff:10:de:19:c6:da:22:fc:33:39:dd:3e:47:b8:ca:be:8a:ad: 0c:8a:ab:2d:ba:9f:33:51:72:fe:b9:92:c3:dc:6d:f8:21:52: 49:22:0e:fc:14:51:11:7c:86:3d:4b:e8:f8:04:48:11:ee:e5: 61:c5:1e:6b:44:24:37:11:7b:eb:da:98:92:88:43:3e:5e:08: 5e:d0:ef:6e:9a:54:46:bc:45:a3:e2:db:70:51:65:1d:a3:a9: 01:f9:a0:80:14:41:9e:c1:2e:64:d1:63:1e:26:44:50:23:46: 9b:d8:38:5c:22:ad:45:0a:e1:17:07:c8:34:e9:cb:ec:50:fa: 35:08:f2:f2:65:5e:2c:bd:8c:37:8a:c1:27:de:80:f1:bc:a0: cd:50:87:b4:18:63:39:fe:e3:f3:fc:8b:b7:fd:f4:ad:0a:7d: 45:80:50:03:be:f9:d7:a8:41:fc:87:7d:9f:92:f3:56:e7:ce: 20:6a:c2:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzZnMZFjj4q7SV8viAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDIxMzE0MDA0MVoXDTI2MDUxNDEzMDA0MVowLzEtMCsGA1UEAxMk OGMzYzY2NGYtZDFlYS00MWY0LWIyNDQtNjlkYTBlNTNkMDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUDwxDR4xF8sxmgdjGxEZW3Mmg7yp15Vj9kT 9c2Kw5hrnnpEFIAivngi4yf2Ty5282/K8QeLvrxStJ36U4NBfpgmIAZ7Hz2X5Rg/ wpwSluJcj01JOG3zbw1129FvDzcF7LPT88jm4Y0CAMDeVSv0zgKzCsmvQAMNhiMo WDO6KfWb4MN6bYzEwBWx5nI2SC9PpswfeEKFa5cYtItbRHGUAsS8z7bjMYWG97ZL Pj2jEPjkXKM80U2hazQxJ6InVZqraWMDb0r2/Mdf4NpfY0uqYWMEC+1R90anfpYK WOtKf5qqEG0+SCpH5g2sbuvEwODEEbXjkPoivTJTBHvt8IfwlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJxo2VIVyaGalozABonNuCbxKOpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvN2E3ODgyMWEtOGYyMy0z ZGE5LWJjN2YtOTE3NTk3YWY1NGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDCCj4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcVaSy/2ew2Pmw/m2QU4UrYbu6kHL3M5aN9d/8Z4eQqYkAdPHpRMjvE TV83vdgvBMciQrCiGOKKPYR8KN38fG9I7Z+WIgT8t/8Q3hnG2iL8MzndPke4yr6K rQyKqy26nzNRcv65ksPcbfghUkkiDvwUURF8hj1L6PgESBHu5WHFHmtEJDcRe+va mJKIQz5eCF7Q726aVEa8RaPi23BRZR2jqQH5oIAUQZ7BLmTRYx4mRFAjRpvYOFwi rUUK4RcHyDTpy+xQ+jUI8vJlXiy9jDeKwSfegPG8oM1Qh7QYYzn+4/P8i7f99K0K fUWAUAO++deoQfyHfZ+S81bnziBqwpU= -----END CERTIFICATE-----Generated at Mon Mar 2 14:11:56 2026 by rpki-client