$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7b4b06c8-1b72-31d8-a9ee-e72629b24a08.roa File: 7b4b06c8-1b72-31d8-a9ee-e72629b24a08.roa (raw, json) Hash identifier: hqw+jgZMkFWLWKeod/h7IyQlpOwy3YbJ4AbxqzLSQ7w= Subject key identifier: 2A:D0:59:2B:3C:0F:15:4A:F6:4F:0F:09:46:18:98:E0:46:06:50:62 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584CAE5714AD614E24AE56E99880 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7b4b06c8-1b72-31d8-a9ee-e72629b24a08.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 3356 IP address blocks: 8.39.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:14:ad:61:4e:24:ae:56:e9:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=d10fb682-0af9-4fdf-86e2-470f7a559a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e7:39:fd:ce:42:04:40:f5:dc:2f:58:bb:38: 5d:49:cf:0c:02:41:dd:a4:cc:4f:aa:fc:5a:2c:b9: a6:1e:69:3f:6f:5f:81:25:2c:4f:e3:ca:6a:b7:72: 98:a5:29:5c:1a:1f:6d:a2:99:d6:bb:4c:23:c1:1d: 84:42:c5:57:d0:84:92:fd:b4:e4:73:ff:dd:2c:15: b6:d3:b6:7e:ec:04:78:3c:34:85:ad:6c:79:33:fb: 51:46:05:d0:a0:77:36:d7:7e:32:b8:9c:12:25:4a: eb:92:83:04:9c:3a:fe:79:e0:8b:07:d4:8a:32:1c: cf:47:9e:bc:75:49:3e:cc:fb:d5:38:99:cb:4d:8d: c7:dd:00:ae:15:cf:cf:37:a8:0d:91:00:9e:b6:61: e3:72:32:ff:58:09:19:b9:ae:0c:ca:da:5b:16:71: 56:85:2d:5f:20:cc:50:47:bf:0e:08:15:23:22:6b: 60:b2:51:5d:79:97:d9:92:5b:3b:a4:c0:a4:36:6b: 5c:e0:f7:7c:0e:7f:26:58:8d:5f:55:94:6e:66:a8: 22:4a:db:63:a2:c6:31:2b:37:b5:45:59:7f:3b:a2: 1a:4c:ae:28:46:d6:8f:6c:9e:2b:3d:79:99:9c:7b: 75:24:34:55:eb:1e:88:3c:75:b0:30:5c:41:40:68: 65:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D0:59:2B:3C:0F:15:4A:F6:4F:0F:09:46:18:98:E0:46:06:50:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7b4b06c8-1b72-31d8-a9ee-e72629b24a08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.39.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:4d:68:9b:13:e2:8e:94:bb:d3:ca:db:09:10:8e:1f:af:10: b8:dc:f2:ef:c0:e9:2e:d3:a5:a2:c9:fd:a4:f8:56:26:3c:57: d1:32:9b:06:a2:72:48:c2:50:36:86:64:62:3a:b4:fd:d1:71: f0:f4:93:43:eb:8f:89:50:ca:c2:fd:85:05:5d:c4:37:7b:77: c5:32:c8:58:e6:06:53:b9:9d:c7:de:5a:d3:a5:6b:c5:e0:c4: 4a:5a:1a:c4:83:c8:32:07:38:71:59:b3:bb:1c:27:a3:10:42: 0d:d1:61:e0:5c:40:5a:d1:42:ae:d0:7e:db:18:b9:61:a0:c8: 92:83:07:3a:f2:7c:89:92:87:a1:5d:91:c3:64:3f:67:16:10: d8:f1:cb:47:33:fe:f2:61:9b:79:36:e5:55:6c:02:b1:ff:5c: 28:60:86:d8:3e:2b:d9:f7:d5:3a:4c:02:ac:b5:e3:4c:0f:cc: b8:d6:0e:30:16:59:ed:9b:6f:b4:6f:58:17:86:89:46:8b:8c: 46:92:4d:d3:39:8a:ec:15:44:96:5b:9a:70:e6:ff:4b:95:fd: 60:1b:fb:c5:a3:79:94:63:a2:d9:bd:2a:a0:37:91:42:a4:27: 97:44:32:15:47:3e:15:30:6c:5e:87:c3:3d:64:be:96:c8:40: 84:82:54:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVxStYU4krlbpmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZDEwZmI2ODItMGFmOS00ZmRmLTg2ZTItNDcwZjdhNTU5YTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOc5/c5CBED13C9YuzhdSc8MAkHdpMxPqvxa LLmmHmk/b1+BJSxP48pqt3KYpSlcGh9topnWu0wjwR2EQsVX0ISS/bTkc//dLBW2 07Z+7AR4PDSFrWx5M/tRRgXQoHc2134yuJwSJUrrkoMEnDr+eeCLB9SKMhzPR568 dUk+zPvVOJnLTY3H3QCuFc/PN6gNkQCetmHjcjL/WAkZua4MytpbFnFWhS1fIMxQ R78OCBUjImtgslFdeZfZkls7pMCkNmtc4Pd8Dn8mWI1fVZRuZqgiSttjosYxKze1 RVl/O6IaTK4oRtaPbJ4rPXmZnHt1JDRV6x6IPHWwMFxBQGhlPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrQWSs8DxVK9k8PCUYYmOBGBlBiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvN2I0YjA2YzgtMWI3Mi0z MWQ4LWE5ZWUtZTcyNjI5YjI0YTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACCehMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtNaJsT4o6Uu9PK2wkQjh+vELjc8u/A6S7TpaLJ/aT4ViY8V9Eymwai ckjCUDaGZGI6tP3RcfD0k0Prj4lQysL9hQVdxDd7d8UyyFjmBlO5ncfeWtOla8Xg xEpaGsSDyDIHOHFZs7scJ6MQQg3RYeBcQFrRQq7QftsYuWGgyJKDBzryfImSh6Fd kcNkP2cWENjxy0cz/vJhm3k25VVsArH/XChghtg+K9n31TpMAqy140wPzLjWDjAW We2bb7RvWBeGiUaLjEaSTdM5iuwVRJZbmnDm/0uV/WAb+8WjeZRjotm9KqA3kUKk J5dEMhVHPhUwbF6Hwz1kvpbIQISCVDs= -----END CERTIFICATE-----Generated at Mon Mar 2 18:48:57 2026 by rpki-client