$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/863dcff2-38a8-3c63-aaa0-3c613db0eb2a.roa File: 863dcff2-38a8-3c63-aaa0-3c613db0eb2a.roa (raw, json) Hash identifier: bRj+VbzeXtMbZqCnOwNknO+pTYgalWYerFMR+4fQfNk= Subject key identifier: BE:0A:0B:5C:44:92:31:8E:53:3E:A0:0A:20:83:34:37:E6:AE:99:30 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584CC611E566BCF1A9F9861566A0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/863dcff2-38a8-3c63-aaa0-3c613db0eb2a.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 394161 IP address blocks: 8.45.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:11:e5:66:bc:f1:a9:f9:86:15:66:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=4d2d242d-e9b3-43f2-855c-ebb044b05fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ae:3a:d5:8f:5b:4e:97:9a:53:66:a5:d6:39: 85:96:cc:3a:0f:fd:d5:2a:95:53:1f:19:a4:78:b8: 6f:07:3e:69:df:55:a3:c4:c6:a4:10:a7:fc:65:9b: 6e:e2:48:ce:0d:c1:94:f2:92:b7:e0:5d:74:b8:29: 20:f1:29:44:f6:d7:73:af:59:f0:e0:4e:88:d5:a1: 0d:6e:c6:4f:fa:f8:2a:f0:8a:c3:66:18:3d:97:8b: 88:3e:f6:4d:b9:e5:2b:92:62:58:17:e6:a4:bb:c3: 63:8d:21:ae:78:1e:1b:a9:4b:63:b7:e0:08:fb:c5: c2:0e:d7:d9:06:23:a5:1f:9b:bc:af:5e:ef:8a:16: 81:ce:7a:f9:0a:26:e9:f6:fe:5f:8b:84:cc:de:c2: c5:36:86:c8:9d:ba:74:58:2e:c9:35:d2:60:78:17: 73:5c:ad:61:d3:f4:9b:e3:a1:0a:83:86:1d:2e:1f: eb:0a:8e:5a:ac:5b:b5:68:c2:73:63:57:30:af:17: 2f:19:d8:9f:10:b4:60:81:7e:c3:43:b6:a7:9c:15: 5a:bb:e4:96:27:3b:bc:e7:5d:89:68:6e:2c:dd:48: 35:3b:8e:33:35:75:b4:17:3a:90:e0:9a:aa:7b:0e: ac:e6:c4:9b:aa:44:d0:ed:61:22:1a:59:35:65:83: 1b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:0A:0B:5C:44:92:31:8E:53:3E:A0:0A:20:83:34:37:E6:AE:99:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/863dcff2-38a8-3c63-aaa0-3c613db0eb2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.45.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:44:e9:91:de:43:74:07:34:67:1c:ff:bd:c6:aa:1a:f0:37: af:3b:e7:fc:da:f6:8b:ab:57:dc:2b:69:54:d0:9b:0c:3c:ed: 71:22:20:3e:52:91:6c:54:d3:ca:d8:76:51:bf:b9:f7:b3:fb: de:1c:df:ef:f8:fe:8f:69:22:55:2a:59:85:39:bb:86:73:53: 4d:77:43:4d:71:92:1d:0b:93:86:35:85:09:63:f9:5d:20:79: e3:58:23:e9:fc:3f:f0:58:c6:e3:bd:96:a8:9f:61:01:d7:a8: 2c:3f:df:8b:3e:11:37:bc:ba:65:3b:e7:6c:9d:5a:78:74:e6: 24:50:56:b4:8f:22:72:b3:aa:08:f8:57:88:92:94:9a:e5:ab: 93:84:c7:96:be:84:e8:b4:a9:f5:64:8f:34:f9:22:63:f8:a9: 1e:ce:52:28:35:39:92:62:45:15:54:ca:f0:d3:d0:ba:d2:fc: c9:60:b0:09:fe:ca:f8:e9:90:f1:37:32:6a:a1:22:1c:71:9d: fd:ad:5c:7f:66:e9:18:87:42:f0:2c:31:3a:c3:aa:54:80:ea: e6:e2:ca:9f:35:ac:cc:d2:e4:5e:8c:b4:24:85:8d:11:b9:d5: 9d:cd:40:87:2f:78:4e:04:70:62:9b:d4:f0:e5:18:a8:29:11: 8f:9b:62:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEeVmvPGp+YYVZqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk NGQyZDI0MmQtZTliMy00M2YyLTg1NWMtZWJiMDQ0YjA1ZmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6461Y9bTpeaU2al1jmFlsw6D/3VKpVTHxmk eLhvBz5p31WjxMakEKf8ZZtu4kjODcGU8pK34F10uCkg8SlE9tdzr1nw4E6I1aEN bsZP+vgq8IrDZhg9l4uIPvZNueUrkmJYF+aku8NjjSGueB4bqUtjt+AI+8XCDtfZ BiOlH5u8r17vihaBznr5Cibp9v5fi4TM3sLFNobInbp0WC7JNdJgeBdzXK1h0/Sb 46EKg4YdLh/rCo5arFu1aMJzY1cwrxcvGdifELRggX7DQ7annBVau+SWJzu8512J aG4s3Ug1O44zNXW0FzqQ4Jqqew6s5sSbqkTQ7WEiGlk1ZYMbTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4KC1xEkjGOUz6gCiCDNDfmrpkwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvODYzZGNmZjItMzhhOC0z YzYzLWFhYTAtM2M2MTNkYjBlYjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACC18MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARE6ZHeQ3QHNGcc/73GqhrwN6875/za9ourV9wraVTQmww87XEiID5S kWxU08rYdlG/ufez+94c3+/4/o9pIlUqWYU5u4ZzU013Q01xkh0Lk4Y1hQlj+V0g eeNYI+n8P/BYxuO9lqifYQHXqCw/34s+ETe8umU752ydWnh05iRQVrSPInKzqgj4 V4iSlJrlq5OEx5a+hOi0qfVkjzT5ImP4qR7OUig1OZJiRRVUyvDT0LrS/MlgsAn+ yvjpkPE3MmqhIhxxnf2tXH9m6RiHQvAsMTrDqlSA6ubiyp81rMzS5F6MtCSFjRG5 1Z3NQIcveE4EcGKb1PDlGKgpEY+bYoc= -----END CERTIFICATE-----Generated at Mon Mar 2 12:43:36 2026 by rpki-client