$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8c3507e9-1d71-3f13-874f-8f331de4a8bb.roa File: 8c3507e9-1d71-3f13-874f-8f331de4a8bb.roa (raw, json) Hash identifier: H/sXPlNUQy5PP9vg93yn7bNyikh1GMnB1COe2F+eMrg= Subject key identifier: 22:8B:04:E5:47:DE:74:7D:1B:92:F9:7C:C4:64:F7:F5:AB:3A:A8:5E Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584D5E1A638BC31021F112759F00 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8c3507e9-1d71-3f13-874f-8f331de4a8bb.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 393795 IP address blocks: 8.41.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:63:8b:c3:10:21:f1:12:75:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=d8ac3d95-859f-4a9d-a17f-fff7d89afe28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:82:3f:55:87:b6:2a:99:15:2a:5b:34:a9:87: 96:95:b0:d2:cc:52:f1:8f:9b:58:0c:97:38:2f:78: 74:3e:51:22:89:8f:08:65:bf:78:67:f0:38:90:bc: 5f:b4:45:e3:30:54:63:97:9f:4f:17:1d:5f:a4:b8: 86:a0:c0:2c:92:f8:4e:22:b8:9e:70:8b:69:40:fd: f0:6d:2f:ce:b4:bc:77:4c:fc:1d:ab:98:5b:0d:47: e9:c2:1b:80:f1:a6:1b:c9:ad:9a:14:be:fb:2e:05: e1:08:4a:79:39:fd:2f:7e:0f:46:85:75:fc:17:ef: b3:4e:92:69:7e:91:00:f0:fc:dc:fd:67:39:cf:1a: 77:b4:74:ed:80:d9:66:fa:45:5c:2f:ee:10:0e:bd: 79:a2:40:b1:ca:17:58:2a:34:48:bb:1b:99:55:2b: 75:95:b6:27:75:11:85:50:01:c6:24:2a:ce:d0:c8: 3b:c7:d2:0a:ae:e9:a6:73:21:dc:6e:ec:0e:62:4d: e0:4c:cf:20:95:71:61:94:44:13:25:4d:83:e0:e3: e5:7e:a8:18:0e:47:8b:b5:15:3c:58:e5:e9:4b:4e: b5:2b:01:fe:c2:24:3d:df:c2:73:db:30:5b:f9:db: 98:d0:71:25:a5:64:0a:f3:1e:6e:89:d2:2b:98:9a: 82:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8B:04:E5:47:DE:74:7D:1B:92:F9:7C:C4:64:F7:F5:AB:3A:A8:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8c3507e9-1d71-3f13-874f-8f331de4a8bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.41.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:c1:18:2d:7c:6e:d6:c2:d8:3a:15:b8:ba:d8:29:83:db:76: 3f:19:7e:12:e2:b3:bf:bb:1f:6e:64:29:0c:ab:9b:d9:09:27: cf:c7:0a:3c:3e:85:47:97:96:29:cc:31:43:c9:34:75:f9:36: 13:39:c3:42:f0:ee:f7:ee:4e:c5:e4:88:4a:a6:7b:04:00:20: 1b:6c:23:c8:f0:3d:6f:51:d2:4b:63:ee:d4:6f:8e:7b:ed:72: 80:a6:2f:77:63:e9:2f:a0:d7:72:0c:39:6f:d3:a0:98:71:73: 7b:38:05:e1:24:52:a4:46:cd:af:9b:83:06:23:f9:08:ce:03: 3b:eb:45:00:50:06:bd:8e:9d:70:6a:ec:e1:e7:cb:bf:e2:78: ea:46:d8:a8:59:94:fc:67:df:a0:58:07:f6:43:86:92:78:01: 47:86:c5:12:0d:a9:f6:0b:82:4f:ef:f5:84:73:fb:65:58:f9: 1b:f7:4f:1e:ff:53:c6:f1:ce:7e:cb:74:bd:70:3e:59:4f:0a: e6:66:b0:90:ed:c8:35:56:4d:9f:da:35:2f:ee:87:53:e1:f7: 45:82:13:3a:2e:c5:83:4d:59:03:f7:97:cb:f3:b7:8b:ae:4f: e0:cd:e8:e9:62:43:dd:dd:8d:19:d3:af:dd:84:ad:54:60:fa: ca:16:2a:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGmOLwxAh8RJ1nwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk ZDhhYzNkOTUtODU5Zi00YTlkLWExN2YtZmZmN2Q4OWFmZTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4I/VYe2KpkVKls0qYeWlbDSzFLxj5tYDJc4 L3h0PlEiiY8IZb94Z/A4kLxftEXjMFRjl59PFx1fpLiGoMAskvhOIriecItpQP3w bS/OtLx3TPwdq5hbDUfpwhuA8aYbya2aFL77LgXhCEp5Of0vfg9GhXX8F++zTpJp fpEA8Pzc/Wc5zxp3tHTtgNlm+kVcL+4QDr15okCxyhdYKjRIuxuZVSt1lbYndRGF UAHGJCrO0Mg7x9IKrummcyHcbuwOYk3gTM8glXFhlEQTJU2D4OPlfqgYDkeLtRU8 WOXpS061KwH+wiQ938Jz2zBb+duY0HElpWQK8x5uidIrmJqCCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKLBOVH3nR9G5L5fMRk9/WrOqheMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvOGMzNTA3ZTktMWQ3MS0z ZjEzLTg3NGYtOGYzMzFkZTRhOGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACCloMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrBGC18btbC2DoVuLrYKYPbdj8ZfhLis7+7H25kKQyrm9kJJ8/HCjw+ hUeXlinMMUPJNHX5NhM5w0Lw7vfuTsXkiEqmewQAIBtsI8jwPW9R0ktj7tRvjnvt coCmL3dj6S+g13IMOW/ToJhxc3s4BeEkUqRGza+bgwYj+QjOAzvrRQBQBr2OnXBq 7OHny7/ieOpG2KhZlPxn36BYB/ZDhpJ4AUeGxRINqfYLgk/v9YRz+2VY+Rv3Tx7/ U8bxzn7LdL1wPllPCuZmsJDtyDVWTZ/aNS/uh1Ph90WCEzouxYNNWQP3l8vzt4uu T+DN6OliQ93djRnTr92ErVRg+soWKj4= -----END CERTIFICATE-----Generated at Fri Apr 17 22:03:14 2026 by rpki-client