$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8d658794-56d7-3b38-8373-803b9414aa8b.roa File: 8d658794-56d7-3b38-8373-803b9414aa8b.roa (raw, json) Hash identifier: dYYYwAj59+SWQ6l1bgzNE4N+kFXQNXh+nSdCXr2ALIU= Subject key identifier: C5:41:2D:45:E8:BF:9D:98:1B:A2:A3:CC:E5:33:5F:05:A0:08:3F:00 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584D7A052131F21AB01F259EB900 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8d658794-56d7-3b38-8373-803b9414aa8b.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 20473 IP address blocks: 8.9.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:21:31:f2:1a:b0:1f:25:9e:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=597d2a7a-a249-4afa-b2b2-72affb39dd1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b5:39:c2:cc:af:13:5f:cf:2a:2a:6c:13:50: 0b:01:f8:16:49:c9:9d:f1:74:11:e7:d9:8e:ae:95: b3:18:ec:9c:91:44:5d:78:fd:23:9b:d7:fe:da:10: da:f0:52:ee:b0:c5:07:1b:0f:74:29:a5:7f:76:e3: 44:d4:91:8f:63:1d:cd:7d:cc:79:0e:7e:0c:f2:ae: ed:05:24:c9:50:ad:dd:f2:ef:cd:24:94:aa:f1:8a: 7d:31:62:74:de:0a:4a:f9:29:cd:69:cd:16:4a:4a: 4f:88:c2:a4:ee:6b:be:c2:46:c1:55:b3:78:0b:6a: 0d:89:82:1b:55:4a:0e:3f:3e:5d:2c:ec:7b:54:e7: 54:62:f6:a3:21:1c:de:fb:58:fd:b7:b6:f9:d0:95: 4f:de:aa:b3:c2:8b:bc:dd:2c:63:20:ba:0b:5c:04: d0:82:f7:14:0c:9c:57:d5:14:62:92:d5:78:5e:22: 88:e4:43:b7:98:df:f4:f0:c8:61:bf:7e:c2:cf:db: 47:e2:de:0d:11:d7:4a:6d:23:53:a7:e8:4e:31:04: ab:6c:4f:05:e9:6a:c6:83:b6:f2:43:e2:54:a8:7f: c7:2b:32:59:74:2b:64:d2:9a:f6:e8:0e:5c:0b:e5: 05:c3:1b:fc:b4:33:fb:df:29:33:8d:0e:34:7f:66: e9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:41:2D:45:E8:BF:9D:98:1B:A2:A3:CC:E5:33:5F:05:A0:08:3F:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8d658794-56d7-3b38-8373-803b9414aa8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.9.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:2f:d4:c0:e1:d6:c6:ef:40:72:3c:df:44:a5:b6:26:0f:a5: eb:14:08:4b:e6:34:61:eb:2a:23:0b:96:88:39:9f:37:62:ae: 07:42:f7:16:b6:5e:15:20:9f:8a:41:e9:f1:11:65:9c:07:e8: 52:4d:e3:6e:a6:69:04:93:c6:e7:4d:1e:c0:93:56:7a:a2:4a: c2:c8:4a:bc:a4:42:b8:c3:25:a4:15:82:95:5f:da:5c:47:32: 73:7e:6a:a0:93:b1:a8:b7:c4:3a:66:d6:52:51:05:a1:61:5b: f4:44:b5:8d:ce:32:01:a2:d5:df:68:76:f6:2e:21:55:60:8e: 40:65:b2:16:74:6c:9b:5c:a3:b2:6c:e3:0a:fc:70:76:8e:1e: fe:f1:eb:07:41:bc:dd:e7:d4:02:75:6f:58:d1:03:fc:8e:a2: e9:67:f2:13:6f:e9:a2:90:30:6e:e9:6e:e2:72:e0:69:ae:02: 15:24:b3:e9:e9:29:9f:3e:dc:45:db:d0:ff:58:cc:11:3c:03: 8b:95:2e:9f:5b:f1:e2:2a:24:d8:f6:15:77:0c:46:38:80:b0: fe:1e:48:1b:3f:8b:5e:8d:b1:ae:88:f9:9a:b3:73:be:c5:12: 8a:07:e6:bd:bc:10:c6:e1:aa:a4:b3:e2:9e:32:53:ad:34:4a: fa:f3:b9:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BSEx8hqwHyWeuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk NTk3ZDJhN2EtYTI0OS00YWZhLWIyYjItNzJhZmZiMzlkZDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbU5wsyvE1/PKipsE1ALAfgWScmd8XQR59mO rpWzGOyckURdeP0jm9f+2hDa8FLusMUHGw90KaV/duNE1JGPYx3Nfcx5Dn4M8q7t BSTJUK3d8u/NJJSq8Yp9MWJ03gpK+SnNac0WSkpPiMKk7mu+wkbBVbN4C2oNiYIb VUoOPz5dLOx7VOdUYvajIRze+1j9t7b50JVP3qqzwou83SxjILoLXATQgvcUDJxX 1RRiktV4XiKI5EO3mN/08Mhhv37Cz9tH4t4NEddKbSNTp+hOMQSrbE8F6WrGg7by Q+JUqH/HKzJZdCtk0pr26A5cC+UFwxv8tDP73ykzjQ40f2bpbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVBLUXov52YG6KjzOUzXwWgCD8AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvOGQ2NTg3OTQtNTZkNy0z YjM4LTgzNzMtODAzYjk0MTRhYThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAkFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYv1MDh1sbvQHI830SltiYPpesUCEvmNGHrKiMLlog5nzdirgdC9xa2 XhUgn4pB6fERZZwH6FJN426maQSTxudNHsCTVnqiSsLISrykQrjDJaQVgpVf2lxH MnN+aqCTsai3xDpm1lJRBaFhW/REtY3OMgGi1d9odvYuIVVgjkBlshZ0bJtco7Js 4wr8cHaOHv7x6wdBvN3n1AJ1b1jRA/yOouln8hNv6aKQMG7pbuJy4GmuAhUks+np KZ8+3EXb0P9YzBE8A4uVLp9b8eIqJNj2FXcMRjiAsP4eSBs/i16Nsa6I+Zqzc77F EooH5r28EMbhqqSz4p4yU600SvrzuW4= -----END CERTIFICATE-----Generated at Fri Apr 17 20:57:35 2026 by rpki-client