$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a0776cea-a3cc-32f7-81d1-b9383f1f2597.roa File: a0776cea-a3cc-32f7-81d1-b9383f1f2597.roa (raw, json) Hash identifier: QZpdkFxi9BIpDfK51hyBt8cIg4VyCj98SivGqY5k34w= Subject key identifier: 27:70:A5:AC:E1:B1:EA:5F:93:2B:68:ED:05:CB:CA:9F:98:04:84:77 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584CCD0C9108F3D80A609A1ED380 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a0776cea-a3cc-32f7-81d1-b9383f1f2597.roa Signing time: Mon 09 Feb 2026 02:00:31 +0000 ROA not before: Mon 09 Feb 2026 02:00:31 +0000 ROA not after: Sun 10 May 2026 01:00:31 +0000 asID: 3356 IP address blocks: 8.23.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cd:0c:91:08:f3:d8:0a:60:9a:1e:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Feb 9 02:00:31 2026 GMT Not After : May 10 01:00:31 2026 GMT Subject: CN=4f0d3ab0-2e35-4fe6-bf06-2b8172278da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:96:90:31:8a:b3:50:8b:30:e5:b4:3d:8a:69: 4c:53:56:b5:48:f6:4f:8d:f2:b4:a2:0f:ca:05:ca: fc:29:d2:56:c0:2c:85:f3:be:59:42:d2:a0:59:87: c4:81:84:c2:18:d9:be:25:bd:8b:54:1b:a1:45:df: 0b:d6:84:7b:d1:73:82:cb:6d:9f:b6:e8:1f:71:ca: d4:0d:1e:76:83:91:50:86:2a:e7:34:e2:18:c8:56: 35:08:dc:29:52:08:58:5b:69:41:7a:d8:f5:9f:5a: ed:c1:37:b2:6e:04:d6:e9:3b:fe:fa:28:85:02:b7: ca:c0:40:9d:40:37:cc:d8:7e:f9:27:ce:7f:17:bd: 84:37:02:12:34:d7:07:fb:c2:79:e6:2d:f1:6f:55: e1:0b:b5:93:4a:a9:72:67:2d:76:dd:ff:e5:c2:4b: 7b:bc:1e:43:e4:a8:a0:f1:38:74:7b:53:e5:7d:f8: d2:cd:64:a0:e4:b9:16:2d:6d:71:37:c7:a1:79:b8: 36:f3:1d:ea:84:8c:bb:ad:cd:95:49:79:7b:b1:8c: 1f:81:0a:41:d3:62:13:ce:88:02:a0:cb:5e:5c:ca: 47:f6:e5:d4:7f:bc:29:e8:70:b0:0d:8b:e0:72:46: 39:58:48:49:29:ef:4b:0f:ce:36:76:1f:68:2f:74: 1d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:70:A5:AC:E1:B1:EA:5F:93:2B:68:ED:05:CB:CA:9F:98:04:84:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a0776cea-a3cc-32f7-81d1-b9383f1f2597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.23.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:cb:68:e6:58:47:b1:62:e1:65:57:56:dd:d2:67:ce:83:1d: 8e:4d:dc:8e:e5:0f:a9:63:b7:74:8d:de:1d:24:c0:b4:ef:f8: 06:8c:3f:a5:d6:9a:44:2f:0e:24:49:92:b6:56:32:62:f5:dd: aa:dd:8d:43:a0:bb:4d:a3:8e:61:24:e7:b0:92:f0:d9:c9:d1: ac:e5:f9:ae:44:94:ff:77:4a:ef:a8:bb:7a:29:c9:9e:3d:7f: e2:70:02:9c:93:07:9e:30:4e:e2:69:a8:56:24:89:6c:23:71: b7:62:ff:29:48:cc:14:a8:bb:f4:75:5e:55:a3:73:60:3f:a3: 9f:ba:3d:b6:e0:f5:7a:b0:aa:cb:92:4e:48:8d:7f:19:62:82: b9:4c:e1:ce:fd:a9:b6:81:78:3d:9d:a4:f3:37:dc:41:e6:ca: 45:2a:ab:ea:b8:d7:e4:44:6f:44:04:f6:05:7f:3d:be:0e:5d: 9e:08:72:14:ca:37:58:1e:91:5c:bc:03:2b:ac:64:fc:d2:b2: 2d:b7:f4:e9:cb:34:f0:54:dd:9f:c4:33:bf:9c:74:c2:87:a2: f1:5f:0c:64:85:d8:5f:cf:d3:9d:41:af:5c:9f:48:f0:17:78: c5:af:56:f0:9e:66:75:61:86:0b:d3:ed:ed:bc:31:92:27:0f: 9d:ab:4d:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzNDJEI89gKYJoe04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk NGYwZDNhYjAtMmUzNS00ZmU2LWJmMDYtMmI4MTcyMjc4ZGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5aQMYqzUIsw5bQ9imlMU1a1SPZPjfK0og/K Bcr8KdJWwCyF875ZQtKgWYfEgYTCGNm+Jb2LVBuhRd8L1oR70XOCy22ftugfccrU DR52g5FQhirnNOIYyFY1CNwpUghYW2lBetj1n1rtwTeybgTW6Tv++iiFArfKwECd QDfM2H75J85/F72ENwISNNcH+8J55i3xb1XhC7WTSqlyZy123f/lwkt7vB5D5Kig 8Th0e1PlffjSzWSg5LkWLW1xN8ehebg28x3qhIy7rc2VSXl7sYwfgQpB02ITzogC oMteXMpH9uXUf7wp6HCwDYvgckY5WEhJKe9LD842dh9oL3Qd3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdwpazhsepfkyto7QXLyp+YBIR3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYTA3NzZjZWEtYTNjYy0z MmY3LTgxZDEtYjkzODNmMWYyNTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQECBegMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALLLaOZYR7Fi4WVXVt3SZ86DHY5N3I7lD6ljt3SN3h0kwLTv+AaMP6XW mkQvDiRJkrZWMmL13ardjUOgu02jjmEk57CS8NnJ0azl+a5ElP93Su+ou3opyZ49 f+JwApyTB54wTuJpqFYkiWwjcbdi/ylIzBSou/R1XlWjc2A/o5+6Pbbg9XqwqsuS TkiNfxligrlM4c79qbaBeD2dpPM33EHmykUqq+q41+REb0QE9gV/Pb4OXZ4IchTK N1gekVy8AyusZPzSsi239OnLNPBU3Z/EM7+cdMKHovFfDGSF2F/P051Br1yfSPAX eMWvVvCeZnVhhgvT7e28MZInD52rTes= -----END CERTIFICATE-----Generated at Mon Mar 2 13:26:37 2026 by rpki-client