$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/b5412b7e-037a-30bf-9e17-79943b597ca0.roa File: b5412b7e-037a-30bf-9e17-79943b597ca0.roa (raw, json) Hash identifier: wsjzTgWWjMLvyK2I2hTGhN6dhI7IStR1dW5FdKH51pk= Subject key identifier: D2:15:29:CA:BF:B5:C8:A5:71:4D:BD:FE:C0:42:AD:D5:9C:1B:63:9C Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584D04E22EAE2DF814C092BDB960 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/b5412b7e-037a-30bf-9e17-79943b597ca0.roa Signing time: Sun 01 Mar 2026 02:00:31 +0000 ROA not before: Sun 01 Mar 2026 02:00:31 +0000 ROA not after: Sat 30 May 2026 01:00:31 +0000 asID: 26471 IP address blocks: 8.8.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:04:e2:2e:ae:2d:f8:14:c0:92:bd:b9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Mar 1 02:00:31 2026 GMT Not After : May 30 01:00:31 2026 GMT Subject: CN=0da3ee36-97e7-4c77-bfe5-49dde0aae2f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bd:d1:af:10:b7:30:c9:a7:5b:10:76:a3:63: 1e:2b:6b:4a:e8:e3:8b:60:8c:33:5a:40:e3:2c:af: 22:4d:06:f7:71:b9:8c:13:6f:1c:14:cb:a8:f6:5a: 83:ff:1f:2b:1f:06:92:8e:55:25:11:1b:a7:53:7b: 12:1a:85:9a:e4:6f:17:6d:e0:2a:f1:04:0c:06:84: ec:68:62:d9:b2:15:66:8f:49:c8:12:92:c3:6b:74: a4:0b:96:8b:b5:89:34:9c:4b:0e:d6:c2:e7:ed:99: 14:ee:ae:27:40:5e:16:fd:f8:6c:ee:91:15:4c:81: 69:cf:c2:0f:bc:58:fa:fa:91:71:1b:fe:d3:c9:48: bc:f4:a6:56:3b:b5:03:ae:4b:45:51:20:a1:64:28: b2:90:5c:8a:0e:00:02:59:98:b8:38:ab:9c:01:c9: 7a:60:ba:d1:d0:8c:83:c8:1f:c5:a4:a6:91:a8:b8: 01:bf:7a:b6:51:58:b8:bb:3b:44:f9:84:e0:c6:e8: 2c:e0:00:a2:ee:3c:d1:3d:be:4f:ee:2f:94:87:8a: 87:ec:31:f7:5b:77:af:f4:b8:34:12:08:aa:75:4a: 64:03:61:a2:42:68:e8:2f:34:d7:1a:a4:95:07:0a: dc:44:31:9d:43:25:39:0f:aa:46:6f:5e:82:59:9e: 42:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:15:29:CA:BF:B5:C8:A5:71:4D:BD:FE:C0:42:AD:D5:9C:1B:63:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/b5412b7e-037a-30bf-9e17-79943b597ca0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.8.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:1a:94:6e:ca:83:cd:2c:36:1f:3c:27:ad:a0:50:4b:93:fd: 73:e9:ee:5a:a7:25:bd:13:b2:45:28:d2:7b:b6:db:81:cd:5e: 7c:5d:a6:d2:02:97:b5:e8:08:b9:c4:a6:ca:7c:3b:3c:9c:42: 00:c4:2e:d1:68:5c:bf:5a:78:1f:d6:5c:6d:f9:26:b0:2f:8c: 4e:5c:e2:32:ea:0e:ec:60:1c:86:7c:77:9c:4e:78:3c:2a:23: 5b:35:cf:f8:c7:e1:74:74:e1:b4:8a:ef:b6:23:09:bf:d8:ec: 89:62:cc:ed:5d:b0:e3:8b:5f:a4:42:97:76:26:df:8d:4a:d2: 0d:3c:ff:75:93:49:fb:5f:14:67:3b:2f:7f:78:64:c9:d0:6c: 65:e4:af:63:5c:bd:b6:c9:81:2c:da:22:2e:cc:e6:5c:53:3a: 88:45:2f:ca:f7:cb:ad:2c:33:ba:48:26:fd:ea:8b:b3:ba:53: 0e:3e:06:91:fd:e0:50:34:d7:5a:bb:93:cd:3e:06:ad:9a:29: 32:27:f5:d8:58:b3:70:b3:af:e7:ce:88:5b:e5:2b:28:e7:55: a7:53:21:7e:51:d6:9c:8a:80:5c:28:29:c5:6d:ce:60:9d:82: e3:9f:6f:7c:40:5e:04:6e:98:53:87:4e:50:4a:10:76:4f:2e: 2d:b8:e1:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0E4i6uLfgUwJK9uWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDMwMTAyMDAzMVoXDTI2MDUzMDAxMDAzMVowLzEtMCsGA1UEAxMk MGRhM2VlMzYtOTdlNy00Yzc3LWJmZTUtNDlkZGUwYWFlMmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb3RrxC3MMmnWxB2o2MeK2tK6OOLYIwzWkDj LK8iTQb3cbmME28cFMuo9lqD/x8rHwaSjlUlERunU3sSGoWa5G8XbeAq8QQMBoTs aGLZshVmj0nIEpLDa3SkC5aLtYk0nEsO1sLn7ZkU7q4nQF4W/fhs7pEVTIFpz8IP vFj6+pFxG/7TyUi89KZWO7UDrktFUSChZCiykFyKDgACWZi4OKucAcl6YLrR0IyD yB/FpKaRqLgBv3q2UVi4uztE+YTgxugs4ACi7jzRPb5P7i+Uh4qH7DH3W3ev9Lg0 EgiqdUpkA2GiQmjoLzTXGqSVBwrcRDGdQyU5D6pGb16CWZ5CZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIVKcq/tcilcU29/sBCrdWcG2OcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYjU0MTJiN2UtMDM3YS0z MGJmLTllMTctNzk5NDNiNTk3Y2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAgnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4alG7Kg80sNh88J62gUEuT/XPp7lqnJb0TskUo0nu224HNXnxdptIC l7XoCLnEpsp8OzycQgDELtFoXL9aeB/WXG35JrAvjE5c4jLqDuxgHIZ8d5xOeDwq I1s1z/jH4XR04bSK77YjCb/Y7IlizO1dsOOLX6RCl3Ym341K0g08/3WTSftfFGc7 L394ZMnQbGXkr2NcvbbJgSzaIi7M5lxTOohFL8r3y60sM7pIJv3qi7O6Uw4+BpH9 4FA011q7k80+Bq2aKTIn9dhYs3Czr+fOiFvlKyjnVadTIX5R1pyKgFwoKcVtzmCd guOfb3xAXgRumFOHTlBKEHZPLi244dQ= -----END CERTIFICATE-----Generated at Mon Mar 2 20:16:52 2026 by rpki-client