$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ba0e1662-1fc4-35e1-b89d-1d404f508c27.roa File: ba0e1662-1fc4-35e1-b89d-1d404f508c27.roa (raw, json) Hash identifier: 7GG5B770y+yDTLDClSZMEZ/QouePZdae2x4r3OoXu5g= Subject key identifier: 24:40:B3:2E:2E:F8:9F:11:49:BA:C5:5E:DB:D2:C3:54:54:4D:EE:93 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584CAA272F2D2C97DDFC9B46BC00 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ba0e1662-1fc4-35e1-b89d-1d404f508c27.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 13458 IP address blocks: 8.36.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:2f:2d:2c:97:dd:fc:9b:46:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=672c7bc9-322e-4ea5-b3a2-8b4b9212fba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ed:a1:5b:a1:c1:80:18:4f:e5:ff:f2:8c:c5: 22:9a:ca:f9:39:db:f2:45:47:5c:13:c4:d2:f4:e5: ca:d3:a6:69:e3:c0:2f:fd:b6:09:42:28:34:3d:8b: 71:78:0c:2a:af:3e:42:68:ec:c9:55:15:21:97:60: 08:77:48:ff:3a:89:80:04:b4:f1:a2:b5:2c:63:43: 89:91:a5:a9:87:ba:dc:36:60:16:0e:56:56:b1:a7: e7:81:f7:00:e4:b7:52:18:7d:e1:f1:70:24:93:60: 04:51:a4:e0:c8:dc:15:96:5a:b6:7e:90:14:36:af: 8e:3c:5f:ae:81:8c:af:17:3f:de:5b:3f:3e:77:c4: 61:b4:6f:06:4d:21:09:3b:41:40:bb:ba:d4:87:42: 80:ce:d9:8d:16:d0:01:ce:2e:06:0b:53:82:5a:b4: 09:92:fe:70:e4:20:fa:7a:d3:91:0e:b5:ee:e3:4a: 23:64:ab:4d:c5:5d:53:f6:ed:c8:4f:4a:9c:bf:e6: 11:b5:6a:2f:59:fb:90:85:ca:3e:90:17:57:50:89: 36:1f:6c:42:e8:d0:23:9b:3e:d6:5f:94:e3:a8:ac: ee:d4:07:7c:d3:1c:96:de:fd:f6:72:70:58:f9:2d: 79:75:0c:47:26:a3:16:d7:89:e4:3a:84:a9:97:46: ed:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:40:B3:2E:2E:F8:9F:11:49:BA:C5:5E:DB:D2:C3:54:54:4D:EE:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ba0e1662-1fc4-35e1-b89d-1d404f508c27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.36.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:14:44:45:e3:d7:e2:25:32:f7:97:2c:de:74:1d:d1:71:58: b8:e3:53:96:41:b0:5d:ac:8f:57:59:a9:54:29:48:9b:c4:70: 8b:46:07:9a:95:fe:67:0f:7c:56:64:04:8e:bd:fa:03:11:c2: 0b:94:44:e4:18:b0:ec:ae:f0:b6:43:23:04:7f:40:01:6e:c8: ea:d4:ef:cb:cb:33:1c:c3:76:fe:10:db:f1:4b:9d:8b:d2:34: d4:89:2b:4b:cc:0f:a2:f6:5b:2f:05:60:7c:98:7f:c0:57:4c: 64:62:e8:51:b8:af:a8:bc:38:ed:1e:51:39:ea:a1:65:15:8b: a1:39:24:1b:5e:fd:ad:c5:11:49:50:c8:e4:ad:61:ec:6d:ef: 39:79:c1:46:5f:08:a6:9b:7c:80:95:c8:cc:87:75:e6:bb:39: 1d:01:da:e4:f2:80:93:98:8e:ac:fc:b2:4e:52:9a:3a:5e:c8: 95:5a:13:86:dc:66:4d:68:d5:ab:5e:ff:f4:53:b4:33:1d:bb: a4:c4:7e:32:7f:65:3a:16:e9:38:72:16:06:b4:7a:d7:c7:3a: 90:48:49:5a:51:f1:a2:88:63:64:80:7f:e1:a0:44:92:59:1c: 41:0a:dd:17:88:78:3d:56:9e:b8:7d:a4:68:11:c8:be:9a:5d: 09:6e:69:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJy8tLJfd/JtGvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk NjcyYzdiYzktMzIyZS00ZWE1LWIzYTItOGI0YjkyMTJmYmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9O2hW6HBgBhP5f/yjMUimsr5OdvyRUdcE8TS 9OXK06Zp48Av/bYJQig0PYtxeAwqrz5CaOzJVRUhl2AId0j/OomABLTxorUsY0OJ kaWph7rcNmAWDlZWsafngfcA5LdSGH3h8XAkk2AEUaTgyNwVllq2fpAUNq+OPF+u gYyvFz/eWz8+d8RhtG8GTSEJO0FAu7rUh0KAztmNFtABzi4GC1OCWrQJkv5w5CD6 etORDrXu40ojZKtNxV1T9u3IT0qcv+YRtWovWfuQhco+kBdXUIk2H2xC6NAjmz7W X5TjqKzu1Ad80xyW3v32cnBY+S15dQxHJqMW14nkOoSpl0btNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRAsy4u+J8RSbrFXtvSw1RUTe6TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYmEwZTE2NjItMWZjNC0z NWUxLWI4OWQtMWQ0MDRmNTA4YzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACCRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcUREXj1+IlMveXLN50HdFxWLjjU5ZBsF2sj1dZqVQpSJvEcItGB5qV /mcPfFZkBI69+gMRwguUROQYsOyu8LZDIwR/QAFuyOrU78vLMxzDdv4Q2/FLnYvS NNSJK0vMD6L2Wy8FYHyYf8BXTGRi6FG4r6i8OO0eUTnqoWUVi6E5JBte/a3FEUlQ yOStYext7zl5wUZfCKabfICVyMyHdea7OR0B2uTygJOYjqz8sk5SmjpeyJVaE4bc Zk1o1ate//RTtDMdu6TEfjJ/ZToW6ThyFga0etfHOpBISVpR8aKIY2SAf+GgRJJZ HEEK3ReIeD1Wnrh9pGgRyL6aXQluac0= -----END CERTIFICATE-----Generated at Mon Mar 2 20:17:16 2026 by rpki-client