$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/bf09fdcc-9647-3f31-9d7c-1af6f783d1cc.roa File: bf09fdcc-9647-3f31-9d7c-1af6f783d1cc.roa (raw, json) Hash identifier: xqnNeTXs8Gh5kDd+Mtm3uXTwkslQIxHUqcHk/RzBglw= Subject key identifier: 2D:29:7C:AA:47:A3:27:74:03:B3:5A:41:49:CA:08:E2:B9:9A:13:67 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584CC611E5814DF229A72AD8E760 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/bf09fdcc-9647-3f31-9d7c-1af6f783d1cc.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 394161 IP address blocks: 8.47.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:11:e5:81:4d:f2:29:a7:2a:d8:e7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=73446261-bb87-4777-b041-aeb1ce9af3b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:12:19:eb:a2:6c:3a:61:98:73:47:1b:ba:ed: 4a:df:2d:46:3b:d3:60:00:93:a9:71:7b:52:bb:7f: 2e:d9:9a:d3:f2:0c:b9:89:e0:07:e5:22:e8:47:e3: e1:dd:ca:9f:81:dc:de:c3:75:72:29:1e:01:26:46: 39:bf:04:07:45:03:65:f2:58:14:1c:4d:7e:8c:50: 1b:7d:9f:54:8c:d1:35:f5:64:f9:56:0f:da:5e:bb: 18:bf:2b:63:ba:de:8a:6a:b3:9b:8e:f9:36:41:e0: 1f:ef:5c:c5:83:d4:bc:c4:9c:b6:71:bc:0f:45:b7: 0b:b2:c7:86:e5:7e:b6:c3:16:5e:cc:3f:7b:99:c0: 19:e4:48:57:25:f9:22:b8:e7:e2:d4:41:79:71:63: e3:63:d2:76:5b:9f:06:0a:10:06:dd:b4:c1:2d:ed: a0:6d:c1:10:c3:b1:c9:0d:0d:72:3e:0f:f0:4c:11: 1f:12:5d:cc:d7:86:02:f7:c8:4d:c7:7c:ab:71:ca: 70:34:f2:24:c1:6a:77:f2:7f:46:f4:f8:f7:74:77: 3a:dd:43:48:66:94:e3:d9:f8:38:93:73:47:de:e9: d6:d8:04:f3:92:87:70:e2:14:e5:ea:39:2a:1e:31: 4c:bc:60:09:ed:18:1b:78:25:23:79:9e:51:c7:61: da:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:29:7C:AA:47:A3:27:74:03:B3:5A:41:49:CA:08:E2:B9:9A:13:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/bf09fdcc-9647-3f31-9d7c-1af6f783d1cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.47.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:af:e0:1b:e5:c2:e4:62:e7:93:61:98:9b:01:8c:df:d7:55: 30:ba:a4:06:76:de:e6:60:9e:05:70:ea:17:28:db:a4:44:d2: c9:9e:e8:27:64:32:1b:1c:59:a8:e0:5f:45:5d:1a:e9:74:4f: 2f:17:e1:07:55:c3:a9:39:fa:07:0b:b4:26:04:c0:87:95:7d: 7a:83:e9:0b:cf:e3:51:11:70:f2:9e:cd:0f:ed:12:c0:1e:ee: 17:9d:46:50:a2:4c:0e:19:d8:e3:70:7b:0f:ef:2d:b9:b8:7f: 30:5a:d0:30:53:54:da:91:56:96:35:07:21:3e:39:c1:d7:aa: c2:5c:79:4d:85:d5:54:47:7b:82:51:92:f5:8b:50:98:36:7f: b9:13:e4:cc:d4:36:0c:22:fe:e3:81:45:fd:d2:d7:5b:5f:e7: ac:eb:c6:3d:e1:25:45:32:86:67:03:02:59:ed:3e:7f:c7:8b: 03:92:64:b2:1a:9b:41:e6:00:4c:03:7f:b8:aa:c1:ae:cc:3c: a8:62:44:d3:ea:eb:e3:48:b4:88:2f:df:f9:f4:d7:e9:bd:ff: 44:fb:80:59:80:40:42:af:26:ed:53:88:7b:d6:df:6d:ee:54: 47:4b:80:90:6f:8e:7e:95:63:97:29:c8:cf:07:20:07:2c:0f: df:7e:5e:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEeWBTfIppyrY52AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk NzM0NDYyNjEtYmI4Ny00Nzc3LWIwNDEtYWViMWNlOWFmM2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxIZ66JsOmGYc0cbuu1K3y1GO9NgAJOpcXtS u38u2ZrT8gy5ieAH5SLoR+Ph3cqfgdzew3VyKR4BJkY5vwQHRQNl8lgUHE1+jFAb fZ9UjNE19WT5Vg/aXrsYvytjut6KarObjvk2QeAf71zFg9S8xJy2cbwPRbcLsseG 5X62wxZezD97mcAZ5EhXJfkiuOfi1EF5cWPjY9J2W58GChAG3bTBLe2gbcEQw7HJ DQ1yPg/wTBEfEl3M14YC98hNx3yrccpwNPIkwWp38n9G9Pj3dHc63UNIZpTj2fg4 k3NH3unW2ATzkodw4hTl6jkqHjFMvGAJ7RgbeCUjeZ5Rx2HahQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0pfKpHoyd0A7NaQUnKCOK5mhNnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYmYwOWZkY2MtOTY0Ny0z ZjMxLTlkN2MtMWFmNmY3ODNkMWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACC8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKv4BvlwuRi55NhmJsBjN/XVTC6pAZ23uZgngVw6hco26RE0sme6Cdk MhscWajgX0VdGul0Ty8X4QdVw6k5+gcLtCYEwIeVfXqD6QvP41ERcPKezQ/tEsAe 7hedRlCiTA4Z2ONwew/vLbm4fzBa0DBTVNqRVpY1ByE+OcHXqsJceU2F1VRHe4JR kvWLUJg2f7kT5MzUNgwi/uOBRf3S11tf56zrxj3hJUUyhmcDAlntPn/HiwOSZLIa m0HmAEwDf7iqwa7MPKhiRNPq6+NItIgv3/n01+m9/0T7gFmAQEKvJu1TiHvW323u VEdLgJBvjn6VY5cpyM8HIAcsD99+XlI= -----END CERTIFICATE-----Generated at Mon Mar 2 16:48:05 2026 by rpki-client