$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ce5601fe-e061-3205-80ed-165a3269ddb3.roa File: ce5601fe-e061-3205-80ed-165a3269ddb3.roa (raw, json) Hash identifier: zZ2rMHO5rJpEu7ir2oCVU43Ql19uCwa65QnvP6vjbIg= Subject key identifier: 7C:48:36:67:D4:BE:6F:28:4E:36:66:9C:ED:B3:76:67:2B:FD:AB:85 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584EA0152EBF57EBECDA0B883380 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ce5601fe-e061-3205-80ed-165a3269ddb3.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 989 IP address blocks: 8.8.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:2e:bf:57:eb:ec:da:0b:88:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=0a5fa916-a44f-4257-ab3a-a9cb3e32ff7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:34:4b:f3:81:ea:88:ff:3a:7d:ad:a2:a5:f9: 40:04:e3:d6:b3:df:94:d0:65:7f:2d:65:c8:55:8d: d0:f1:dd:41:ad:ca:a8:a4:1a:d0:73:34:cd:dd:b7: 38:a7:c3:17:d3:b9:1c:f5:99:04:a2:3f:8b:e0:b9: de:60:dc:6e:b7:bc:16:e3:68:c6:c0:e7:ec:63:bd: 15:21:c6:76:60:95:d4:b3:70:1f:8d:41:0a:fd:db: 7e:7f:4e:39:b1:cc:7b:2e:bb:9c:04:73:a6:2f:11: b8:a2:db:0a:6d:86:ad:2a:f0:9f:d0:ae:a0:54:f0: 6f:bb:68:56:c9:58:d5:26:f4:0c:68:4a:b8:71:bc: b2:c2:0c:49:7e:1c:a8:02:d9:bb:db:c0:95:bd:c5: 07:50:2f:30:0b:91:5e:8d:ea:89:23:25:02:99:43: 72:58:cd:8f:39:96:b8:ca:ed:c7:c3:52:b4:95:85: 87:a8:28:9d:75:6d:4d:4a:e8:29:74:07:87:bb:50: 86:29:9c:b0:6a:69:07:14:b8:3d:62:87:a7:3e:ad: 75:d6:7b:88:99:20:fe:ec:7f:0f:4b:be:2d:e6:3c: 92:d0:89:03:15:16:fa:34:a1:b2:69:92:4e:9b:5e: ca:8f:30:a9:7d:6d:f1:88:23:ea:2c:19:e3:43:16: 30:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:48:36:67:D4:BE:6F:28:4E:36:66:9C:ED:B3:76:67:2B:FD:AB:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ce5601fe-e061-3205-80ed-165a3269ddb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.8.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:79:9f:be:60:da:e5:73:b3:ff:82:74:d4:bc:91:51:36:ae: 6e:a8:2a:fb:6d:24:56:b7:68:62:ad:4c:7d:ba:30:99:a8:19: 26:04:30:d9:e6:db:6e:74:07:14:79:e4:b4:c2:0e:e5:be:cc: 63:40:e5:a3:2f:47:17:c3:68:72:ab:40:83:68:c8:ac:c8:1d: 87:73:82:ba:84:21:67:40:ef:4b:45:81:53:ab:59:0c:d6:fc: fb:4e:ae:d4:2c:e6:fa:d4:9d:80:f6:2c:02:bd:c8:17:f4:1a: a5:56:97:6c:7a:a9:0c:e4:f2:69:5c:6f:5f:f7:8c:7a:e2:57: 4c:6e:22:86:10:cf:31:92:cb:39:92:b1:54:b5:37:f0:f1:06: aa:35:76:98:82:22:1c:cd:69:e7:0c:f7:9e:53:14:54:36:c5: 36:5e:86:be:d4:95:8b:c0:9b:9d:c5:44:c4:f5:2b:b8:5b:87: 59:63:9b:0f:d8:31:b9:38:45:43:c8:83:35:45:83:2e:fe:e5: 42:44:bc:87:44:42:e0:85:4b:bd:3e:e2:3f:0d:70:84:4f:70: a5:7a:b4:19:87:34:f2:52:0b:1a:ee:5e:fc:96:ce:e4:23:a0: 83:27:40:92:26:24:41:31:d5:d4:79:54:41:a6:ca:d3:77:22: 03:d4:6f:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFS6/V+vs2guIM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk MGE1ZmE5MTYtYTQ0Zi00MjU3LWFiM2EtYTljYjNlMzJmZjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjRL84HqiP86fa2ipflABOPWs9+U0GV/LWXI VY3Q8d1BrcqopBrQczTN3bc4p8MX07kc9ZkEoj+L4LneYNxut7wW42jGwOfsY70V IcZ2YJXUs3AfjUEK/dt+f045scx7LrucBHOmLxG4otsKbYatKvCf0K6gVPBvu2hW yVjVJvQMaEq4cbyywgxJfhyoAtm728CVvcUHUC8wC5FejeqJIyUCmUNyWM2POZa4 yu3Hw1K0lYWHqCiddW1NSugpdAeHu1CGKZywamkHFLg9YoenPq111nuImSD+7H8P S74t5jyS0IkDFRb6NKGyaZJOm17KjzCpfW3xiCPqLBnjQxYwbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxINmfUvm8oTjZmnO2zdmcr/auFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvY2U1NjAxZmUtZTA2MS0z MjA1LTgwZWQtMTY1YTMyNjlkZGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCCAj0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGh5n75g2uVzs/+CdNS8kVE2rm6oKvttJFa3aGKtTH26MJmoGSYEMNnm 2250BxR55LTCDuW+zGNA5aMvRxfDaHKrQINoyKzIHYdzgrqEIWdA70tFgVOrWQzW /PtOrtQs5vrUnYD2LAK9yBf0GqVWl2x6qQzk8mlcb1/3jHriV0xuIoYQzzGSyzmS sVS1N/DxBqo1dpiCIhzNaecM955TFFQ2xTZehr7UlYvAm53FRMT1K7hbh1ljmw/Y Mbk4RUPIgzVFgy7+5UJEvIdEQuCFS70+4j8NcIRPcKV6tBmHNPJSCxruXvyWzuQj oIMnQJImJEEx1dR5VEGmytN3IgPUbz4= -----END CERTIFICATE-----Generated at Wed Jul 29 07:34:01 2026 by rpki-client