$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/db2238da-4bac-3b0b-8968-b635c3d98c49.roa File: db2238da-4bac-3b0b-8968-b635c3d98c49.roa (raw, json) Hash identifier: XLk1yDMaj1ETPOPqginIVc8QV6v1E2CXY3PH/xH6G8Y= Subject key identifier: B7:92:5C:85:5B:DE:89:09:40:57:3B:D7:23:A7:D9:C6:22:34:F7:D3 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584CAE571474713D92BD588F72B4 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/db2238da-4bac-3b0b-8968-b635c3d98c49.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 30305 IP address blocks: 8.39.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:14:74:71:3d:92:bd:58:8f:72:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=8f71eb4c-f28e-4da5-9e43-30239a7d1835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ea:04:f5:e0:a4:c2:aa:3b:15:34:30:fd:c3: 7b:ea:9c:04:4f:55:3f:b5:18:c9:49:cb:bf:c8:95: 71:63:78:ce:2a:6e:af:51:2f:83:87:8a:09:e5:ea: 16:0e:49:8e:4e:a8:bc:31:3b:3d:ee:68:65:2d:b2: f4:78:67:ff:d7:0b:fb:63:dc:25:a3:74:47:75:fc: 08:af:a8:7d:27:94:09:94:4f:48:d6:0a:a3:e3:a1: 3a:af:bf:19:00:e5:36:e0:90:fe:c2:dc:df:1f:d5: 26:e2:4e:af:00:f9:ec:ca:79:fd:f5:1f:ce:78:de: 7f:04:eb:4b:79:35:2d:4e:db:3b:8b:10:fa:94:22: c7:41:09:28:84:b8:f8:e8:06:7d:e8:fd:23:6b:e9: 77:c3:cc:db:e2:c4:ff:df:6a:c6:45:d6:22:eb:a9: 84:30:d0:26:da:3b:e2:a2:73:e0:96:39:c3:f0:b4: 4e:67:3e:98:3c:3b:64:93:8d:5c:26:65:44:d5:ef: aa:2f:3c:47:5b:c7:43:aa:c2:be:1d:ff:44:82:f3: fd:39:37:ee:2b:9b:97:73:17:0d:56:08:0d:8a:7b: cd:1b:30:f1:26:13:c7:37:3a:af:22:99:da:72:3d: c2:b9:d9:ac:7a:b7:d4:5d:69:ee:ec:73:78:25:2a: 18:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:92:5C:85:5B:DE:89:09:40:57:3B:D7:23:A7:D9:C6:22:34:F7:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/db2238da-4bac-3b0b-8968-b635c3d98c49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.39.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:77:d0:b5:b7:b5:0c:fb:63:b8:a0:dc:ed:be:5d:ce:ae:d0: 2c:00:e3:5c:15:cf:b6:5f:dc:b8:c1:03:70:ce:76:d3:be:55: 17:64:fe:39:d9:d4:b5:23:c0:d4:af:29:0f:be:b0:21:40:58: eb:4e:25:9f:14:9f:73:c1:32:d9:92:89:59:13:26:fb:80:1a: f3:2a:2c:91:e3:55:b7:6f:5e:28:90:26:a3:03:9a:ad:93:ed: 2d:26:67:7d:48:22:28:8a:dc:00:ba:be:af:5f:18:e5:78:d2: 1c:0d:60:c7:2c:7d:e6:c0:9a:4d:b0:4b:38:cd:8c:ef:e0:c7: e2:04:33:10:82:93:f3:ab:34:81:5b:22:24:f3:d9:f1:be:63: 21:1e:4e:6f:98:e8:7f:62:d7:59:de:fb:ff:81:28:b2:84:fd: cd:f2:cf:86:57:ec:62:06:75:98:38:21:ae:ae:a3:a1:23:9f: fb:09:07:26:14:6f:b4:ea:4f:c0:8d:a8:7e:77:01:25:63:e4: 90:7f:2c:c7:21:8d:9e:78:25:2f:ca:e3:1c:a5:ea:17:c0:12: 4a:fb:52:9e:13:f1:44:d5:c9:1e:02:51:5c:56:e8:c7:e6:ee: 84:30:73:84:92:35:44:31:d1:a2:c6:c0:93:0f:3d:77:78:f9: 31:99:75:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVxR0cT2SvViPcrQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk OGY3MWViNGMtZjI4ZS00ZGE1LTllNDMtMzAyMzlhN2QxODM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheoE9eCkwqo7FTQw/cN76pwET1U/tRjJScu/ yJVxY3jOKm6vUS+Dh4oJ5eoWDkmOTqi8MTs97mhlLbL0eGf/1wv7Y9wlo3RHdfwI r6h9J5QJlE9I1gqj46E6r78ZAOU24JD+wtzfH9Um4k6vAPnsynn99R/OeN5/BOtL eTUtTts7ixD6lCLHQQkohLj46AZ96P0ja+l3w8zb4sT/32rGRdYi66mEMNAm2jvi onPgljnD8LROZz6YPDtkk41cJmVE1e+qLzxHW8dDqsK+Hf9EgvP9OTfuK5uXcxcN VggNinvNGzDxJhPHNzqvIpnacj3CudmserfUXWnu7HN4JSoYtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLeSXIVb3okJQFc71yOn2cYiNPfTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZGIyMjM4ZGEtNGJhYy0z YjBiLTg5NjgtYjYzNWMzZDk4YzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACCehMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK930LW3tQz7Y7ig3O2+Xc6u0CwA41wVz7Zf3LjBA3DOdtO+VRdk/jnZ 1LUjwNSvKQ++sCFAWOtOJZ8Un3PBMtmSiVkTJvuAGvMqLJHjVbdvXiiQJqMDmq2T 7S0mZ31IIiiK3AC6vq9fGOV40hwNYMcsfebAmk2wSzjNjO/gx+IEMxCCk/OrNIFb IiTz2fG+YyEeTm+Y6H9i11ne+/+BKLKE/c3yz4ZX7GIGdZg4Ia6uo6Ejn/sJByYU b7TqT8CNqH53ASVj5JB/LMchjZ54JS/K4xyl6hfAEkr7Up4T8UTVyR4CUVxW6Mfm 7oQwc4SSNUQx0aLGwJMPPXd4+TGZddE= -----END CERTIFICATE-----Generated at Mon Mar 2 22:35:23 2026 by rpki-client