$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/dc71f361-a2ed-3109-b093-fe4b4860cae3.roa File: dc71f361-a2ed-3109-b093-fe4b4860cae3.roa (raw, json) Hash identifier: 5hJ+FLk+l8fGzHRqO98FID0n7JeoKxYLVr3ECXaI3Ic= Subject key identifier: 1C:CD:58:71:1A:4C:82:F3:40:1A:ED:61:BB:EC:F6:CD:00:EC:40:2B Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584D6C0FDBFC140249C0688DDC4C Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/dc71f361-a2ed-3109-b093-fe4b4860cae3.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 402035 IP address blocks: 8.24.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:db:fc:14:02:49:c0:68:8d:dc:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=a2439886-e0fd-495e-a7b4-02f75af9d2f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0f:24:f4:53:dc:a5:c0:a1:d3:78:be:60:d6: 12:5c:b1:f3:cb:b4:65:13:f0:2e:c2:89:0e:6f:1b: 74:90:9e:f3:86:6a:84:7b:e7:2e:dc:6d:9f:7e:bc: 7b:45:df:23:ec:fb:ff:f4:41:a8:7d:b0:25:16:45: 18:ef:b8:c6:50:8d:b1:db:34:1c:cd:80:ec:44:2e: f1:7a:47:64:c3:5f:74:f2:b2:32:52:d1:3f:a2:d9: 72:02:f3:53:da:4d:a0:c7:d5:85:e7:10:44:91:af: e5:f5:9f:93:b7:e2:ae:f5:09:00:a5:db:a4:20:c3: 49:3e:3a:0e:c0:42:6b:8b:37:58:a5:00:d5:0a:c4: e5:48:f4:07:0e:f2:bb:6d:2d:c4:45:47:20:b1:25: 07:46:27:35:fc:74:5e:a3:13:41:37:88:ea:86:f4: cd:96:68:f6:40:2b:e0:ff:76:ff:b3:aa:15:58:e8: 15:63:e7:54:1e:31:2a:e5:8b:1f:80:44:c0:f5:41: a2:34:28:ec:5f:44:0a:d8:ac:3c:6a:35:fa:56:d6: 81:1f:e6:1d:88:8c:14:ea:f6:3b:eb:d9:05:8e:3f: 22:4d:22:a7:48:59:98:b6:ee:4b:46:18:c8:5f:e9: 54:5a:72:80:ec:28:9c:69:51:12:36:6a:03:e1:b7: 6b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:CD:58:71:1A:4C:82:F3:40:1A:ED:61:BB:EC:F6:CD:00:EC:40:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/dc71f361-a2ed-3109-b093-fe4b4860cae3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.24.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:52:33:1e:1a:20:4f:f9:da:b7:fe:a8:01:75:cd:a3:70:a4: 1e:aa:58:f3:90:ae:b4:ca:ae:f0:60:ba:94:9d:a4:42:65:65: 74:36:e7:6e:74:84:e6:35:5e:2f:d2:fd:fa:c0:25:48:5c:80: bc:d5:0c:d8:ce:de:af:d5:f2:79:5e:b9:ef:81:f2:ff:9d:66: 94:ab:e3:b6:57:64:52:13:15:98:aa:ea:b9:7f:e9:a0:3e:7d: 90:6d:94:1b:87:c3:72:85:71:a1:9d:82:b6:bb:c0:ff:ce:b2: 34:ab:3c:4a:b5:69:b9:50:a5:aa:40:98:1f:d9:9e:6c:b7:c7: 3c:bb:1a:da:7c:17:34:07:bf:b4:86:a6:dd:4b:1b:e8:62:93: e5:bf:f7:a9:0d:24:ea:5c:1c:74:c1:cc:00:31:8f:4e:af:32: 5b:c5:ca:b0:e5:52:2a:e8:9e:67:c5:27:a3:a3:c7:3e:d3:5b: 17:a1:49:2f:b8:a0:46:63:e1:64:ba:1d:4a:b1:34:0f:bd:98: 84:d3:ce:76:96:14:f4:42:53:5b:be:23:67:21:e5:54:81:29: 93:ac:4d:a4:39:68:f5:e7:21:a3:0e:0a:35:77:30:35:4c:87: 4d:f0:b1:cf:92:a1:54:bb:97:f1:69:c3:ab:d4:25:c9:cf:bb: 81:aa:f5:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD9v8FAJJwGiN3EwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk YTI0Mzk4ODYtZTBmZC00OTVlLWE3YjQtMDJmNzVhZjlkMmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiw8k9FPcpcCh03i+YNYSXLHzy7RlE/AuwokO bxt0kJ7zhmqEe+cu3G2ffrx7Rd8j7Pv/9EGofbAlFkUY77jGUI2x2zQczYDsRC7x ekdkw1908rIyUtE/otlyAvNT2k2gx9WF5xBEka/l9Z+Tt+Ku9QkApdukIMNJPjoO wEJrizdYpQDVCsTlSPQHDvK7bS3ERUcgsSUHRic1/HReoxNBN4jqhvTNlmj2QCvg /3b/s6oVWOgVY+dUHjEq5YsfgETA9UGiNCjsX0QK2Kw8ajX6VtaBH+YdiIwU6vY7 69kFjj8iTSKnSFmYtu5LRhjIX+lUWnKA7CicaVESNmoD4bdryQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzNWHEaTILzQBrtYbvs9s0A7EArMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZGM3MWYzNjEtYTJlZC0z MTA5LWIwOTMtZmU0YjQ4NjBjYWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACBiOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpSMx4aIE/52rf+qAF1zaNwpB6qWPOQrrTKrvBgupSdpEJlZXQ25250 hOY1Xi/S/frAJUhcgLzVDNjO3q/V8nleue+B8v+dZpSr47ZXZFITFZiq6rl/6aA+ fZBtlBuHw3KFcaGdgra7wP/OsjSrPEq1ablQpapAmB/Znmy3xzy7Gtp8FzQHv7SG pt1LG+hik+W/96kNJOpcHHTBzAAxj06vMlvFyrDlUironmfFJ6Ojxz7TWxehSS+4 oEZj4WS6HUqxNA+9mITTznaWFPRCU1u+I2ch5VSBKZOsTaQ5aPXnIaMOCjV3MDVM h03wsc+SoVS7l/Fpw6vUJcnPu4Gq9c8= -----END CERTIFICATE-----Generated at Fri Apr 17 19:58:00 2026 by rpki-client