$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f0e9b753-6ae0-3f20-a450-d83c4f413193.roa File: f0e9b753-6ae0-3f20-a450-d83c4f413193.roa (raw, json) Hash identifier: p6BU1FTWKqqShfC9nC8Cv/nBP7o3C4FNi1o8+FvZqv8= Subject key identifier: 00:7C:5F:AC:5C:FE:F2:A7:AD:D2:76:08:43:A5:9C:8F:31:17:0A:E5 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584F23C25BC899FE8C6DC93C4100 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f0e9b753-6ae0-3f20-a450-d83c4f413193.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 20166 IP address blocks: 8.39.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:5b:c8:99:fe:8c:6d:c9:3c:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=fbda922a-1ee5-4413-87a2-a140a71a4ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2b:4f:4d:09:48:1a:97:69:61:ce:15:2a:e8: 66:eb:20:d8:ab:cd:28:40:4a:42:d8:e6:5f:eb:e8: dc:53:82:d8:d2:9b:25:1d:ed:8b:3f:52:a1:ce:b7: bd:d0:8d:11:d5:94:c2:07:d3:48:b8:c3:24:f0:73: de:8e:02:ac:a9:f3:f9:b8:52:f5:23:79:81:49:c6: 5b:fe:fd:53:a0:93:a8:38:00:94:fa:99:f9:1c:0c: 1a:80:96:58:b3:76:16:bf:d5:33:d4:63:5b:b2:e0: 34:a5:a6:32:9b:aa:bb:32:90:ba:14:71:9e:e8:a9: f6:bc:b3:35:78:1e:f5:3b:99:89:40:47:58:c4:99: 21:e0:d5:55:e9:e1:27:53:08:26:54:d5:a5:d7:c0: cf:a0:55:eb:9b:15:0b:51:d2:c9:37:bd:49:db:18: bf:af:48:d2:f9:0a:23:dd:f5:8f:e6:fa:75:3b:8c: dd:8b:4d:4f:86:43:65:89:23:69:d9:08:f3:51:70: da:d5:0c:3f:9a:a7:38:ed:1c:69:47:e6:b2:ab:0d: 90:2a:f5:8f:f9:16:88:cc:aa:cb:05:c9:d7:78:79: 5a:1f:56:67:4f:21:87:23:61:db:21:f1:44:0a:2b: c3:0d:b1:eb:d2:6f:d7:bc:c4:4d:f5:87:8f:00:11: 71:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7C:5F:AC:5C:FE:F2:A7:AD:D2:76:08:43:A5:9C:8F:31:17:0A:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f0e9b753-6ae0-3f20-a450-d83c4f413193.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.39.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:c3:62:5f:1f:9b:d6:1a:51:1c:61:84:df:24:01:ca:3b:35: b5:3f:d3:4f:12:87:45:e5:e2:9f:29:92:48:42:e2:22:b3:36: 4a:22:ed:f9:ed:1b:71:f5:2c:3b:00:e2:10:e8:d9:ce:76:00: 09:f0:68:1a:c0:eb:02:a9:4b:b9:a9:4e:4e:e1:0e:8b:8d:98: cd:6a:d6:ce:e8:0b:ad:8d:b4:22:c4:cb:ef:dc:f3:d2:5d:99: 85:b0:04:c8:00:98:b4:72:98:29:11:55:73:19:f2:3e:ff:eb: 93:1d:6e:bc:69:bd:2d:90:db:f8:49:d1:32:0b:a0:cc:d8:c7: 65:26:99:00:d8:39:5c:48:94:af:99:af:7f:52:81:a6:b9:ca: cd:9a:01:75:88:98:51:1a:6f:a5:9c:6b:4c:80:51:a6:47:df: 50:03:60:cb:a3:fb:99:03:2a:8f:42:c0:83:db:44:7b:86:19: 9b:d9:f3:21:ce:21:a9:63:78:d1:97:21:4b:21:29:ef:50:a8: ca:bc:c1:15:53:c8:88:44:48:f5:41:7c:bb:19:39:21:f9:cd: 77:fd:82:da:07:a5:06:00:90:f8:03:45:c6:59:66:ea:78:62: bb:21:76:7b:3a:a1:f4:81:61:d8:8a:09:dc:66:e2:4b:07:80: 55:dc:33:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwlvImf6Mbck8QQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk ZmJkYTkyMmEtMWVlNS00NDEzLTg3YTItYTE0MGE3MWE0ZWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoytPTQlIGpdpYc4VKuhm6yDYq80oQEpC2OZf 6+jcU4LY0pslHe2LP1Khzre90I0R1ZTCB9NIuMMk8HPejgKsqfP5uFL1I3mBScZb /v1ToJOoOACU+pn5HAwagJZYs3YWv9Uz1GNbsuA0paYym6q7MpC6FHGe6Kn2vLM1 eB71O5mJQEdYxJkh4NVV6eEnUwgmVNWl18DPoFXrmxULUdLJN71J2xi/r0jS+Qoj 3fWP5vp1O4zdi01PhkNliSNp2QjzUXDa1Qw/mqc47RxpR+ayqw2QKvWP+RaIzKrL BcnXeHlaH1ZnTyGHI2HbIfFECivDDbHr0m/XvMRN9YePABFxuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAB8X6xc/vKnrdJ2CEOlnI8xFwrlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZjBlOWI3NTMtNmFlMC0z ZjIwLWE0NTAtZDgzYzRmNDEzMTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACCcPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLDYl8fm9YaURxhhN8kAco7NbU/008Sh0Xl4p8pkkhC4iKzNkoi7fnt G3H1LDsA4hDo2c52AAnwaBrA6wKpS7mpTk7hDouNmM1q1s7oC62NtCLEy+/c89Jd mYWwBMgAmLRymCkRVXMZ8j7/65MdbrxpvS2Q2/hJ0TILoMzYx2UmmQDYOVxIlK+Z r39Sgaa5ys2aAXWImFEab6Wca0yAUaZH31ADYMuj+5kDKo9CwIPbRHuGGZvZ8yHO IaljeNGXIUshKe9QqMq8wRVTyIhESPVBfLsZOSH5zXf9gtoHpQYAkPgDRcZZZup4 Yrshdns6ofSBYdiKCdxm4ksHgFXcM9s= -----END CERTIFICATE-----Generated at Sun Sep 20 15:06:13 2026 by rpki-client