$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/088952e0-7d03-3267-b368-d7b87c6ee22a.roa File: 088952e0-7d03-3267-b368-d7b87c6ee22a.roa (raw, json) Hash identifier: s5gjBOYqmGwOHoEo4sweXOAfHmyfZMLdaDyuF/z1DsE= Subject key identifier: 97:DF:EA:0A:2A:97:0D:76:28:19:6C:F7:CC:AF:2F:67:07:DA:A3:17 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584F71ED9077B2E9C7298C950700 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/088952e0-7d03-3267-b368-d7b87c6ee22a.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 26114 IP address blocks: 8.47.82.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:90:77:b2:e9:c7:29:8c:95:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=329e288e-7e69-4084-8ff2-c8379a23b38e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:05:82:75:70:1c:8f:5b:14:a0:db:e0:d5:1b: 21:62:1d:3a:6e:d3:57:cb:3f:ae:c4:9e:75:d8:79: 22:54:6c:d2:30:b7:9b:70:ef:a6:f5:9f:1a:db:53: 58:91:0d:4d:e0:12:05:ec:ae:ab:b2:1e:8d:64:5c: 76:d3:b0:36:db:f7:00:53:82:43:5f:c2:48:d8:ac: 02:f2:84:93:12:39:fb:a9:f2:dd:79:20:93:1c:8a: 64:61:af:8f:ee:0b:43:79:4f:55:02:3e:b2:b9:09: f5:9c:80:02:8c:50:b2:62:80:5d:17:d3:5f:9f:de: 4d:d9:21:a9:a0:9b:14:9a:5a:e8:48:b7:9e:c8:97: 08:a2:7f:24:e3:26:f2:47:b8:ee:48:2c:4b:a5:12: 65:66:a7:20:0b:34:90:87:71:ae:fd:5c:e9:a3:33: 99:d0:e4:f7:91:55:38:11:e8:04:d8:fe:ff:1f:34: 21:2a:5c:5e:3d:90:20:4a:35:1a:9d:c0:f2:aa:46: 7b:a9:08:2e:20:ce:cb:82:15:92:97:a9:7e:03:a7: 95:aa:d7:7b:ab:e9:54:af:22:e3:2f:79:0e:63:89: 9e:58:df:02:6b:e1:0d:e6:f5:ba:48:a2:65:f5:f1: 6d:11:8b:72:ab:56:9e:1c:fd:4d:4d:48:4e:18:55: 7b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:DF:EA:0A:2A:97:0D:76:28:19:6C:F7:CC:AF:2F:67:07:DA:A3:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/088952e0-7d03-3267-b368-d7b87c6ee22a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.47.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:6d:ea:64:aa:aa:9a:a7:a3:80:84:bb:58:4c:87:26:8a:cb: 59:28:59:e6:43:7c:e4:b7:f4:7c:61:ce:a3:80:de:07:2a:81: 15:9b:9e:54:85:31:4b:81:2e:42:1a:44:85:03:27:57:ec:c5: 2a:51:0e:e7:9b:c9:6d:95:be:31:a5:f5:10:ae:89:dd:81:81: 2e:39:c2:e9:19:a9:29:3a:b0:b1:a1:fc:44:4f:ca:9e:11:98: 9d:94:4f:8e:23:cc:8f:77:c5:c9:b2:73:df:33:4d:e9:94:22: dc:10:06:3c:f3:f1:11:4a:70:d6:3a:7a:00:a1:68:ca:e5:d9: ea:cd:a7:c5:27:94:46:1d:0d:7c:62:dc:3d:1d:65:9c:be:3e: 54:5f:cc:0f:d8:0b:0a:7c:87:45:ea:2b:94:53:89:9c:8a:b0: 1b:10:a3:e5:bc:82:fe:55:2b:8f:5f:7f:f8:7b:d7:a5:6e:84: 19:f7:dd:5f:45:aa:84:93:60:30:c8:2c:6a:fc:24:73:99:ac: 1d:bc:dd:26:14:f3:9a:98:ec:dd:7c:ca:c4:a7:38:c4:6a:d0: 33:d0:3a:27:6b:b9:e1:e6:a5:1b:73:49:53:7b:b5:1b:59:8c: fa:21:72:79:1a:2a:a6:af:15:08:37:e6:05:f1:14:94:aa:72: 61:74:6b:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7ZB3sunHKYyVBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk MzI5ZTI4OGUtN2U2OS00MDg0LThmZjItYzgzNzlhMjNiMzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQWCdXAcj1sUoNvg1RshYh06btNXyz+uxJ51 2HkiVGzSMLebcO+m9Z8a21NYkQ1N4BIF7K6rsh6NZFx207A22/cAU4JDX8JI2KwC 8oSTEjn7qfLdeSCTHIpkYa+P7gtDeU9VAj6yuQn1nIACjFCyYoBdF9Nfn95N2SGp oJsUmlroSLeeyJcIon8k4ybyR7juSCxLpRJlZqcgCzSQh3Gu/VzpozOZ0OT3kVU4 EegE2P7/HzQhKlxePZAgSjUancDyqkZ7qQguIM7LghWSl6l+A6eVqtd7q+lUryLj L3kOY4meWN8Ca+EN5vW6SKJl9fFtEYtyq1aeHP1NTUhOGFV73wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJff6goqlw12KBls98yvL2cH2qMXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMDg4OTUyZTAtN2QwMy0z MjY3LWIzNjgtZDdiODdjNmVlMjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBCC9SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpt6mSqqpqno4CEu1hMhyaKy1koWeZDfOS39HxhzqOA3gcqgRWbnlSF MUuBLkIaRIUDJ1fsxSpRDuebyW2VvjGl9RCuid2BgS45wukZqSk6sLGh/ERPyp4R mJ2UT44jzI93xcmyc98zTemUItwQBjzz8RFKcNY6egChaMrl2erNp8UnlEYdDXxi 3D0dZZy+PlRfzA/YCwp8h0XqK5RTiZyKsBsQo+W8gv5VK49ff/h716VuhBn33V9F qoSTYDDILGr8JHOZrB283SYU85qY7N18ysSnOMRq0DPQOidrueHmpRtzSVN7tRtZ jPohcnkaKqavFQg35gXxFJSqcmF0a8U= -----END CERTIFICATE-----Generated at Sun Oct 11 16:37:10 2026 by rpki-client