$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/32bad782-d59d-36d3-943d-cf1d16fc0bd3.roa File: 32bad782-d59d-36d3-943d-cf1d16fc0bd3.roa (raw, json) Hash identifier: 1gMFK2ZylNtUIDXCBNTJH3rUKn4HZdQePVZ2VfQCzGI= Subject key identifier: 77:EB:DD:20:CB:6C:1C:99:49:B9:56:44:2C:23:52:47:D0:1A:F4:C9 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584E5A49F27D49C69D978165F280 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/32bad782-d59d-36d3-943d-cf1d16fc0bd3.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 20473 IP address blocks: 8.9.30.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:49:f2:7d:49:c6:9d:97:81:65:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=608d0db1-deee-4cb1-9d8e-9c4c3599ce49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:23:fc:c8:48:47:af:1e:a7:b0:1c:9d:c8:5e: 35:80:19:bc:91:03:7a:7e:5e:1f:49:bd:59:7b:6e: 9d:56:ce:13:4c:17:6d:83:0d:78:01:89:81:56:a1: 4f:b4:6e:15:09:d6:19:4a:e1:a3:6a:8e:52:d6:e4: a5:09:de:ba:55:4a:8d:f8:75:9c:d3:5c:4c:22:ee: ca:9f:98:af:55:5b:15:9f:5c:9a:91:f8:d5:d0:65: d7:a8:1e:31:41:d5:bc:35:1d:f4:2d:bb:b5:f4:c2: ca:9b:f4:63:d6:64:c2:81:1d:f0:5a:f0:b5:36:aa: 7f:b8:7a:a3:d0:3c:26:6a:96:f9:2f:f9:f8:01:52: bf:2e:d5:5d:a9:34:ea:e3:f3:02:c4:7a:e0:cf:87: 30:08:f0:5d:17:c2:92:d9:3b:61:dc:6a:43:79:2c: 6b:77:e7:0c:ec:8a:3e:76:5c:75:4c:d4:59:9d:8c: 36:a7:6d:f8:2b:2d:f7:ef:88:23:57:7b:97:c0:83: 41:43:b9:9b:d9:53:90:b7:87:6a:28:41:d3:37:26: e2:fc:da:a3:3e:3b:95:3a:3f:b1:7b:49:1f:e7:d8: 4e:be:7b:71:7d:ad:35:eb:5d:61:c0:44:1b:5a:7c: e8:56:97:47:99:51:41:b5:27:3a:ca:db:2e:33:f1: ce:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:EB:DD:20:CB:6C:1C:99:49:B9:56:44:2C:23:52:47:D0:1A:F4:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/32bad782-d59d-36d3-943d-cf1d16fc0bd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.9.30.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:2f:d5:d3:18:71:c0:2a:d0:8b:43:15:29:f2:64:0a:fc:56: 39:f2:bd:29:be:aa:9e:1a:8d:ba:36:de:7f:ae:03:fa:ec:16: 3b:c5:c6:f8:da:ab:3c:da:8c:35:8f:39:a7:48:83:3d:7a:24: 41:51:ef:83:49:e5:1a:ab:b2:e9:cb:07:6b:57:92:84:eb:41: 80:aa:7e:bc:7c:0d:2a:e2:40:dd:26:01:08:66:be:bf:b5:af: bd:c5:27:43:df:8c:8e:af:f3:6a:da:5b:72:03:0c:82:30:db: 86:21:92:b6:24:d6:2f:1a:a1:7e:86:9d:ec:dc:e2:4a:cd:7c: 60:71:c2:62:05:a6:22:59:ea:4e:a5:85:08:a5:b5:d5:9e:fe: fa:e7:76:a6:0b:50:ed:89:12:3a:1b:72:aa:2a:03:1f:3e:5c: f8:a3:9c:d2:d8:72:04:73:b5:22:65:fe:17:49:8c:df:94:df: 72:33:6a:11:93:46:20:6c:da:15:eb:40:85:ed:d4:c3:ca:61: 82:99:b3:62:d1:d2:c3:a9:a5:dc:6b:45:5b:bd:30:de:6d:39: 26:3b:42:ee:35:15:bf:b6:1c:8b:ca:dc:4e:d9:8e:88:cf:03: c5:d0:ce:13:ad:80:5c:d7:9e:69:07:52:f5:aa:98:ff:9f:c4: c8:c6:17:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSfJ9Scadl4Fl8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk NjA4ZDBkYjEtZGVlZS00Y2IxLTlkOGUtOWM0YzM1OTljZTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSP8yEhHrx6nsBydyF41gBm8kQN6fl4fSb1Z e26dVs4TTBdtgw14AYmBVqFPtG4VCdYZSuGjao5S1uSlCd66VUqN+HWc01xMIu7K n5ivVVsVn1yakfjV0GXXqB4xQdW8NR30Lbu19MLKm/Rj1mTCgR3wWvC1Nqp/uHqj 0Dwmapb5L/n4AVK/LtVdqTTq4/MCxHrgz4cwCPBdF8KS2Tth3GpDeSxrd+cM7Io+ dlx1TNRZnYw2p234Ky3374gjV3uXwINBQ7mb2VOQt4dqKEHTNybi/NqjPjuVOj+x e0kf59hOvntxfa01611hwEQbWnzoVpdHmVFBtSc6ytsuM/HOPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHfr3SDLbByZSblWRCwjUkfQGvTJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMzJiYWQ3ODItZDU5ZC0z NmQzLTk0M2QtY2YxZDE2ZmMwYmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBCAkeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4v1dMYccAq0ItDFSnyZAr8VjnyvSm+qp4ajbo23n+uA/rsFjvFxvja qzzajDWPOadIgz16JEFR74NJ5RqrsunLB2tXkoTrQYCqfrx8DSriQN0mAQhmvr+1 r73FJ0PfjI6v82raW3IDDIIw24YhkrYk1i8aoX6Gnezc4krNfGBxwmIFpiJZ6k6l hQiltdWe/vrndqYLUO2JEjobcqoqAx8+XPijnNLYcgRztSJl/hdJjN+U33IzahGT RiBs2hXrQIXt1MPKYYKZs2LR0sOppdxrRVu9MN5tOSY7Qu41Fb+2HIvK3E7ZjojP A8XQzhOtgFzXnmkHUvWqmP+fxMjGF1g= -----END CERTIFICATE-----Generated at Fri Jul 24 11:59:28 2026 by rpki-client