$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3a6e0a4e-33eb-3382-bd82-fc8bf82cefe5.roa File: 3a6e0a4e-33eb-3382-bd82-fc8bf82cefe5.roa (raw, json) Hash identifier: uN++yMCUbppEDLkEKrGffSWF5HknN9Gel2SkGVcBr9k= Subject key identifier: 1B:84:78:CA:10:21:20:BE:26:80:22:21:05:2C:98:CB:7B:CD:2D:84 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584F497415F70520B39998A36600 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3a6e0a4e-33eb-3382-bd82-fc8bf82cefe5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40311 IP address blocks: 8.17.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:15:f7:05:20:b3:99:98:a3:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0ea1ca0a-08ba-4709-adc5-5c4e4571da65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a9:f0:2f:d9:30:99:79:0e:f8:ad:c2:9e:14: 36:b1:5c:31:a5:6b:24:2b:e0:36:8a:53:35:55:6f: 38:c5:17:4e:d7:f1:57:ae:cf:bf:65:99:10:00:0d: a0:44:e8:39:a2:0f:fe:2f:f7:03:18:ad:fa:d3:77: 6a:cd:11:34:12:fc:55:ac:3c:73:d5:02:33:78:86: e8:61:68:27:50:3e:1a:e5:5f:88:63:44:3c:26:4c: be:61:f4:3d:f3:44:65:61:0e:af:2a:b3:6d:00:fd: 32:8f:a6:a0:70:64:bd:b4:4b:bf:b0:c2:f0:5d:5c: bd:6f:1f:7c:df:52:86:0c:37:e1:ba:a7:96:ea:3c: 46:1d:ff:a9:61:13:6a:79:a5:16:d1:e1:5e:5b:e6: ca:4c:92:b2:3b:c6:3e:fb:a0:83:41:8c:34:8c:b3: d7:9e:e8:b5:99:f3:9a:33:9c:8f:f3:f6:61:72:ab: 1d:13:a8:53:1b:db:e4:e0:09:a5:e6:63:ed:e0:a9: 0d:74:ed:e8:64:12:99:2a:8d:a0:75:4f:36:64:05: 7d:a9:15:6a:ed:2d:f0:f8:66:70:9b:4d:7a:69:45: f6:bc:b9:4c:09:bd:d2:7e:05:e2:29:ed:73:1d:74: 60:5a:e4:d0:4f:23:db:33:08:f8:16:88:d6:6a:03: cc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:84:78:CA:10:21:20:BE:26:80:22:21:05:2C:98:CB:7B:CD:2D:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3a6e0a4e-33eb-3382-bd82-fc8bf82cefe5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.17.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:76:7a:ca:33:e2:be:a4:4b:fd:00:17:b1:5c:70:33:4d:11: 30:29:25:e2:ba:6f:0e:fa:22:9f:d9:d7:2c:24:67:58:6f:91: 19:ee:35:49:c7:cb:03:d0:d2:02:63:e3:27:38:67:35:92:59: c5:fe:45:25:eb:3b:0a:a2:cf:1f:41:3b:25:8e:2f:b7:50:a0: 29:3a:7f:9b:27:eb:00:a3:8d:d8:13:31:62:1f:99:77:68:e2: 0c:c0:b4:36:87:09:1b:79:8b:0e:1e:42:5d:9b:48:f9:ae:fb: e2:53:22:6c:f8:9f:d0:d8:de:66:6d:36:ed:ad:39:6f:eb:b8: e7:50:56:5f:ce:9c:b5:64:63:ee:c0:af:2b:ee:d1:58:e6:a2: 9d:2b:51:61:f7:3f:85:98:ac:5c:c8:8f:eb:10:c0:33:9f:c1: dd:86:2b:02:90:11:0b:a6:30:5c:d2:b9:ca:cf:37:74:80:30: a5:d1:a8:8b:de:13:ad:90:3d:75:90:36:aa:d7:22:6e:0b:02: 13:a2:b1:81:81:74:42:ee:5e:bd:08:d0:1f:eb:f0:fd:78:5b: 55:52:a6:27:6e:16:d8:5c:dd:90:61:1f:11:4a:d0:d5:10:3f: 87:c6:fc:43:9b:e6:ff:f3:e3:b5:50:a6:54:75:70:c5:e0:f0: 08:71:c4:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdBX3BSCzmZijZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGVhMWNhMGEtMDhiYS00NzA5LWFkYzUtNWM0ZTQ1NzFkYTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6nwL9kwmXkO+K3CnhQ2sVwxpWskK+A2ilM1 VW84xRdO1/FXrs+/ZZkQAA2gROg5og/+L/cDGK3603dqzRE0EvxVrDxz1QIzeIbo YWgnUD4a5V+IY0Q8Jky+YfQ980RlYQ6vKrNtAP0yj6agcGS9tEu/sMLwXVy9bx98 31KGDDfhuqeW6jxGHf+pYRNqeaUW0eFeW+bKTJKyO8Y++6CDQYw0jLPXnui1mfOa M5yP8/ZhcqsdE6hTG9vk4Aml5mPt4KkNdO3oZBKZKo2gdU82ZAV9qRVq7S3w+GZw m016aUX2vLlMCb3SfgXiKe1zHXRgWuTQTyPbMwj4FojWagPM4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuEeMoQISC+JoAiIQUsmMt7zS2EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvM2E2ZTBhNGUtMzNlYi0z MzgyLWJkODItZmM4YmY4MmNlZmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACBFtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHR2esoz4r6kS/0AF7FccDNNETApJeK6bw76Ip/Z1ywkZ1hvkRnuNUnH ywPQ0gJj4yc4ZzWSWcX+RSXrOwqizx9BOyWOL7dQoCk6f5sn6wCjjdgTMWIfmXdo 4gzAtDaHCRt5iw4eQl2bSPmu++JTImz4n9DY3mZtNu2tOW/ruOdQVl/OnLVkY+7A ryvu0Vjmop0rUWH3P4WYrFzIj+sQwDOfwd2GKwKQEQumMFzSucrPN3SAMKXRqIve E62QPXWQNqrXIm4LAhOisYGBdELuXr0I0B/r8P14W1VSpiduFthc3ZBhHxFK0NUQ P4fG/EOb5v/z47VQplR1cMXg8AhxxE8= -----END CERTIFICATE-----Generated at Sat Oct 3 11:16:49 2026 by rpki-client