$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3faf2af1-6ac8-3fef-8689-293a2108a805.roa File: 3faf2af1-6ac8-3fef-8689-293a2108a805.roa (raw, json) Hash identifier: /cPiWongfbTUjvrOz1AC1j+kr6PIXDCDNTH2IsiBC2g= Subject key identifier: E1:61:25:6C:DA:48:27:20:7E:37:5D:7F:0B:D9:C0:20:DA:7E:A0:20 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584F7783670962F056F2D9441F00 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3faf2af1-6ac8-3fef-8689-293a2108a805.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 402347 IP address blocks: 8.19.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:67:09:62:f0:56:f2:d9:44:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=e94b0cc0-0197-4520-b0d8-a724c7a121fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ed:0e:9c:e9:7b:ee:8f:f5:dd:77:45:c1:5b: fa:94:fd:8f:cf:95:a6:70:e6:b9:aa:45:1b:8d:6b: 75:58:ed:34:25:e8:b5:0a:3d:9d:ab:45:d2:62:49: 8a:a4:b8:a7:eb:7b:21:df:bf:2d:82:9b:e3:d7:f8: 26:39:dd:a4:12:0c:86:a6:fa:c6:8d:87:df:8f:42: 46:68:d0:e6:08:95:f1:15:54:60:a7:3f:91:39:48: 01:e7:85:85:68:98:fd:aa:9c:b1:c8:2c:21:49:9c: 8f:ae:5b:8c:cf:48:c0:97:22:22:7a:54:5f:24:8e: b8:2d:63:f6:22:2f:8c:46:2d:fd:25:9c:2d:3b:c1: 61:68:1a:f4:64:ba:91:17:97:a4:59:77:e1:50:ba: 32:6c:ca:18:eb:a3:df:bf:d9:fd:c6:bb:4c:2d:10: 5e:5b:13:e6:58:80:8b:91:3c:52:1b:d5:84:38:ef: 2b:b9:74:cf:b6:cd:d4:bf:84:35:79:f8:08:b0:8c: 5a:b8:eb:e5:8f:05:b0:19:01:a1:c3:c0:76:da:16: 2e:fe:22:0a:1a:aa:5f:42:26:eb:aa:c1:62:7a:78: fe:b3:2c:8a:69:a2:58:7c:83:9e:25:f7:86:ca:70: 51:e2:7a:7c:ee:53:1f:65:d5:7a:d6:5a:7f:aa:73: b6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:61:25:6C:DA:48:27:20:7E:37:5D:7F:0B:D9:C0:20:DA:7E:A0:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3faf2af1-6ac8-3fef-8689-293a2108a805.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.19.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:33:8a:87:38:0e:8c:b7:a4:f3:ad:c7:99:7c:19:82:77:e5: 99:55:f9:03:e7:9a:b8:2f:d4:25:9d:6d:99:81:c2:26:1a:66: 0d:7d:b4:d3:0a:4f:51:00:9f:78:90:76:c5:89:5e:c4:b7:68: a3:a9:4c:b4:df:fb:2e:b6:5f:5d:f2:f0:34:1a:43:5a:e9:c2: e7:cf:70:4a:65:90:b7:96:25:27:74:40:83:4a:73:7c:2f:04: f3:94:71:e5:ab:6f:0d:a7:59:bd:93:12:38:a5:01:97:1c:72: 30:e6:cf:19:e0:95:89:59:9a:30:ea:7b:cb:cf:bc:83:ba:61: 21:84:ea:72:60:20:d2:a5:39:e0:f2:a3:e2:84:c6:9c:11:08: a6:1b:4f:f7:52:dd:a6:7f:58:f9:fd:0a:e2:28:98:16:9c:c2: 66:1d:7e:21:b0:fd:d6:63:b5:5f:88:e2:ac:eb:4a:01:f8:fd: a0:a4:ed:1c:23:ee:b9:62:74:20:55:24:6b:33:df:3d:72:e8: ca:2c:94:95:34:65:e4:1e:b1:c7:99:d5:a1:f9:65:b8:a0:e4: 82:13:5d:4f:5f:9b:a0:9c:17:e7:45:29:d7:0e:f7:ad:85:af: 9e:b4:53:7a:81:3f:1f:60:ab:1d:39:ee:3c:49:d9:20:9d:fe: 58:26:10:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93g2cJYvBW8tlEHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZTk0YjBjYzAtMDE5Ny00NTIwLWIwZDgtYTcyNGM3YTEyMWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO0OnOl77o/13XdFwVv6lP2Pz5WmcOa5qkUb jWt1WO00Jei1Cj2dq0XSYkmKpLin63sh378tgpvj1/gmOd2kEgyGpvrGjYffj0JG aNDmCJXxFVRgpz+ROUgB54WFaJj9qpyxyCwhSZyPrluMz0jAlyIielRfJI64LWP2 Ii+MRi39JZwtO8FhaBr0ZLqRF5ekWXfhULoybMoY66Pfv9n9xrtMLRBeWxPmWICL kTxSG9WEOO8ruXTPts3Uv4Q1efgIsIxauOvljwWwGQGhw8B22hYu/iIKGqpfQibr qsFienj+syyKaaJYfIOeJfeGynBR4np87lMfZdV61lp/qnO2oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFhJWzaSCcgfjddfwvZwCDafqAgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvM2ZhZjJhZjEtNmFjOC0z ZmVmLTg2ODktMjkzYTIxMDhhODA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACBP7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEzioc4Doy3pPOtx5l8GYJ35ZlV+QPnmrgv1CWdbZmBwiYaZg19tNMK T1EAn3iQdsWJXsS3aKOpTLTf+y62X13y8DQaQ1rpwufPcEplkLeWJSd0QINKc3wv BPOUceWrbw2nWb2TEjilAZcccjDmzxnglYlZmjDqe8vPvIO6YSGE6nJgINKlOeDy o+KExpwRCKYbT/dS3aZ/WPn9CuIomBacwmYdfiGw/dZjtV+I4qzrSgH4/aCk7Rwj 7rlidCBVJGsz3z1y6MoslJU0ZeQesceZ1aH5Zbig5IITXU9fm6CcF+dFKdcO962F r560U3qBPx9gqx057jxJ2SCd/lgmEEM= -----END CERTIFICATE-----Generated at Sun Oct 11 15:27:21 2026 by rpki-client