$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/40d14a07-2a69-39da-8798-607612ab874b.roa File: 40d14a07-2a69-39da-8798-607612ab874b.roa (raw, json) Hash identifier: L/Ik+cheG1kCsCXYi8EOSkAGGkjIq4PfNvNiX90+vmU= Subject key identifier: C1:09:63:96:51:3B:FC:44:31:D5:79:A8:BC:BB:79:1D:B2:CD:AA:3C Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584F498B276BDAFECFD2C9441BF0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/40d14a07-2a69-39da-8798-607612ab874b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40311 IP address blocks: 8.17.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:27:6b:da:fe:cf:d2:c9:44:1b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b1de8c29-5421-4845-9fcb-0b62c3029507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:14:68:34:19:3a:54:55:01:f5:ff:76:c1:6a: 06:64:2a:79:3d:32:a0:c9:3a:f0:78:c7:1d:c8:b7: 93:a5:4e:9e:2e:0c:a2:02:29:77:8e:31:ad:0a:4f: 8a:55:9a:7d:c3:e4:73:2f:e7:ff:8f:8f:b6:e8:68: ab:46:a7:ad:63:74:10:b5:5c:91:bc:dc:1f:4d:87: a3:3e:69:9c:2c:5a:6b:59:1e:08:ca:4d:ff:e3:08: e8:db:b8:dc:9b:a0:93:ac:da:17:28:77:a9:a5:ea: 3a:34:06:da:68:05:dd:45:8a:0b:23:b8:d0:22:cd: 6c:f1:75:b9:01:03:d7:35:85:a7:a5:52:9c:a7:88: 7b:92:41:f2:3b:84:cb:81:69:b9:1e:5f:8a:cd:42: cd:8d:4e:b5:62:7c:7e:3c:b1:da:17:d5:c6:6e:ab: d4:30:b3:1e:c6:3c:5f:19:aa:6e:7d:f3:b5:bf:56: 5c:c1:da:de:8b:eb:c3:26:c1:14:d4:34:03:fc:6c: d2:35:c8:1f:41:8c:08:72:93:4f:30:06:66:d0:07: 4a:c8:ec:bc:fb:62:c4:59:80:11:f1:05:5b:d4:bf: df:75:c0:86:10:2e:77:48:ec:a3:bd:44:88:3e:76: d2:f8:50:e5:8c:ab:60:56:f2:4c:92:09:34:91:a8: ad:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:09:63:96:51:3B:FC:44:31:D5:79:A8:BC:BB:79:1D:B2:CD:AA:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/40d14a07-2a69-39da-8798-607612ab874b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.17.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:63:df:a1:fa:7b:7e:60:34:0b:b5:3c:25:e6:46:cd:f1:5f: 16:e3:1d:4d:d1:ec:5b:e9:8b:32:1e:a7:53:eb:25:01:3f:93: ee:b3:85:b4:df:b2:c0:df:a5:14:f1:0d:05:69:77:2a:78:fc: 30:4b:da:11:ed:f4:04:55:9a:7e:54:1b:fa:ab:ef:ce:25:00: 31:73:e6:0d:37:1e:54:2f:5a:c6:c8:2a:f8:bb:46:37:d0:cb: 44:62:c6:4e:d5:94:6a:3e:1a:4e:08:9f:48:81:f4:15:9f:c4: 8b:37:d5:6d:b0:ac:b5:44:6d:e6:c6:69:57:bd:b9:2d:39:f8: 3e:38:7e:7e:07:e0:10:ba:f4:4f:ac:22:44:3f:45:12:1e:b7: 81:ec:8f:2c:3f:95:67:0c:b6:ed:d0:3b:32:6c:e2:21:07:96: cc:29:7f:f1:2c:e1:5e:dd:f3:e0:2d:99:13:8c:85:a6:a2:6a: c1:de:ac:6f:24:92:fc:5e:d0:79:e6:d8:0f:e2:27:ae:7e:07: 32:da:3b:96:dc:a6:b8:db:af:05:23:8a:6e:07:2d:88:d0:ef: 5d:c6:d8:73:d5:19:15:30:d0:1b:41:ea:e2:d7:36:e4:42:54: 93:f6:f4:3b:7d:c3:10:44:7b:d3:82:e3:9f:22:dd:7d:5e:ec: c1:d2:27:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jiydr2v7P0slEG/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjFkZThjMjktNTQyMS00ODQ1LTlmY2ItMGI2MmMzMDI5NTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhRoNBk6VFUB9f92wWoGZCp5PTKgyTrweMcd yLeTpU6eLgyiAil3jjGtCk+KVZp9w+RzL+f/j4+26GirRqetY3QQtVyRvNwfTYej PmmcLFprWR4Iyk3/4wjo27jcm6CTrNoXKHeppeo6NAbaaAXdRYoLI7jQIs1s8XW5 AQPXNYWnpVKcp4h7kkHyO4TLgWm5Hl+KzULNjU61Ynx+PLHaF9XGbqvUMLMexjxf GapuffO1v1Zcwdrei+vDJsEU1DQD/GzSNcgfQYwIcpNPMAZm0AdKyOy8+2LEWYAR 8QVb1L/fdcCGEC53SOyjvUSIPnbS+FDljKtgVvJMkgk0kaitVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEJY5ZRO/xEMdV5qLy7eR2yzao8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNDBkMTRhMDctMmE2OS0z OWRhLTg3OTgtNjA3NjEyYWI4NzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACBFrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZj36H6e35gNAu1PCXmRs3xXxbjHU3R7FvpizIep1PrJQE/k+6zhbTf ssDfpRTxDQVpdyp4/DBL2hHt9ARVmn5UG/qr784lADFz5g03HlQvWsbIKvi7RjfQ y0Rixk7VlGo+Gk4In0iB9BWfxIs31W2wrLVEbebGaVe9uS05+D44fn4H4BC69E+s IkQ/RRIet4Hsjyw/lWcMtu3QOzJs4iEHlswpf/Es4V7d8+AtmROMhaaiasHerG8k kvxe0Hnm2A/iJ65+BzLaO5bcprjbrwUjim4HLYjQ713G2HPVGRUw0BtB6uLXNuRC VJP29Dt9wxBEe9OC458i3X1e7MHSJ7I= -----END CERTIFICATE-----Generated at Sun Oct 11 15:00:39 2026 by rpki-client