$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/48ecbc98-e01b-31c6-abb3-89f2e3042714.roa File: 48ecbc98-e01b-31c6-abb3-89f2e3042714.roa (raw, json) Hash identifier: DvJrztRGw1ymc1Plmpd4MhMmP/EgV/KT6FxETIlOGwQ= Subject key identifier: 1F:EB:16:EA:DA:C8:96:C2:22:5E:A8:58:CF:3E:20:B0:4F:85:A9:A9 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584E6574A9789FF9D7B097E75520 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/48ecbc98-e01b-31c6-abb3-89f2e3042714.roa Signing time: Sun 05 Jul 2026 09:00:13 +0000 ROA not before: Sun 05 Jul 2026 09:00:13 +0000 ROA not after: Sat 03 Oct 2026 09:00:13 +0000 asID: 203 IP address blocks: 8.41.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:65:74:a9:78:9f:f9:d7:b0:97:e7:55:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jul 5 09:00:13 2026 GMT Not After : Oct 3 09:00:13 2026 GMT Subject: CN=da9af63c-f25d-4c47-b437-3a66f3e9c761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1d:fc:e5:99:7f:9e:b2:06:31:27:fa:d2:7a: 65:ea:a1:9f:00:64:a3:a3:fd:e5:a6:8a:2f:f2:60: fa:d9:6f:7f:a4:8b:a0:39:dc:46:5f:fe:d1:00:25: 77:18:22:c7:5d:ff:fd:98:5b:fd:3a:21:38:28:1a: ca:94:6c:d5:ae:11:9e:f1:90:31:62:9a:01:33:fe: bf:1c:f0:96:64:44:7a:74:36:e0:69:c4:e6:16:46: 1a:b7:3a:32:60:06:7a:56:90:99:bb:05:7e:79:b7: 2a:d1:55:c2:01:9b:fd:c8:02:af:5c:b7:46:e2:72: 3c:77:b3:0b:c3:f1:6f:55:a9:af:4c:e1:2e:18:db: 76:50:1c:c2:d1:e1:63:84:13:6d:00:25:41:85:a1: 13:24:c6:21:1d:51:2a:60:9f:6a:a6:7f:2e:d3:1a: 31:cc:a5:19:68:85:59:2f:88:23:e7:7b:5f:8f:41: 84:c4:ec:98:12:b6:0c:cc:ec:39:99:4f:33:d5:98: d5:c0:25:bb:62:06:bb:b0:33:1b:6c:67:14:0e:85: c6:00:45:f6:3a:59:26:60:74:2a:87:cf:f1:5c:72: 9e:ce:f8:77:e4:b4:60:0b:1c:1b:05:97:2e:dd:db: a0:cc:33:5f:c0:57:3e:1c:cf:70:a4:9a:74:34:3c: ae:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:EB:16:EA:DA:C8:96:C2:22:5E:A8:58:CF:3E:20:B0:4F:85:A9:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/48ecbc98-e01b-31c6-abb3-89f2e3042714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.41.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:f4:1f:45:c0:e9:3c:e5:ba:2f:47:53:38:ab:71:29:51:e8: 0e:f7:fa:b5:2d:fa:32:6a:2d:ef:f4:f9:ad:52:75:a7:28:01: 26:91:2a:94:d1:8d:e8:78:1a:24:85:df:98:4c:2f:8a:c0:db: 53:ba:2a:24:38:98:28:42:4a:60:6d:91:90:2b:5e:62:f8:89: 04:61:3f:5a:b7:0f:4f:16:60:25:d9:7a:d4:78:eb:af:19:bb: f8:11:22:aa:91:d1:8f:93:57:0a:d7:3b:71:7a:a6:3a:6b:d7: e6:72:73:32:f2:10:77:ab:c9:81:a4:36:76:51:d0:06:76:74: 51:06:9d:ca:94:6a:ed:1e:e7:14:4d:85:fc:fa:52:4e:83:0f: e4:a3:ed:33:f1:29:ea:b3:59:9c:01:e5:94:d6:e9:19:ed:09: e4:75:90:3a:1f:56:62:62:ab:f9:3a:3a:00:b9:77:95:5c:47: 1a:a5:e0:79:52:8a:68:c8:4f:7f:aa:94:6e:80:9b:76:5a:95: c8:26:da:45:42:e1:31:a3:05:68:18:b0:20:04:76:f3:94:d1: e7:d1:12:2f:cf:98:03:7a:f9:0c:b7:65:9c:b9:06:d3:01:3b: be:5f:b5:f9:35:5e:fa:cd:55:a7:9a:0a:ff:dd:e9:90:d4:d9: 4b:de:53:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5ldKl4n/nXsJfnVSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDcwNTA5MDAxM1oXDTI2MTAwMzA5MDAxM1owLzEtMCsGA1UEAxMk ZGE5YWY2M2MtZjI1ZC00YzQ3LWI0MzctM2E2NmYzZTljNzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh385Zl/nrIGMSf60npl6qGfAGSjo/3lpoov 8mD62W9/pIugOdxGX/7RACV3GCLHXf/9mFv9OiE4KBrKlGzVrhGe8ZAxYpoBM/6/ HPCWZER6dDbgacTmFkYatzoyYAZ6VpCZuwV+ebcq0VXCAZv9yAKvXLdG4nI8d7ML w/FvVamvTOEuGNt2UBzC0eFjhBNtACVBhaETJMYhHVEqYJ9qpn8u0xoxzKUZaIVZ L4gj53tfj0GExOyYErYMzOw5mU8z1ZjVwCW7Yga7sDMbbGcUDoXGAEX2OlkmYHQq h8/xXHKezvh35LRgCxwbBZcu3dugzDNfwFc+HM9wpJp0NDyuowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/rFurayJbCIl6oWM8+ILBPhampMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNDhlY2JjOTgtZTAxYi0z MWM2LWFiYjMtODlmMmUzMDQyNzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACCloMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALv0H0XA6Tzlui9HUzircSlR6A73+rUt+jJqLe/0+a1SdacoASaRKpTR jeh4GiSF35hML4rA21O6KiQ4mChCSmBtkZArXmL4iQRhP1q3D08WYCXZetR4668Z u/gRIqqR0Y+TVwrXO3F6pjpr1+ZyczLyEHeryYGkNnZR0AZ2dFEGncqUau0e5xRN hfz6Uk6DD+Sj7TPxKeqzWZwB5ZTW6RntCeR1kDofVmJiq/k6OgC5d5VcRxql4HlS imjIT3+qlG6Am3Zalcgm2kVC4TGjBWgYsCAEdvOU0efREi/PmAN6+Qy3ZZy5BtMB O75ftfk1XvrNVaeaCv/d6ZDU2UveU8s= -----END CERTIFICATE-----Generated at Fri Jul 24 00:47:05 2026 by rpki-client