$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4fdad9e2-9371-32da-813c-968bf6f1ba73.roa File: 4fdad9e2-9371-32da-813c-968bf6f1ba73.roa (raw, json) Hash identifier: osBnJmEZtsPYACF31s2LXqXtoTZmpFxE6xPwtU6x6LE= Subject key identifier: E6:DF:64:0A:41:30:3F:40:E7:C7:06:4C:0A:47:1E:DD:53:83:BE:E6 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584E7FFA2E2B6CA4EC4103CAEA60 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4fdad9e2-9371-32da-813c-968bf6f1ba73.roa Signing time: Tue 14 Jul 2026 21:00:12 +0000 ROA not before: Tue 14 Jul 2026 21:00:12 +0000 ROA not after: Mon 12 Oct 2026 21:00:12 +0000 asID: 40274 IP address blocks: 8.46.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7f:fa:2e:2b:6c:a4:ec:41:03:ca:ea:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jul 14 21:00:12 2026 GMT Not After : Oct 12 21:00:12 2026 GMT Subject: CN=71eeb86a-c811-4d28-b11d-aa19ac3c90e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b6:7f:7d:c8:78:2d:c9:6d:2a:b4:98:23:83: cf:e9:81:42:71:46:03:c0:09:5a:fc:dd:13:8e:e4: 66:a0:30:a4:5b:d1:4d:0d:43:c0:f7:45:88:8c:70: 5d:2b:2a:1f:27:37:37:56:9f:3c:c4:08:31:7e:91: cd:4c:4a:a3:96:a9:07:f3:5d:cb:00:e5:04:96:5c: 8b:92:24:78:9d:ee:1d:63:b5:7c:31:b9:33:bb:f6: 23:49:73:00:d5:4c:7b:f4:7e:5d:d1:1e:5f:1d:ba: a9:b9:2c:cb:9c:c6:6b:63:61:81:ea:80:54:f9:aa: 7d:cf:6a:c6:04:d7:bc:60:14:2b:4e:f6:38:c6:06: 9e:48:6a:fa:84:15:de:78:7e:65:97:aa:87:bc:60: 07:ce:7f:4e:c8:30:a5:82:f8:5c:a5:73:93:d1:61: b5:73:88:e4:35:74:4a:13:9c:be:07:1f:59:6b:2d: ae:5c:c6:6c:21:4a:bc:7d:08:c3:4c:76:bf:e4:98: e6:64:ab:87:56:6e:d4:7f:77:95:35:f6:32:37:c5: 8d:44:8c:45:c5:e0:c3:6b:ad:25:d7:1f:8d:dd:8f: a7:f2:b3:3a:e7:0d:7f:9e:dd:59:39:ab:d2:8f:ce: e9:92:18:7e:48:14:f8:ab:a2:28:f3:5f:05:a4:55: 3f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:DF:64:0A:41:30:3F:40:E7:C7:06:4C:0A:47:1E:DD:53:83:BE:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4fdad9e2-9371-32da-813c-968bf6f1ba73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.46.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:24:11:d2:9c:c9:3a:69:3a:45:ca:e3:bc:a2:73:e6:3b:76: 14:57:54:00:88:f4:e2:17:7e:57:2a:95:af:84:94:8b:10:28: 2f:11:5c:fc:3f:2a:a9:6a:90:d5:b1:5d:26:e0:ce:19:e3:a7: 23:f2:02:37:0a:65:d0:ca:52:69:5e:1a:b0:61:ba:e1:85:89: 4c:48:a5:cb:6e:46:43:c4:55:5f:9d:75:75:66:df:7a:5c:b5: 12:cb:64:67:76:4c:1d:db:83:6a:c6:f1:ac:d6:df:89:5c:52: 3f:4e:8b:c2:8f:08:57:82:ce:7e:ec:b1:70:53:63:ee:59:ec: 8a:b4:b2:ef:12:91:c7:9e:ef:32:65:b0:4d:58:56:a8:75:c2: bb:50:cb:f0:3c:c5:fc:ed:e8:52:22:83:1a:a4:05:51:f9:38: 1b:2a:d5:2c:ca:25:8b:dc:72:70:ff:13:70:95:06:fa:22:1b: 67:09:9e:bd:14:d5:3e:a7:60:27:ae:7f:b4:27:16:d2:ab:3d: eb:fa:df:b6:78:1c:2e:c0:56:5e:5c:9e:e5:51:78:b3:a1:79: ae:49:17:08:3c:fb:d8:7f:ac:4e:b8:3a:7b:16:8d:88:45:64: 3f:1c:04:76:ef:20:8e:3a:c2:11:3e:29:6f:45:eb:4a:38:ed: 3a:9e:c4:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5/+i4rbKTsQQPK6mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDcxNDIxMDAxMloXDTI2MTAxMjIxMDAxMlowLzEtMCsGA1UEAxMk NzFlZWI4NmEtYzgxMS00ZDI4LWIxMWQtYWExOWFjM2M5MGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobZ/fch4LcltKrSYI4PP6YFCcUYDwAla/N0T juRmoDCkW9FNDUPA90WIjHBdKyofJzc3Vp88xAgxfpHNTEqjlqkH813LAOUEllyL kiR4ne4dY7V8Mbkzu/YjSXMA1Ux79H5d0R5fHbqpuSzLnMZrY2GB6oBU+ap9z2rG BNe8YBQrTvY4xgaeSGr6hBXeeH5ll6qHvGAHzn9OyDClgvhcpXOT0WG1c4jkNXRK E5y+Bx9Zay2uXMZsIUq8fQjDTHa/5JjmZKuHVm7Uf3eVNfYyN8WNRIxFxeDDa60l 1x+N3Y+n8rM65w1/nt1ZOavSj87pkhh+SBT4q6Io818FpFU/UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObfZApBMD9A58cGTApHHt1Tg77mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNGZkYWQ5ZTItOTM3MS0z MmRhLTgxM2MtOTY4YmY2ZjFiYTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACC55MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIkEdKcyTppOkXK47yic+Y7dhRXVACI9OIXflcqla+ElIsQKC8RXPw/ KqlqkNWxXSbgzhnjpyPyAjcKZdDKUmleGrBhuuGFiUxIpctuRkPEVV+ddXVm33pc tRLLZGd2TB3bg2rG8azW34lcUj9Oi8KPCFeCzn7ssXBTY+5Z7Iq0su8Skcee7zJl sE1YVqh1wrtQy/A8xfzt6FIigxqkBVH5OBsq1SzKJYvccnD/E3CVBvoiG2cJnr0U 1T6nYCeuf7QnFtKrPev637Z4HC7AVl5cnuVReLOhea5JFwg8+9h/rE64OnsWjYhF ZD8cBHbvII46whE+KW9F60o47TqexIQ= -----END CERTIFICATE-----Generated at Fri Jul 24 15:54:04 2026 by rpki-client