$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/591d919e-d164-336f-b379-4a31755502f0.roa File: 591d919e-d164-336f-b379-4a31755502f0.roa (raw, json) Hash identifier: dWLbO8FmrbY5DRU0FFzjGQ5L1MitVyxWF+NLBuGOpKI= Subject key identifier: 93:35:A0:F8:17:38:DE:7B:DA:EF:9B:44:37:83:95:A4:A6:52:ED:22 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584F225CFD692C73C02D9A5B2E80 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/591d919e-d164-336f-b379-4a31755502f0.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 11178 IP address blocks: 8.20.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5c:fd:69:2c:73:c0:2d:9a:5b:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=b25cc949-9388-4088-9c52-0f80646ad5ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f8:7a:e4:0b:d0:90:d3:d6:57:64:79:ef:98: aa:94:ae:2c:57:31:ec:d4:bd:6b:1e:f4:06:f6:27: d3:f9:12:34:87:25:9b:6a:eb:f2:62:5a:dc:7e:40: 6f:f4:5a:49:f1:51:d1:04:48:66:e9:e5:cb:fb:7f: 8c:57:85:d6:c8:33:52:45:e2:02:d9:85:cb:55:1f: 21:1d:b1:5f:8a:98:9f:b3:5d:ee:51:84:95:09:83: 14:e4:6a:e9:11:d8:70:00:0c:77:10:67:00:c2:d9: 4a:0b:0f:c5:2e:6d:cb:6b:ea:f1:d3:89:31:68:ed: 6b:e2:c9:96:a9:64:3f:75:6b:cc:1b:06:d9:79:df: 9f:d7:02:6c:fa:17:3c:ca:0b:2a:0d:1a:0f:9b:4b: 2f:01:85:2c:87:4c:34:4a:10:16:c1:43:c1:33:2d: 58:f7:9c:41:99:d4:52:2d:1a:5b:18:e2:74:b4:39: 44:1f:a3:16:b1:ea:b9:73:13:b2:98:fa:95:ea:3a: 25:cb:7f:d7:6b:e6:11:77:46:94:d6:bf:c6:04:a3: 49:67:12:fd:65:3d:cd:85:71:31:81:7e:2d:f1:d8: 86:48:49:65:c6:b5:6c:c5:0f:9e:fa:a5:b8:31:44: ed:79:84:33:00:ac:95:d5:76:ec:7f:0d:86:65:90: b2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:35:A0:F8:17:38:DE:7B:DA:EF:9B:44:37:83:95:A4:A6:52:ED:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/591d919e-d164-336f-b379-4a31755502f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.20.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:1f:d3:8b:94:8f:a9:74:53:cd:13:70:9c:24:c1:ca:8d:97: 49:e2:4a:e0:a9:20:4c:ff:f3:1c:97:2b:51:1c:1a:85:9d:6c: da:73:8b:69:c1:04:aa:c8:7a:fe:e4:97:c0:58:56:f4:55:30: db:44:32:eb:c0:3e:66:24:79:01:d8:d9:af:92:ae:4b:13:d0: ee:b1:bd:43:2b:b5:3f:9c:13:ce:67:0b:75:9d:4d:97:42:3f: a2:a5:3f:93:22:8b:8e:c3:46:ae:96:1e:b7:48:77:9e:71:75: 68:ee:67:d0:b1:80:f2:93:6b:dc:1d:9c:f4:70:5d:59:fe:e2: a6:6b:9b:df:b0:2a:0e:c1:c6:93:18:2d:99:e7:2b:e0:11:ac: 6d:93:80:5a:f7:a2:3e:64:0f:45:bc:6e:e9:d3:59:94:8c:36: 61:32:67:89:b8:f5:d6:55:0d:95:d2:37:01:52:8f:fe:4d:97: 62:4f:da:d5:1e:85:cc:a4:11:c9:d0:6c:df:4c:bb:aa:50:3e: 9a:2f:b4:f0:63:e9:4a:43:f4:5d:5d:ae:8b:96:c3:8e:15:ef: e7:d0:5f:8a:74:26:b5:54:4b:52:9d:7f:41:d6:f0:09:82:66: b0:bc:99:08:00:5e:bd:2a:3c:d5:c7:18:ed:f1:73:8c:d4:f9: b8:8c:3d:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXP1pLHPALZpbLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk YjI1Y2M5NDktOTM4OC00MDg4LTljNTItMGY4MDY0NmFkNWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfh65AvQkNPWV2R575iqlK4sVzHs1L1rHvQG 9ifT+RI0hyWbauvyYlrcfkBv9FpJ8VHRBEhm6eXL+3+MV4XWyDNSReIC2YXLVR8h HbFfipifs13uUYSVCYMU5GrpEdhwAAx3EGcAwtlKCw/FLm3La+rx04kxaO1r4smW qWQ/dWvMGwbZed+f1wJs+hc8ygsqDRoPm0svAYUsh0w0ShAWwUPBMy1Y95xBmdRS LRpbGOJ0tDlEH6MWseq5cxOymPqV6joly3/Xa+YRd0aU1r/GBKNJZxL9ZT3NhXEx gX4t8diGSEllxrVsxQ+e+qW4MUTteYQzAKyV1Xbsfw2GZZCyRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJM1oPgXON572u+bRDeDlaSmUu0iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNTkxZDkxOWUtZDE2NC0z MzZmLWIzNzktNGEzMTc1NTUwMmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACBSzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0f04uUj6l0U80TcJwkwcqNl0niSuCpIEz/8xyXK1EcGoWdbNpzi2nB BKrIev7kl8BYVvRVMNtEMuvAPmYkeQHY2a+SrksT0O6xvUMrtT+cE85nC3WdTZdC P6KlP5Mii47DRq6WHrdId55xdWjuZ9CxgPKTa9wdnPRwXVn+4qZrm9+wKg7BxpMY LZnnK+ARrG2TgFr3oj5kD0W8bunTWZSMNmEyZ4m49dZVDZXSNwFSj/5Nl2JP2tUe hcykEcnQbN9Mu6pQPpovtPBj6UpD9F1drouWw44V7+fQX4p0JrVUS1Kdf0HW8AmC ZrC8mQgAXr0qPNXHGO3xc4zU+biMPUY= -----END CERTIFICATE-----Generated at Mon Sep 28 22:44:55 2026 by rpki-client