$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5cc8b9c5-3f68-3f26-aa34-02872064fd42.roa File: 5cc8b9c5-3f68-3f26-aa34-02872064fd42.roa (raw, json) Hash identifier: rSzNQn2c7AZqr3MSg443QyTo6o7VgKF67phCMSQRFXg= Subject key identifier: 55:A9:C1:0C:E6:AE:25:CB:A5:A7:90:A0:5E:E0:F5:F4:21:19:61:97 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584DBA3AE8236AC370EE7D99B840 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5cc8b9c5-3f68-3f26-aa34-02872064fd42.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 22898 IP address blocks: 8.42.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3a:e8:23:6a:c3:70:ee:7d:99:b8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=7027f861-fdd8-4fe8-8d2e-6493c427f4ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:87:37:35:b9:0a:46:cd:9e:87:13:9a:77:e0: 3f:42:32:de:8c:6d:75:ba:69:f8:01:23:fd:f9:57: aa:e2:51:48:e4:88:7c:f1:a3:43:52:50:da:89:ad: aa:1f:19:92:8d:2c:e1:b2:a9:18:f4:5d:8b:f1:e3: d6:9c:8e:18:3e:8b:5e:9f:03:79:67:19:8d:df:bc: c4:c3:df:f7:ce:f3:8d:e4:71:39:e9:59:8f:e6:e1: b0:ac:ee:94:c7:d4:d1:f9:a2:0b:33:50:d2:55:b4: 17:27:3c:b5:1c:82:49:03:57:5c:c6:e1:60:83:4d: 50:2e:88:39:71:4f:30:56:86:ed:ab:50:b9:de:30: 8c:e6:54:d7:9b:a7:bf:af:c7:6f:7b:ab:35:19:84: 38:c7:a1:c7:ff:bb:69:67:ab:4e:de:5e:32:13:d0: 8b:01:66:e1:74:7b:4b:d4:80:00:58:d2:08:69:20: e2:31:44:8e:0a:4e:16:11:7f:32:70:4a:9e:bf:de: ba:ae:f3:63:91:4d:9c:9b:79:f7:78:ab:a8:19:a8: f6:5a:af:db:92:a8:31:1b:dd:8b:95:eb:9b:34:4a: 27:0f:00:0a:78:ef:9b:f2:42:3a:d1:4b:ff:83:29: 13:88:f8:bf:8f:df:69:24:bb:a5:a9:7c:bf:77:b0: 43:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A9:C1:0C:E6:AE:25:CB:A5:A7:90:A0:5E:E0:F5:F4:21:19:61:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5cc8b9c5-3f68-3f26-aa34-02872064fd42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.42.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:db:ea:8b:fe:5a:ba:bf:26:a8:43:a7:58:60:49:21:c5:00: dc:6a:ae:ec:dc:71:a7:60:29:9a:ed:f6:dc:4d:35:49:c6:e5: 20:52:9c:ed:eb:36:61:a3:42:13:1e:4c:aa:17:3b:14:f9:c2: bd:44:ee:38:73:7b:b4:5a:dd:2b:e3:9b:37:81:1c:81:03:0c: 70:d5:c1:4e:6e:bf:79:4f:98:f3:c6:93:04:33:39:2d:6d:f6: bf:22:4b:86:7b:cb:29:3b:51:e6:28:33:59:74:83:00:a3:71: 8c:9b:7e:04:f2:01:40:d5:28:4a:77:78:00:33:e3:eb:d0:65: 45:af:73:77:87:47:bf:94:25:03:83:4d:33:87:12:c9:60:d4: 82:04:01:35:86:bd:5e:9d:07:c6:71:4f:3f:52:1e:dd:2e:46: e8:8f:ce:f6:8c:b4:6d:5c:57:5b:b3:11:d6:3b:dc:c2:d1:2a: 77:1f:08:ec:fd:13:93:90:15:7f:ec:ad:96:05:1f:6c:34:48: 35:ef:fc:86:44:df:44:dd:5f:fd:38:6b:cc:fb:a2:00:ff:20: dd:30:f2:9e:4b:f7:18:a9:49:94:c6:54:dc:ba:f1:8f:20:15: 35:dd:c5:d6:14:19:53:1d:7a:e9:e9:da:98:b5:2c:ce:85:02: 09:51:14:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OugjasNw7n2ZuEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk NzAyN2Y4NjEtZmRkOC00ZmU4LThkMmUtNjQ5M2M0MjdmNGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIc3NbkKRs2ehxOad+A/QjLejG11umn4ASP9 +Veq4lFI5Ih88aNDUlDaia2qHxmSjSzhsqkY9F2L8ePWnI4YPotenwN5ZxmN37zE w9/3zvON5HE56VmP5uGwrO6Ux9TR+aILM1DSVbQXJzy1HIJJA1dcxuFgg01QLog5 cU8wVobtq1C53jCM5lTXm6e/r8dve6s1GYQ4x6HH/7tpZ6tO3l4yE9CLAWbhdHtL 1IAAWNIIaSDiMUSOCk4WEX8ycEqev966rvNjkU2cm3n3eKuoGaj2Wq/bkqgxG92L leubNEonDwAKeO+b8kI60Uv/gykTiPi/j99pJLulqXy/d7BDeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWpwQzmriXLpaeQoF7g9fQhGWGXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNWNjOGI5YzUtM2Y2OC0z ZjI2LWFhMzQtMDI4NzIwNjRmZDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCCCrcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDb6ov+Wrq/JqhDp1hgSSHFANxqruzccadgKZrt9txNNUnG5SBSnO3r NmGjQhMeTKoXOxT5wr1E7jhze7Ra3SvjmzeBHIEDDHDVwU5uv3lPmPPGkwQzOS1t 9r8iS4Z7yyk7UeYoM1l0gwCjcYybfgTyAUDVKEp3eAAz4+vQZUWvc3eHR7+UJQOD TTOHEslg1IIEATWGvV6dB8ZxTz9SHt0uRuiPzvaMtG1cV1uzEdY73MLRKncfCOz9 E5OQFX/srZYFH2w0SDXv/IZE30TdX/04a8z7ogD/IN0w8p5L9xipSZTGVNy68Y8g FTXdxdYUGVMdeunp2pi1LM6FAglRFCQ= -----END CERTIFICATE-----Generated at Wed May 13 14:23:54 2026 by rpki-client