$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7122a28a-9204-3d97-8c17-93a4a9693862.roa File: 7122a28a-9204-3d97-8c17-93a4a9693862.roa (raw, json) Hash identifier: r39/nxbkbiZTITuLABAmX1ZYrEdco5RkKM/DAhGxWtU= Subject key identifier: 2F:01:6D:82:81:53:0B:A2:33:FB:DF:22:28:DC:1E:C3:30:99:2E:3C Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584E86F4EADE65309FA6EB97D860 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7122a28a-9204-3d97-8c17-93a4a9693862.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 394161 IP address blocks: 8.244.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f4:ea:de:65:30:9f:a6:eb:97:d8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=3dc2da89-0144-4d84-bed6-dbc57d77667e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d3:9e:72:2a:b7:7d:2f:57:49:12:fd:d7:23: 63:61:07:48:51:a9:74:f3:45:62:f9:33:39:a1:32: 9c:ae:18:f0:72:a6:fe:c3:73:76:7f:ee:76:1a:15: bb:17:05:9d:5d:84:eb:c4:20:a8:21:35:a0:49:cb: 42:b8:f1:d6:6a:14:51:d2:fb:4d:ae:54:cd:05:65: f9:df:ec:79:24:10:46:ba:35:f2:db:c3:57:95:56: 41:bf:ae:e5:bd:92:bc:1b:85:9d:31:ea:e7:fe:ac: fc:55:52:4e:c1:ec:65:75:9d:4c:9a:fe:48:11:b8: 7a:f2:7d:69:84:fe:ae:c9:48:39:86:a2:37:25:ca: da:6e:cf:23:5e:e9:ea:95:0d:a6:f9:1e:ed:f0:e3: 4b:ba:f7:b9:da:1f:90:b6:4f:8d:ab:7c:93:3b:1a: f0:b4:88:b3:b0:4a:4b:f4:eb:62:48:ed:2b:42:14: 95:1c:e1:db:fd:e2:7e:f3:a5:d0:df:85:34:c6:3a: 9f:89:be:95:ee:70:ba:2d:95:a0:5c:91:bb:66:26: 07:2f:58:98:1e:ec:31:24:58:69:f7:45:1b:29:28: e9:cc:83:12:00:a0:85:14:3a:48:8d:1f:cc:da:74: 33:bf:16:69:79:8a:7e:79:6d:ad:a6:24:0e:01:76: 8b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:01:6D:82:81:53:0B:A2:33:FB:DF:22:28:DC:1E:C3:30:99:2E:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7122a28a-9204-3d97-8c17-93a4a9693862.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.244.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:48:f5:67:75:78:e8:3e:7a:24:80:bb:d7:f9:d2:1a:74:92: 53:a4:f9:20:81:33:61:57:51:7f:b5:f9:81:bd:ca:43:4c:1c: 01:9b:d5:a0:f5:98:68:b8:5f:40:b9:54:23:38:81:33:af:01: 51:46:52:28:db:f7:51:5e:ff:83:28:b0:1f:9f:b2:c0:51:91: 17:67:24:d3:8e:6e:85:ee:f9:14:2c:81:97:9e:1e:43:9a:50: 31:44:c1:d3:ae:13:a9:82:10:04:39:ea:62:dd:d0:ec:d1:9c: 00:c6:1e:b6:02:25:e0:ae:71:df:e6:6b:c8:35:92:ef:90:47: 6d:63:85:dc:b8:b8:cd:67:e7:82:7c:e1:59:c0:37:af:c4:ab: 92:b2:31:63:e7:0a:ac:98:aa:d8:f7:39:43:5c:d8:66:1d:2f: cf:da:6b:f5:49:91:f4:c1:c2:ff:35:5a:92:e9:73:ab:7c:ce: 18:91:60:c8:7f:f3:94:ad:66:ec:c4:16:04:79:61:e3:ad:1d: 4b:70:ad:ef:55:cf:4b:5c:e6:89:77:52:6b:92:c7:de:fb:72: fc:04:6b:2a:7c:68:78:dd:c3:0a:47:29:f8:eb:02:83:7e:e8: a2:d6:68:9b:01:ab:f6:09:0f:76:8b:41:92:c1:e0:ed:46:f3: 78:13:45:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9OreZTCfpuuX2GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk M2RjMmRhODktMDE0NC00ZDg0LWJlZDYtZGJjNTdkNzc2NjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidOeciq3fS9XSRL91yNjYQdIUal080Vi+TM5 oTKcrhjwcqb+w3N2f+52GhW7FwWdXYTrxCCoITWgSctCuPHWahRR0vtNrlTNBWX5 3+x5JBBGujXy28NXlVZBv67lvZK8G4WdMern/qz8VVJOwexldZ1Mmv5IEbh68n1p hP6uyUg5hqI3Jcrabs8jXunqlQ2m+R7t8ONLuve52h+Qtk+Nq3yTOxrwtIizsEpL 9OtiSO0rQhSVHOHb/eJ+86XQ34U0xjqfib6V7nC6LZWgXJG7ZiYHL1iYHuwxJFhp 90UbKSjpzIMSAKCFFDpIjR/M2nQzvxZpeYp+eW2tpiQOAXaLvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8BbYKBUwuiM/vfIijcHsMwmS48MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNzEyMmEyOGEtOTIwNC0z ZDk3LThjMTctOTNhNGE5NjkzODYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACPRDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpI9Wd1eOg+eiSAu9f50hp0klOk+SCBM2FXUX+1+YG9ykNMHAGb1aD1 mGi4X0C5VCM4gTOvAVFGUijb91Fe/4MosB+fssBRkRdnJNOOboXu+RQsgZeeHkOa UDFEwdOuE6mCEAQ56mLd0OzRnADGHrYCJeCucd/ma8g1ku+QR21jhdy4uM1n54J8 4VnAN6/Eq5KyMWPnCqyYqtj3OUNc2GYdL8/aa/VJkfTBwv81WpLpc6t8zhiRYMh/ 85StZuzEFgR5YeOtHUtwre9Vz0tc5ol3UmuSx977cvwEayp8aHjdwwpHKfjrAoN+ 6KLWaJsBq/YJD3aLQZLB4O1G83gTRRs= -----END CERTIFICATE-----Generated at Fri Jul 24 20:25:41 2026 by rpki-client