$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7a78821a-8f23-3da9-bc7f-917597af54ea.roa File: 7a78821a-8f23-3da9-bc7f-917597af54ea.roa (raw, json) Hash identifier: 4Tp+A9gGIzh3hjjo733+QnVkt/B724agUz8xGAWLFKc= Subject key identifier: BC:6D:43:FC:38:45:7A:D1:F9:B9:57:1D:00:FA:CC:62:83:44:2F:90 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584DBA3AE8177D69AB88BA7211C0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7a78821a-8f23-3da9-bc7f-917597af54ea.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 22898 IP address blocks: 8.40.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3a:e8:17:7d:69:ab:88:ba:72:11:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=16d2844d-9051-43fb-a3d7-52c9d20c883e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f1:ca:ab:a7:3b:da:c6:05:1c:63:f5:50:6a: 2e:95:a1:d2:08:ef:61:f5:73:8f:e5:60:ee:b6:2b: 2b:2c:ba:df:e6:37:57:a2:6f:8c:c7:60:31:6c:ab: e8:d8:87:b1:97:9a:91:5f:e1:9a:5e:1e:a1:3a:1e: d1:55:75:a3:92:88:87:cf:47:e8:88:8f:87:ea:bf: 9d:75:75:aa:77:42:3c:9e:f8:d3:45:d9:dd:3b:b8: b7:a8:22:22:a0:df:a1:ca:bd:18:af:a8:b7:c7:b4: c9:25:d3:3e:60:10:da:a6:ce:88:77:3e:41:43:81: f6:2e:c5:d3:26:fc:32:6d:ef:e7:56:05:af:80:6d: 33:ce:5d:21:1a:d7:af:53:25:ae:9d:f3:60:ef:f0: 6f:c8:62:6e:bb:52:06:23:fa:da:91:f6:76:a3:37: 62:e1:c8:8a:73:6a:31:b1:14:d1:41:41:97:3a:37: 25:44:ac:69:ac:4a:51:b4:66:ea:ff:40:3d:d2:27: fd:b3:26:cb:53:4c:6e:b9:6f:8d:b0:fa:61:64:0c: 27:b3:fd:9f:da:ef:9e:5b:b0:94:63:07:46:66:3b: 81:45:b7:10:fc:6e:fb:28:46:3b:76:3d:21:8c:09: d6:bb:ba:a6:c6:c1:a7:9a:ac:7e:71:e4:a2:c5:3f: ed:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6D:43:FC:38:45:7A:D1:F9:B9:57:1D:00:FA:CC:62:83:44:2F:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/7a78821a-8f23-3da9-bc7f-917597af54ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.40.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:d5:5e:47:37:5d:b2:87:c5:bf:0c:3c:b4:72:d1:05:a7:b6: e4:d9:c5:56:44:88:5d:3f:22:55:10:68:76:28:6a:71:93:1f: 1a:02:94:b5:29:a0:b7:4b:6f:68:4b:b1:d9:21:dd:de:88:69: 24:59:5a:b5:34:c2:12:28:3d:13:c3:35:35:a4:63:f1:28:b5: bb:bd:a5:80:90:25:9e:96:78:ab:e1:ec:84:2b:1b:ba:75:cc: fa:73:f4:37:d4:51:7b:d8:45:51:a3:97:eb:0c:cf:b8:9e:83: c4:67:e6:fc:9a:ba:0e:d0:88:67:f0:0b:fa:c9:f6:2b:cc:eb: f7:44:e8:21:4a:9a:94:e3:77:c7:c5:8b:b1:8a:ba:f2:b4:83: f0:e5:a0:5c:6d:66:ee:9b:1d:a6:4c:ae:d9:98:71:5b:bb:e2: ad:74:84:15:5d:7a:31:db:fe:1f:eb:9c:d3:b4:7c:40:bd:d0: d8:34:68:cc:2b:7b:51:87:57:b5:ef:35:e8:a1:40:bd:f7:05: 2e:bb:1c:52:30:7f:f1:f3:d6:8d:a9:06:86:c0:88:24:ea:80: 29:c0:dd:e3:82:90:81:aa:84:f0:43:3c:63:ac:46:f5:d2:31: f1:d7:80:0f:1e:98:9a:b6:b0:be:a5:4d:6e:50:4e:35:af:e4: af:92:1f:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OugXfWmriLpyEcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk MTZkMjg0NGQtOTA1MS00M2ZiLWEzZDctNTJjOWQyMGM4ODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPHKq6c72sYFHGP1UGoulaHSCO9h9XOP5WDu tisrLLrf5jdXom+Mx2AxbKvo2Iexl5qRX+GaXh6hOh7RVXWjkoiHz0foiI+H6r+d dXWqd0I8nvjTRdndO7i3qCIioN+hyr0Yr6i3x7TJJdM+YBDaps6Idz5BQ4H2LsXT Jvwybe/nVgWvgG0zzl0hGtevUyWunfNg7/BvyGJuu1IGI/rakfZ2ozdi4ciKc2ox sRTRQUGXOjclRKxprEpRtGbq/0A90if9sybLU0xuuW+NsPphZAwns/2f2u+eW7CU YwdGZjuBRbcQ/G77KEY7dj0hjAnWu7qmxsGnmqx+ceSixT/tgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxtQ/w4RXrR+blXHQD6zGKDRC+QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvN2E3ODgyMWEtOGYyMy0z ZGE5LWJjN2YtOTE3NTk3YWY1NGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDCCj4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7VXkc3XbKHxb8MPLRy0QWntuTZxVZEiF0/IlUQaHYoanGTHxoClLUp oLdLb2hLsdkh3d6IaSRZWrU0whIoPRPDNTWkY/Eotbu9pYCQJZ6WeKvh7IQrG7p1 zPpz9DfUUXvYRVGjl+sMz7ieg8Rn5vyaug7QiGfwC/rJ9ivM6/dE6CFKmpTjd8fF i7GKuvK0g/DloFxtZu6bHaZMrtmYcVu74q10hBVdejHb/h/rnNO0fEC90Ng0aMwr e1GHV7XvNeihQL33BS67HFIwf/Hz1o2pBobAiCTqgCnA3eOCkIGqhPBDPGOsRvXS MfHXgA8emJq2sL6lTW5QTjWv5K+SH3A= -----END CERTIFICATE-----Generated at Wed May 13 15:23:14 2026 by rpki-client