$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/863dcff2-38a8-3c63-aaa0-3c613db0eb2a.roa File: 863dcff2-38a8-3c63-aaa0-3c613db0eb2a.roa (raw, json) Hash identifier: 7MQy892/ECONHoEs64RfHQTL/wqqdc4sQs9R4ispUCk= Subject key identifier: 42:39:40:92:E7:73:44:89:2E:C9:2F:6D:77:24:94:50:E7:B2:2D:15 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584E86F4EAC121D3E6B8D81B8080 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/863dcff2-38a8-3c63-aaa0-3c613db0eb2a.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 394161 IP address blocks: 8.45.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f4:ea:c1:21:d3:e6:b8:d8:1b:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=6663af98-45e0-4fdd-b938-632afd194ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:52:43:53:a0:75:8b:30:f7:cb:f1:7e:95:c9: a5:0b:c9:fc:4d:8c:9c:8e:68:72:3f:95:2b:30:b1: 0a:38:2f:71:a7:1b:17:96:ed:4e:68:b3:25:4f:db: ac:76:a7:fa:95:22:a6:f3:6f:0f:82:b0:2a:fd:7a: da:ed:1f:3e:c1:2e:81:2c:ab:3b:d4:da:87:0f:e7: 9b:d1:c2:45:6e:89:3e:97:96:53:02:df:7f:26:6c: 24:eb:80:a4:25:a3:ce:ff:51:7e:c4:16:7a:70:e1: 31:c1:fa:f5:2f:e1:c9:1a:94:2e:d3:d7:ae:c3:aa: dc:2e:3f:93:29:09:36:2f:b2:06:b4:5a:ed:56:51: 9b:bc:95:c3:69:06:19:d1:26:5c:7b:b8:e7:5a:fb: 6b:37:de:be:86:9e:da:41:ab:32:63:f9:0a:8f:1e: cc:56:68:f9:11:cb:29:07:f5:f9:a2:42:ff:69:cd: c3:99:d0:a6:99:e0:ad:17:15:df:ee:ec:91:34:b8: d7:98:37:35:96:c9:8b:7e:e6:7d:38:9b:1a:28:e1: f9:33:68:89:e2:fd:b0:ec:60:84:7b:ea:90:af:d4: 01:78:5c:0c:19:78:48:3d:bb:b9:6b:59:e3:93:48: 3a:a6:c6:d9:26:03:be:be:6e:ec:a0:12:1a:dc:4b: 2f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:39:40:92:E7:73:44:89:2E:C9:2F:6D:77:24:94:50:E7:B2:2D:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/863dcff2-38a8-3c63-aaa0-3c613db0eb2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.45.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:fb:93:d4:bc:2e:64:5c:75:1c:ef:1f:58:5f:91:d9:00:b9: 4b:23:b7:4a:39:9d:b5:4e:87:40:ee:a9:8c:34:00:04:95:3f: 04:7f:38:f7:37:56:93:90:65:cd:3b:0a:c8:49:cb:2e:1c:77: 54:2f:75:2b:d7:8d:4d:1a:03:6c:af:1a:f0:f3:c1:f8:f2:73: 48:9f:74:ac:12:43:33:8f:34:58:a6:b2:05:00:2d:c4:db:c8: c5:3e:d0:50:f1:04:43:38:a3:54:bd:a9:8f:49:08:eb:5a:16: bc:4b:b5:ac:cf:57:bb:cc:2a:93:a1:54:3a:7a:94:57:fe:54: 00:93:a2:9f:7a:28:96:5f:58:f4:c3:5a:6d:38:2a:ff:64:9e: 2a:c9:2e:25:1e:c2:84:af:58:7e:36:c9:92:92:43:11:b0:98: f6:44:61:bf:8a:82:3d:f6:b8:64:2d:3f:c0:c6:7b:80:20:d3: 39:0e:8c:c2:cb:a2:69:df:ba:a2:ef:f8:93:ae:4c:6e:b8:81: a8:1d:55:52:2c:31:a9:0b:f9:ff:17:6e:dc:ec:ed:f1:5f:7b: 70:82:ca:89:91:20:4e:52:d5:ee:09:f9:ea:ea:57:cc:85:42: f3:f9:51:ee:0b:12:0e:0d:31:0b:58:3e:70:e9:65:50:00:a8: b1:2e:25:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9OrBIdPmuNgbgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk NjY2M2FmOTgtNDVlMC00ZmRkLWI5MzgtNjMyYWZkMTk0YWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlJDU6B1izD3y/F+lcmlC8n8TYycjmhyP5Ur MLEKOC9xpxsXlu1OaLMlT9usdqf6lSKm828PgrAq/Xra7R8+wS6BLKs71NqHD+eb 0cJFbok+l5ZTAt9/Jmwk64CkJaPO/1F+xBZ6cOExwfr1L+HJGpQu09euw6rcLj+T KQk2L7IGtFrtVlGbvJXDaQYZ0SZce7jnWvtrN96+hp7aQasyY/kKjx7MVmj5Ecsp B/X5okL/ac3DmdCmmeCtFxXf7uyRNLjXmDc1lsmLfuZ9OJsaKOH5M2iJ4v2w7GCE e+qQr9QBeFwMGXhIPbu5a1njk0g6psbZJgO+vm7soBIa3EsvJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEI5QJLnc0SJLskvbXcklFDnsi0VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvODYzZGNmZjItMzhhOC0z YzYzLWFhYTAtM2M2MTNkYjBlYjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACC18MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ77k9S8LmRcdRzvH1hfkdkAuUsjt0o5nbVOh0DuqYw0AASVPwR/OPc3 VpOQZc07CshJyy4cd1QvdSvXjU0aA2yvGvDzwfjyc0ifdKwSQzOPNFimsgUALcTb yMU+0FDxBEM4o1S9qY9JCOtaFrxLtazPV7vMKpOhVDp6lFf+VACTop96KJZfWPTD Wm04Kv9knirJLiUewoSvWH42yZKSQxGwmPZEYb+Kgj32uGQtP8DGe4Ag0zkOjMLL omnfuqLv+JOuTG64gagdVVIsMakL+f8Xbtzs7fFfe3CCyomRIE5S1e4J+erqV8yF QvP5Ue4LEg4NMQtYPnDpZVAAqLEuJS0= -----END CERTIFICATE-----Generated at Fri Jul 24 15:52:56 2026 by rpki-client