$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8d658794-56d7-3b38-8373-803b9414aa8b.roa File: 8d658794-56d7-3b38-8373-803b9414aa8b.roa (raw, json) Hash identifier: aGMrkTgWRfd1nWFYKDYd4KzzQCr1TfTVmBn+SLfqaKU= Subject key identifier: FA:46:20:DD:BE:94:60:32:0A:D9:59:C3:F2:A9:55:F4:92:36:51:01 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584AD7D1100145650892620B6060 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8d658794-56d7-3b38-8373-803b9414aa8b.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 20473 IP address blocks: 8.9.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:10:01:45:65:08:92:62:0b:60:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=69591d78-682b-47f9-becd-dbddb6e59622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d2:5e:b1:29:35:78:27:8b:65:03:a8:aa:61: 84:c8:9a:3b:7b:d8:ec:37:61:c1:5d:8a:6e:f9:40: 37:34:55:63:6e:40:2e:25:25:d5:93:b4:8a:e6:48: 67:c5:4f:52:1c:67:00:52:58:1d:70:a9:0b:2e:73: 6c:2c:63:bd:48:ad:77:f8:d3:1f:ad:7e:93:40:33: c0:e2:13:47:07:86:0f:6c:fd:65:cb:43:f0:ed:55: 4d:db:ea:1c:40:66:3b:a5:eb:96:04:57:2a:77:0b: 5b:9e:62:c8:f3:08:00:64:17:23:21:d0:7b:d5:cc: a8:6e:51:f1:d0:d4:2d:69:68:a9:df:0e:6f:c4:cc: 7d:b3:cf:1a:cc:87:cd:8a:72:b9:d5:75:5e:88:ba: ba:1c:1b:94:3e:b8:cf:21:88:5c:8c:37:24:3f:ad: 3d:eb:01:b3:de:7e:5e:93:ea:fb:d8:df:d6:34:f5: 7d:7f:54:9a:c7:9b:3e:40:8a:71:35:8d:a3:40:a6: e4:3c:87:7c:d1:0c:dd:84:05:89:43:1a:49:a9:0f: 83:a5:06:b3:37:51:ad:da:3d:3e:19:a7:1b:ba:80: 84:35:9d:e2:20:16:8c:a7:90:5b:f5:28:42:2f:c1: 97:d9:5a:ea:03:92:31:78:b6:14:ca:48:a2:2a:bd: 47:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:46:20:DD:BE:94:60:32:0A:D9:59:C3:F2:A9:55:F4:92:36:51:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8d658794-56d7-3b38-8373-803b9414aa8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.9.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:10:5b:ec:bc:54:56:41:ac:93:f2:a5:12:68:3a:80:d9:43: c4:7b:81:22:88:1a:43:d5:9e:3f:1f:f1:60:e3:73:23:90:bb: 7e:21:14:dd:c8:34:0f:97:21:7a:a2:3f:69:dd:df:ff:3a:db: 74:76:4b:19:ad:2b:41:54:59:80:f5:ea:98:d2:68:9a:3b:65: 01:c8:69:ba:c2:34:ce:9c:84:16:cb:d8:36:33:1c:e2:70:24: d1:bb:55:3a:4f:c2:b0:4f:b8:74:d9:13:0e:13:b0:7e:6f:c8: fc:66:37:c2:3e:16:36:36:3b:1f:7f:ae:02:23:53:a9:58:43: b6:1d:ef:18:9f:9e:b0:9d:88:33:4a:9d:df:f4:47:b4:18:d6: e9:c2:1e:a6:06:1e:d2:e4:7a:84:d7:e4:d9:1b:30:34:fd:e7: d7:a5:e4:1f:2d:37:1d:3e:69:ae:ba:e5:60:b4:ed:08:3c:dd: e4:f8:72:56:0e:fa:2f:01:2d:67:42:f7:0f:e4:45:82:88:e4: e9:d1:89:9e:6f:62:a7:cf:6c:b4:b6:41:e3:60:c0:fc:15:93: c7:74:32:30:5c:32:32:e0:f2:3f:d8:f4:ff:fb:69:bf:07:e8: 6c:36:e0:fc:78:4f:40:74:78:75:e8:ac:6e:b6:0d:b8:4a:e9: 3a:ab:34:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0RABRWUIkmILYGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk Njk1OTFkNzgtNjgyYi00N2Y5LWJlY2QtZGJkZGI2ZTU5NjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNJesSk1eCeLZQOoqmGEyJo7e9jsN2HBXYpu +UA3NFVjbkAuJSXVk7SK5khnxU9SHGcAUlgdcKkLLnNsLGO9SK13+NMfrX6TQDPA 4hNHB4YPbP1ly0Pw7VVN2+ocQGY7peuWBFcqdwtbnmLI8wgAZBcjIdB71cyoblHx 0NQtaWip3w5vxMx9s88azIfNinK51XVeiLq6HBuUPrjPIYhcjDckP6096wGz3n5e k+r72N/WNPV9f1Sax5s+QIpxNY2jQKbkPId80QzdhAWJQxpJqQ+DpQazN1Gt2j0+ GacbuoCENZ3iIBaMp5Bb9ShCL8GX2VrqA5IxeLYUykiiKr1HPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpGIN2+lGAyCtlZw/KpVfSSNlEBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvOGQ2NTg3OTQtNTZkNy0z YjM4LTgzNzMtODAzYjk0MTRhYThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAkFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKkQW+y8VFZBrJPypRJoOoDZQ8R7gSKIGkPVnj8f8WDjcyOQu34hFN3I NA+XIXqiP2nd3/8623R2SxmtK0FUWYD16pjSaJo7ZQHIabrCNM6chBbL2DYzHOJw JNG7VTpPwrBPuHTZEw4TsH5vyPxmN8I+FjY2Ox9/rgIjU6lYQ7Yd7xifnrCdiDNK nd/0R7QY1unCHqYGHtLkeoTX5NkbMDT959el5B8tNx0+aa665WC07Qg83eT4clYO +i8BLWdC9w/kRYKI5OnRiZ5vYqfPbLS2QeNgwPwVk8d0MjBcMjLg8j/Y9P/7ab8H 6Gw24Px4T0B0eHXorG62DbhK6TqrNJg= -----END CERTIFICATE-----Generated at Sat Aug 23 23:55:36 2025 by rpki-client