$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/90b8bcbf-20fb-37ee-9f06-b915cd5a8271.roa File: 90b8bcbf-20fb-37ee-9f06-b915cd5a8271.roa (raw, json) Hash identifier: 7NlvcPUrNroa5hBcQ8Unh2PMHfWvO52acf+GisRKhbE= Subject key identifier: 62:A3:B9:14:62:E7:1C:31:8E:70:10:DD:71:69:19:71:73:E1:DF:06 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584E5A49F65D5574E5942ED71500 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/90b8bcbf-20fb-37ee-9f06-b915cd5a8271.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 20473 IP address blocks: 8.9.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:49:f6:5d:55:74:e5:94:2e:d7:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=06fa0c87-c34c-496a-9e1c-9959ec76c696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f3:f7:c3:58:8c:77:0f:73:3c:3a:b0:05:7d: e8:6f:a3:41:e2:2f:f0:e0:7a:06:1f:40:84:3f:ae: f8:64:3b:84:9a:77:9d:27:ae:d1:d4:ba:22:e2:ec: 65:1c:31:e9:d6:68:8f:ca:67:35:ed:c2:6f:0b:18: cf:35:0c:ce:00:2a:99:e5:e5:fa:b5:f6:a6:92:bb: 47:81:99:48:2e:58:1b:9b:d7:11:7d:15:cb:f6:b3: 6f:f0:fc:fa:62:3b:5b:68:80:ef:08:37:18:f1:34: 17:9f:9f:0a:38:7d:34:c1:7e:0f:98:9c:4e:d2:5e: 93:ee:13:e0:48:69:f5:d4:0d:ff:06:c3:c0:55:d2: 34:df:8c:c3:ee:64:ee:45:ff:f8:eb:de:85:1b:f1: 58:c1:b8:d5:cf:06:17:79:d0:90:ff:50:6d:c1:53: 0b:8d:fa:19:f6:46:bd:38:71:f1:3c:35:3b:5d:0e: d8:21:e3:b9:3c:01:a6:c4:d2:f3:40:98:60:0b:40: d5:e2:3a:87:6d:65:ee:b8:4f:55:99:a9:8f:e3:70: 80:27:31:dd:df:ce:9b:11:75:c0:b8:90:1b:2e:37: f2:7d:40:be:84:fd:d4:13:9e:67:ed:34:d7:f4:f4: 24:ab:4e:e3:e8:f8:05:ce:18:41:6c:13:12:44:ef: c5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:A3:B9:14:62:E7:1C:31:8E:70:10:DD:71:69:19:71:73:E1:DF:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/90b8bcbf-20fb-37ee-9f06-b915cd5a8271.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.9.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:44:60:85:03:f6:a6:75:dc:f7:ad:1c:ca:d4:fd:74:ab:57: 89:3d:3d:3b:c8:66:ae:b7:4f:e0:8b:6a:21:12:26:4e:f8:52: 10:16:b8:85:eb:81:f4:b4:8c:b2:ec:d6:4e:c9:c7:c8:9e:e3: 74:1b:1a:63:ca:ea:d4:67:b2:ce:53:f7:d2:c9:aa:d6:f7:4b: 10:45:2b:67:86:90:01:5d:fc:f6:0a:f7:44:45:b0:58:82:b6: a3:08:4b:fa:3a:a9:c5:b1:fa:2b:1a:62:56:0a:d7:55:e0:81: 8f:2a:ae:66:d9:6a:f6:d7:b7:98:68:9e:cb:07:ce:a8:6d:89: 58:4b:f0:c2:38:d3:06:81:99:20:59:14:d3:51:26:57:88:c8: 4e:05:e9:32:aa:d3:d4:3b:6c:0c:76:dc:90:d7:a9:0c:13:0b: b9:12:96:d6:21:62:c9:99:9d:71:25:fd:2f:60:01:4f:97:e7: 22:16:70:d0:f2:62:3c:1b:79:3e:6b:46:29:7e:cd:37:cc:71: 7a:4f:34:75:fe:e8:bd:f7:35:6e:17:e4:1a:12:4c:53:25:ee: da:17:63:18:b6:1e:73:06:2b:9d:fd:65:3a:30:5d:4c:7a:33: 92:4e:de:ff:39:da:ca:15:0f:4c:ab:8f:bc:e8:3f:db:91:88: 2c:a3:24:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSfZdVXTllC7XFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk MDZmYTBjODctYzM0Yy00OTZhLTllMWMtOTk1OWVjNzZjNjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPP3w1iMdw9zPDqwBX3ob6NB4i/w4HoGH0CE P674ZDuEmnedJ67R1Loi4uxlHDHp1miPymc17cJvCxjPNQzOACqZ5eX6tfamkrtH gZlILlgbm9cRfRXL9rNv8Pz6YjtbaIDvCDcY8TQXn58KOH00wX4PmJxO0l6T7hPg SGn11A3/BsPAVdI034zD7mTuRf/4696FG/FYwbjVzwYXedCQ/1BtwVMLjfoZ9ka9 OHHxPDU7XQ7YIeO5PAGmxNLzQJhgC0DV4jqHbWXuuE9VmamP43CAJzHd386bEXXA uJAbLjfyfUC+hP3UE55n7TTX9PQkq07j6PgFzhhBbBMSRO/FPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKjuRRi5xwxjnAQ3XFpGXFz4d8GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvOTBiOGJjYmYtMjBmYi0z N2VlLTlmMDYtYjkxNWNkNWE4MjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAkDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZEYIUD9qZ13PetHMrU/XSrV4k9PTvIZq63T+CLaiESJk74UhAWuIXr gfS0jLLs1k7Jx8ie43QbGmPK6tRnss5T99LJqtb3SxBFK2eGkAFd/PYK90RFsFiC tqMIS/o6qcWx+isaYlYK11XggY8qrmbZavbXt5honssHzqhtiVhL8MI40waBmSBZ FNNRJleIyE4F6TKq09Q7bAx23JDXqQwTC7kSltYhYsmZnXEl/S9gAU+X5yIWcNDy YjwbeT5rRil+zTfMcXpPNHX+6L33NW4X5BoSTFMl7toXYxi2HnMGK539ZTowXUx6 M5JO3v852soVD0yrj7zoP9uRiCyjJNU= -----END CERTIFICATE-----Generated at Fri Jul 24 14:43:29 2026 by rpki-client