$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/939822c3-fd79-3294-9e09-458a1afbcc58.roa File: 939822c3-fd79-3294-9e09-458a1afbcc58.roa (raw, json) Hash identifier: c83X5ARsWByG3N3ZzmOjrzetd2xMq7uOaCw69F8V9Js= Subject key identifier: 7B:B0:E0:34:5B:65:87:DE:2C:6A:93:C0:80:FF:1A:19:2A:06:06:F3 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584F45D80E2CFEF4E9CF296E7920 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/939822c3-fd79-3294-9e09-458a1afbcc58.roa Signing time: Wed 23 Sep 2026 18:01:33 +0000 ROA not before: Wed 23 Sep 2026 18:01:33 +0000 ROA not after: Tue 22 Dec 2026 19:01:33 +0000 asID: 396267 IP address blocks: 8.21.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:d8:0e:2c:fe:f4:e9:cf:29:6e:79:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Sep 23 18:01:33 2026 GMT Not After : Dec 22 19:01:33 2026 GMT Subject: CN=d9e53362-59e1-4a8f-9639-1d86b425679d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0a:74:3a:a6:ac:39:50:d2:b4:73:e5:d3:de: c5:ea:e3:86:7c:8c:11:a2:aa:3b:16:0d:d0:e8:58: ba:5b:0b:e3:18:32:e9:59:e8:3f:b3:57:ff:15:8d: db:61:60:1a:af:27:0c:7b:af:47:f5:0c:88:8c:73: 63:62:38:ae:01:69:69:06:bb:8a:96:30:f4:c0:46: 3a:b2:56:9b:6c:40:77:1c:42:df:d0:99:a6:de:2b: e8:75:24:6c:ba:93:ad:d5:bb:b4:21:c8:b8:92:8b: 93:f0:a3:5d:b1:82:85:1e:c4:8a:53:21:e9:b5:f9: 64:bc:84:cd:5f:41:c1:8c:d4:64:26:22:20:28:84: e2:4d:44:21:1b:64:63:c7:ce:67:fb:1a:26:7f:d0: 07:61:03:bd:d4:8f:11:c0:00:91:7e:29:b5:6f:4e: e0:af:8f:cd:83:77:4b:0b:3f:ab:58:04:b1:43:3a: 03:f6:b9:08:47:0d:38:bf:09:04:58:c9:22:b0:1a: 34:5c:72:5d:28:dc:74:03:db:b8:d3:cd:f4:61:b9: 37:b8:c9:0c:4e:e3:00:ad:fe:f8:e2:50:31:3a:4e: ac:03:c5:cb:c9:d2:29:6e:fb:3e:4d:09:42:55:32: d0:04:96:b3:36:43:44:94:e9:26:4a:7d:7b:8c:8e: 95:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B0:E0:34:5B:65:87:DE:2C:6A:93:C0:80:FF:1A:19:2A:06:06:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/939822c3-fd79-3294-9e09-458a1afbcc58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.21.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:9c:b3:3c:3f:5e:b7:82:bb:80:23:57:f6:d8:0b:68:4f:a5: 36:f2:d4:b8:98:a1:ae:75:ce:d8:f9:25:64:8d:00:a2:24:5f: 8a:41:1c:b0:a9:e5:25:ef:7f:d6:19:9f:0c:a4:0b:c0:07:ab: f0:c7:53:8a:b1:1c:ea:7d:93:41:ba:d1:e1:e4:82:40:b2:06: b6:d9:37:ad:e9:5d:06:af:23:f3:b7:0d:8e:ef:fc:98:67:4b: 25:c5:f6:54:f4:81:3f:d7:cf:fd:83:97:65:dd:13:08:b9:52: 28:00:e4:de:41:fe:f6:bb:e9:9c:90:87:88:59:bf:7b:c4:6f: 5d:44:3f:72:db:38:7f:ce:c0:54:06:71:1f:7e:e3:5e:0a:bd: 36:40:74:e8:05:13:d5:21:73:c1:27:b2:fe:c7:56:56:7e:8a: ca:6c:70:ff:af:34:86:6a:97:f9:9c:f5:cf:b6:da:7a:56:06: fc:b0:29:8e:7e:96:17:84:ae:07:25:17:c3:d4:7b:fc:37:2d: 75:68:b2:d4:57:a7:23:2b:93:c0:f3:32:ad:66:04:bc:23:b4: 6b:36:94:8c:b6:ee:0d:c2:fa:c1:09:f9:1c:8a:8c:4d:77:6e: c1:9b:26:9a:7d:b9:2b:f5:c4:44:b1:86:ea:52:89:51:10:32: eb:71:93:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9F2A4s/vTpzylueSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDkyMzE4MDEzM1oXDTI2MTIyMjE5MDEzM1owLzEtMCsGA1UEAxMk ZDllNTMzNjItNTllMS00YThmLTk2MzktMWQ4NmI0MjU2NzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAp0OqasOVDStHPl097F6uOGfIwRoqo7Fg3Q 6Fi6WwvjGDLpWeg/s1f/FY3bYWAarycMe69H9QyIjHNjYjiuAWlpBruKljD0wEY6 slabbEB3HELf0Jmm3ivodSRsupOt1bu0Ici4kouT8KNdsYKFHsSKUyHptflkvITN X0HBjNRkJiIgKITiTUQhG2Rjx85n+xomf9AHYQO91I8RwACRfim1b07gr4/Ng3dL Cz+rWASxQzoD9rkIRw04vwkEWMkisBo0XHJdKNx0A9u40830Ybk3uMkMTuMArf74 4lAxOk6sA8XLydIpbvs+TQlCVTLQBJazNkNElOkmSn17jI6VdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHuw4DRbZYfeLGqTwID/GhkqBgbzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvOTM5ODIyYzMtZmQ3OS0z Mjk0LTllMDktNDU4YTFhZmJjYzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACBVmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2cszw/XreCu4AjV/bYC2hPpTby1LiYoa51ztj5JWSNAKIkX4pBHLCp 5SXvf9YZnwykC8AHq/DHU4qxHOp9k0G60eHkgkCyBrbZN63pXQavI/O3DY7v/Jhn SyXF9lT0gT/Xz/2Dl2XdEwi5UigA5N5B/va76ZyQh4hZv3vEb11EP3LbOH/OwFQG cR9+414KvTZAdOgFE9Uhc8Ensv7HVlZ+ispscP+vNIZql/mc9c+22npWBvywKY5+ lheErgclF8PUe/w3LXVostRXpyMrk8DzMq1mBLwjtGs2lIy27g3C+sEJ+RyKjE13 bsGbJpp9uSv1xESxhupSiVEQMutxk8Y= -----END CERTIFICATE-----Generated at Wed Oct 14 17:11:49 2026 by rpki-client