$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/940fad0d-da37-370a-9174-48ca36654663.roa File: 940fad0d-da37-370a-9174-48ca36654663.roa (raw, json) Hash identifier: yshO5t6QgxJ0AXPtSaFn3yf/ebVeeffNGYiHqo1qNwg= Subject key identifier: DB:09:3C:12:B7:E3:79:AA:DC:3C:C4:58:49:44:52:CB:47:25:1F:1A Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584F549D6E77C3357C6ADDF46A80 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/940fad0d-da37-370a-9174-48ca36654663.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 31775 IP address blocks: 8.47.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:6e:77:c3:35:7c:6a:dd:f4:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=8cad82bb-ad6d-4ebd-87aa-2ff5b360b572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c6:3d:e3:ae:3e:34:cb:9a:d2:a7:88:f5:21: 60:8b:f4:4d:b3:13:8b:f6:79:fd:f9:41:4d:cc:71: 90:bd:52:9f:96:78:25:db:bd:d4:aa:7a:e5:10:4b: 83:1c:2d:9f:9f:18:e8:fc:4e:d8:d1:ce:1c:f8:92: bc:57:e4:5f:9a:97:e9:18:7c:4d:3f:e1:51:4b:fb: 36:be:fe:ac:b1:56:26:2d:1d:1f:45:45:87:30:62: a0:99:60:02:8b:be:40:40:a2:cf:7b:4f:84:cc:af: 50:5a:a9:21:d3:0a:7f:d1:4a:93:41:e2:08:dd:d9: a5:90:d7:17:1c:0d:dd:36:42:39:0e:1b:7d:92:17: 18:d1:09:8f:5f:85:df:0d:51:fc:59:f8:53:62:5f: 24:58:0f:85:d2:16:cc:aa:72:10:ac:53:48:84:ae: ef:ac:4a:5c:a2:45:af:04:04:87:39:9f:92:80:9f: cb:06:ee:25:ba:c8:e7:51:7a:59:3d:35:11:86:5e: cc:18:2d:2b:40:9f:87:8c:3c:ec:ec:66:3c:fb:03: 9f:0d:08:8f:67:a0:d8:b8:d4:a2:57:85:d4:0b:67: 61:a4:71:19:e0:13:50:84:a6:7b:1e:d5:98:eb:14: 2f:65:68:28:da:98:c1:1c:ea:9b:07:7b:d2:f6:cd: dc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:09:3C:12:B7:E3:79:AA:DC:3C:C4:58:49:44:52:CB:47:25:1F:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/940fad0d-da37-370a-9174-48ca36654663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.47.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:04:98:c5:55:97:a1:a3:65:53:31:6a:fc:32:e8:d9:89:79: ce:de:dd:ad:0b:35:d0:ea:a6:21:26:f3:37:e1:98:47:53:09: bd:26:0e:2a:e1:81:89:4a:f8:6e:da:fb:ee:d8:7f:fb:80:12: 6b:49:e8:07:99:d5:f6:f1:c5:64:2f:e8:29:a1:3e:90:fe:de: e7:9b:eb:e4:f7:75:92:4d:5e:ed:69:15:07:e4:8c:3f:61:03: 13:58:ed:1d:4a:cc:a3:2e:cc:9a:42:a5:f6:f8:f2:d5:43:31: 87:3a:43:16:51:c8:a4:13:e3:8f:c7:3e:54:19:13:7a:32:27: d2:a6:14:5c:b9:fe:d6:65:c3:91:b0:25:ab:11:12:34:28:81: 2f:5d:92:fc:12:86:3f:b5:09:6d:d9:07:8a:00:d4:0e:4c:ca: a9:dd:3a:9a:ea:7b:6a:0d:a7:e3:49:b1:b1:e1:d6:03:70:ea: ad:8d:24:9d:08:ee:6f:d5:00:bf:f8:ed:27:e5:f1:48:d0:d9: d2:a9:15:c0:76:71:4c:cd:52:6d:a2:e4:68:81:68:71:e5:25: 26:f4:1b:66:f8:47:3f:6f:97:68:65:69:7b:b4:de:3a:d2:c7: d6:51:5c:27:ec:f7:05:97:1b:7d:cb:a2:37:65:a6:c6:b8:13: 53:e8:51:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnW53wzV8at30aoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk OGNhZDgyYmItYWQ2ZC00ZWJkLTg3YWEtMmZmNWIzNjBiNTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcY9464+NMua0qeI9SFgi/RNsxOL9nn9+UFN zHGQvVKflngl273UqnrlEEuDHC2fnxjo/E7Y0c4c+JK8V+RfmpfpGHxNP+FRS/s2 vv6ssVYmLR0fRUWHMGKgmWACi75AQKLPe0+EzK9QWqkh0wp/0UqTQeII3dmlkNcX HA3dNkI5Dht9khcY0QmPX4XfDVH8WfhTYl8kWA+F0hbMqnIQrFNIhK7vrEpcokWv BASHOZ+SgJ/LBu4lusjnUXpZPTURhl7MGC0rQJ+HjDzs7GY8+wOfDQiPZ6DYuNSi V4XUC2dhpHEZ4BNQhKZ7HtWY6xQvZWgo2pjBHOqbB3vS9s3c8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsJPBK343mq3DzEWElEUstHJR8aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvOTQwZmFkMGQtZGEzNy0z NzBhLTkxNzQtNDhjYTM2NjU0NjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDCC9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIEmMVVl6GjZVMxavwy6NmJec7e3a0LNdDqpiEm8zfhmEdTCb0mDirh gYlK+G7a++7Yf/uAEmtJ6AeZ1fbxxWQv6CmhPpD+3ueb6+T3dZJNXu1pFQfkjD9h AxNY7R1KzKMuzJpCpfb48tVDMYc6QxZRyKQT44/HPlQZE3oyJ9KmFFy5/tZlw5Gw JasREjQogS9dkvwShj+1CW3ZB4oA1A5MyqndOprqe2oNp+NJsbHh1gNw6q2NJJ0I 7m/VAL/47Sfl8UjQ2dKpFcB2cUzNUm2i5GiBaHHlJSb0G2b4Rz9vl2hlaXu03jrS x9ZRXCfs9wWXG33Lojdlpsa4E1PoUaM= -----END CERTIFICATE-----Generated at Fri Oct 9 22:38:50 2026 by rpki-client