$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a0ec188d-bb67-3d7c-bbff-eda5c4669c3f.roa File: a0ec188d-bb67-3d7c-bbff-eda5c4669c3f.roa (raw, json) Hash identifier: h4VgpHTjTrkoW2rFNBFOFMcH51JypHJJ7BC2WFu3+dw= Subject key identifier: C8:2F:69:FE:E3:D9:E6:18:BD:35:01:58:42:87:48:54:2A:88:CB:F2 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584E5A49F681A4DC11731A70ACC0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a0ec188d-bb67-3d7c-bbff-eda5c4669c3f.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 20473 IP address blocks: 8.9.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:49:f6:81:a4:dc:11:73:1a:70:ac:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=492c09ba-177e-42dd-a8df-83d24b2c2e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8e:a0:fd:ec:0c:65:78:fd:b3:54:72:e1:f3: c2:42:7a:14:a0:81:57:2b:17:d7:43:c3:a6:4d:c3: 18:b6:6c:d5:21:35:a0:d9:74:f4:76:b1:7c:29:2f: c5:49:de:3e:00:0f:e2:a2:e0:32:98:89:53:d6:8f: 42:f8:48:29:01:7e:52:2e:95:9a:11:8d:66:07:e6: f3:f9:3e:0b:bd:df:df:de:8d:8d:17:3e:91:a5:57: 1d:d2:1b:d2:fa:24:55:87:1f:8b:22:0e:8a:cd:a1: 8c:a6:c9:96:e8:c2:d5:19:fa:b2:09:1e:0d:10:f6: c7:1f:f0:37:3a:dc:5d:01:88:f9:d5:ba:83:a2:9b: 37:b8:d0:8d:9b:89:e7:b8:59:1a:1d:71:fb:55:da: 7d:d3:72:b2:6b:7e:63:86:10:5f:e3:9b:fe:05:2c: 88:a4:a0:c0:33:7b:48:16:33:aa:27:5a:4a:76:ea: 3a:28:9d:18:71:af:47:7e:57:52:ed:0e:7f:5e:8b: 64:74:b2:52:75:21:3d:c3:1c:2f:e4:81:a3:0e:e1: 1f:cf:92:b3:1b:92:60:9a:6c:9e:bd:e1:af:f2:6f: 80:06:5e:08:ca:5d:07:52:e7:c3:16:36:9b:ee:bc: d2:bd:fb:50:cf:1e:2e:ab:ce:11:86:9e:6e:9b:67: 52:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:2F:69:FE:E3:D9:E6:18:BD:35:01:58:42:87:48:54:2A:88:CB:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a0ec188d-bb67-3d7c-bbff-eda5c4669c3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.9.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:84:06:d0:2d:56:7e:56:9c:6e:d6:77:4b:65:b0:2a:9c:3f: 9e:de:e4:e4:d1:90:a9:dd:da:8d:85:42:d4:d8:d4:1a:5f:b3: 36:8b:f1:e0:af:f4:08:20:06:c4:cb:6e:d8:f7:e9:d0:74:ed: 31:9e:c4:b6:96:ba:ad:bd:bb:8e:11:3a:c3:a2:80:1c:02:9b: 90:48:e0:cc:7f:8d:12:bc:f1:14:69:36:f6:8e:4b:80:e7:8f: 7c:0a:4d:d5:ee:f0:53:ee:d3:2c:5a:9d:9a:44:54:0e:25:aa: 0b:96:90:fc:c5:10:3f:98:56:2a:04:7d:9f:4d:07:75:8f:7d: e4:6d:eb:37:82:77:88:87:24:45:d9:7e:a7:86:23:12:fd:3c: 96:ff:9a:a4:9e:1f:1a:65:fa:69:5f:bd:6a:ee:7e:3f:e2:e9: a7:fc:b0:31:fc:02:1e:19:df:8b:0a:30:18:74:92:95:42:3a: ea:5f:d6:4b:2c:98:99:98:b8:e2:5e:a4:02:1b:3a:41:cb:f7: 1e:0b:41:98:c5:0d:71:a9:36:d5:17:5b:ed:62:c8:cb:41:4d: 46:af:25:e8:41:64:19:1f:59:f0:79:07:56:1e:9a:79:bb:b5: bc:d6:4a:bd:cc:06:6d:2f:23:46:3a:a8:7b:83:cb:77:7d:47: 08:0a:26:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSfaBpNwRcxpwrMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk NDkyYzA5YmEtMTc3ZS00MmRkLWE4ZGYtODNkMjRiMmMyZTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAio6g/ewMZXj9s1Ry4fPCQnoUoIFXKxfXQ8Om TcMYtmzVITWg2XT0drF8KS/FSd4+AA/iouAymIlT1o9C+EgpAX5SLpWaEY1mB+bz +T4Lvd/f3o2NFz6RpVcd0hvS+iRVhx+LIg6KzaGMpsmW6MLVGfqyCR4NEPbHH/A3 OtxdAYj51bqDops3uNCNm4nnuFkaHXH7Vdp903Kya35jhhBf45v+BSyIpKDAM3tI FjOqJ1pKduo6KJ0Yca9HfldS7Q5/XotkdLJSdSE9wxwv5IGjDuEfz5KzG5Jgmmye veGv8m+ABl4Iyl0HUufDFjab7rzSvftQzx4uq84Rhp5um2dSMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgvaf7j2eYYvTUBWEKHSFQqiMvyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYTBlYzE4OGQtYmI2Ny0z ZDdjLWJiZmYtZWRhNWM0NjY5YzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAkIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiEBtAtVn5WnG7Wd0tlsCqcP57e5OTRkKnd2o2FQtTY1BpfszaL8eCv 9AggBsTLbtj36dB07TGexLaWuq29u44ROsOigBwCm5BI4Mx/jRK88RRpNvaOS4Dn j3wKTdXu8FPu0yxanZpEVA4lqguWkPzFED+YVioEfZ9NB3WPfeRt6zeCd4iHJEXZ fqeGIxL9PJb/mqSeHxpl+mlfvWrufj/i6af8sDH8Ah4Z34sKMBh0kpVCOupf1kss mJmYuOJepAIbOkHL9x4LQZjFDXGpNtUXW+1iyMtBTUavJehBZBkfWfB5B1Yemnm7 tbzWSr3MBm0vI0Y6qHuDy3d9RwgKJus= -----END CERTIFICATE-----Generated at Fri Jul 24 03:54:44 2026 by rpki-client