$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a68150d5-4385-3ac6-a10e-362c2d66a738.roa File: a68150d5-4385-3ac6-a10e-362c2d66a738.roa (raw, json) Hash identifier: kxUiy8YaE/e8+k2oERzOLmJlz13O8Sa9p5uEf/KJO00= Subject key identifier: 9D:AF:73:43:01:9E:2B:9D:20:9E:5D:54:DD:49:DD:C6:C7:39:0F:24 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584E5A49F66940F8623153A2D3C0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a68150d5-4385-3ac6-a10e-362c2d66a738.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 20473 IP address blocks: 8.9.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:49:f6:69:40:f8:62:31:53:a2:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=bbce26fe-4d87-4233-8d9d-31c960a2ed53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2f:8f:2e:f0:43:8b:51:bc:ab:84:f1:12:1f: 36:81:48:c3:33:d2:47:dc:fd:9e:a8:7d:72:7e:0a: 01:0c:bd:85:58:91:ab:f6:fa:06:01:f7:e5:af:52: 66:0f:55:d8:05:63:4c:4c:ae:18:9f:43:26:cc:39: de:cf:2d:fb:78:89:b7:2c:60:3c:84:8e:f2:e3:8a: 81:7c:26:dc:d1:12:8e:bf:97:87:74:2d:5d:92:2c: 07:7b:97:8a:0c:fe:8e:79:d5:65:f1:3d:32:f1:94: ce:42:17:19:7c:23:2a:bb:f4:20:c7:18:97:d3:bd: ef:47:33:e3:b7:63:18:03:29:66:f3:85:ef:54:c2: 0f:cf:4b:bd:74:5e:91:61:bf:dd:4b:db:88:27:7f: cd:80:e2:8e:f3:84:75:c1:0a:7b:89:78:e7:c5:d6: fc:1d:ff:62:ce:2f:32:67:58:9a:04:e9:27:5e:ea: 1e:fb:5d:ac:2c:3f:74:b1:55:53:0d:76:5c:2e:49: 0d:3d:91:25:23:6a:c5:fd:40:2d:35:a8:de:04:50: b1:60:35:98:e7:5a:39:26:c8:dd:03:dd:4d:89:9e: 2b:37:26:58:45:7e:b2:bf:32:75:1d:16:dd:d8:fa: 53:a6:f5:e4:3e:41:2b:5c:97:3d:86:e7:f5:99:a4: 5b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:AF:73:43:01:9E:2B:9D:20:9E:5D:54:DD:49:DD:C6:C7:39:0F:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a68150d5-4385-3ac6-a10e-362c2d66a738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.9.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:95:8a:3c:3d:dc:4b:62:2d:03:79:9f:ed:ba:58:30:78:db: e1:27:ea:a4:4a:5f:58:32:b1:f8:2e:a0:55:a2:df:53:d4:a1: db:29:92:22:eb:c9:eb:db:ad:86:65:81:41:1c:10:05:00:3b: 3c:59:21:e3:0c:32:ef:12:82:ac:d7:76:86:31:7d:d2:73:33: e6:d3:2d:51:af:84:3f:69:71:98:a9:3c:0d:a3:a3:8d:ff:0f: d3:39:05:34:c9:88:70:2c:5a:25:35:38:15:eb:a3:f6:e1:b7: f1:f3:8d:97:e7:1b:13:10:25:5b:e2:f0:b3:41:ef:92:c7:e3: 3f:32:d1:06:68:9d:d7:b7:0d:18:c5:40:00:49:51:a3:cc:18: 30:68:aa:d5:2e:42:9a:95:92:85:89:0d:cd:e8:c7:21:35:26: 70:b8:73:57:74:74:1a:50:13:eb:3c:f5:1f:ad:f0:91:e5:71: c1:38:dc:2d:24:dd:c7:81:1b:41:50:d9:4b:40:60:67:08:86: 56:58:58:a6:0b:bb:eb:53:15:d6:9d:73:fa:62:c3:0d:8f:f6: 4c:83:25:b8:16:c7:6b:3f:d0:fc:5f:6a:f8:f9:f4:c4:56:6a: 17:b4:2b:ae:89:73:ad:9e:8b:6d:42:fc:83:23:48:a8:a6:89: 66:28:36:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSfZpQPhiMVOi08AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk YmJjZTI2ZmUtNGQ4Ny00MjMzLThkOWQtMzFjOTYwYTJlZDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS+PLvBDi1G8q4TxEh82gUjDM9JH3P2eqH1y fgoBDL2FWJGr9voGAfflr1JmD1XYBWNMTK4Yn0MmzDnezy37eIm3LGA8hI7y44qB fCbc0RKOv5eHdC1dkiwHe5eKDP6OedVl8T0y8ZTOQhcZfCMqu/QgxxiX073vRzPj t2MYAylm84XvVMIPz0u9dF6RYb/dS9uIJ3/NgOKO84R1wQp7iXjnxdb8Hf9izi8y Z1iaBOknXuoe+12sLD90sVVTDXZcLkkNPZElI2rF/UAtNajeBFCxYDWY51o5Jsjd A91NiZ4rNyZYRX6yvzJ1HRbd2PpTpvXkPkErXJc9huf1maRbowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2vc0MBniudIJ5dVN1J3cbHOQ8kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYTY4MTUwZDUtNDM4NS0z YWM2LWExMGUtMzYyYzJkNjZhNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAkEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaVijw93EtiLQN5n+26WDB42+En6qRKX1gysfguoFWi31PUodspkiLr yevbrYZlgUEcEAUAOzxZIeMMMu8SgqzXdoYxfdJzM+bTLVGvhD9pcZipPA2jo43/ D9M5BTTJiHAsWiU1OBXro/bht/HzjZfnGxMQJVvi8LNB75LH4z8y0QZonde3DRjF QABJUaPMGDBoqtUuQpqVkoWJDc3oxyE1JnC4c1d0dBpQE+s89R+t8JHlccE43C0k 3ceBG0FQ2UtAYGcIhlZYWKYLu+tTFdadc/piww2P9kyDJbgWx2s/0Pxfavj59MRW ahe0K66Jc62ei21C/IMjSKimiWYoNmo= -----END CERTIFICATE-----Generated at Fri Jul 24 20:23:28 2026 by rpki-client