$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/bcda651f-6a0b-32f4-8858-9ce12ed25332.roa File: bcda651f-6a0b-32f4-8858-9ce12ed25332.roa (raw, json) Hash identifier: 7VhaB0RItuwC9aXzUsMQUTU6mBol0rDjSAnB6N/92Kw= Subject key identifier: 78:3C:54:80:33:E6:6B:2E:FF:38:92:36:5B:21:09:BE:01:BF:AB:98 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584E5A49F6997DFD6D9667972140 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/bcda651f-6a0b-32f4-8858-9ce12ed25332.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 20473 IP address blocks: 8.9.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:49:f6:99:7d:fd:6d:96:67:97:21:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=0012c842-0a5c-45af-842d-93643ffc7e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9c:24:ba:34:b4:1b:bc:1c:41:b1:b6:ac:89: 81:2e:98:dc:1e:eb:e0:a7:24:51:cf:b6:27:d7:98: 7f:c4:dd:af:0b:ab:bd:8b:78:ae:3a:13:d2:75:ea: e6:41:39:38:02:d9:f2:3a:dd:8a:ea:09:d7:24:d5: f9:ef:24:48:40:dc:01:37:fe:93:ec:09:c1:be:72: 89:08:da:04:74:6b:5f:71:2f:27:de:2a:bd:48:23: f0:a7:e7:05:de:f0:c0:4f:1c:a3:85:0d:5f:61:6f: b4:5f:23:4d:44:f1:2b:98:67:36:37:01:28:19:16: e1:ad:d3:d2:3c:35:41:94:2f:0e:dc:f9:7e:52:48: 2e:fb:d0:1e:ee:ca:9e:b5:ab:3b:b4:9a:7c:1f:30: 75:73:21:d3:0b:3e:3a:a4:10:de:42:12:f5:69:08: 44:63:ab:06:10:d7:db:64:e9:b8:ff:97:ea:2e:29: d6:44:79:84:d9:6e:eb:8b:c0:c8:7d:c4:fc:9e:5b: ca:6e:b0:06:54:06:c9:58:58:55:7d:60:3c:6b:96: 67:31:ad:aa:89:60:8f:ed:b8:58:a6:f2:2b:75:e4: cf:4a:8e:92:35:20:48:9f:30:53:13:b7:09:fc:2c: ec:d5:2b:7c:12:51:b0:15:6f:ff:63:ca:a7:d9:29: 35:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:3C:54:80:33:E6:6B:2E:FF:38:92:36:5B:21:09:BE:01:BF:AB:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/bcda651f-6a0b-32f4-8858-9ce12ed25332.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.9.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:35:76:ae:83:da:eb:fd:38:82:bc:7b:38:ae:2b:28:3e:cc: ae:3c:90:dc:48:77:7a:8d:45:03:38:f2:5e:d0:80:24:c8:b8: 89:b7:48:f1:67:da:82:32:8d:f7:9e:8e:6f:1e:94:9b:c4:02: 23:e9:c3:89:db:54:88:f5:4e:e0:8f:98:16:ec:d1:be:21:b6: ca:bf:7c:a4:e5:27:5a:4c:e3:6c:3a:4f:ac:c6:3b:38:5c:0d: 5a:7a:cd:92:ab:0c:08:9c:1b:e3:12:75:21:6f:52:31:c0:b7: b0:7c:7d:aa:a7:25:73:06:e9:4d:eb:95:4a:48:bd:bc:57:ac: c0:6f:99:c7:ff:a1:25:34:fb:f3:33:07:60:f6:81:82:a3:01: fd:b5:f9:a2:bc:57:e8:de:f0:15:dd:e7:b3:19:8f:ad:48:ba: 6c:a7:b4:cd:91:39:fe:b5:23:48:d8:5e:9f:a3:06:81:ba:39: 29:41:9b:68:8a:65:7c:36:79:75:a1:89:04:71:79:5f:a7:78: 97:11:06:c7:9d:a9:03:9c:6a:63:c5:69:56:5c:37:7f:8c:9c: 2f:af:00:7e:7d:bd:a5:cd:3e:57:65:8d:a2:2e:b9:97:3e:bb: c7:21:6b:a1:40:3f:93:ba:f5:a2:b1:80:f4:43:04:26:97:bd: 47:95:9e:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSfaZff1tlmeXIUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk MDAxMmM4NDItMGE1Yy00NWFmLTg0MmQtOTM2NDNmZmM3ZTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJwkujS0G7wcQbG2rImBLpjcHuvgpyRRz7Yn 15h/xN2vC6u9i3iuOhPSdermQTk4AtnyOt2K6gnXJNX57yRIQNwBN/6T7AnBvnKJ CNoEdGtfcS8n3iq9SCPwp+cF3vDATxyjhQ1fYW+0XyNNRPErmGc2NwEoGRbhrdPS PDVBlC8O3Pl+Ukgu+9Ae7sqetas7tJp8HzB1cyHTCz46pBDeQhL1aQhEY6sGENfb ZOm4/5fqLinWRHmE2W7ri8DIfcT8nlvKbrAGVAbJWFhVfWA8a5ZnMa2qiWCP7bhY pvIrdeTPSo6SNSBInzBTE7cJ/Czs1St8ElGwFW//Y8qn2Sk1pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHg8VIAz5msu/ziSNlshCb4Bv6uYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYmNkYTY1MWYtNmEwYi0z MmY0LTg4NTgtOWNlMTJlZDI1MzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAkPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGE1dq6D2uv9OIK8eziuKyg+zK48kNxId3qNRQM48l7QgCTIuIm3SPFn 2oIyjfeejm8elJvEAiPpw4nbVIj1TuCPmBbs0b4htsq/fKTlJ1pM42w6T6zGOzhc DVp6zZKrDAicG+MSdSFvUjHAt7B8faqnJXMG6U3rlUpIvbxXrMBvmcf/oSU0+/Mz B2D2gYKjAf21+aK8V+je8BXd57MZj61IumyntM2ROf61I0jYXp+jBoG6OSlBm2iK ZXw2eXWhiQRxeV+neJcRBsedqQOcamPFaVZcN3+MnC+vAH59vaXNPldljaIuuZc+ u8cha6FAP5O69aKxgPRDBCaXvUeVno8= -----END CERTIFICATE-----Generated at Thu Jul 23 23:30:05 2026 by rpki-client