$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c343f333-6f55-330e-b1ab-48b6508d1794.roa File: c343f333-6f55-330e-b1ab-48b6508d1794.roa (raw, json) Hash identifier: 6FjqFJg3kvRSrj6C/FEbIvyz7D2asAfA8yLlv9BZNLw= Subject key identifier: A8:95:D5:2E:67:49:42:2C:04:83:4C:6F:AF:73:CF:AA:23:6B:6C:72 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584DBD05EA4774029195A4B52880 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c343f333-6f55-330e-b1ab-48b6508d1794.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 4922 IP address blocks: 8.225.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:ea:47:74:02:91:95:a4:b5:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=1a6cec26-95d1-4342-b909-93ff716a13ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4b:17:05:5c:f9:28:ed:4b:c0:f7:89:03:4c: 6b:70:31:3f:d2:85:47:96:ce:e2:61:98:ad:24:6e: bd:86:71:94:1a:c6:bd:9e:ec:14:cc:67:47:ff:3b: c6:0f:5c:a7:19:6e:f9:ed:48:9b:ec:1d:9b:be:f4: d9:c3:c3:1f:9e:e1:ca:e9:56:35:f7:01:5f:2e:8a: a4:bf:f1:5b:1d:c0:23:3e:f7:9a:2f:a3:88:76:ab: c0:87:b3:a1:e0:b6:f2:85:46:3c:21:70:fb:62:46: de:80:a6:39:af:46:50:79:4c:d1:d3:4c:6d:71:74: 66:a8:dc:b6:0f:5f:6f:0a:ac:dd:cd:04:a5:07:4e: 06:06:95:37:5c:b2:de:f4:6a:5a:17:07:1d:cc:e5: 59:f1:fc:62:48:a4:fd:d0:a7:55:2a:76:8d:2e:8a: 3e:be:cb:4d:94:e5:d7:c2:a0:90:42:67:75:44:fe: f2:58:0f:af:13:71:55:54:4a:b4:f5:93:29:92:e9: d4:4f:53:20:9c:b8:44:92:83:d6:30:df:87:e5:17: c0:c3:8c:54:7b:42:3e:e3:0b:41:24:5a:4d:44:01: 9f:11:a4:c3:fa:16:2b:06:58:71:2f:e9:e4:d9:df: 80:a9:14:3c:2b:93:b7:a0:4d:e0:e4:c9:6b:d2:17: 4c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:95:D5:2E:67:49:42:2C:04:83:4C:6F:AF:73:CF:AA:23:6B:6C:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c343f333-6f55-330e-b1ab-48b6508d1794.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.225.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:ef:86:2a:40:b9:dc:17:8e:f9:d6:7c:fd:59:33:5e:04:cc: a4:29:0c:88:0f:fc:35:ba:31:ed:ab:ee:e8:1a:f7:c4:14:8c: 4c:d3:cc:48:3e:57:06:d9:d6:83:59:dd:ad:e4:28:a3:e5:1f: cb:8f:e1:35:70:e3:aa:66:7e:e8:9d:dd:82:40:09:4f:9d:51: 75:31:1c:28:42:11:71:93:86:45:ae:50:e5:fe:be:9f:a8:28: ed:a5:c0:35:12:03:ef:f7:ed:55:19:3c:64:0b:66:fe:f5:f9: 0e:9e:c1:c6:4a:74:45:8d:a8:84:eb:d4:b5:76:a2:10:f2:1e: 43:05:5c:e0:18:7f:0e:ca:74:e4:62:44:71:aa:72:d5:34:2a: b1:40:92:38:1f:d1:7a:6a:da:7f:1b:84:21:cd:ef:c6:9d:e1: f1:b7:89:56:c1:2d:95:16:a0:ff:b7:4c:ad:72:5f:89:c4:2e: 22:a3:8b:a3:5e:8c:03:dc:2b:ed:6e:c0:ca:54:75:99:4e:6a: 28:95:99:78:25:66:32:82:84:c7:5b:c9:ff:7e:04:54:d3:81: 0e:83:b6:cd:6d:6b:56:eb:fe:ee:5d:e3:f9:f6:43:17:06:3f: d3:e8:e2:ba:df:14:c0:cc:86:a3:65:ba:3b:72:d4:9d:9a:26: b9:0d:02:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29BepHdAKRlaS1KIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk MWE2Y2VjMjYtOTVkMS00MzQyLWI5MDktOTNmZjcxNmExM2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUsXBVz5KO1LwPeJA0xrcDE/0oVHls7iYZit JG69hnGUGsa9nuwUzGdH/zvGD1ynGW757Uib7B2bvvTZw8MfnuHK6VY19wFfLoqk v/FbHcAjPveaL6OIdqvAh7Oh4LbyhUY8IXD7YkbegKY5r0ZQeUzR00xtcXRmqNy2 D19vCqzdzQSlB04GBpU3XLLe9GpaFwcdzOVZ8fxiSKT90KdVKnaNLoo+vstNlOXX wqCQQmd1RP7yWA+vE3FVVEq09ZMpkunUT1MgnLhEkoPWMN+H5RfAw4xUe0I+4wtB JFpNRAGfEaTD+hYrBlhxL+nk2d+AqRQ8K5O3oE3g5Mlr0hdM5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiV1S5nSUIsBINMb69zz6oja2xyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYzM0M2YzMzMtNmY1NS0z MzBlLWIxYWItNDhiNjUwOGQxNzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCCOHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTvhipAudwXjvnWfP1ZM14EzKQpDIgP/DW6Me2r7uga98QUjEzTzEg+ VwbZ1oNZ3a3kKKPlH8uP4TVw46pmfuid3YJACU+dUXUxHChCEXGThkWuUOX+vp+o KO2lwDUSA+/37VUZPGQLZv71+Q6ewcZKdEWNqITr1LV2ohDyHkMFXOAYfw7KdORi RHGqctU0KrFAkjgf0Xpq2n8bhCHN78ad4fG3iVbBLZUWoP+3TK1yX4nELiKji6Ne jAPcK+1uwMpUdZlOaiiVmXglZjKChMdbyf9+BFTTgQ6Dts1ta1br/u5d4/n2QxcG P9Po4rrfFMDMhqNlujty1J2aJrkNAgk= -----END CERTIFICATE-----Generated at Wed May 13 15:47:56 2026 by rpki-client