$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c440eaa1-1f74-3e0f-aaac-b5df16e2c6ca.roa File: c440eaa1-1f74-3e0f-aaac-b5df16e2c6ca.roa (raw, json) Hash identifier: 1tCwEAnxaDqMfHECi85ZpmP/O1CYjUzRGMEa+YVMXTI= Subject key identifier: E9:7E:F3:2F:86:53:79:0B:D4:29:06:CF:2D:F5:52:4C:ED:36:61:B9 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584DBD05EA19E8CFBDAEF0FDCE80 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c440eaa1-1f74-3e0f-aaac-b5df16e2c6ca.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 4922 IP address blocks: 8.21.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:ea:19:e8:cf:bd:ae:f0:fd:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=5e91c1c5-1c2d-4d22-8fd4-2d047ca378d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d9:e5:41:eb:fd:bc:a5:92:eb:2a:4a:32:d4: 28:e8:81:6d:17:0d:8b:24:7f:0d:99:56:ce:4a:6e: e5:4b:25:e3:8c:a0:66:ba:a2:b2:60:83:8b:97:eb: 6f:4c:42:6d:77:a7:02:8d:4a:ab:ab:40:26:aa:4d: 65:f6:ee:ff:83:b7:6a:f5:58:c6:2d:70:ac:08:d8: 09:dd:4b:39:75:84:a6:e5:d8:ad:36:b1:36:e1:50: e5:ae:5e:88:4b:b6:ab:88:52:50:31:84:ad:74:9a: 57:23:b2:ed:50:9d:a0:6e:cc:76:a4:ce:19:ad:5e: 96:12:d6:32:4f:c9:23:08:51:be:66:49:75:9e:e0: 41:dc:0a:3d:f4:4d:10:7f:0c:66:09:2f:ad:5a:f3: d7:be:de:e5:1f:cc:86:38:5a:67:cb:c4:97:8c:67: 1c:49:28:bf:ec:fa:36:09:c5:3d:98:2c:6e:66:06: 80:86:62:f2:0b:c9:35:ef:78:52:a1:8e:4c:ef:ed: 37:74:19:0f:c4:17:f1:22:c8:ae:7e:39:22:20:13: db:bf:79:9c:90:06:4b:93:9d:13:07:cb:44:b8:98: 22:f3:9a:79:15:77:9e:7f:45:98:a2:88:19:43:62: 57:49:b5:77:20:ed:1b:89:3b:a9:01:f0:78:c1:e0: eb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7E:F3:2F:86:53:79:0B:D4:29:06:CF:2D:F5:52:4C:ED:36:61:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c440eaa1-1f74-3e0f-aaac-b5df16e2c6ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.21.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:21:c0:b2:97:8f:7e:7f:3d:2e:a7:a6:51:2d:ff:e4:34:07: f2:67:4f:17:9c:36:bb:b0:83:ee:d0:3a:dc:dd:1b:a1:f4:b0: ef:b9:11:b0:91:d6:3f:e5:72:ea:16:9d:7a:b5:d8:56:4c:8d: d7:f6:73:24:59:cf:4f:6c:8a:43:b5:b6:92:59:f8:d7:fb:e9: 59:1d:30:57:71:0d:0d:b0:32:44:a3:db:0c:f2:04:ac:3e:48: 41:f3:4a:fa:7e:c2:a1:8e:d9:f5:7e:91:ce:bb:73:ed:32:d6: a9:7e:a0:11:a9:6a:a3:8f:55:08:24:07:46:d2:55:cf:28:34: 5b:60:26:93:7d:ea:3d:e9:52:18:61:48:7e:b0:25:85:44:50: 3c:c6:4e:e4:47:d2:e6:b7:87:4e:af:71:a5:6d:03:0f:9b:ba: 57:32:81:df:36:81:f4:fd:0a:f8:6c:d6:11:fa:e3:17:37:39: 50:ff:1d:1b:42:49:c1:7b:b8:c7:a9:39:bc:10:32:5c:4b:92: bb:ad:c9:19:ed:e7:08:70:69:eb:26:37:b6:79:c4:23:72:cc: 42:a3:36:d6:30:c2:02:a1:18:59:03:45:36:91:62:47:d9:9f: 35:31:91:d2:79:dd:ed:74:b1:80:4d:23:e8:da:a4:2d:af:62: d9:c9:ab:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29BeoZ6M+9rvD9zoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk NWU5MWMxYzUtMWMyZC00ZDIyLThmZDQtMmQwNDdjYTM3OGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNnlQev9vKWS6ypKMtQo6IFtFw2LJH8NmVbO Sm7lSyXjjKBmuqKyYIOLl+tvTEJtd6cCjUqrq0Amqk1l9u7/g7dq9VjGLXCsCNgJ 3Us5dYSm5ditNrE24VDlrl6IS7ariFJQMYStdJpXI7LtUJ2gbsx2pM4ZrV6WEtYy T8kjCFG+Zkl1nuBB3Ao99E0QfwxmCS+tWvPXvt7lH8yGOFpny8SXjGccSSi/7Po2 CcU9mCxuZgaAhmLyC8k173hSoY5M7+03dBkPxBfxIsiufjkiIBPbv3mckAZLk50T B8tEuJgi85p5FXeef0WYoogZQ2JXSbV3IO0biTupAfB4weDrwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOl+8y+GU3kL1CkGzy31UkztNmG5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYzQ0MGVhYTEtMWY3NC0z ZTBmLWFhYWMtYjVkZjE2ZTJjNmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBCBV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUhwLKXj35/PS6nplEt/+Q0B/JnTxecNruwg+7QOtzdG6H0sO+5EbCR 1j/lcuoWnXq12FZMjdf2cyRZz09sikO1tpJZ+Nf76VkdMFdxDQ2wMkSj2wzyBKw+ SEHzSvp+wqGO2fV+kc67c+0y1ql+oBGpaqOPVQgkB0bSVc8oNFtgJpN96j3pUhhh SH6wJYVEUDzGTuRH0ua3h06vcaVtAw+bulcygd82gfT9Cvhs1hH64xc3OVD/HRtC ScF7uMepObwQMlxLkrutyRnt5whwaesmN7Z5xCNyzEKjNtYwwgKhGFkDRTaRYkfZ nzUxkdJ53e10sYBNI+japC2vYtnJq18= -----END CERTIFICATE-----Generated at Wed May 13 09:29:49 2026 by rpki-client