$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c8f00d41-f2c2-30d5-b365-752e34097e61.roa File: c8f00d41-f2c2-30d5-b365-752e34097e61.roa (raw, json) Hash identifier: MjIBeR0zNPTMBUy3JbPKato0iUP34pXnQM1gEpyQbMs= Subject key identifier: CA:50:DA:06:17:5A:9A:D3:37:23:87:C9:66:83:A9:DC:0D:7A:D8:4A Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584F3FAD89F3E3A39333018BFE80 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c8f00d41-f2c2-30d5-b365-752e34097e61.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 4922 IP address blocks: 8.21.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:89:f3:e3:a3:93:33:01:8b:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=6a5642fc-4bf9-40d1-8851-ba92b8112d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:dd:30:5a:89:69:0c:90:43:2e:3c:6a:cf:9c: 64:e5:d7:a4:d4:f3:50:35:51:e8:4f:44:73:c1:cf: 0b:fa:37:34:2d:6c:28:ac:23:2d:4f:20:ef:b4:23: 33:0e:3f:84:84:4d:b7:88:21:b1:18:6b:57:6e:8e: 34:40:44:32:e5:79:7e:cc:fa:f8:29:88:6b:cf:33: ca:c2:97:52:5d:d1:ad:63:98:0a:f7:31:0c:7c:42: b6:cb:9f:41:0a:00:68:42:dc:cf:de:69:df:59:65: 76:83:32:b0:50:92:f3:61:cb:60:e4:a8:7b:86:8c: e1:5e:45:55:07:0f:6d:dd:26:ce:d3:60:3f:cf:8f: 88:bd:67:69:fa:a5:53:cb:2a:20:6e:50:af:19:86: 32:dc:36:38:76:30:90:9b:9a:bb:73:08:07:e4:dd: 18:4f:77:1d:99:10:46:0b:58:72:7d:a4:a5:15:d0: ec:13:7c:b2:ac:79:83:e4:20:72:7b:df:1e:9b:88: 16:72:ff:f4:d9:59:33:b1:0e:66:02:cc:24:52:59: f0:9c:27:d1:50:9e:67:e4:93:63:1c:c5:98:5e:0d: 5d:b4:bc:d9:43:0e:98:01:d6:68:55:ff:68:d4:6e: 49:d6:6f:c0:6d:14:39:da:cf:15:26:f2:37:fd:a2: ce:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:50:DA:06:17:5A:9A:D3:37:23:87:C9:66:83:A9:DC:0D:7A:D8:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c8f00d41-f2c2-30d5-b365-752e34097e61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.21.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:17:c8:20:93:4b:0b:88:8d:bd:a7:ac:05:89:ef:e6:24:97: 2f:32:06:86:e6:fb:82:f5:3e:9c:5e:6a:63:69:fe:e7:e2:f4: f3:8c:69:71:4a:67:94:78:a4:4b:6a:3f:0e:00:37:a2:13:34: 40:67:2d:20:87:b3:6d:dc:e9:b5:26:fb:98:d3:e0:9c:90:aa: 78:3e:c9:00:85:8f:29:01:3d:1b:6f:07:9d:c7:84:01:29:9f: 24:74:e8:fa:17:65:b2:be:b8:2a:1c:5f:59:6c:e1:23:eb:69: 6e:20:99:8c:f9:f3:83:ad:0f:0e:cc:a1:e8:82:55:0f:ae:00: 6f:cb:72:c7:b1:47:7e:a1:48:08:d6:3d:98:a7:a7:3b:68:3d: 59:20:78:b3:3a:42:88:c0:b0:a3:6b:ba:53:5a:7b:56:de:e3: 18:ac:de:d2:b1:cd:7f:74:e3:92:6c:ac:1c:95:4c:28:5a:c9: b4:7d:c9:cf:8b:da:84:b4:26:aa:53:89:30:70:2f:b7:2b:a7: f9:4a:53:9e:45:e7:99:55:1d:0f:2d:61:d1:99:1a:0d:16:0f: ae:37:b0:ab:e2:bf:8e:69:04:48:88:1f:c3:d1:06:4c:a4:d6: 57:d9:30:da:08:af:7c:bd:45:15:e0:3c:96:5b:35:88:ab:b2: 1e:ca:2a:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rYnz46OTMwGL/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk NmE1NjQyZmMtNGJmOS00MGQxLTg4NTEtYmE5MmI4MTEyZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt0wWolpDJBDLjxqz5xk5dek1PNQNVHoT0Rz wc8L+jc0LWworCMtTyDvtCMzDj+EhE23iCGxGGtXbo40QEQy5Xl+zPr4KYhrzzPK wpdSXdGtY5gK9zEMfEK2y59BCgBoQtzP3mnfWWV2gzKwUJLzYctg5Kh7hozhXkVV Bw9t3SbO02A/z4+IvWdp+qVTyyogblCvGYYy3DY4djCQm5q7cwgH5N0YT3cdmRBG C1hyfaSlFdDsE3yyrHmD5CBye98em4gWcv/02VkzsQ5mAswkUlnwnCfRUJ5n5JNj HMWYXg1dtLzZQw6YAdZoVf9o1G5J1m/AbRQ52s8VJvI3/aLOCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpQ2gYXWprTNyOHyWaDqdwNethKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYzhmMDBkNDEtZjJjMi0z MGQ1LWIzNjUtNzUyZTM0MDk3ZTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBCBV6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwXyCCTSwuIjb2nrAWJ7+Ykly8yBobm+4L1PpxeamNp/ufi9POMaXFK Z5R4pEtqPw4AN6ITNEBnLSCHs23c6bUm+5jT4JyQqng+yQCFjykBPRtvB53HhAEp nyR06PoXZbK+uCocX1ls4SPraW4gmYz584OtDw7MoeiCVQ+uAG/LcsexR36hSAjW PZinpztoPVkgeLM6QojAsKNrulNae1be4xis3tKxzX9045JsrByVTChaybR9yc+L 2oS0JqpTiTBwL7crp/lKU55F55lVHQ8tYdGZGg0WD643sKviv45pBEiIH8PRBkyk 1lfZMNoIr3y9RRXgPJZbNYirsh7KKv8= -----END CERTIFICATE-----Generated at Mon Sep 28 10:10:41 2026 by rpki-client