$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d85ad17a-9443-36be-a0cd-94ed340eaab8.roa File: d85ad17a-9443-36be-a0cd-94ed340eaab8.roa (raw, json) Hash identifier: PooTNmw+jRyDQVnt99np8yYaWAUrdbAyXlm/qifyey0= Subject key identifier: F1:69:9D:6E:5F:8C:2D:0D:F6:77:62:CB:31:25:22:B2:71:12:E4:E5 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584DBFD0554F1DC60DCFA1DE3480 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d85ad17a-9443-36be-a0cd-94ed340eaab8.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 989 IP address blocks: 8.36.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:55:4f:1d:c6:0d:cf:a1:de:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=03a2476f-ef37-4647-9ea9-b32f5b44fca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8d:f5:f7:66:1c:9d:bc:fe:23:4d:ed:5e:98: 79:60:06:1b:40:a1:fb:83:7b:f0:28:ba:0a:b8:4a: 52:7a:c5:5d:ed:f3:5b:b5:73:da:4d:40:75:f3:6c: f0:be:04:67:1e:14:f1:f5:99:1c:40:f2:5f:99:e6: d8:c6:95:75:f7:ef:bd:a0:ec:6d:df:13:fd:0d:06: a9:9c:6e:97:40:35:4f:ad:5c:ae:18:a8:4a:a8:1b: ec:25:c8:57:75:c3:08:72:8b:9e:b8:aa:44:e9:99: 61:d8:f2:d3:b1:d0:d3:38:0c:ef:82:93:95:f0:a3: 97:10:2f:8a:00:b9:57:cf:22:cd:6f:7e:51:d8:0b: e4:70:cd:b0:ae:46:22:f6:c1:69:4f:bd:c7:70:be: e0:52:b2:a1:60:b2:ff:26:0e:36:c3:c3:76:5c:c3: d3:7c:a6:70:a6:af:dd:f2:0a:96:75:12:aa:5e:7f: ca:62:89:03:d9:11:61:49:71:8d:5c:aa:7c:fb:27: ea:86:17:44:67:8f:1f:61:ed:c4:7d:b2:02:f3:dc: d6:27:cb:0f:93:55:f7:07:f0:20:d6:ac:17:95:81: 23:7a:4a:5e:14:c5:b5:90:7d:b9:d9:9a:a9:54:cd: f1:af:b9:2e:2d:8e:75:2d:12:df:ac:fa:c8:2f:e1: 83:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:69:9D:6E:5F:8C:2D:0D:F6:77:62:CB:31:25:22:B2:71:12:E4:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d85ad17a-9443-36be-a0cd-94ed340eaab8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.36.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:5c:3b:68:ab:ba:56:fc:d6:95:55:50:83:30:fc:c7:c8:45: 6a:d3:2a:0f:2e:47:20:e3:52:0a:40:2e:fd:a8:e2:4d:d2:e8: d6:de:ce:bc:22:5b:1a:cd:c1:16:68:c9:1e:72:fa:41:52:99: 4d:c9:55:09:f2:3a:d2:74:f2:8c:23:e3:90:f8:ad:ee:c2:0a: 4e:b4:16:c1:50:24:b7:d0:e4:86:d9:2c:8c:af:5c:2d:d4:6d: e9:93:ee:4a:0f:d6:de:e5:e6:60:b3:67:99:e0:f9:f9:59:13: 1d:4b:d1:a0:5c:10:f3:8b:9d:a6:76:75:69:d3:7c:83:80:2f: db:0b:54:56:7a:a5:db:35:85:18:bb:30:0c:3a:21:78:ed:6e: 58:63:81:16:27:f5:8f:61:aa:c2:2d:12:a5:f8:61:60:77:1e: ac:0d:11:13:f9:b0:65:62:50:b5:8f:a5:94:d5:f5:78:51:77: b4:9c:26:5a:d9:7b:5d:f5:f7:fe:a7:e4:a1:02:e6:87:c1:ba: d5:34:72:d7:d5:c4:00:6c:71:22:ab:07:e0:f5:f0:62:49:9e: 12:a6:77:89:cb:26:99:95:9e:a6:8a:12:86:0e:4b:14:75:6c: 7a:68:ae:a0:cb:14:9e:f5:77:a3:68:90:06:a8:a7:82:3e:a2: 1f:7d:19:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2/0FVPHcYNz6HeNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk MDNhMjQ3NmYtZWYzNy00NjQ3LTllYTktYjMyZjViNDRmY2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI3192Ycnbz+I03tXph5YAYbQKH7g3vwKLoK uEpSesVd7fNbtXPaTUB182zwvgRnHhTx9ZkcQPJfmebYxpV19++9oOxt3xP9DQap nG6XQDVPrVyuGKhKqBvsJchXdcMIcoueuKpE6Zlh2PLTsdDTOAzvgpOV8KOXEC+K ALlXzyLNb35R2AvkcM2wrkYi9sFpT73HcL7gUrKhYLL/Jg42w8N2XMPTfKZwpq/d 8gqWdRKqXn/KYokD2RFhSXGNXKp8+yfqhhdEZ48fYe3EfbIC89zWJ8sPk1X3B/Ag 1qwXlYEjekpeFMW1kH252ZqpVM3xr7kuLY51LRLfrPrIL+GDVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFpnW5fjC0N9ndiyzElIrJxEuTlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZDg1YWQxN2EtOTQ0My0z NmJlLWEwY2QtOTRlZDM0MGVhYWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBCCTuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZcO2irulb81pVVUIMw/MfIRWrTKg8uRyDjUgpALv2o4k3S6Nbezrwi WxrNwRZoyR5y+kFSmU3JVQnyOtJ08owj45D4re7CCk60FsFQJLfQ5IbZLIyvXC3U bemT7koP1t7l5mCzZ5ng+flZEx1L0aBcEPOLnaZ2dWnTfIOAL9sLVFZ6pds1hRi7 MAw6IXjtblhjgRYn9Y9hqsItEqX4YWB3HqwNERP5sGViULWPpZTV9XhRd7ScJlrZ e1319/6n5KEC5ofButU0ctfVxABscSKrB+D18GJJnhKmd4nLJpmVnqaKEoYOSxR1 bHporqDLFJ71d6NokAaop4I+oh99GQg= -----END CERTIFICATE-----Generated at Wed May 13 16:09:39 2026 by rpki-client