$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/db2238da-4bac-3b0b-8968-b635c3d98c49.roa File: db2238da-4bac-3b0b-8968-b635c3d98c49.roa (raw, json) Hash identifier: 6pNn0c69o0XWaFJ871GNUCkrJrZ3MIc57Mz4xRNhOVg= Subject key identifier: 28:B1:A6:1B:E6:6F:63:71:0D:B8:7B:7A:5B:64:F3:74:FB:69:C1:11 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584E6F3A2622F1F2EC324998B860 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/db2238da-4bac-3b0b-8968-b635c3d98c49.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 30305 IP address blocks: 8.39.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:26:22:f1:f2:ec:32:49:98:b8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=337bcc90-63bb-44f3-8925-5c3aa3484f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:bf:6e:fd:04:c6:7c:17:99:49:11:23:aa:df: 02:e6:df:19:22:3c:8c:68:4c:a5:46:52:0a:36:4a: 5b:cd:bc:b2:5a:17:94:e2:a8:f0:15:69:5e:da:06: d0:fa:99:f1:7a:ac:7b:26:bb:35:df:99:e0:80:50: 25:ab:8a:b3:45:ca:40:b4:72:9e:fa:b4:1c:3b:2b: a9:42:3b:1c:80:36:be:c6:9b:1b:ad:26:e4:f0:bc: d5:d4:92:ba:64:5a:42:81:2d:8a:9d:3a:75:9a:8a: 98:ef:b2:f1:3e:8b:f2:b8:c0:f6:46:a4:5b:cc:ff: bf:e6:95:32:4e:4c:69:be:16:38:2c:61:41:ea:6e: ee:c1:4c:c7:f0:1f:cc:60:02:d4:84:bc:f5:13:d9: e9:69:25:cc:c3:84:ac:5e:50:8d:7f:0b:10:09:d7: 00:20:88:31:8d:8c:ce:16:ba:a0:fe:2f:62:ab:02: 75:30:bb:f7:3c:f6:0c:4a:9d:45:c3:ab:93:79:25: 34:43:e4:76:30:9a:ea:e6:b6:08:e5:0d:92:2c:d4: 58:57:94:8d:e8:92:57:91:13:b6:c6:0b:39:de:a3: 06:e1:2f:c9:35:1a:b1:5c:cd:ea:4b:f8:16:6a:45: 5a:13:b6:29:ba:d7:1b:79:bd:43:41:4d:ad:8f:f2: 5a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B1:A6:1B:E6:6F:63:71:0D:B8:7B:7A:5B:64:F3:74:FB:69:C1:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/db2238da-4bac-3b0b-8968-b635c3d98c49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.39.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:e7:15:fc:0b:1e:96:99:58:1e:29:1d:37:ac:f0:c3:a3:74: 80:9a:9c:0a:1f:55:dc:c8:aa:e7:8d:10:17:1a:f2:59:18:f7: 98:31:96:25:5d:f3:fc:1b:53:e3:54:53:be:cc:a9:d5:9f:11: f4:bb:0f:d2:da:ca:b8:e6:ce:3e:33:7f:da:a2:de:b9:50:af: 02:90:e6:40:5b:3c:3c:d9:5d:a5:95:4d:e6:de:ba:a6:35:62: 78:d8:b0:09:c7:34:22:c4:4b:83:07:fc:be:9c:9e:9b:ef:f6: 54:64:32:84:16:34:12:62:77:c3:bf:db:87:42:6d:24:b2:96: 3c:a6:32:d8:c5:b9:f1:1d:84:28:13:93:2f:77:14:d3:d7:61: 29:33:17:54:88:8d:a2:c9:53:26:e0:a3:b1:87:f5:3c:6f:8f: 87:35:a8:40:47:29:71:72:04:46:af:13:46:42:6b:82:31:ac: 99:0c:8a:71:72:61:c7:4b:a3:12:f1:be:59:d7:2c:b6:25:f0: 79:e8:83:d7:5f:73:71:f6:f1:41:de:65:2c:ff:d4:da:d5:a3: d7:f2:1a:31:a2:40:f9:4d:ac:6e:75:82:76:b1:a2:92:1a:f5: 6d:fa:8a:e6:5f:45:0e:f4:91:3b:12:94:38:20:78:ca:da:86: 16:f6:42:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOiYi8fLsMkmYuGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk MzM3YmNjOTAtNjNiYi00NGYzLTg5MjUtNWMzYWEzNDg0ZjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjb9u/QTGfBeZSREjqt8C5t8ZIjyMaEylRlIK NkpbzbyyWheU4qjwFWle2gbQ+pnxeqx7Jrs135nggFAlq4qzRcpAtHKe+rQcOyup QjscgDa+xpsbrSbk8LzV1JK6ZFpCgS2KnTp1moqY77LxPovyuMD2RqRbzP+/5pUy TkxpvhY4LGFB6m7uwUzH8B/MYALUhLz1E9npaSXMw4SsXlCNfwsQCdcAIIgxjYzO Frqg/i9iqwJ1MLv3PPYMSp1Fw6uTeSU0Q+R2MJrq5rYI5Q2SLNRYV5SN6JJXkRO2 xgs53qMG4S/JNRqxXM3qS/gWakVaE7Yputcbeb1DQU2tj/JagQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCixphvmb2NxDbh7eltk83T7acERMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZGIyMjM4ZGEtNGJhYy0z YjBiLTg5NjgtYjYzNWMzZDk4YzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACCehMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnnFfwLHpaZWB4pHTes8MOjdICanAofVdzIqueNEBca8lkY95gxliVd 8/wbU+NUU77MqdWfEfS7D9Layrjmzj4zf9qi3rlQrwKQ5kBbPDzZXaWVTebeuqY1 YnjYsAnHNCLES4MH/L6cnpvv9lRkMoQWNBJid8O/24dCbSSyljymMtjFufEdhCgT ky93FNPXYSkzF1SIjaLJUybgo7GH9Txvj4c1qEBHKXFyBEavE0ZCa4IxrJkMinFy YcdLoxLxvlnXLLYl8Hnog9dfc3H28UHeZSz/1NrVo9fyGjGiQPlNrG51gnaxopIa 9W36iuZfRQ70kTsSlDggeMrahhb2Qvg= -----END CERTIFICATE-----Generated at Fri Jul 24 18:49:15 2026 by rpki-client