$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f0dab10e-4582-3cea-9c9b-95e61ade618d.roa File: f0dab10e-4582-3cea-9c9b-95e61ade618d.roa (raw, json) Hash identifier: Bjr9HzCR7hCfGvfunsSsUkuCbWY7QYjNFRefAoxFsKU= Subject key identifier: 22:F4:4D:5F:50:4E:72:23:FE:6C:12:8F:A8:76:AC:69:F7:2D:14:2A Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584E7FFA2F3ECE26FB30668E8AC9 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f0dab10e-4582-3cea-9c9b-95e61ade618d.roa Signing time: Tue 14 Jul 2026 21:00:12 +0000 ROA not before: Tue 14 Jul 2026 21:00:12 +0000 ROA not after: Mon 12 Oct 2026 21:00:12 +0000 asID: 11178 IP address blocks: 8.20.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7f:fa:2f:3e:ce:26:fb:30:66:8e:8a:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jul 14 21:00:12 2026 GMT Not After : Oct 12 21:00:12 2026 GMT Subject: CN=41edb17b-bbf2-419a-9485-7b3e610e3c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c9:0f:49:91:26:ec:da:61:f4:51:b8:7c:12: a5:b6:66:4e:93:67:c2:b0:74:d0:ec:53:7e:4d:47: 29:9b:95:75:24:a5:08:ba:37:0e:9d:0a:64:80:ae: cf:c8:9c:96:a1:94:21:be:57:7a:7e:16:b7:6b:65: 54:c6:0c:e2:b5:1f:65:13:2c:66:24:e6:55:fb:de: d5:95:7a:c7:70:49:42:99:18:77:3c:ae:72:f4:11: 11:87:8d:1a:15:3f:0e:85:95:4a:60:f9:84:89:ba: e6:36:14:71:87:24:6e:61:2b:c8:96:b0:c6:e6:8c: 5a:ab:3d:13:7b:51:b3:ac:0e:79:ee:7f:72:b9:eb: c7:b1:f0:22:94:e0:0e:ec:93:ba:94:ad:e4:8e:8c: 8a:33:de:2d:34:65:21:83:47:e7:90:a5:35:19:44: 66:43:49:c3:03:70:b3:c1:73:3a:3b:88:e2:ce:f4: dd:74:b5:2a:a4:82:42:d9:c6:5e:db:69:5b:af:83: d3:ad:59:d5:71:67:3e:00:66:50:53:90:dd:82:1a: b4:d1:14:8c:08:13:cc:ec:a0:be:36:0a:57:95:8d: 0f:d2:9b:08:37:ad:04:96:a5:8b:7e:7c:74:c2:8f: e5:3b:63:44:2f:ca:a3:53:44:73:23:05:56:af:5b: 8b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F4:4D:5F:50:4E:72:23:FE:6C:12:8F:A8:76:AC:69:F7:2D:14:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f0dab10e-4582-3cea-9c9b-95e61ade618d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.20.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:2c:6e:42:16:45:93:af:36:ba:8f:00:2f:7f:f6:79:2e:6b: 68:1f:a5:d7:59:89:ad:ee:c5:19:8b:7a:23:3a:3b:50:8a:11: 89:5c:a6:9a:74:e2:11:92:49:d4:c7:88:cf:aa:33:0e:ff:d1: 47:9a:ad:51:d4:2d:8a:67:54:9d:c3:c0:84:45:90:de:be:08: 54:1e:6b:1b:75:f0:7e:03:c4:d4:f0:e4:0d:43:04:b5:36:76: 72:7b:6c:b7:10:7c:a9:89:d5:9b:8f:ec:b7:a1:d0:c9:b6:b3: 95:b0:59:79:8d:0d:77:ba:b4:a9:64:33:3f:30:74:da:93:5e: 30:fb:37:53:01:a6:87:9c:91:f5:08:99:9a:1d:f3:88:9f:a1: 80:6c:7c:97:c5:91:0e:fe:f7:be:b3:63:71:b4:3f:72:cb:23: 37:b3:f2:d0:93:3b:86:f3:31:73:bc:df:31:0d:46:84:f2:85: 4f:8c:c3:c5:c9:8c:ec:01:0f:61:06:21:fa:f2:46:7d:e6:b3: 29:95:ff:a9:fc:87:fe:75:8b:ec:01:a0:e9:eb:d9:68:99:48: 35:e4:d6:ed:ed:b2:32:6d:8e:6d:26:a7:51:4b:8d:d9:ef:03: c4:87:0f:61:df:f0:0d:e4:10:f2:3f:a9:7f:94:e9:bd:31:d7: b5:dc:c6:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5/+i8+zib7MGaOiskwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDcxNDIxMDAxMloXDTI2MTAxMjIxMDAxMlowLzEtMCsGA1UEAxMk NDFlZGIxN2ItYmJmMi00MTlhLTk0ODUtN2IzZTYxMGUzYzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMkPSZEm7Nph9FG4fBKltmZOk2fCsHTQ7FN+ TUcpm5V1JKUIujcOnQpkgK7PyJyWoZQhvld6fha3a2VUxgzitR9lEyxmJOZV+97V lXrHcElCmRh3PK5y9BERh40aFT8OhZVKYPmEibrmNhRxhyRuYSvIlrDG5oxaqz0T e1GzrA557n9yuevHsfAilOAO7JO6lK3kjoyKM94tNGUhg0fnkKU1GURmQ0nDA3Cz wXM6O4jizvTddLUqpIJC2cZe22lbr4PTrVnVcWc+AGZQU5Ddghq00RSMCBPM7KC+ NgpXlY0P0psIN60ElqWLfnx0wo/lO2NEL8qjU0RzIwVWr1uLgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCL0TV9QTnIj/mwSj6h2rGn3LRQqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZjBkYWIxMGUtNDU4Mi0z Y2VhLTljOWItOTVlNjFhZGU2MThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBCBS6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAsbkIWRZOvNrqPAC9/9nkua2gfpddZia3uxRmLeiM6O1CKEYlcppp0 4hGSSdTHiM+qMw7/0UearVHULYpnVJ3DwIRFkN6+CFQeaxt18H4DxNTw5A1DBLU2 dnJ7bLcQfKmJ1ZuP7Leh0Mm2s5WwWXmNDXe6tKlkMz8wdNqTXjD7N1MBpoeckfUI mZod84ifoYBsfJfFkQ7+976zY3G0P3LLIzez8tCTO4bzMXO83zENRoTyhU+Mw8XJ jOwBD2EGIfryRn3msymV/6n8h/51i+wBoOnr2WiZSDXk1u3tsjJtjm0mp1FLjdnv A8SHD2Hf8A3kEPI/qX+U6b0x17Xcxiw= -----END CERTIFICATE-----Generated at Fri Jul 24 11:47:35 2026 by rpki-client