$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/fb605f69-c02b-39f0-83b1-82c40a26baa1.roa File: fb605f69-c02b-39f0-83b1-82c40a26baa1.roa (raw, json) Hash identifier: FRt1YPfUnJIan729k7p3CRL3f2mdp6XOrnjIUFyl9pw= Subject key identifier: 79:C9:1A:1D:6D:8E:D5:90:D6:CC:AA:25:A5:7E:FB:59:F4:65:69:1D Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584F5F1A283B943BC6F85F02B5C0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/fb605f69-c02b-39f0-83b1-82c40a26baa1.roa Signing time: Fri 02 Oct 2026 19:09:57 +0000 ROA not before: Fri 02 Oct 2026 19:09:57 +0000 ROA not after: Thu 31 Dec 2026 20:09:57 +0000 asID: 401506 IP address blocks: 8.28.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5f:1a:28:3b:94:3b:c6:f8:5f:02:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Oct 2 19:09:57 2026 GMT Not After : Dec 31 20:09:57 2026 GMT Subject: CN=7e489be4-3fbe-4383-a698-67b5cfb00684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:33:98:c2:a0:2f:02:4e:df:6b:7b:0a:63:b3: 63:93:74:0a:a8:b0:4c:7f:5b:2f:8d:d6:82:e0:c0: ac:d6:db:41:11:2d:4c:63:ab:88:22:9f:17:29:24: f3:c6:0d:27:ef:ed:96:1d:f3:d1:e0:7b:3f:19:e5: 78:16:e2:d5:5a:fd:1d:70:1f:fd:08:5d:d6:47:de: 3f:21:52:f9:b0:88:c2:4f:a8:35:bf:9f:60:54:06: f7:13:e4:5f:1a:37:38:2b:85:c3:e0:cd:45:3f:d9: b8:96:3f:b1:3a:3d:06:e6:e9:ff:6e:42:3b:af:78: 1b:f9:59:f4:10:9a:93:16:9a:98:91:32:19:2e:f4: 58:8b:63:7e:a8:7f:4d:c1:d0:6a:21:b0:af:a7:61: 5b:41:cf:75:b1:47:1f:c7:9a:23:cf:61:18:35:c6: 1d:81:4c:80:8b:e4:fe:ae:7e:66:b5:4b:80:b0:4a: f9:d7:93:a7:ef:fb:f9:fe:62:43:63:19:34:20:00: 96:d2:79:b1:c6:b7:fe:cd:1d:f9:49:50:7a:fe:fa: 64:7e:2d:de:f9:b9:64:a0:dc:d0:d0:1e:99:05:b3: 72:9d:fb:f0:0e:26:31:3a:b7:17:66:9e:6f:e1:52: 2b:da:65:ca:34:b5:4f:ba:3f:f1:a2:46:59:70:fe: af:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C9:1A:1D:6D:8E:D5:90:D6:CC:AA:25:A5:7E:FB:59:F4:65:69:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/fb605f69-c02b-39f0-83b1-82c40a26baa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.28.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:ee:e6:9c:f9:a9:5c:72:14:7b:82:c0:24:1a:80:7f:fe:ab: fd:92:60:33:5f:d5:ec:1c:b7:21:f7:66:8e:cf:2b:03:ac:dc: fa:5e:47:00:b4:11:4a:4d:fd:7c:22:62:1d:05:66:72:91:cf: 5d:cf:32:78:36:ae:1c:f9:ba:5e:11:6c:65:36:16:20:df:a9: af:3a:39:ff:2a:ae:cf:4c:e7:0c:4f:13:7d:e5:d7:ec:9e:6e: 1b:d7:cb:c1:7c:ab:16:71:8f:12:05:78:0d:f9:7f:86:b3:cb: ff:4e:7f:aa:35:7a:37:d7:69:19:3f:47:16:5d:56:73:40:18: 14:60:ab:df:84:d3:1d:85:84:d6:d0:df:ba:31:e6:31:87:b2: 35:e5:ad:70:04:45:fc:02:10:7f:ba:1f:27:9f:2f:b5:ba:03: 00:32:ac:02:56:c5:ca:a9:ac:63:06:71:21:9d:3b:a8:4e:f6: 40:c9:a3:c1:1b:25:44:56:a2:8e:cd:7d:e7:23:4f:5e:d2:4e: 72:e9:a7:9f:a9:aa:21:8b:85:3c:31:d2:07:99:bf:85:3b:1c: 07:98:5c:ef:ec:71:0d:bf:f7:34:15:65:1b:f1:82:44:1c:76: 3b:10:5b:80:9e:7a:c2:ae:fd:a2:7a:ed:2a:61:8a:68:b0:bc: 8c:77:e7:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9fGig7lDvG+F8CtcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MTAwMjE5MDk1N1oXDTI2MTIzMTIwMDk1N1owLzEtMCsGA1UEAxMk N2U0ODliZTQtM2ZiZS00MzgzLWE2OTgtNjdiNWNmYjAwNjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzOYwqAvAk7fa3sKY7Njk3QKqLBMf1svjdaC 4MCs1ttBES1MY6uIIp8XKSTzxg0n7+2WHfPR4Hs/GeV4FuLVWv0dcB/9CF3WR94/ IVL5sIjCT6g1v59gVAb3E+RfGjc4K4XD4M1FP9m4lj+xOj0G5un/bkI7r3gb+Vn0 EJqTFpqYkTIZLvRYi2N+qH9NwdBqIbCvp2FbQc91sUcfx5ojz2EYNcYdgUyAi+T+ rn5mtUuAsEr515On7/v5/mJDYxk0IACW0nmxxrf+zR35SVB6/vpkfi3e+blkoNzQ 0B6ZBbNynfvwDiYxOrcXZp5v4VIr2mXKNLVPuj/xokZZcP6vtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHnJGh1tjtWQ1syqJaV++1n0ZWkdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZmI2MDVmNjktYzAyYi0z OWYwLTgzYjEtODJjNDBhMjZiYWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACBwjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALLu5pz5qVxyFHuCwCQagH/+q/2SYDNf1ewctyH3Zo7PKwOs3PpeRwC0 EUpN/XwiYh0FZnKRz13PMng2rhz5ul4RbGU2FiDfqa86Of8qrs9M5wxPE33l1+ye bhvXy8F8qxZxjxIFeA35f4azy/9Of6o1ejfXaRk/RxZdVnNAGBRgq9+E0x2FhNbQ 37ox5jGHsjXlrXAERfwCEH+6HyefL7W6AwAyrAJWxcqprGMGcSGdO6hO9kDJo8Eb JURWoo7NfecjT17STnLpp5+pqiGLhTwx0geZv4U7HAeYXO/scQ2/9zQVZRvxgkQc djsQW4CeesKu/aJ67SphimiwvIx35/Q= -----END CERTIFICATE-----Generated at Wed Oct 14 17:11:50 2026 by rpki-client