$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3393df71-bd4b-3c0f-9280-c17f1f2fd838.roa File: 3393df71-bd4b-3c0f-9280-c17f1f2fd838.roa (raw, json) Hash identifier: stNuJx7rn5Wu1hhkdpAbjgxEaOJmw6Xk7WGc5A+xvz8= Subject key identifier: 9D:44:4A:12:78:8C:B1:48:D0:18:5A:E6:2A:26:0B:4E:C8:01:71:00 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584D6515306CE4736EF574B2A1C0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3393df71-bd4b-3c0f-9280-c17f1f2fd838.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 13781 IP address blocks: 8.8.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:30:6c:e4:73:6e:f5:74:b2:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=9720fc57-4ee8-441f-8039-f67386c39095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:13:18:bd:75:19:08:a2:54:0b:19:45:e4:48: 92:86:bc:ff:77:85:8c:05:cf:e9:86:5c:cb:eb:d5: 37:45:4a:9c:91:30:09:b8:a3:f7:1d:01:a6:5f:51: 54:2f:0e:3c:c7:8c:7d:e3:ce:ac:e8:29:19:e9:8a: 64:49:26:83:7e:93:cc:e5:bf:7e:64:d1:de:d0:d5: 57:25:62:e9:7a:9e:c9:61:4a:81:86:0e:0b:c0:f3: dd:5e:10:34:f3:1c:c1:16:d5:d4:ca:d9:a2:31:3c: 16:78:e1:47:24:42:e6:bd:7c:6b:d9:3c:8d:04:36: 91:c6:32:b3:a4:70:71:78:6d:74:93:23:91:0b:fc: 43:19:ca:1b:1f:0a:85:e6:6b:a7:d0:5a:dd:79:57: 35:74:5d:45:dd:e7:78:b2:bc:f9:a8:e6:c2:66:2e: ad:9e:d2:13:b5:03:be:b1:90:2e:3d:56:51:2d:1b: 43:36:5b:f3:07:9b:6c:e1:50:65:e8:4d:02:6d:36: 06:90:2e:7f:48:db:89:92:8b:a1:9d:86:c2:bb:cb: 1a:97:e3:bb:22:e3:59:06:14:7f:96:82:05:da:db: 71:9e:6a:cf:bc:dd:9f:62:67:d1:a0:e8:aa:52:73: 9a:19:6a:02:7d:56:04:3f:07:ef:c9:8b:89:cc:90: 44:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:44:4A:12:78:8C:B1:48:D0:18:5A:E6:2A:26:0B:4E:C8:01:71:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3393df71-bd4b-3c0f-9280-c17f1f2fd838.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.8.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:33:3c:48:4e:c2:d1:bb:80:1c:ff:fb:38:a2:8f:e3:92:06: 4c:c3:96:a2:e4:9e:50:89:8e:f0:ff:97:20:5a:6c:bf:41:06: bd:31:3a:a8:89:f2:2e:33:c2:36:66:70:d4:e6:30:d6:ff:f0: 58:b1:43:60:de:f0:52:da:5f:31:ae:73:9c:f0:95:14:4e:c1: ca:f7:73:cc:18:52:6d:44:8f:af:31:79:97:90:a8:7d:b7:55: 3b:85:94:5c:c0:25:72:b6:88:ef:f3:5e:c6:85:e7:cf:26:c2: 59:0d:de:4a:fb:e2:1c:7a:d0:55:57:11:7c:b9:07:d6:66:f4: e7:b2:15:18:f8:e4:c4:d5:8b:0e:80:98:88:9d:a1:99:1a:f5: 93:2f:0b:a0:b1:06:e8:19:c8:aa:07:13:3f:98:31:f8:58:03: c2:4e:8f:7c:f5:a1:13:07:15:ef:39:ea:ca:71:65:bf:ec:82: 34:87:86:65:5e:6c:da:1a:dc:76:d5:d3:09:17:da:e9:f2:b0: 05:05:13:ea:21:46:db:e1:fa:ab:a5:a4:7b:75:90:ec:b1:b3: e1:80:9c:c6:95:7b:3a:34:ab:d0:59:4f:4f:ed:50:b1:5c:8c: bc:c9:91:df:3a:b9:f3:dc:93:37:56:2f:bd:6e:5f:57:bd:cb: f6:47:8d:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFTBs5HNu9XSyocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk OTcyMGZjNTctNGVlOC00NDFmLTgwMzktZjY3Mzg2YzM5MDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xMYvXUZCKJUCxlF5EiShrz/d4WMBc/phlzL 69U3RUqckTAJuKP3HQGmX1FULw48x4x9486s6CkZ6YpkSSaDfpPM5b9+ZNHe0NVX JWLpep7JYUqBhg4LwPPdXhA08xzBFtXUytmiMTwWeOFHJELmvXxr2TyNBDaRxjKz pHBxeG10kyORC/xDGcobHwqF5mun0FrdeVc1dF1F3ed4srz5qObCZi6tntITtQO+ sZAuPVZRLRtDNlvzB5ts4VBl6E0CbTYGkC5/SNuJkouhnYbCu8sal+O7IuNZBhR/ loIF2ttxnmrPvN2fYmfRoOiqUnOaGWoCfVYEPwfvyYuJzJBEuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1EShJ4jLFI0Bha5iomC07IAXEAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMzM5M2RmNzEtYmQ0Yi0z YzBmLTkyODAtYzE3ZjFmMmZkODM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCCAjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACozPEhOwtG7gBz/+ziij+OSBkzDlqLknlCJjvD/lyBabL9BBr0xOqiJ 8i4zwjZmcNTmMNb/8FixQ2De8FLaXzGuc5zwlRROwcr3c8wYUm1Ej68xeZeQqH23 VTuFlFzAJXK2iO/zXsaF588mwlkN3kr74hx60FVXEXy5B9Zm9OeyFRj45MTViw6A mIidoZka9ZMvC6CxBugZyKoHEz+YMfhYA8JOj3z1oRMHFe856spxZb/sgjSHhmVe bNoa3HbV0wkX2unysAUFE+ohRtvh+qulpHt1kOyxs+GAnMaVezo0q9BZT0/tULFc jLzJkd86ufPckzdWL71uX1e9y/ZHjSE= -----END CERTIFICATE-----Generated at Wed Apr 8 17:46:33 2026 by rpki-client