$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4000ee3c-46e5-3487-aa65-a3bd3de965c5.roa File: 4000ee3c-46e5-3487-aa65-a3bd3de965c5.roa (raw, json) Hash identifier: kfLzH2XPqkbPdcbGoYMRTurEbIwS3P+VbhtcMcNylnU= Subject key identifier: A2:E4:91:7E:6F:5F:D0:D1:40:40:9A:87:42:C0:A0:35:CD:AB:B3:95 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584D651530784E2CBC64F8647080 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4000ee3c-46e5-3487-aa65-a3bd3de965c5.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 13781 IP address blocks: 8.8.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:30:78:4e:2c:bc:64:f8:64:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=5080a86a-e245-4dc4-ab7f-5ab281fe0b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:79:7e:de:67:3e:f4:b3:e5:13:dd:d9:5c:f2: 5a:ce:50:4f:e9:53:b1:87:49:d2:0b:0d:02:de:a5: 46:a0:ea:6f:99:4b:37:d1:75:6a:27:0d:bf:1c:1c: 1c:5a:6f:63:d3:a2:2b:dd:9f:58:a4:f4:8c:92:fc: f4:f9:89:32:27:ac:6d:a9:f3:bc:b1:34:af:54:f7: 5f:ec:7a:b4:05:a4:26:60:0f:f4:a6:c8:d1:3e:c7: d3:87:2d:ff:45:11:e7:1c:c8:6e:cc:88:bf:38:e3: d2:d8:e1:2a:c8:7e:2d:c4:a4:e1:4b:86:1c:8d:13: 68:50:73:bc:aa:2a:58:91:8c:3f:dd:da:51:e6:de: 1b:7a:76:61:f8:b8:1f:9e:a7:1a:c0:a7:cf:ee:b7: fa:a2:00:4f:02:91:3d:83:2f:27:8e:e0:e9:d9:e0: bd:47:32:7e:81:4b:f8:0c:9e:91:e7:4d:1a:e9:40: 64:59:47:08:45:c5:55:2f:91:6d:6e:9c:37:fb:bc: ce:24:61:cc:d4:53:9a:4f:dc:48:c2:5a:ae:a7:1e: ef:10:5d:14:48:17:b1:93:25:1b:f3:b6:79:b6:cd: bb:d9:91:0a:8b:62:6d:90:0a:f7:38:3b:9c:04:e7: fe:30:2b:c5:45:88:af:ea:40:b2:b1:8f:cc:13:74: e1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E4:91:7E:6F:5F:D0:D1:40:40:9A:87:42:C0:A0:35:CD:AB:B3:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4000ee3c-46e5-3487-aa65-a3bd3de965c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.8.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:64:d1:18:57:da:28:c0:68:39:25:8e:c5:58:29:ce:eb:15: fd:60:d0:30:02:1a:3b:12:13:a3:75:52:8a:67:d1:ce:f3:c3: 78:91:0a:bf:78:8d:0d:5b:13:95:a2:fc:e8:8d:5a:f2:06:e7: d4:fc:45:0a:48:0e:b4:d0:80:54:07:c1:f3:75:0a:e1:93:98: ae:59:ec:05:2a:b1:b0:67:13:a8:b8:da:2b:92:96:52:50:f4: 9f:d9:18:22:27:09:44:cd:dc:e8:f4:28:ce:59:6f:99:3b:2c: 0e:66:51:4d:ed:20:dd:a0:68:72:ce:bd:76:d8:62:f5:3e:fa: 97:59:5b:ed:91:c1:d9:9a:db:8d:08:9a:bb:6f:1d:1d:5a:74: 2e:0f:4f:50:34:ff:91:18:1a:9e:80:cd:cd:5c:50:9d:be:48: 4d:bd:c9:52:16:79:7f:05:e9:35:1e:82:72:5f:86:96:89:de: 5b:91:41:1b:0e:8c:09:13:3e:3f:88:fb:3f:8d:5b:49:53:c1: 9e:13:e8:c7:60:d0:66:71:f1:42:f0:d2:ce:79:4f:39:4f:ad: c2:44:94:60:b3:6e:00:ec:e0:17:09:b5:c0:34:2b:aa:91:14: 68:a9:a4:9d:22:0e:3f:b1:32:2f:1c:42:d0:52:91:8d:3b:68: 9b:58:ba:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFTB4Tiy8ZPhkcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk NTA4MGE4NmEtZTI0NS00ZGM0LWFiN2YtNWFiMjgxZmUwYjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3l+3mc+9LPlE93ZXPJazlBP6VOxh0nSCw0C 3qVGoOpvmUs30XVqJw2/HBwcWm9j06Ir3Z9YpPSMkvz0+YkyJ6xtqfO8sTSvVPdf 7Hq0BaQmYA/0psjRPsfThy3/RRHnHMhuzIi/OOPS2OEqyH4txKThS4YcjRNoUHO8 qipYkYw/3dpR5t4benZh+LgfnqcawKfP7rf6ogBPApE9gy8njuDp2eC9RzJ+gUv4 DJ6R500a6UBkWUcIRcVVL5Ftbpw3+7zOJGHM1FOaT9xIwlqupx7vEF0USBexkyUb 87Z5ts272ZEKi2JtkAr3ODucBOf+MCvFRYiv6kCysY/ME3ThxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLkkX5vX9DRQECah0LAoDXNq7OVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNDAwMGVlM2MtNDZlNS0z NDg3LWFhNjUtYTNiZDNkZTk2NWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCCAjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZk0RhX2ijAaDkljsVYKc7rFf1g0DACGjsSE6N1Uopn0c7zw3iRCr94 jQ1bE5Wi/OiNWvIG59T8RQpIDrTQgFQHwfN1CuGTmK5Z7AUqsbBnE6i42iuSllJQ 9J/ZGCInCUTN3Oj0KM5Zb5k7LA5mUU3tIN2gaHLOvXbYYvU++pdZW+2Rwdma240I mrtvHR1adC4PT1A0/5EYGp6Azc1cUJ2+SE29yVIWeX8F6TUegnJfhpaJ3luRQRsO jAkTPj+I+z+NW0lTwZ4T6Mdg0GZx8ULw0s55TzlPrcJElGCzbgDs4BcJtcA0K6qR FGippJ0iDj+xMi8cQtBSkY07aJtYulU= -----END CERTIFICATE-----Generated at Wed Apr 8 17:46:33 2026 by rpki-client