$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/01b1e3c2-0245-3e89-ba0b-3cb1e6f56235.roa File: 01b1e3c2-0245-3e89-ba0b-3cb1e6f56235.roa (raw, json) Hash identifier: VlHUfp7MQRDp5KA75UXVmg0elOBgeqIa6/fbpSlzFqU= Subject key identifier: AE:42:D6:3E:29:7B:B9:50:AF:47:98:D6:45:34:BE:39:CB:84:F8:D2 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584D8EF5613AE6100D09E0255D40 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/01b1e3c2-0245-3e89-ba0b-3cb1e6f56235.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 3356 IP address blocks: 8.29.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:61:3a:e6:10:0d:09:e0:25:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=058736af-9b3d-4c3b-a8c5-5fc1a356ca1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f8:b7:36:50:5a:8f:45:b3:bb:c3:93:05:bf: 77:0b:fa:d4:15:50:37:77:60:82:5d:07:1b:14:f1: 98:a3:1a:17:f7:b7:cc:77:66:92:16:25:40:cd:9e: d5:39:30:c4:12:72:f3:80:83:97:4c:b7:60:9f:e1: c9:2b:10:6e:b9:47:5d:24:e9:31:a0:21:78:81:02: a0:57:b7:11:36:fe:56:64:07:75:77:03:dc:a8:f7: dd:48:a6:a1:40:ea:97:96:39:2a:8e:b6:25:14:c2: 38:06:c6:f7:88:57:8f:1b:4f:74:f6:14:6b:44:17: 09:43:c9:cc:b3:2d:0e:cc:6b:4c:0b:3b:af:c6:01: 29:3c:89:8b:13:bf:6e:7c:b3:7e:ca:7e:ae:1e:7d: bb:bb:53:5a:d2:57:cd:77:7e:81:0d:a2:5a:06:41: e4:d6:1c:a0:eb:a2:fe:4b:aa:db:71:b2:04:b0:a0: fe:77:20:f1:40:4e:43:ed:31:80:03:25:e7:3d:a4: 17:74:9c:57:46:e4:fe:96:cf:ad:35:9b:70:84:fd: 74:18:e9:57:22:6a:8c:82:5f:30:03:0e:a6:1f:6f: aa:19:61:67:bf:ce:3c:d3:b4:90:8a:96:eb:de:ac: 1d:f6:05:e3:3b:1a:b2:b1:65:06:45:83:f0:0a:0c: ad:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:42:D6:3E:29:7B:B9:50:AF:47:98:D6:45:34:BE:39:CB:84:F8:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/01b1e3c2-0245-3e89-ba0b-3cb1e6f56235.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.29.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:7b:74:bf:c0:c4:8a:79:a5:1e:62:07:05:1a:cd:6f:f7:e5: af:02:da:af:e4:15:b0:07:c1:f7:bd:03:9f:a4:0c:fd:41:d6: 8f:4f:e4:3e:c1:0e:22:66:37:15:54:49:d5:7d:78:be:26:d2: 32:36:ce:31:38:52:d2:85:5f:78:1a:e0:4a:6b:37:76:bb:6d: 02:b2:e2:36:80:9a:0a:ae:2d:0b:d3:e1:a7:78:ff:a6:94:2f: 58:70:c8:e6:f4:ed:42:d3:e9:59:14:1c:07:fb:14:7a:3a:cf: d8:aa:fe:03:ab:18:3c:0c:9f:74:71:eb:ae:69:47:34:9c:af: 0b:57:e4:7b:f1:e0:17:ae:63:db:25:79:13:e8:db:66:ff:df: c4:49:ba:f0:28:6a:12:1f:81:19:93:06:54:3d:fa:21:6c:3d: c5:76:92:a0:03:d3:c5:dc:8a:b3:20:3a:39:42:64:9f:21:12: cb:1c:58:dc:94:a6:49:3a:0d:e2:b1:44:13:a8:ee:80:87:a3: 0a:89:ad:d9:0b:26:b6:91:c7:d0:27:74:e0:81:f7:2b:db:86: 15:aa:d6:ce:63:18:f1:20:fe:98:e1:e4:83:80:a0:5f:9c:0f: 89:c6:59:88:95:f7:62:da:e8:f6:d1:45:13:08:2a:8c:fd:3c: d2:2e:b4:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9WE65hANCeAlXUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MDU4NzM2YWYtOWIzZC00YzNiLWE4YzUtNWZjMWEzNTZjYTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfi3NlBaj0Wzu8OTBb93C/rUFVA3d2CCXQcb FPGYoxoX97fMd2aSFiVAzZ7VOTDEEnLzgIOXTLdgn+HJKxBuuUddJOkxoCF4gQKg V7cRNv5WZAd1dwPcqPfdSKahQOqXljkqjrYlFMI4Bsb3iFePG0909hRrRBcJQ8nM sy0OzGtMCzuvxgEpPImLE79ufLN+yn6uHn27u1Na0lfNd36BDaJaBkHk1hyg66L+ S6rbcbIEsKD+dyDxQE5D7TGAAyXnPaQXdJxXRuT+ls+tNZtwhP10GOlXImqMgl8w Aw6mH2+qGWFnv84807SQipbr3qwd9gXjOxqysWUGRYPwCgyt0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5C1j4pe7lQr0eY1kU0vjnLhPjSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMDFiMWUzYzItMDI0NS0z ZTg5LWJhMGItM2NiMWU2ZjU2MjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQECB0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABl7dL/AxIp5pR5iBwUazW/35a8C2q/kFbAHwfe9A5+kDP1B1o9P5D7B DiJmNxVUSdV9eL4m0jI2zjE4UtKFX3ga4EprN3a7bQKy4jaAmgquLQvT4ad4/6aU L1hwyOb07ULT6VkUHAf7FHo6z9iq/gOrGDwMn3Rx665pRzScrwtX5Hvx4BeuY9sl eRPo22b/38RJuvAoahIfgRmTBlQ9+iFsPcV2kqAD08XcirMgOjlCZJ8hEsscWNyU pkk6DeKxRBOo7oCHowqJrdkLJraRx9AndOCB9yvbhhWq1s5jGPEg/pjh5IOAoF+c D4nGWYiV92La6PbRRRMIKoz9PNIutDA= -----END CERTIFICATE-----Generated at Sat May 9 00:40:43 2026 by rpki-client