$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/04cfb055-440e-3b77-81a6-1047982e2b9a.roa File: 04cfb055-440e-3b77-81a6-1047982e2b9a.roa (raw, json) Hash identifier: +6BZCHNMOA2U4iNZCEyHVfrMOvvGRxvefQ1ayzs8eho= Subject key identifier: 5B:23:1C:C4:43:2F:EE:D5:19:31:15:76:93:4D:41:EB:3E:77:12:F2 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584EFCACC17F64905A8F4F0B0180 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/04cfb055-440e-3b77-81a6-1047982e2b9a.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 20473 IP address blocks: 8.12.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:c1:7f:64:90:5a:8f:4f:0b:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=4531dc3a-4a79-4462-87b9-d33fa181dbc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f8:bf:7c:b2:2c:ca:b1:c7:1f:a3:c7:3c:42: 9b:24:82:2b:ec:c9:ef:7f:af:6d:d3:fa:9c:f6:f4: c9:30:42:77:65:f0:1c:91:0b:af:4a:8f:94:23:13: 27:9d:39:74:97:01:18:ee:b4:a7:1c:c9:9e:bc:50: 60:67:37:92:bb:ca:39:aa:39:7a:a3:e3:33:7b:1f: 1c:63:cc:da:f6:23:b1:bb:9b:23:4e:e5:fd:6b:db: f9:77:bf:79:f3:b3:b4:64:60:73:3b:be:c1:6a:33: e1:14:26:79:a9:f6:93:0d:f6:10:4f:a2:9e:f8:36: 4f:2f:44:19:e3:c7:16:83:ad:1f:8b:64:31:9c:fb: b0:bb:d8:15:98:ba:8e:4e:a4:34:b2:76:c5:c1:41: 12:d8:bc:5f:b8:f4:de:a8:cb:e8:43:8e:1e:da:73: 8f:14:36:b9:80:47:10:57:8b:be:11:77:56:32:54: 37:ee:34:b1:1c:ed:f7:90:a1:f5:ae:c0:3a:77:9e: 3c:84:bb:87:85:6b:a1:71:97:be:fc:ef:a3:4e:3a: bc:d5:a0:a0:6c:ce:d6:e0:53:29:41:66:64:fe:78: d5:4b:ad:bb:da:74:8d:9c:1d:cb:01:15:60:56:7e: bd:02:70:fb:05:3a:e8:8b:12:cc:68:81:cf:f9:88: 5e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:23:1C:C4:43:2F:EE:D5:19:31:15:76:93:4D:41:EB:3E:77:12:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/04cfb055-440e-3b77-81a6-1047982e2b9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.12.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:23:f9:74:ad:89:2b:1c:2c:6c:ee:3d:2d:d5:31:b2:b5:c2: 10:15:bb:41:ef:fc:02:c6:9e:e8:8d:de:1a:27:3a:3a:ad:c7: 90:f4:5c:91:c8:e5:16:64:11:7f:5f:64:bd:f4:67:af:ab:c5: 2c:87:53:54:62:67:97:12:08:39:89:12:17:89:45:a0:7f:f0: 17:ff:cb:0d:a4:27:6a:a1:67:86:92:0f:67:8b:e4:29:09:e2: 2d:bb:62:7a:9e:3e:9a:44:b0:c4:e7:77:55:39:6d:b6:66:a6: ae:23:95:50:06:20:f2:c5:d2:45:3d:45:8d:5c:ed:0f:db:44: da:a2:3c:81:43:52:cc:99:a0:cd:d7:f0:80:37:e6:ce:af:8c: d2:a1:da:d5:eb:24:95:63:40:7b:84:d6:e5:01:52:02:90:ec: 9e:e2:d0:b5:7f:52:4b:57:7b:61:f2:43:b6:bb:6b:fe:7f:90: 86:33:ad:bd:cd:8c:c8:7e:ad:ef:1c:2b:f6:b6:6c:ca:dd:de: ae:a5:72:f4:ba:12:8e:9f:1e:85:1e:58:83:3d:bd:6d:52:90: f7:38:6d:d6:e2:79:e9:88:3e:7e:01:8b:5d:a0:88:3c:a0:32: 3f:3a:c0:45:2c:a4:cc:ed:03:db:92:a1:4a:7c:43:d8:9e:aa: 5f:c1:32:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rMF/ZJBaj08LAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk NDUzMWRjM2EtNGE3OS00NDYyLTg3YjktZDMzZmExODFkYmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvi/fLIsyrHHH6PHPEKbJIIr7Mnvf69t0/qc 9vTJMEJ3ZfAckQuvSo+UIxMnnTl0lwEY7rSnHMmevFBgZzeSu8o5qjl6o+Mzex8c Y8za9iOxu5sjTuX9a9v5d79587O0ZGBzO77BajPhFCZ5qfaTDfYQT6Ke+DZPL0QZ 48cWg60fi2QxnPuwu9gVmLqOTqQ0snbFwUES2LxfuPTeqMvoQ44e2nOPFDa5gEcQ V4u+EXdWMlQ37jSxHO33kKH1rsA6d548hLuHhWuhcZe+/O+jTjq81aCgbM7W4FMp QWZk/njVS6272nSNnB3LARVgVn69AnD7BTroixLMaIHP+Yhe7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsjHMRDL+7VGTEVdpNNQes+dxLyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMDRjZmIwNTUtNDQwZS0z Yjc3LTgxYTYtMTA0Nzk4MmUyYjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAwRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwj+XStiSscLGzuPS3VMbK1whAVu0Hv/ALGnuiN3honOjqtx5D0XJHI 5RZkEX9fZL30Z6+rxSyHU1RiZ5cSCDmJEheJRaB/8Bf/yw2kJ2qhZ4aSD2eL5CkJ 4i27YnqePppEsMTnd1U5bbZmpq4jlVAGIPLF0kU9RY1c7Q/bRNqiPIFDUsyZoM3X 8IA35s6vjNKh2tXrJJVjQHuE1uUBUgKQ7J7i0LV/UktXe2HyQ7a7a/5/kIYzrb3N jMh+re8cK/a2bMrd3q6lcvS6Eo6fHoUeWIM9vW1SkPc4bdbieemIPn4Bi12giDyg Mj86wEUspMztA9uSoUp8Q9ieql/BMuU= -----END CERTIFICATE-----Generated at Sun Sep 20 04:40:24 2026 by rpki-client