$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/06e68cbb-a8d4-3468-8f6a-ada225c1f954.roa File: 06e68cbb-a8d4-3468-8f6a-ada225c1f954.roa (raw, json) Hash identifier: HpA7xj42HmQ4b/YrUVt5fQPdkyosCknfp8xyrGkDHZk= Subject key identifier: 2A:B4:5B:58:0D:61:88:F5:33:28:D6:87:4F:75:60:9B:73:61:81:92 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584E4F1F361368BA47BE4807AD10 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/06e68cbb-a8d4-3468-8f6a-ada225c1f954.roa Signing time: Sat 27 Jun 2026 09:00:12 +0000 ROA not before: Sat 27 Jun 2026 09:00:12 +0000 ROA not after: Fri 25 Sep 2026 09:00:12 +0000 asID: 32696 IP address blocks: 8.22.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4f:1f:36:13:68:ba:47:be:48:07:ad:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jun 27 09:00:12 2026 GMT Not After : Sep 25 09:00:12 2026 GMT Subject: CN=e9498318-644a-4b29-970b-2c8684e62f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:70:e3:f8:06:91:8f:0d:9f:22:e0:07:9e:0c: cf:db:31:0d:45:7c:52:2b:9b:c3:9f:95:86:16:cb: e5:f5:9f:bf:4a:02:3e:15:29:42:9d:cf:92:ef:a8: 25:94:16:31:3c:08:93:44:0b:c0:8d:d4:b0:ad:61: 24:8c:87:d8:9f:0c:ca:de:22:cd:5f:18:d2:27:ab: f6:0c:cc:2b:f7:f7:38:e0:b0:ad:2d:7c:ce:af:a3: 15:cd:03:8b:2c:71:08:a4:dc:26:b1:75:2e:a7:5d: e7:d8:45:a5:7a:11:e8:9f:33:1d:17:2f:c2:22:ec: 48:7c:96:9b:62:60:b9:99:05:eb:a0:eb:6b:21:26: 27:bf:68:8d:23:18:db:d2:0c:fb:49:33:87:60:10: 35:89:47:dc:9a:ed:c4:93:38:f3:d7:36:0b:1d:76: a9:37:70:24:e7:8a:d6:98:30:b1:ad:d4:94:e8:05: 32:f6:b5:20:58:6a:41:9b:64:1a:91:a3:44:ee:8b: fe:1c:57:1d:b1:c9:c8:78:6b:82:53:6a:f7:b6:7d: ec:01:99:39:f2:11:f1:d9:a9:0e:22:10:1f:f2:ee: 5b:28:d7:14:41:3c:e6:fa:ae:d5:8a:d1:fd:13:e5: 67:f6:46:4e:a2:5b:a8:47:e3:ee:d0:a9:28:2f:9a: 67:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B4:5B:58:0D:61:88:F5:33:28:D6:87:4F:75:60:9B:73:61:81:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/06e68cbb-a8d4-3468-8f6a-ada225c1f954.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.22.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:e3:63:ca:44:55:7e:3e:5d:14:2e:a0:47:0b:ed:ce:53:1f: 06:34:44:ae:2c:87:ed:a3:c4:87:4c:6d:69:ad:70:1f:4c:bb: a9:b4:45:9e:c3:3c:aa:0d:09:7c:59:d6:f1:f2:47:5d:e5:89: 99:a2:46:38:53:46:27:41:97:2f:e2:10:86:9f:46:38:9f:6c: 9c:95:5a:50:8a:db:cc:a4:ed:91:36:19:5b:a1:2a:95:d5:f3: 02:b0:fe:eb:fd:f1:c0:93:b9:a2:8b:e3:70:8c:f1:ba:32:35: 9f:b9:8b:eb:0c:ce:1c:c6:11:3f:58:54:fd:ca:37:66:1d:02: 95:21:9c:d8:2a:19:74:04:b0:c9:cd:22:b5:46:91:05:ed:b6: 76:42:12:93:5a:32:94:d5:42:81:d2:62:2c:9c:89:72:3a:1c: 50:89:4c:c2:4e:3a:f5:7f:3e:2e:1d:ef:cd:1b:85:e5:31:ee: 03:16:d4:71:30:39:2e:30:68:59:29:b0:ef:28:eb:04:2c:f8: be:8a:87:ea:7e:96:a9:f1:ac:fd:d0:a6:07:b1:04:d9:fc:b8: 9c:12:76:f5:64:54:0e:fb:a9:6d:e0:4e:ce:cb:fc:b9:08:cf: d8:97:f5:21:f6:45:96:f2:ed:e1:fe:a4:25:21:a9:62:8d:23: e6:c4:d4:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5PHzYTaLpHvkgHrRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDYyNzA5MDAxMloXDTI2MDkyNTA5MDAxMlowLzEtMCsGA1UEAxMk ZTk0OTgzMTgtNjQ0YS00YjI5LTk3MGItMmM4Njg0ZTYyZjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3Dj+AaRjw2fIuAHngzP2zENRXxSK5vDn5WG Fsvl9Z+/SgI+FSlCnc+S76gllBYxPAiTRAvAjdSwrWEkjIfYnwzK3iLNXxjSJ6v2 DMwr9/c44LCtLXzOr6MVzQOLLHEIpNwmsXUup13n2EWlehHonzMdFy/CIuxIfJab YmC5mQXroOtrISYnv2iNIxjb0gz7STOHYBA1iUfcmu3Ekzjz1zYLHXapN3Ak54rW mDCxrdSU6AUy9rUgWGpBm2QakaNE7ov+HFcdscnIeGuCU2r3tn3sAZk58hHx2akO IhAf8u5bKNcUQTzm+q7VitH9E+Vn9kZOoluoR+Pu0KkoL5pn7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCq0W1gNYYj1MyjWh091YJtzYYGSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMDZlNjhjYmItYThkNC0z NDY4LThmNmEtYWRhMjI1YzFmOTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACBaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALPjY8pEVX4+XRQuoEcL7c5THwY0RK4sh+2jxIdMbWmtcB9Mu6m0RZ7D PKoNCXxZ1vHyR13liZmiRjhTRidBly/iEIafRjifbJyVWlCK28yk7ZE2GVuhKpXV 8wKw/uv98cCTuaKL43CM8boyNZ+5i+sMzhzGET9YVP3KN2YdApUhnNgqGXQEsMnN IrVGkQXttnZCEpNaMpTVQoHSYiyciXI6HFCJTMJOOvV/Pi4d780bheUx7gMW1HEw OS4waFkpsO8o6wQs+L6Kh+p+lqnxrP3QpgexBNn8uJwSdvVkVA77qW3gTs7L/LkI z9iX9SH2RZby7eH+pCUhqWKNI+bE1MY= -----END CERTIFICATE-----Generated at Mon Jul 13 12:54:08 2026 by rpki-client