$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/09be98d9-8271-3ee7-8888-5c6d680ed3ab.roa File: 09be98d9-8271-3ee7-8888-5c6d680ed3ab.roa (raw, json) Hash identifier: HQPgUfb9psM3mM7nxz8vhd9XS255vDCw4i7utqSsiNo= Subject key identifier: 66:D6:BF:EF:EE:E4:69:77:6B:87:ED:BF:89:D1:C1:14:50:E7:59:C9 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584EFCACBD0BE143B3473180F6C0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/09be98d9-8271-3ee7-8888-5c6d680ed3ab.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 20473 IP address blocks: 8.3.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:bd:0b:e1:43:b3:47:31:80:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=ba258871-e76d-429d-9f69-795a5d159fd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:28:88:21:44:5e:61:82:dc:c3:44:3b:37:88: dd:b2:9d:68:76:53:d6:48:54:71:78:62:5a:a2:58: 13:c7:51:e7:8b:d8:92:06:de:dd:50:72:da:39:ed: c8:ea:a3:be:82:2d:66:08:27:41:ee:81:bf:ab:d3: eb:5e:9c:bd:3e:ec:7f:f8:f2:cc:c2:fe:38:e1:0a: e8:6f:bb:7f:9d:00:79:66:78:f9:b5:5c:d5:b3:48: d2:8e:b5:4a:24:84:fc:49:7b:a1:ce:08:a2:cc:85: ab:cb:5d:18:b7:29:00:8f:be:c4:e7:3e:7c:d5:9f: fc:8c:5e:1b:43:91:27:31:a5:31:8e:0b:a7:6b:69: 43:34:8e:1f:f4:51:fe:ed:08:15:73:f8:c2:cd:57: d3:2d:17:f9:a8:49:1e:84:84:cb:88:20:02:28:7f: a4:60:60:e0:b4:26:cf:0f:79:b0:a1:14:a1:08:eb: 6b:81:ca:24:c2:89:ad:d1:3c:3b:20:c1:bf:1b:4c: e3:5c:44:b4:5c:31:89:9d:36:a5:ca:e2:5a:e5:24: 0c:ac:ac:f7:68:12:bd:1d:40:37:62:2f:f7:73:4d: c0:7f:ed:62:4b:c5:8f:0c:48:8d:b7:90:b4:7a:43: 2c:94:f8:62:5f:26:ae:8e:c8:95:31:62:b6:ff:ea: 47:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D6:BF:EF:EE:E4:69:77:6B:87:ED:BF:89:D1:C1:14:50:E7:59:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/09be98d9-8271-3ee7-8888-5c6d680ed3ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.3.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:09:05:e5:f7:3b:86:4e:ca:06:fb:2b:64:8f:72:a3:97:11: 85:64:e0:2c:55:45:d8:c4:79:5c:49:13:0b:0e:66:70:8b:c4: 24:84:9f:42:c0:69:73:6f:42:f0:5f:a1:39:a2:fe:15:fc:a9: 98:87:e2:81:8e:21:c1:48:90:78:04:d6:3e:53:4b:5e:db:6c: 96:53:e7:d7:86:a1:fa:12:41:21:81:94:e0:fe:e8:00:e7:35: 5e:39:9b:38:e5:0c:ef:37:b4:63:cc:3e:ca:12:10:da:a4:6e: 3c:47:8f:0e:a1:c6:c3:ff:c5:f9:1a:c6:95:fc:96:f7:27:60: c3:49:70:e3:05:be:4a:b7:8d:d0:bb:ad:c9:0f:50:9c:a8:7d: 86:61:81:8f:84:14:08:c9:9b:73:8b:47:9f:2b:09:02:5b:9e: 58:05:cf:b6:5d:8f:44:d6:d5:f8:04:12:6d:76:f8:6f:11:e7: 6b:47:7e:fa:e3:f6:e1:97:d1:8d:cb:ff:a4:80:28:d1:53:5e: 0e:84:ed:b4:5a:46:04:ca:ec:8b:95:1c:b2:f0:9b:89:00:3b: 26:a4:53:4e:7d:2f:35:23:d4:b8:26:f5:e0:4b:8d:c1:f1:0e: 30:1b:57:02:4d:5a:38:d5:40:5b:60:b9:c7:59:9c:84:df:02: cc:24:c4:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rL0L4UOzRzGA9sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk YmEyNTg4NzEtZTc2ZC00MjlkLTlmNjktNzk1YTVkMTU5ZmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyiIIUReYYLcw0Q7N4jdsp1odlPWSFRxeGJa olgTx1Hni9iSBt7dUHLaOe3I6qO+gi1mCCdB7oG/q9PrXpy9Pux/+PLMwv444Qro b7t/nQB5Znj5tVzVs0jSjrVKJIT8SXuhzgiizIWry10YtykAj77E5z581Z/8jF4b Q5EnMaUxjguna2lDNI4f9FH+7QgVc/jCzVfTLRf5qEkehITLiCACKH+kYGDgtCbP D3mwoRShCOtrgcokwomt0Tw7IMG/G0zjXES0XDGJnTalyuJa5SQMrKz3aBK9HUA3 Yi/3c03Af+1iS8WPDEiNt5C0ekMslPhiXyaujsiVMWK2/+pHpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbWv+/u5Gl3a4ftv4nRwRRQ51nJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMDliZTk4ZDktODI3MS0z ZWU3LTg4ODgtNWM2ZDY4MGVkM2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAMdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoJBeX3O4ZOygb7K2SPcqOXEYVk4CxVRdjEeVxJEwsOZnCLxCSEn0LA aXNvQvBfoTmi/hX8qZiH4oGOIcFIkHgE1j5TS17bbJZT59eGofoSQSGBlOD+6ADn NV45mzjlDO83tGPMPsoSENqkbjxHjw6hxsP/xfkaxpX8lvcnYMNJcOMFvkq3jdC7 rckPUJyofYZhgY+EFAjJm3OLR58rCQJbnlgFz7Zdj0TW1fgEEm12+G8R52tHfvrj 9uGX0Y3L/6SAKNFTXg6E7bRaRgTK7IuVHLLwm4kAOyakU059LzUj1Lgm9eBLjcHx DjAbVwJNWjjVQFtgucdZnITfAswkxAU= -----END CERTIFICATE-----Generated at Wed Sep 9 00:52:10 2026 by rpki-client