$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/09be98d9-8271-3ee7-8888-5c6d680ed3ab.roa File: 09be98d9-8271-3ee7-8888-5c6d680ed3ab.roa (raw, json) Hash identifier: HYsWVNuRzSMzq1tMlccMncGDkXxKOSoPCm/QQE6LQCk= Subject key identifier: 76:94:AD:1D:70:5B:03:BB:FD:1A:21:C0:7B:0A:69:72:79:7B:68:0A Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584E5A49F24B6C178112B1410500 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/09be98d9-8271-3ee7-8888-5c6d680ed3ab.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 20473 IP address blocks: 8.3.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:49:f2:4b:6c:17:81:12:b1:41:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=f7f29f7a-c09b-479c-8070-dbb69a735992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5d:ee:1a:20:ed:8f:5b:6d:c9:05:fc:48:5c: 67:eb:f1:69:c2:6d:3f:12:87:37:e5:37:25:1b:71: a3:28:98:25:91:56:b4:d5:8c:e3:24:2f:76:7e:83: e6:a6:5e:83:bc:ba:f9:57:c1:36:83:12:0a:5b:0f: ff:85:d8:f2:ee:47:2e:aa:52:ec:25:0c:04:ae:70: 8b:66:2a:ee:1e:ee:f0:67:7f:d0:3b:5e:0f:b5:7b: 55:c7:66:fe:56:ec:81:55:cf:bf:bd:01:5f:b5:ce: bc:a9:db:c2:68:f4:b7:9d:0b:d5:03:1a:b2:3d:5b: 85:df:a0:3d:44:85:a4:52:79:c8:c9:3f:b8:59:a9: 5e:a2:f8:db:1d:d7:9f:60:96:08:cf:52:a5:1c:58: 34:d1:f9:71:77:f5:64:33:06:8d:8e:2d:74:5c:98: 25:6f:4f:30:63:af:89:ac:11:e7:d3:b8:53:31:7c: 1d:3f:a7:23:6b:ee:d1:3c:d3:3b:16:8e:63:2b:6c: cd:5e:8a:9f:d7:50:10:37:b5:35:9d:03:4d:73:8a: a1:3f:99:5b:13:de:28:b8:a4:2f:b3:24:84:0e:67: 5f:54:89:20:b8:e8:cb:33:5a:21:5a:6c:b9:6f:25: 50:c6:d4:55:f1:43:1e:9c:bb:1b:92:a5:6f:cd:ca: a0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:94:AD:1D:70:5B:03:BB:FD:1A:21:C0:7B:0A:69:72:79:7B:68:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/09be98d9-8271-3ee7-8888-5c6d680ed3ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.3.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:5c:82:44:62:24:c8:1a:65:54:08:2b:17:09:be:4d:b3:22: f5:3f:c4:73:ad:49:ce:ff:0e:63:87:ee:7d:47:d3:0b:ac:ab: 8a:6e:d4:98:f9:a6:c2:2b:3e:40:15:be:c6:bc:3b:f2:4f:3e: 02:32:0b:c9:6f:cb:f0:37:d7:8a:22:76:7f:27:fe:ed:cd:7e: f4:8d:b7:0d:4c:34:34:e8:c2:a9:7b:9a:5b:5b:38:5a:97:b1: 46:c7:a0:da:5b:01:61:18:e2:9d:ab:05:ba:52:38:1d:53:13: 54:7f:70:3a:79:8e:8f:fe:3a:f3:d0:6d:78:dd:2f:42:a6:c3: 7a:80:95:75:91:09:ff:84:29:41:51:1a:3c:2f:fa:5e:c7:47: 38:e7:1b:41:99:41:64:08:87:ef:39:42:e8:5b:71:f0:20:10: 79:2d:f4:1f:a8:29:2c:f2:1c:a4:03:e4:a9:ae:f8:3d:5b:60: ed:82:ca:ac:da:8c:c9:e4:35:08:a2:53:b6:62:21:6c:71:2d: df:6b:ce:11:91:e8:90:45:36:dd:de:cc:15:8f:7e:00:53:4a: 26:3e:21:b1:18:75:fd:50:16:bf:96:84:9e:3e:7c:72:15:74: 5b:ba:80:ce:6c:a5:91:6e:63:67:33:62:b3:48:42:67:e4:74: 9d:fb:df:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSfJLbBeBErFBBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk ZjdmMjlmN2EtYzA5Yi00NzljLTgwNzAtZGJiNjlhNzM1OTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhF3uGiDtj1ttyQX8SFxn6/Fpwm0/Eoc35Tcl G3GjKJglkVa01YzjJC92foPmpl6DvLr5V8E2gxIKWw//hdjy7kcuqlLsJQwErnCL ZiruHu7wZ3/QO14PtXtVx2b+VuyBVc+/vQFftc68qdvCaPS3nQvVAxqyPVuF36A9 RIWkUnnIyT+4WaleovjbHdefYJYIz1KlHFg00flxd/VkMwaNji10XJglb08wY6+J rBHn07hTMXwdP6cja+7RPNM7Fo5jK2zNXoqf11AQN7U1nQNNc4qhP5lbE94ouKQv sySEDmdfVIkguOjLM1ohWmy5byVQxtRV8UMenLsbkqVvzcqgxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHaUrR1wWwO7/RohwHsKaXJ5e2gKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMDliZTk4ZDktODI3MS0z ZWU3LTg4ODgtNWM2ZDY4MGVkM2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAMdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlcgkRiJMgaZVQIKxcJvk2zIvU/xHOtSc7/DmOH7n1H0wusq4pu1Jj5 psIrPkAVvsa8O/JPPgIyC8lvy/A314oidn8n/u3NfvSNtw1MNDTowql7mltbOFqX sUbHoNpbAWEY4p2rBbpSOB1TE1R/cDp5jo/+OvPQbXjdL0Kmw3qAlXWRCf+EKUFR Gjwv+l7HRzjnG0GZQWQIh+85QuhbcfAgEHkt9B+oKSzyHKQD5Kmu+D1bYO2Cyqza jMnkNQiiU7ZiIWxxLd9rzhGR6JBFNt3ezBWPfgBTSiY+IbEYdf1QFr+WhJ4+fHIV dFu6gM5spZFuY2czYrNIQmfkdJ37358= -----END CERTIFICATE-----Generated at Wed Jul 22 18:06:37 2026 by rpki-client