$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/28068544-33ac-368b-8bfa-90b4f33fa473.roa File: 28068544-33ac-368b-8bfa-90b4f33fa473.roa (raw, json) Hash identifier: ftbx7cz4hBk71XRHa0rQkljRM07gOhqt0R9lGR2/tuk= Subject key identifier: 51:90:53:C7:EE:18:DB:E8:13:F4:11:21:19:83:97:52:B7:40:FB:F2 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584B2331802B8F87F702E56C1A80 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/28068544-33ac-368b-8bfa-90b4f33fa473.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 27447 IP address blocks: 8.36.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:80:2b:8f:87:f7:02:e5:6c:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=89331a8c-7457-4728-9bc0-919622a11cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cc:74:51:00:11:97:11:7a:66:77:c6:f3:0c: f4:5b:5b:f9:a1:9d:68:4e:91:4e:6c:bf:76:f3:c1: ed:62:27:8e:b8:4e:e0:bb:01:32:d7:55:76:d3:2d: eb:46:a0:60:97:25:ea:19:2b:39:13:a5:e8:18:a0: bf:27:1e:c0:d5:bb:c1:aa:3d:0e:b4:42:a6:28:c1: 3c:c0:77:7d:1b:92:4e:e9:6f:b1:5f:0a:ee:58:8e: 01:9c:00:92:bf:97:8c:71:d8:05:b4:00:39:d2:ce: 9f:60:98:d2:6d:fc:55:fa:41:42:89:c7:1a:cb:2d: 06:90:19:a4:a1:f5:60:66:13:41:84:30:09:90:6c: 3d:56:9c:e3:16:aa:34:25:83:6f:65:46:fe:f3:7f: 64:2a:70:be:21:54:1a:35:3b:10:15:ec:c1:b1:88: 2a:00:fe:db:45:be:d8:f0:2c:7d:d3:69:47:df:da: b6:ad:f4:0f:93:3a:14:a0:3c:df:64:40:ca:b4:f4: fe:50:b5:b1:e9:fe:32:59:6e:1f:06:28:a6:58:58: 7f:d7:61:54:a3:c5:d4:c3:80:96:5d:57:0e:53:3d: da:21:3d:e3:53:db:50:08:e2:db:fc:38:50:af:42: c3:98:bf:43:1e:9b:52:01:48:19:f9:4d:0c:e2:0b: 31:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:90:53:C7:EE:18:DB:E8:13:F4:11:21:19:83:97:52:B7:40:FB:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/28068544-33ac-368b-8bfa-90b4f33fa473.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.36.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:1c:3a:14:e1:b2:04:fa:e1:95:61:85:f4:34:ab:8a:fc:1b: 70:89:51:0e:f9:54:61:ac:36:05:0b:fa:65:e4:6f:ef:3b:c0: cf:90:49:36:a8:e7:c1:85:f7:5c:fb:10:43:31:19:d9:d6:3f: 2d:81:10:75:86:04:09:31:46:5e:26:2c:1d:e1:8d:a5:ef:61: 8d:28:0c:34:cd:9c:cd:00:e3:c8:cb:34:6d:87:84:88:a7:6c: c6:d5:a6:70:88:85:58:16:32:f0:04:99:20:98:9f:18:b5:f4: 85:52:08:e1:1f:ce:59:cd:da:e4:06:44:10:ed:8e:aa:11:b6: 38:ee:ca:02:cb:61:95:3b:b4:c9:1f:86:b0:77:16:17:99:ca: 10:f7:f8:8f:a2:49:94:29:91:10:07:58:ad:7a:a0:12:c3:c2: 64:b2:2f:02:2a:63:82:f6:37:2a:bd:d9:0c:e2:29:8d:f4:cc: 73:08:18:46:2a:21:75:5b:19:4b:68:94:4d:e8:4b:2d:c9:f7: 17:6f:9a:39:a5:67:3e:a5:dd:0a:13:3b:5a:3c:a3:4f:35:03: cc:72:f0:8e:c0:72:d4:e8:d4:92:67:6e:90:61:61:d5:e6:81: a2:61:7d:91:c3:82:d1:e7:99:2f:a1:a7:1b:9e:29:dc:11:3f: c8:aa:7f:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMYArj4f3AuVsGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk ODkzMzFhOGMtNzQ1Ny00NzI4LTliYzAtOTE5NjIyYTExY2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsx0UQARlxF6ZnfG8wz0W1v5oZ1oTpFObL92 88HtYieOuE7guwEy11V20y3rRqBglyXqGSs5E6XoGKC/Jx7A1bvBqj0OtEKmKME8 wHd9G5JO6W+xXwruWI4BnACSv5eMcdgFtAA50s6fYJjSbfxV+kFCiccayy0GkBmk ofVgZhNBhDAJkGw9VpzjFqo0JYNvZUb+839kKnC+IVQaNTsQFezBsYgqAP7bRb7Y 8Cx902lH39q2rfQPkzoUoDzfZEDKtPT+ULWx6f4yWW4fBiimWFh/12FUo8XUw4CW XVcOUz3aIT3jU9tQCOLb/DhQr0LDmL9DHptSAUgZ+U0M4gsx/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGQU8fuGNvoE/QRIRmDl1K3QPvyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMjgwNjg1NDQtMzNhYy0z NjhiLThiZmEtOTBiNGYzM2ZhNDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACCRUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEcOhThsgT64ZVhhfQ0q4r8G3CJUQ75VGGsNgUL+mXkb+87wM+QSTao 58GF91z7EEMxGdnWPy2BEHWGBAkxRl4mLB3hjaXvYY0oDDTNnM0A48jLNG2HhIin bMbVpnCIhVgWMvAEmSCYnxi19IVSCOEfzlnN2uQGRBDtjqoRtjjuygLLYZU7tMkf hrB3FheZyhD3+I+iSZQpkRAHWK16oBLDwmSyLwIqY4L2Nyq92QziKY30zHMIGEYq IXVbGUtolE3oSy3J9xdvmjmlZz6l3QoTO1o8o081A8xy8I7ActTo1JJnbpBhYdXm gaJhfZHDgtHnmS+hpxueKdwRP8iqf7U= -----END CERTIFICATE-----Generated at Thu Sep 11 14:22:14 2025 by rpki-client