$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3393df71-bd4b-3c0f-9280-c17f1f2fd838.roa File: 3393df71-bd4b-3c0f-9280-c17f1f2fd838.roa (raw, json) Hash identifier: QohjRDdEzqxAiZTQjRsBm6EhhJiOyyygwp0yaazhVdU= Subject key identifier: BC:66:86:D2:3F:19:7D:23:49:5F:D5:13:35:E8:11:A8:33:E3:F5:2D Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584EE7BCBFCA1901F25FFC582F80 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3393df71-bd4b-3c0f-9280-c17f1f2fd838.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 13781 IP address blocks: 8.8.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:bf:ca:19:01:f2:5f:fc:58:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=3e059fd6-3749-4764-b133-1d501298bee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a1:23:b4:01:6a:49:92:71:58:e8:a9:1e:d8: 78:23:66:6b:ea:c3:e9:40:fd:4a:8c:d8:7e:54:54: ce:89:e8:b4:33:5e:5c:c1:a5:a1:72:56:ab:d1:38: 72:fc:0f:8a:fe:4e:36:a1:12:6c:cd:36:72:3e:0a: 8c:83:cd:b3:08:ce:9b:83:22:6d:01:f2:d2:f6:ad: 9d:f8:46:9f:f4:9b:93:3c:85:1a:ed:61:81:9f:e4: bd:69:65:fb:60:14:43:45:c2:50:f9:60:dc:28:6a: 37:26:44:4f:33:4d:d1:09:2f:b7:1c:24:4e:4f:cb: f0:42:92:3d:64:f3:65:4d:f9:52:1a:3a:9c:a5:ce: 72:a5:6e:3c:a3:e8:8f:45:67:67:da:44:19:1f:57: 10:99:66:05:b1:39:2c:b2:d3:e5:4b:e6:33:ad:80: 5a:d9:b9:66:19:79:d7:c1:0d:cf:9f:80:c0:aa:bb: 3a:4c:c9:4c:3b:f3:41:52:3b:dc:40:bc:a1:bb:bb: 6c:d1:23:58:c5:f3:d9:f8:27:35:10:a4:f8:99:e8: 81:1c:de:ed:84:76:24:3a:54:a3:6b:19:d5:47:c8: 08:b2:bf:a5:63:cc:db:13:17:f2:2e:47:27:7d:34: 88:24:c4:d9:c8:41:c3:ca:00:f3:ce:c9:91:97:a8: ac:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:66:86:D2:3F:19:7D:23:49:5F:D5:13:35:E8:11:A8:33:E3:F5:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3393df71-bd4b-3c0f-9280-c17f1f2fd838.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.8.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:a5:64:bd:04:a1:07:33:90:98:2c:9b:cf:4d:d1:af:27:0c: 23:93:1c:1a:9e:01:b7:38:d4:86:3e:27:06:3b:1f:0e:f5:39: 2b:f8:9a:52:6b:5f:72:89:60:3e:0b:a2:a1:09:59:ef:5e:69: be:b2:88:64:4f:61:88:67:6b:f6:45:5b:d3:e9:0f:2c:4a:c3: 34:6d:d0:61:27:6e:a3:09:cb:1b:d0:00:9b:bf:4e:ee:d1:2f: 72:3c:1d:4f:80:e0:29:3e:4a:6a:b6:2f:b8:f1:e3:3d:95:c7: db:8a:46:e7:76:63:53:56:74:c6:df:ac:f7:2f:e2:7d:1a:a1: 3b:96:70:a4:9a:bb:ed:6c:17:cf:6b:df:60:28:26:0c:a1:82: 47:6e:0b:84:da:07:f8:fc:ff:cb:99:63:1e:78:4e:09:db:ea: 7f:3f:39:ea:6e:28:d9:9d:8a:05:85:b4:7e:11:e6:8e:f4:67: fa:11:a8:86:06:23:d7:3e:b1:44:18:95:57:bc:be:ef:40:d4: 7d:ca:c7:4c:78:2f:5a:43:b1:62:aa:a6:9e:b4:15:d9:15:05: 1b:2f:f2:a3:d3:38:f0:c1:68:90:6b:da:ab:25:0e:6f:18:12: ed:80:a6:86:14:e9:24:7c:f7:9c:77:0d:e9:be:35:87:59:81: 12:29:01:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvL/KGQHyX/xYL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk M2UwNTlmZDYtMzc0OS00NzY0LWIxMzMtMWQ1MDEyOThiZWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaEjtAFqSZJxWOipHth4I2Zr6sPpQP1KjNh+ VFTOiei0M15cwaWhclar0Thy/A+K/k42oRJszTZyPgqMg82zCM6bgyJtAfLS9q2d +Eaf9JuTPIUa7WGBn+S9aWX7YBRDRcJQ+WDcKGo3JkRPM03RCS+3HCROT8vwQpI9 ZPNlTflSGjqcpc5ypW48o+iPRWdn2kQZH1cQmWYFsTksstPlS+YzrYBa2blmGXnX wQ3Pn4DAqrs6TMlMO/NBUjvcQLyhu7ts0SNYxfPZ+Cc1EKT4meiBHN7thHYkOlSj axnVR8gIsr+lY8zbExfyLkcnfTSIJMTZyEHDygDzzsmRl6isXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxmhtI/GX0jSV/VEzXoEagz4/UtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMzM5M2RmNzEtYmQ0Yi0z YzBmLTkyODAtYzE3ZjFmMmZkODM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCCAjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmlZL0EoQczkJgsm89N0a8nDCOTHBqeAbc41IY+JwY7Hw71OSv4mlJr X3KJYD4LoqEJWe9eab6yiGRPYYhna/ZFW9PpDyxKwzRt0GEnbqMJyxvQAJu/Tu7R L3I8HU+A4Ck+Smq2L7jx4z2Vx9uKRud2Y1NWdMbfrPcv4n0aoTuWcKSau+1sF89r 32AoJgyhgkduC4TaB/j8/8uZYx54Tgnb6n8/OepuKNmdigWFtH4R5o70Z/oRqIYG I9c+sUQYlVe8vu9A1H3Kx0x4L1pDsWKqpp60FdkVBRsv8qPTOPDBaJBr2qslDm8Y Eu2ApoYU6SR895x3Dem+NYdZgRIpATk= -----END CERTIFICATE-----Generated at Sat Aug 22 21:12:24 2026 by rpki-client