$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4000ee3c-46e5-3487-aa65-a3bd3de965c5.roa File: 4000ee3c-46e5-3487-aa65-a3bd3de965c5.roa (raw, json) Hash identifier: c3MbTbfz+BRYHX0U68Gs5lCum+ylrdoTbyUhrK/Tks8= Subject key identifier: 9C:D4:F1:02:DD:97:8F:69:CD:76:C6:9C:30:BC:A4:67:B5:92:87:DB Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584C8476F49C277CF7A1823765C0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4000ee3c-46e5-3487-aa65-a3bd3de965c5.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 13781 IP address blocks: 8.8.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:76:f4:9c:27:7c:f7:a1:82:37:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=af66db33-62e1-4572-8815-93342f8042e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:52:89:9f:5b:07:73:35:23:2e:16:04:1c:66: a9:6e:66:60:ab:f5:22:3a:d1:41:49:72:11:d4:f7: 43:fe:04:4f:b5:c2:d4:63:99:35:02:3b:4f:08:08: fd:f5:a4:9d:3e:6d:65:f8:69:11:51:37:e1:e8:29: 4b:a8:cc:9a:08:be:3c:c0:97:46:6b:af:43:a5:e9: f6:8e:f0:31:5b:42:48:c7:86:4c:ed:85:54:b8:01: a1:84:1c:8f:61:c6:70:aa:94:75:8d:45:9f:34:ec: 93:44:b3:0e:74:2c:07:fe:95:72:ae:f2:25:6e:15: f5:74:0c:98:dd:f9:c2:a7:21:ec:d1:2d:6c:f1:55: 3d:35:33:47:a7:35:15:c6:38:5b:a3:c2:19:26:7f: ca:82:55:91:87:fe:f6:c5:05:be:3b:cb:ba:46:9a: f6:12:5b:9c:05:06:6a:e4:74:e2:d7:0e:0f:32:7a: 8c:a6:50:c2:d9:15:18:f7:a9:46:7c:8b:b1:dd:3a: 6b:bd:b3:65:2d:96:27:43:eb:83:39:34:40:b2:74: 30:eb:cd:44:df:3d:fd:de:fa:87:73:d8:de:c3:9f: 35:89:5c:e1:6b:ac:3a:f2:ac:2d:eb:48:6e:54:0a: 50:3b:fa:12:db:65:f3:14:d8:35:7f:47:d2:fd:6b: d3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D4:F1:02:DD:97:8F:69:CD:76:C6:9C:30:BC:A4:67:B5:92:87:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4000ee3c-46e5-3487-aa65-a3bd3de965c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.8.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:4d:d8:85:db:27:4c:e9:44:3f:fe:46:43:3d:a4:69:ef:de: 54:af:51:aa:0e:78:08:6f:d8:9f:3a:30:55:b5:a9:ab:a0:1e: b5:36:b4:13:a0:62:7d:b0:f1:f5:95:f6:9a:bc:fa:5c:ba:9b: 7b:fb:21:ff:0f:40:82:ea:b1:9f:28:f7:92:76:68:9b:f4:ab: 22:30:0d:32:c8:ca:7d:8d:ae:f0:6c:48:49:31:db:46:26:dc: 70:60:ca:e5:6e:3c:03:ed:b6:a6:e3:53:c2:38:58:f2:06:6f: 6e:ac:71:21:01:fb:88:87:85:72:28:2d:22:9d:b9:a1:1d:07: 41:06:87:3a:b8:82:e3:40:33:89:bc:33:63:f4:65:08:cb:fd: 53:c3:cb:5c:4d:6d:2d:c4:1d:43:5c:54:0d:9b:53:b5:75:e1: cc:83:21:0e:52:bd:a6:8c:2f:c0:79:3b:ea:70:10:ea:b0:84: 0f:3a:0f:1b:2c:59:46:4e:ba:97:b9:2c:81:06:c8:f6:ac:e7: e8:bb:91:f7:92:09:1c:8f:7d:aa:a2:c4:8d:db:1a:3e:99:3d: 23:c1:a5:05:e6:df:a3:5a:f9:f7:58:1c:3b:2a:d4:05:a8:2c: 7a:25:fb:9f:70:72:91:fd:41:93:6a:82:16:e5:e7:bd:de:cc: 68:58:c7:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdvScJ3z3oYI3ZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk YWY2NmRiMzMtNjJlMS00NTcyLTg4MTUtOTMzNDJmODA0MmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FKJn1sHczUjLhYEHGapbmZgq/UiOtFBSXIR 1PdD/gRPtcLUY5k1AjtPCAj99aSdPm1l+GkRUTfh6ClLqMyaCL48wJdGa69Dpen2 jvAxW0JIx4ZM7YVUuAGhhByPYcZwqpR1jUWfNOyTRLMOdCwH/pVyrvIlbhX1dAyY 3fnCpyHs0S1s8VU9NTNHpzUVxjhbo8IZJn/KglWRh/72xQW+O8u6Rpr2ElucBQZq 5HTi1w4PMnqMplDC2RUY96lGfIux3TprvbNlLZYnQ+uDOTRAsnQw681E3z393vqH c9jew581iVzha6w68qwt60huVApQO/oS22XzFNg1f0fS/WvThQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzU8QLdl49pzXbGnDC8pGe1kofbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNDAwMGVlM2MtNDZlNS0z NDg3LWFhNjUtYTNiZDNkZTk2NWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCCAjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxN2IXbJ0zpRD/+RkM9pGnv3lSvUaoOeAhv2J86MFW1qaugHrU2tBOg Yn2w8fWV9pq8+ly6m3v7If8PQILqsZ8o95J2aJv0qyIwDTLIyn2NrvBsSEkx20Ym 3HBgyuVuPAPttqbjU8I4WPIGb26scSEB+4iHhXIoLSKduaEdB0EGhzq4guNAM4m8 M2P0ZQjL/VPDy1xNbS3EHUNcVA2bU7V14cyDIQ5SvaaML8B5O+pwEOqwhA86Dxss WUZOupe5LIEGyPas5+i7kfeSCRyPfaqixI3bGj6ZPSPBpQXm36Na+fdYHDsq1AWo LHol+59wcpH9QZNqghbl573ezGhYx5w= -----END CERTIFICATE-----Generated at Sun Feb 22 13:58:41 2026 by rpki-client