$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4000ee3c-46e5-3487-aa65-a3bd3de965c5.roa File: 4000ee3c-46e5-3487-aa65-a3bd3de965c5.roa (raw, json) Hash identifier: hvsEjAixL3jNyrJBAjsJsFmyPSHy+gXRHBc77X95vtU= Subject key identifier: 10:19:3C:BC:4B:22:DC:19:FC:68:18:D9:D4:55:96:28:14:25:09:C9 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584EE7BCBFD6013BEA1619832700 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4000ee3c-46e5-3487-aa65-a3bd3de965c5.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 13781 IP address blocks: 8.8.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:bf:d6:01:3b:ea:16:19:83:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=bf305d3a-319d-4a7c-aa16-8dd9554900cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0e:32:f9:52:d5:32:a4:11:e3:e1:15:07:5b: ef:0a:f9:15:3d:0b:b1:ab:7d:3e:9d:e3:f5:62:25: 88:fe:9c:34:c0:1c:ed:54:b6:44:a7:65:53:27:3a: d4:64:87:e5:c6:0b:35:62:10:8a:09:bc:df:e5:97: 1e:af:6f:44:79:fc:16:6f:f9:e6:08:f9:62:47:5f: eb:c0:5e:b8:d1:2f:fa:12:da:7d:d4:4a:d1:c9:dd: 9a:e1:64:ad:9d:2f:54:67:d2:2d:e6:e6:55:4f:5d: d9:fb:f2:fd:0f:75:52:ac:4f:80:34:35:18:d9:6e: a2:bf:6a:59:d6:5c:77:70:87:91:f4:01:90:10:dd: 54:0f:6a:7f:60:f2:c4:bb:65:b5:8e:4d:90:90:a0: 69:e8:41:bb:3d:e7:08:b1:31:dc:7c:7c:f0:dc:44: 47:4b:fd:3e:da:65:9d:dd:91:1c:ee:81:a7:c8:2c: 67:fd:c6:49:00:18:22:57:96:76:75:b1:5f:b2:dc: e8:9f:9c:a6:33:1f:b2:85:60:71:21:b7:bc:40:ea: ba:94:78:9d:cd:3a:87:a2:ab:f8:04:01:05:d4:0e: d7:c8:e7:1f:89:04:80:fa:44:84:e1:97:53:bd:1d: cf:41:d8:5a:e5:5c:d4:1f:a0:ef:72:be:26:d7:1e: ab:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:19:3C:BC:4B:22:DC:19:FC:68:18:D9:D4:55:96:28:14:25:09:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4000ee3c-46e5-3487-aa65-a3bd3de965c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.8.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:c2:a7:c4:ed:3a:5f:e5:31:77:eb:d8:a3:dd:ea:78:c4:14: f0:5b:39:de:ab:32:bd:86:e1:0b:2d:6e:71:e1:ea:76:0f:f0: 92:97:43:b7:27:c2:5a:4c:8b:09:0c:8f:b8:60:67:36:70:8a: 0c:6e:59:72:44:ae:d1:2a:26:f4:18:2c:5c:68:06:8d:af:65: 07:46:8f:06:51:f1:0b:89:31:a0:d3:79:22:d7:1f:ed:1a:b8: ef:5f:08:b7:55:96:43:ba:6f:68:b0:b8:b6:05:ce:be:3f:b3: ba:a6:bf:18:c4:f4:af:d0:6c:c7:cd:f0:f9:bb:ce:06:ee:26: 66:e7:e4:03:1c:38:de:85:9a:a1:40:fe:fa:a4:4d:87:2d:23: a7:06:8a:dc:51:7d:8b:4a:c4:f7:79:17:2c:bb:7d:56:f6:c6: 84:f6:ef:57:fe:1f:d0:89:ee:0d:b3:63:d7:4d:07:b5:be:00: 13:95:a7:82:53:28:06:6b:ca:92:e1:9c:8c:17:a0:5f:20:64: b7:83:21:51:12:f7:9d:4a:24:94:06:dc:ad:8e:02:48:21:07: 53:49:47:f1:4f:e5:00:8f:d6:98:c0:bd:51:d0:26:02:59:12: 54:9f:b3:66:78:d7:8e:95:5f:fe:07:a4:22:a7:a6:90:e9:02: e6:30:e1:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvL/WATvqFhmDJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk YmYzMDVkM2EtMzE5ZC00YTdjLWFhMTYtOGRkOTU1NDkwMGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQ4y+VLVMqQR4+EVB1vvCvkVPQuxq30+neP1 YiWI/pw0wBztVLZEp2VTJzrUZIflxgs1YhCKCbzf5Zcer29EefwWb/nmCPliR1/r wF640S/6Etp91ErRyd2a4WStnS9UZ9It5uZVT13Z+/L9D3VSrE+ANDUY2W6iv2pZ 1lx3cIeR9AGQEN1UD2p/YPLEu2W1jk2QkKBp6EG7PecIsTHcfHzw3ERHS/0+2mWd 3ZEc7oGnyCxn/cZJABgiV5Z2dbFfstzon5ymMx+yhWBxIbe8QOq6lHidzTqHoqv4 BAEF1A7XyOcfiQSA+kSE4ZdTvR3PQdha5VzUH6Dvcr4m1x6rBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAZPLxLItwZ/GgY2dRVligUJQnJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNDAwMGVlM2MtNDZlNS0z NDg3LWFhNjUtYTNiZDNkZTk2NWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCCAjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfCp8TtOl/lMXfr2KPd6njEFPBbOd6rMr2G4QstbnHh6nYP8JKXQ7cn wlpMiwkMj7hgZzZwigxuWXJErtEqJvQYLFxoBo2vZQdGjwZR8QuJMaDTeSLXH+0a uO9fCLdVlkO6b2iwuLYFzr4/s7qmvxjE9K/QbMfN8Pm7zgbuJmbn5AMcON6FmqFA /vqkTYctI6cGitxRfYtKxPd5Fyy7fVb2xoT271f+H9CJ7g2zY9dNB7W+ABOVp4JT KAZrypLhnIwXoF8gZLeDIVES951KJJQG3K2OAkghB1NJR/FP5QCP1pjAvVHQJgJZ ElSfs2Z4146VX/4HpCKnppDpAuYw4TQ= -----END CERTIFICATE-----Generated at Sat Aug 22 19:34:10 2026 by rpki-client