$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/42509f8d-21e0-3e7a-9fd9-ca0e1a2a65c3.roa File: 42509f8d-21e0-3e7a-9fd9-ca0e1a2a65c3.roa (raw, json) Hash identifier: 9+9w3Xdut20xA44kNJljgsoS0ixBTNd0XkDuLv5fnmk= Subject key identifier: 8E:7A:C5:8B:3D:44:75:65:B1:FD:7B:59:66:E6:F0:90:6D:8C:5D:61 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584E6F3A2692A5347398C5D82080 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/42509f8d-21e0-3e7a-9fd9-ca0e1a2a65c3.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 394973 IP address blocks: 8.44.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:26:92:a5:34:73:98:c5:d8:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=d76a4241-fcff-4f1a-bbd5-c83b6034f300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:92:a1:24:f8:dd:65:c7:43:49:01:65:51:3b: 3d:ea:c9:1e:4d:95:f2:31:b6:37:9c:78:70:6f:bb: ac:21:c2:dc:65:05:1f:03:98:d0:f1:2b:8b:52:e2: 30:b4:ea:85:d7:29:d3:35:82:e0:ce:4c:78:02:d7: 15:90:54:22:2d:34:00:0c:84:9a:07:ca:ca:b3:7a: cd:23:39:c0:73:eb:f7:08:ba:dc:b2:72:c2:a8:26: 68:31:ba:8b:f8:54:0b:0b:e1:f5:77:74:41:51:3a: 66:31:57:2e:91:40:03:f4:09:25:93:9c:d1:85:1d: bc:b1:7c:57:b5:b6:e0:eb:de:31:df:8d:5b:e6:1c: f9:52:af:9c:df:b3:41:95:18:2e:5b:58:b8:6a:5e: 1f:79:1a:47:f5:1c:4a:f1:f8:19:be:62:4e:26:c1: 19:f3:1e:89:d5:8d:20:9a:2f:36:16:45:ad:31:47: b8:cb:f9:96:61:f9:57:1a:cc:24:84:cf:7a:f3:7b: 41:f5:03:e4:8d:c5:fc:db:74:23:2c:85:1e:01:7b: 5a:9b:f2:0c:fc:5d:89:1b:76:43:b1:8f:95:21:81: b6:19:ba:44:84:df:e5:3b:be:cb:0f:bf:46:fa:f0: a7:72:6c:db:ee:74:63:ff:69:e8:95:a5:a1:c0:a3: 13:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7A:C5:8B:3D:44:75:65:B1:FD:7B:59:66:E6:F0:90:6D:8C:5D:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/42509f8d-21e0-3e7a-9fd9-ca0e1a2a65c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.44.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:a0:c3:cf:fb:c1:4f:d6:80:07:be:ee:ba:23:e2:c0:2a:4b: a7:c1:d2:6e:fe:e5:34:27:a7:71:27:98:e2:aa:8c:59:49:d5: 97:49:e8:49:62:9e:e4:58:e1:9e:c8:39:0b:ea:30:51:9c:38: 5a:ab:fe:4b:4f:61:13:4d:91:d0:4c:7c:9d:d1:cf:94:52:7b: dc:0d:0a:6a:12:71:d9:25:78:8d:ed:40:da:47:df:73:8c:e0: dd:db:89:b3:75:ae:a0:ef:ba:ea:78:88:8a:02:f5:c7:ef:4b: 19:a3:64:0f:8a:06:9d:6f:c9:1e:31:d4:d2:b0:88:7e:42:9d: 6a:92:29:67:ce:ac:a1:04:f3:12:a3:46:cf:94:5f:34:9d:41: a0:e1:86:15:58:5b:97:06:db:77:9b:57:cb:c6:25:e4:5e:4c: 4d:04:17:bb:01:d9:9d:68:7b:fa:e3:8b:f0:83:67:fb:8d:81: 7e:bf:a7:55:c6:96:56:24:00:6b:31:a9:5d:a9:17:e2:8e:a0: 85:b2:a2:e8:3d:08:e6:9f:1d:a8:4a:5d:02:d3:68:40:6a:25: f2:4b:01:99:71:a1:7b:f5:ee:43:56:9d:84:37:49:34:4d:dc: c3:26:2b:fb:a3:37:6b:59:c5:45:14:53:8e:80:18:ec:4d:7c: d9:c2:6c:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOiaSpTRzmMXYIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk ZDc2YTQyNDEtZmNmZi00ZjFhLWJiZDUtYzgzYjYwMzRmMzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZKhJPjdZcdDSQFlUTs96skeTZXyMbY3nHhw b7usIcLcZQUfA5jQ8SuLUuIwtOqF1ynTNYLgzkx4AtcVkFQiLTQADISaB8rKs3rN IznAc+v3CLrcsnLCqCZoMbqL+FQLC+H1d3RBUTpmMVcukUAD9Aklk5zRhR28sXxX tbbg694x341b5hz5Uq+c37NBlRguW1i4al4feRpH9RxK8fgZvmJOJsEZ8x6J1Y0g mi82FkWtMUe4y/mWYflXGswkhM9683tB9QPkjcX823QjLIUeAXtam/IM/F2JG3ZD sY+VIYG2GbpEhN/lO77LD79G+vCncmzb7nRj/2nolaWhwKMTtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI56xYs9RHVlsf17WWbm8JBtjF1hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNDI1MDlmOGQtMjFlMC0z ZTdhLTlmZDktY2EwZTFhMmE2NWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACCwsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmgw8/7wU/WgAe+7roj4sAqS6fB0m7+5TQnp3EnmOKqjFlJ1ZdJ6Eli nuRY4Z7IOQvqMFGcOFqr/ktPYRNNkdBMfJ3Rz5RSe9wNCmoScdkleI3tQNpH33OM 4N3bibN1rqDvuup4iIoC9cfvSxmjZA+KBp1vyR4x1NKwiH5CnWqSKWfOrKEE8xKj Rs+UXzSdQaDhhhVYW5cG23ebV8vGJeReTE0EF7sB2Z1oe/rji/CDZ/uNgX6/p1XG llYkAGsxqV2pF+KOoIWyoug9COafHahKXQLTaEBqJfJLAZlxoXv17kNWnYQ3STRN 3MMmK/ujN2tZxUUUU46AGOxNfNnCbHE= -----END CERTIFICATE-----Generated at Sun Jul 12 09:31:08 2026 by rpki-client