$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/50bfa01a-3e5a-3d74-9716-6fb5778bfe34.roa File: 50bfa01a-3e5a-3d74-9716-6fb5778bfe34.roa (raw, json) Hash identifier: tDPlO/ocm1MQvl+s5Sa53IS7iFznvPbgVNYIKU045d8= Subject key identifier: 29:8A:FB:1C:31:DA:B6:01:33:D1:9A:7E:C9:50:52:E9:BB:74:BD:83 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584D0C7E789E5FF578D0ADFC64C0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/50bfa01a-3e5a-3d74-9716-6fb5778bfe34.roa Signing time: Tue 03 Mar 2026 19:26:06 +0000 ROA not before: Tue 03 Mar 2026 19:26:06 +0000 ROA not after: Mon 01 Jun 2026 18:26:06 +0000 asID: 23089 IP address blocks: 8.8.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:7e:78:9e:5f:f5:78:d0:ad:fc:64:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Mar 3 19:26:06 2026 GMT Not After : Jun 1 18:26:06 2026 GMT Subject: CN=5c8230b9-9115-428f-b2e2-a17151e6eaa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:14:ce:64:c8:d1:10:73:e5:77:ab:7a:13:41: de:86:4e:42:72:57:ae:f5:27:92:21:72:64:71:14: a5:e3:ac:e9:18:fa:99:31:58:70:2b:bc:c6:4e:65: 3a:d1:ab:35:86:e9:eb:21:40:8a:b3:dc:53:e9:31: 33:00:80:40:d7:05:5f:d9:ab:22:e7:81:34:c3:d6: bc:28:4a:fd:4e:82:e3:c4:2a:65:75:6f:76:2f:20: 53:a2:91:cb:f2:a9:9d:30:97:ea:a6:a1:c2:59:41: 85:be:95:ea:b2:bb:f8:f6:72:15:93:fb:04:ca:e9: db:32:af:c0:7d:ec:64:d7:16:14:a9:93:e1:1b:f2: 02:b6:57:10:60:69:cf:4d:e6:66:9a:0e:34:52:71: 8e:68:81:7b:bd:df:e8:69:fc:28:1c:34:c3:ec:02: 7a:5b:f5:48:d9:1f:a9:87:69:08:93:ad:16:38:86: 7c:cc:a0:29:a0:4d:6e:41:16:91:99:98:f5:0f:7c: 1a:9e:de:d8:4d:84:32:05:de:07:c2:e7:34:99:d3: 00:fc:07:cb:a4:f6:86:f7:62:23:80:49:bb:47:d6: f5:41:0a:c1:61:94:5a:5f:f5:fe:6d:03:19:0e:7c: 30:4c:31:45:21:ae:c3:92:a1:8d:3c:00:59:4b:b3: f3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8A:FB:1C:31:DA:B6:01:33:D1:9A:7E:C9:50:52:E9:BB:74:BD:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/50bfa01a-3e5a-3d74-9716-6fb5778bfe34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.8.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:c2:45:9d:38:33:9f:0d:99:7f:0b:d7:81:28:d8:07:a0:d9: 98:26:e5:81:de:44:c2:36:6a:a2:0c:25:da:12:a1:79:a8:e7: 60:61:15:9b:62:12:4e:f4:7e:98:32:3e:0e:17:e6:c2:ef:18: 1a:34:a1:e6:6e:88:c3:6c:58:ff:20:cd:d7:d9:88:d8:e1:9d: 84:a4:81:d1:19:f9:d7:9e:74:4d:84:32:bc:80:ef:db:15:60: 2c:3f:6f:ba:15:0a:98:88:b7:ed:5f:ed:c7:d2:99:ba:f9:07: ca:b9:5e:b9:90:0b:b8:34:38:58:77:3a:ab:96:51:4a:7d:3b: bc:20:50:6a:68:48:fd:61:21:82:1d:3b:a2:9b:9f:dd:96:69: 87:8d:70:db:25:dd:50:e0:5f:2c:9c:fe:d2:bb:a7:1b:25:95: 55:94:04:c6:dc:9b:11:37:ca:fb:9c:30:a4:51:fa:64:17:4a: 81:e0:e5:d1:88:65:0d:39:c6:48:a4:78:ba:1f:d5:ee:4a:ca: 93:f8:e4:60:d4:63:55:01:69:f9:00:07:e2:5b:fc:d1:f4:d0: 8e:d7:17:21:67:dc:c8:cf:77:05:60:bd:1a:42:45:87:9b:5a: bd:61:e0:60:21:47:6a:75:a7:e0:a5:3d:0c:da:5e:2f:61:3b: 97:f5:5f:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0MfnieX/V40K38ZMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDMwMzE5MjYwNloXDTI2MDYwMTE4MjYwNlowLzEtMCsGA1UEAxMk NWM4MjMwYjktOTExNS00MjhmLWIyZTItYTE3MTUxZTZlYWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBTOZMjREHPld6t6E0Hehk5Ccleu9SeSIXJk cRSl46zpGPqZMVhwK7zGTmU60as1hunrIUCKs9xT6TEzAIBA1wVf2asi54E0w9a8 KEr9ToLjxCpldW92LyBTopHL8qmdMJfqpqHCWUGFvpXqsrv49nIVk/sEyunbMq/A fexk1xYUqZPhG/ICtlcQYGnPTeZmmg40UnGOaIF7vd/oafwoHDTD7AJ6W/VI2R+p h2kIk60WOIZ8zKApoE1uQRaRmZj1D3want7YTYQyBd4Hwuc0mdMA/AfLpPaG92Ij gEm7R9b1QQrBYZRaX/X+bQMZDnwwTDFFIa7DkqGNPABZS7PzAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmK+xwx2rYBM9GafslQUum7dL2DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNTBiZmEwMWEtM2U1YS0z ZDc0LTk3MTYtNmZiNTc3OGJmZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAgJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHCRZ04M58NmX8L14Eo2Aeg2Zgm5YHeRMI2aqIMJdoSoXmo52BhFZti Ek70fpgyPg4X5sLvGBo0oeZuiMNsWP8gzdfZiNjhnYSkgdEZ+deedE2EMryA79sV YCw/b7oVCpiIt+1f7cfSmbr5B8q5XrmQC7g0OFh3OquWUUp9O7wgUGpoSP1hIYId O6Kbn92WaYeNcNsl3VDgXyyc/tK7pxsllVWUBMbcmxE3yvucMKRR+mQXSoHg5dGI ZQ05xkikeLof1e5KypP45GDUY1UBafkAB+Jb/NH00I7XFyFn3MjPdwVgvRpCRYeb Wr1h4GAhR2p1p+ClPQzaXi9hO5f1X1Y= -----END CERTIFICATE-----Generated at Wed Mar 11 11:08:37 2026 by rpki-client