$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5450a3ea-076d-39b6-8492-e9cb5c81eeb9.roa File: 5450a3ea-076d-39b6-8492-e9cb5c81eeb9.roa (raw, json) Hash identifier: JjIPMwTpHMPUx5Zztz0NwhXddN83ilK13me7nW1ZLgo= Subject key identifier: B4:3C:8A:A7:6F:4A:15:AB:AB:50:33:06:F7:9C:24:5F:D1:08:3C:B9 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584F5EF457480C22F49B6D873A00 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5450a3ea-076d-39b6-8492-e9cb5c81eeb9.roa Signing time: Fri 02 Oct 2026 17:53:45 +0000 ROA not before: Fri 02 Oct 2026 17:53:45 +0000 ROA not after: Thu 31 Dec 2026 18:53:45 +0000 asID: 395783 IP address blocks: 8.28.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:f4:57:48:0c:22:f4:9b:6d:87:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Oct 2 17:53:45 2026 GMT Not After : Dec 31 18:53:45 2026 GMT Subject: CN=d15b6382-74a2-46a1-be54-18a91fa3384f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:01:3c:27:11:c9:c3:18:2b:cb:cd:11:a9:83: ee:7d:f1:c9:9d:29:18:01:9d:eb:30:1d:a6:9a:a7: 75:d3:9f:97:60:4d:cd:f5:ae:b9:91:0e:6e:1e:a4: ec:11:82:95:f0:95:79:e6:1e:4d:47:d3:89:73:c9: e9:86:22:ac:35:3e:2e:37:69:52:42:29:f8:2b:64: 2e:46:db:f5:a3:c9:34:4a:dc:bf:05:cc:20:40:6c: 85:a0:37:db:9b:fc:20:d9:50:87:84:cc:0c:75:f4: e4:cc:1c:ef:44:86:c8:64:f5:04:b3:ca:ac:69:a8: 3b:f1:7e:4c:8a:c3:00:11:49:ee:4d:d3:67:fa:c4: 24:d3:12:2d:b7:51:d8:0c:cf:37:ec:67:8a:39:28: 7f:63:9d:a7:fe:4c:5b:59:e1:53:28:c7:86:a0:4e: 68:7d:b0:19:bb:a4:02:28:44:1b:ca:c5:6f:f4:89: ea:e1:34:57:1f:78:4d:ae:ac:bd:42:84:16:b5:61: bf:65:52:c2:3b:97:9a:d4:23:7e:ff:3f:b5:bd:89: 7d:ad:56:25:e4:da:59:8e:a1:64:4c:b6:64:10:23: ed:63:be:06:08:c5:0f:44:44:42:5d:70:e6:47:2d: ce:2d:ac:d5:9e:04:2d:b4:60:8c:ee:06:3f:92:17: 5b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3C:8A:A7:6F:4A:15:AB:AB:50:33:06:F7:9C:24:5F:D1:08:3C:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5450a3ea-076d-39b6-8492-e9cb5c81eeb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.28.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:3a:39:69:40:6c:1c:ef:a3:53:f0:dc:30:dd:65:90:d3:2e: 79:90:13:4e:33:fc:fd:6f:8f:87:87:6c:1a:a6:0d:c7:c4:f8: 74:3c:1e:db:ca:59:d0:99:52:9b:9a:12:18:e8:f8:b6:30:bc: 1d:62:49:b1:2f:0c:42:24:f2:6f:de:d4:56:0b:0b:a7:44:99: 81:1b:dd:2f:87:c4:a4:da:eb:85:49:2d:2e:8b:f3:67:6a:00: f9:c6:0e:28:cf:80:0f:5f:c9:3f:0b:77:40:b2:61:3d:fe:1e: f7:b9:81:ae:4d:46:69:10:77:47:07:94:2e:0a:ab:f8:77:26: 3f:b3:00:07:32:62:d0:06:85:c8:5b:94:de:55:d6:00:2c:b7: 4a:3e:b9:a1:66:e8:c0:37:b4:0b:67:7d:e4:0e:25:bb:8b:b2: c7:fc:60:16:28:0d:83:e0:48:b4:59:c6:8e:d5:0c:59:09:d4: 5b:f9:53:d8:a1:5b:40:50:15:0c:0f:f4:55:38:77:8e:a0:7f: fe:35:5f:51:6c:a1:26:6b:3c:5d:48:11:86:2f:28:3b:c6:35: ea:28:93:33:a7:95:ed:23:04:e1:65:20:57:9b:76:c6:9b:17: 79:46:04:85:9a:5a:b5:f0:77:4d:4b:48:bb:d5:d1:86:21:88: 4f:23:2a:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9e9FdIDCL0m22HOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MTAwMjE3NTM0NVoXDTI2MTIzMTE4NTM0NVowLzEtMCsGA1UEAxMk ZDE1YjYzODItNzRhMi00NmExLWJlNTQtMThhOTFmYTMzODRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAE8JxHJwxgry80RqYPuffHJnSkYAZ3rMB2m mqd105+XYE3N9a65kQ5uHqTsEYKV8JV55h5NR9OJc8nphiKsNT4uN2lSQin4K2Qu Rtv1o8k0Sty/BcwgQGyFoDfbm/wg2VCHhMwMdfTkzBzvRIbIZPUEs8qsaag78X5M isMAEUnuTdNn+sQk0xItt1HYDM837GeKOSh/Y52n/kxbWeFTKMeGoE5ofbAZu6QC KEQbysVv9Inq4TRXH3hNrqy9QoQWtWG/ZVLCO5ea1CN+/z+1vYl9rVYl5NpZjqFk TLZkECPtY74GCMUPRERCXXDmRy3OLazVngQttGCM7gY/khdbCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQ8iqdvShWrq1AzBvecJF/RCDy5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNTQ1MGEzZWEtMDc2ZC0z OWI2LTg0OTItZTljYjVjODFlZWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACBwjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALE6OWlAbBzvo1Pw3DDdZZDTLnmQE04z/P1vj4eHbBqmDcfE+HQ8HtvK WdCZUpuaEhjo+LYwvB1iSbEvDEIk8m/e1FYLC6dEmYEb3S+HxKTa64VJLS6L82dq APnGDijPgA9fyT8Ld0CyYT3+Hve5ga5NRmkQd0cHlC4Kq/h3Jj+zAAcyYtAGhchb lN5V1gAst0o+uaFm6MA3tAtnfeQOJbuLssf8YBYoDYPgSLRZxo7VDFkJ1Fv5U9ih W0BQFQwP9FU4d46gf/41X1FsoSZrPF1IEYYvKDvGNeookzOnle0jBOFlIFebdsab F3lGBIWaWrXwd01LSLvV0YYhiE8jKu0= -----END CERTIFICATE-----Generated at Mon Oct 12 12:35:58 2026 by rpki-client