$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6444af44-c35b-358b-b7c1-9f0304ad3e1f.roa File: 6444af44-c35b-358b-b7c1-9f0304ad3e1f.roa (raw, json) Hash identifier: S4rUPPcPV2HkBDtDLzBS2MsfffGWIbQAln7PeSjKXOY= Subject key identifier: 2E:44:E1:50:D5:CD:43:9D:ED:5C:A4:A2:B6:A4:D2:A7:0F:9D:1A:10 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584D6EDA5F2ECA6C683BE1065780 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6444af44-c35b-358b-b7c1-9f0304ad3e1f.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 32696 IP address blocks: 8.19.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:5f:2e:ca:6c:68:3b:e1:06:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=257a9b97-b717-4f2a-a001-d86c4cb64812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:be:c7:84:cd:6a:d8:37:1d:77:83:58:b7:3d: 1d:31:6d:50:50:c1:a2:a5:87:1f:11:6d:7e:8c:e4: a0:8a:bd:05:ad:25:d2:15:11:fa:c2:0f:d5:5e:31: f9:ae:49:65:e1:13:29:c9:17:2f:a9:e7:6a:92:0e: db:a1:d6:cb:6d:5c:c8:9c:05:7c:4d:1e:8d:bb:41: e6:06:fb:c2:b6:60:db:d5:c9:fd:d3:69:35:0f:08: bf:4e:ae:af:89:c1:dd:82:5b:ee:c2:77:73:23:22: 22:20:7a:e7:80:8e:2e:10:07:a5:a2:d3:36:31:16: 0a:90:c6:f9:63:2f:9d:18:68:c3:41:fa:b0:b9:38: d3:3d:01:cd:74:7e:45:f1:db:e8:d5:2c:0e:1d:a2: 09:71:28:f3:3b:8c:3e:9b:93:89:6a:bb:dd:ff:ec: d4:86:b5:95:14:d4:3a:bd:f9:8a:16:79:7d:9c:12: 46:c3:ad:d8:39:fd:41:3d:c2:dd:9d:4b:68:b9:85: 8c:4f:30:22:21:88:77:40:61:44:f9:72:a9:6b:ab: 03:d9:e5:b8:be:ee:28:0b:7f:0d:43:7b:1d:fa:ef: 66:20:cb:8f:7f:72:b6:af:a4:1c:e9:8f:ea:27:52: 78:c5:ae:00:50:96:53:35:d1:68:67:e1:8b:41:38: 31:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:44:E1:50:D5:CD:43:9D:ED:5C:A4:A2:B6:A4:D2:A7:0F:9D:1A:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6444af44-c35b-358b-b7c1-9f0304ad3e1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.19.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:37:0d:f7:ec:98:b6:29:4d:3c:6a:34:0b:c8:94:9b:e6:0d: 76:eb:8b:37:52:ef:ac:78:ac:1f:35:2e:e6:a8:39:73:a3:b0: 70:30:23:77:8a:8d:fa:81:ed:4e:97:c2:b7:d4:e8:05:b8:22: bd:5a:47:5f:8b:ae:3e:31:31:68:bd:5e:6f:af:c7:48:37:18: 42:30:32:59:e1:7f:2a:23:ee:c3:3d:42:10:a3:76:6f:4e:a3: cc:ef:ae:c8:f4:fa:29:d1:7d:7c:91:17:68:b3:49:2c:cd:38: 42:88:06:a4:6b:44:6b:5d:3d:9c:6c:44:39:66:1a:fb:0e:47: e1:12:34:7c:a7:b0:0e:20:fa:b8:a5:cf:10:bf:4f:59:1c:5c: b4:9c:b4:cd:5f:82:bb:5f:10:0f:f8:6a:83:10:af:6c:e2:14: 02:c7:24:94:ef:35:e4:74:55:d6:3e:26:6c:7e:d9:3e:04:d9: 2d:8a:ef:36:cc:70:a4:6a:0a:97:f9:91:34:6b:86:1d:0e:3e: 1e:30:40:93:38:28:95:92:f4:9b:b4:5a:f1:c4:7a:e2:1e:a7: 9f:07:14:46:45:5d:bf:57:75:6e:99:36:d8:86:24:ff:10:57: cf:f3:07:99:79:09:15:85:92:e9:1e:64:a4:43:a2:2b:b0:f4: 3a:41:e6:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2l8uymxoO+EGV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk MjU3YTliOTctYjcxNy00ZjJhLWEwMDEtZDg2YzRjYjY0ODEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb7HhM1q2Dcdd4NYtz0dMW1QUMGipYcfEW1+ jOSgir0FrSXSFRH6wg/VXjH5rkll4RMpyRcvqedqkg7bodbLbVzInAV8TR6Nu0Hm BvvCtmDb1cn902k1Dwi/Tq6vicHdglvuwndzIyIiIHrngI4uEAelotM2MRYKkMb5 Yy+dGGjDQfqwuTjTPQHNdH5F8dvo1SwOHaIJcSjzO4w+m5OJarvd/+zUhrWVFNQ6 vfmKFnl9nBJGw63YOf1BPcLdnUtouYWMTzAiIYh3QGFE+XKpa6sD2eW4vu4oC38N Q3sd+u9mIMuPf3K2r6Qc6Y/qJ1J4xa4AUJZTNdFoZ+GLQTgxxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5E4VDVzUOd7Vykorak0qcPnRoQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNjQ0NGFmNDQtYzM1Yi0z NThiLWI3YzEtOWYwMzA0YWQzZTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACBO8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQ3DffsmLYpTTxqNAvIlJvmDXbrizdS76x4rB81LuaoOXOjsHAwI3eK jfqB7U6XwrfU6AW4Ir1aR1+Lrj4xMWi9Xm+vx0g3GEIwMlnhfyoj7sM9QhCjdm9O o8zvrsj0+inRfXyRF2izSSzNOEKIBqRrRGtdPZxsRDlmGvsOR+ESNHynsA4g+ril zxC/T1kcXLSctM1fgrtfEA/4aoMQr2ziFALHJJTvNeR0VdY+Jmx+2T4E2S2K7zbM cKRqCpf5kTRrhh0OPh4wQJM4KJWS9Ju0WvHEeuIep58HFEZFXb9XdW6ZNtiGJP8Q V8/zB5l5CRWFkukeZKRDoiuw9DpB5ow= -----END CERTIFICATE-----Generated at Mon Apr 13 19:38:45 2026 by rpki-client