$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/644ba320-53cb-3343-a8c8-84fea857ab0e.roa File: 644ba320-53cb-3343-a8c8-84fea857ab0e.roa (raw, json) Hash identifier: 23KcF8eObw3wU7jA72Q/zjjxUaXm1bEKSWd/cG22gIU= Subject key identifier: AB:E5:38:DE:33:52:4A:FC:59:2D:15:7A:73:64:CC:D2:29:D4:DE:A1 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584F2957AF097F89462EA1E92D00 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/644ba320-53cb-3343-a8c8-84fea857ab0e.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 394161 IP address blocks: 8.21.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:af:09:7f:89:46:2e:a1:e9:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=1a4e71fa-a390-412f-8118-7545b9be7ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8d:84:25:51:3a:6a:85:6a:2d:3c:f3:19:62: ae:57:a7:52:5d:0a:37:ad:e8:3c:f4:e6:16:05:9d: e6:50:e8:4c:51:70:54:28:18:d2:54:37:fc:d4:81: 93:db:e9:89:08:af:82:89:c1:d5:a5:ca:8f:9b:35: a9:af:f6:8f:16:3b:27:b6:75:b6:01:e0:e5:a7:28: fb:20:9a:37:f6:7b:0a:b0:93:21:74:a1:4d:bf:d4: 4e:e4:74:9b:0f:cb:5b:a1:8e:fe:72:16:ea:df:c3: 89:5b:3f:d0:ed:0e:d4:09:ab:1f:fc:a8:cc:e7:08: fa:4b:9d:39:cf:4b:bd:43:2f:dc:74:39:00:6e:10: 5e:d8:17:a1:a5:54:78:1c:d8:06:b7:ca:bb:f5:46: e4:f9:78:f5:4c:f1:4f:95:97:bf:62:b4:b7:e9:80: e8:90:51:71:82:bd:84:1a:9b:98:89:d9:01:a1:0c: 74:aa:7f:7b:ce:62:41:d5:ee:07:69:e5:ca:98:ed: d8:82:08:e9:57:89:45:d3:54:50:3b:4b:04:b0:9b: cf:f4:96:75:fd:ab:d8:c6:e6:73:1a:de:3c:88:06: 89:11:f8:86:b7:a9:93:e8:da:33:4b:9f:2c:84:b5: 04:19:1c:24:0b:7d:15:bf:36:32:29:b9:75:3d:7a: bf:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E5:38:DE:33:52:4A:FC:59:2D:15:7A:73:64:CC:D2:29:D4:DE:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/644ba320-53cb-3343-a8c8-84fea857ab0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.21.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:16:32:7a:22:de:fc:47:a1:ed:cc:a3:57:74:41:ea:cd:a7: e2:0d:e0:49:bf:d2:b3:28:d7:ba:36:06:9f:4a:83:f9:49:ee: 4a:01:95:7f:73:12:f2:a9:01:78:0d:80:21:61:34:e7:ef:16: f4:fc:a4:fe:a2:57:0b:1a:8c:83:1f:be:4e:1e:14:de:22:e6: 63:21:fb:af:1f:51:73:71:2b:25:c2:e7:1d:75:cb:05:d6:5b: 02:b1:07:5d:08:ff:69:93:bf:5e:7e:c2:ed:17:8b:d2:12:69: 78:37:29:b9:9a:6a:e0:cc:54:97:50:02:51:84:79:0a:2e:c7: f8:80:65:a5:d9:ab:27:39:04:2f:90:0e:65:ac:b9:c3:c2:5b: 28:93:36:98:e6:c1:9b:31:f8:5b:84:b7:2f:25:71:5e:87:04: 4d:39:85:fe:ff:9c:a5:68:62:4b:c8:7b:fb:e0:49:b5:0d:44: fa:6c:1d:0d:1f:12:37:94:e3:56:8e:ea:81:88:71:43:66:c0: b2:7a:9c:04:72:7a:46:9a:a9:df:20:47:2d:bc:87:9b:9f:91: 93:5e:80:cd:6c:3a:12:94:b0:e0:96:39:e7:88:fa:ec:05:1c: 8b:49:2a:32:80:2f:2b:84:07:28:dd:db:77:70:36:99:d1:2e: f2:2a:cd:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV68Jf4lGLqHpLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk MWE0ZTcxZmEtYTM5MC00MTJmLTgxMTgtNzU0NWI5YmU3ZmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy42EJVE6aoVqLTzzGWKuV6dSXQo3reg89OYW BZ3mUOhMUXBUKBjSVDf81IGT2+mJCK+CicHVpcqPmzWpr/aPFjsntnW2AeDlpyj7 IJo39nsKsJMhdKFNv9RO5HSbD8tboY7+chbq38OJWz/Q7Q7UCasf/KjM5wj6S505 z0u9Qy/cdDkAbhBe2BehpVR4HNgGt8q79Ubk+Xj1TPFPlZe/YrS36YDokFFxgr2E GpuYidkBoQx0qn97zmJB1e4HaeXKmO3YggjpV4lF01RQO0sEsJvP9JZ1/avYxuZz Gt48iAaJEfiGt6mT6NozS58shLUEGRwkC30VvzYyKbl1PXq/SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvlON4zUkr8WS0VenNkzNIp1N6hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNjQ0YmEzMjAtNTNjYi0z MzQzLWE4YzgtODRmZWE4NTdhYjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACBUOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYWMnoi3vxHoe3Mo1d0QerNp+IN4Em/0rMo17o2Bp9Kg/lJ7koBlX9z EvKpAXgNgCFhNOfvFvT8pP6iVwsajIMfvk4eFN4i5mMh+68fUXNxKyXC5x11ywXW WwKxB10I/2mTv15+wu0Xi9ISaXg3KbmaauDMVJdQAlGEeQoux/iAZaXZqyc5BC+Q DmWsucPCWyiTNpjmwZsx+FuEty8lcV6HBE05hf7/nKVoYkvIe/vgSbUNRPpsHQ0f EjeU41aO6oGIcUNmwLJ6nARyekaaqd8gRy28h5ufkZNegM1sOhKUsOCWOeeI+uwF HItJKjKALyuEByjd23dwNpnRLvIqzY0= -----END CERTIFICATE-----Generated at Wed Sep 23 01:55:18 2026 by rpki-client