$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8c3507e9-1d71-3f13-874f-8f331de4a8bb.roa File: 8c3507e9-1d71-3f13-874f-8f331de4a8bb.roa (raw, json) Hash identifier: jE2+cA19ISNLW2XiOHwC9JMxAyF31CUV4xqsE101buQ= Subject key identifier: EB:29:C2:F1:54:BF:A5:FB:B1:4A:D3:88:2E:E7:25:F6:C7:90:CA:BD Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584B9E07B291E6BD5C31DF347040 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8c3507e9-1d71-3f13-874f-8f331de4a8bb.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 393795 IP address blocks: 8.41.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b2:91:e6:bd:5c:31:df:34:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=2bb71e14-9b5e-4246-90d0-e881658daf63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f3:ba:1c:ea:5b:dd:50:f4:3e:2e:bf:28:48: a7:3a:cd:17:d9:28:82:bf:e7:99:ae:be:25:66:80: dd:b5:87:d5:aa:83:99:f4:48:c8:96:8b:b6:7a:b1: ab:45:22:5c:2d:e8:5b:5f:76:09:51:b3:0f:61:de: 6d:67:e7:05:fa:7a:cd:9a:5b:c4:eb:68:57:7d:94: 2e:c5:23:bd:0b:c1:eb:1d:e5:e0:1d:b8:0c:b1:e0: 46:2d:6c:a9:6c:f5:6b:67:96:75:27:87:61:99:91: 61:7b:e0:27:4a:d2:49:04:cc:79:ba:f1:eb:e4:36: 26:43:dc:79:f6:f9:1e:56:ac:75:af:b9:1f:bd:df: 59:ce:e1:32:42:52:59:3e:f9:26:24:58:ea:7e:4e: e8:6c:95:99:a3:cc:79:5d:41:df:66:af:8a:8a:39: db:94:a9:12:79:c0:86:55:46:08:75:0d:ce:5e:e8: 2d:e0:1f:b1:09:a4:6b:d3:2b:52:60:15:df:06:58: 16:b2:ef:82:dd:9c:43:b0:1c:97:40:82:03:6d:97: 79:62:33:5e:03:e9:c3:3b:48:63:f3:41:ec:b1:9a: a5:29:b0:56:20:1c:6a:2a:7d:55:08:d7:fb:b6:9e: a0:0a:5a:3d:2e:d8:87:3e:68:3f:ae:aa:cb:c2:0f: 3a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:29:C2:F1:54:BF:A5:FB:B1:4A:D3:88:2E:E7:25:F6:C7:90:CA:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8c3507e9-1d71-3f13-874f-8f331de4a8bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.41.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:13:56:c2:38:b4:6f:59:21:4d:f3:ec:6a:0f:c6:3a:93:64: d3:7b:01:6e:ec:52:1e:a3:e7:45:c4:92:ed:7e:20:ee:7d:2f: b2:38:07:5b:22:71:6c:3e:e0:63:e5:53:57:df:b7:41:bf:8a: 0c:83:c6:bf:8d:00:32:11:7e:54:31:e0:a8:d1:13:1f:e6:11: 6b:92:2c:e2:be:b4:83:f7:aa:a7:d8:17:d6:a6:b1:fb:91:a0: dd:b0:c1:36:77:2c:cc:49:11:42:d4:2d:18:af:5a:c7:9f:7a: 73:52:99:db:45:0c:6a:5a:0c:79:87:ab:94:ad:a9:cc:46:c2: 5d:fa:57:a0:19:50:27:d6:19:cc:60:a9:da:62:71:c7:ae:5a: 5a:e0:ba:91:ea:6e:08:0b:42:94:86:17:3a:ca:ae:73:b6:1b: df:93:75:f6:1b:40:d3:2a:5e:08:34:db:99:db:11:ba:86:04: af:b4:39:4b:e4:47:1b:b7:a6:53:28:4d:dc:c4:ba:65:82:5f: bc:3b:f3:8f:e2:36:34:e4:4f:d2:47:73:dc:4b:70:ab:b5:0b: 64:4e:02:2f:ff:b8:17:e4:92:c2:5b:d0:bf:29:b7:04:e6:25: 87:3a:b2:0f:4c:e9:dc:cd:9a:ef:eb:24:29:8d:ed:3e:96:fb: 58:63:d9:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7KR5r1cMd80cEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MmJiNzFlMTQtOWI1ZS00MjQ2LTkwZDAtZTg4MTY1OGRhZjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fO6HOpb3VD0Pi6/KEinOs0X2SiCv+eZrr4l ZoDdtYfVqoOZ9EjIlou2erGrRSJcLehbX3YJUbMPYd5tZ+cF+nrNmlvE62hXfZQu xSO9C8HrHeXgHbgMseBGLWypbPVrZ5Z1J4dhmZFhe+AnStJJBMx5uvHr5DYmQ9x5 9vkeVqx1r7kfvd9ZzuEyQlJZPvkmJFjqfk7obJWZo8x5XUHfZq+KijnblKkSecCG VUYIdQ3OXugt4B+xCaRr0ytSYBXfBlgWsu+C3ZxDsByXQIIDbZd5YjNeA+nDO0hj 80HssZqlKbBWIBxqKn1VCNf7tp6gClo9LtiHPmg/rqrLwg86AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOspwvFUv6X7sUrTiC7nJfbHkMq9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvOGMzNTA3ZTktMWQ3MS0z ZjEzLTg3NGYtOGYzMzFkZTRhOGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACCloMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUTVsI4tG9ZIU3z7GoPxjqTZNN7AW7sUh6j50XEku1+IO59L7I4B1si cWw+4GPlU1fft0G/igyDxr+NADIRflQx4KjREx/mEWuSLOK+tIP3qqfYF9amsfuR oN2wwTZ3LMxJEULULRivWsefenNSmdtFDGpaDHmHq5StqcxGwl36V6AZUCfWGcxg qdpicceuWlrgupHqbggLQpSGFzrKrnO2G9+TdfYbQNMqXgg025nbEbqGBK+0OUvk Rxu3plMoTdzEumWCX7w784/iNjTkT9JHc9xLcKu1C2ROAi//uBfkksJb0L8ptwTm JYc6sg9M6dzNmu/rJCmN7T6W+1hj2RM= -----END CERTIFICATE-----Generated at Tue Oct 28 02:40:05 2025 by rpki-client