$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8d658794-56d7-3b38-8373-803b9414aa8b.roa File: 8d658794-56d7-3b38-8373-803b9414aa8b.roa (raw, json) Hash identifier: X9SKetK1LMNJw9zGw4KGqZI6bZTBA2RdBhPNpISAQwc= Subject key identifier: AA:2E:95:0B:2E:DB:99:9B:A8:9F:B5:A7:3B:6D:5E:7A:86:5C:83:BC Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584EFCACC1337B9BE355BC57CF40 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8d658794-56d7-3b38-8373-803b9414aa8b.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 20473 IP address blocks: 8.9.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:c1:33:7b:9b:e3:55:bc:57:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=5da74370-035a-4768-ae6c-0e8991d48d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c8:75:b4:96:db:2c:68:9c:e5:5e:97:a2:eb: 60:73:af:d3:bb:c4:d0:fa:5b:8e:45:aa:ea:4a:0a: 61:fe:06:cd:2c:6f:c3:9f:9c:04:14:ed:50:2f:f8: ea:f0:93:ea:60:d1:72:54:b3:dd:40:23:4d:f8:44: 71:2c:1f:16:44:02:c7:d0:9d:c0:ea:f8:01:a9:1c: 86:a5:c2:2c:ea:a8:5b:4b:7c:11:02:15:08:35:d5: a6:25:65:a2:f7:4c:af:1d:24:8b:76:76:bf:4a:8c: 6c:92:56:4c:29:41:bf:31:15:3a:7d:c6:43:d0:a8: 01:18:88:d1:58:40:45:16:f0:c9:f6:f5:45:84:d9: 9b:35:af:fa:e2:13:64:20:73:dc:f4:3c:98:00:31: 14:76:bb:44:da:60:e3:f6:b8:f2:f6:39:78:90:d4: 23:6e:f3:f1:dd:c5:bb:a9:c8:05:f5:35:e9:da:f2: a8:ef:cc:49:0e:ff:75:e8:6c:86:5d:dd:2a:15:6a: 9d:c6:bd:fe:96:ff:0f:27:f2:f8:18:a6:de:b6:0e: a7:06:df:78:19:d9:ed:80:80:13:b8:5d:e9:28:71: ca:14:70:73:db:9d:87:b0:70:ed:b6:9b:59:eb:f1: b4:97:90:a4:41:05:5d:dc:da:7b:de:58:77:4c:9d: 7a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:2E:95:0B:2E:DB:99:9B:A8:9F:B5:A7:3B:6D:5E:7A:86:5C:83:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8d658794-56d7-3b38-8373-803b9414aa8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.9.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:c9:e0:de:3b:35:e0:df:88:57:b3:e5:a5:e2:37:6f:7a:b7: 3b:fe:ba:96:e2:56:12:04:9e:63:40:5d:ab:1b:b1:5c:10:60: 38:fa:5a:17:3b:98:07:1c:67:f0:7e:44:a4:7d:89:80:79:9d: ce:e5:e2:a7:51:ec:95:b9:cd:ac:fa:74:66:2b:f4:b3:7b:9a: 6c:d3:b5:44:52:f1:cc:54:d0:d2:96:82:37:e3:d9:95:11:dd: dd:da:53:a2:e0:95:1b:5c:d8:f0:3e:a9:8d:0f:1e:f0:b0:b7: 93:03:00:b8:f1:25:90:1e:0f:d0:ba:d1:28:61:72:d6:72:db: aa:96:1a:55:ac:1d:21:5e:44:86:27:33:ca:c2:23:0a:9e:b8: bd:1b:ff:90:17:1d:b0:3b:4d:43:9c:74:38:93:b1:3b:1c:ff: 8c:a2:16:59:6e:fd:25:63:61:46:33:ef:a7:06:17:97:a3:89: a0:53:59:80:9a:ae:05:1b:68:e5:9f:60:ae:54:37:e0:78:20: 78:18:6c:39:0d:7f:54:9f:3c:e5:05:b8:c5:5d:45:1b:4f:49: 71:7d:a6:3a:35:c2:c1:41:b1:ff:9a:64:5f:d5:86:16:4d:c5: 5e:12:49:fe:81:21:8b:85:4a:33:53:43:61:0c:f1:ba:50:a4: 96:57:f5:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rMEze5vjVbxXz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk NWRhNzQzNzAtMDM1YS00NzY4LWFlNmMtMGU4OTkxZDQ4ZDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsh1tJbbLGic5V6Xoutgc6/Tu8TQ+luORarq Sgph/gbNLG/Dn5wEFO1QL/jq8JPqYNFyVLPdQCNN+ERxLB8WRALH0J3A6vgBqRyG pcIs6qhbS3wRAhUINdWmJWWi90yvHSSLdna/SoxsklZMKUG/MRU6fcZD0KgBGIjR WEBFFvDJ9vVFhNmbNa/64hNkIHPc9DyYADEUdrtE2mDj9rjy9jl4kNQjbvPx3cW7 qcgF9TXp2vKo78xJDv916GyGXd0qFWqdxr3+lv8PJ/L4GKbetg6nBt94GdntgIAT uF3pKHHKFHBz252HsHDttptZ6/G0l5CkQQVd3Np73lh3TJ16AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKoulQsu25mbqJ+1pzttXnqGXIO8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvOGQ2NTg3OTQtNTZkNy0z YjM4LTgzNzMtODAzYjk0MTRhYThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAkFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjJ4N47NeDfiFez5aXiN296tzv+upbiVhIEnmNAXasbsVwQYDj6Whc7 mAccZ/B+RKR9iYB5nc7l4qdR7JW5zaz6dGYr9LN7mmzTtURS8cxU0NKWgjfj2ZUR 3d3aU6LglRtc2PA+qY0PHvCwt5MDALjxJZAeD9C60ShhctZy26qWGlWsHSFeRIYn M8rCIwqeuL0b/5AXHbA7TUOcdDiTsTsc/4yiFllu/SVjYUYz76cGF5ejiaBTWYCa rgUbaOWfYK5UN+B4IHgYbDkNf1SfPOUFuMVdRRtPSXF9pjo1wsFBsf+aZF/VhhZN xV4SSf6BIYuFSjNTQ2EM8bpQpJZX9bs= -----END CERTIFICATE-----Generated at Wed Sep 9 00:52:10 2026 by rpki-client