$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/bcda651f-6a0b-32f4-8858-9ce12ed25332.roa File: bcda651f-6a0b-32f4-8858-9ce12ed25332.roa (raw, json) Hash identifier: JajpEiSokP3MHay1God9F6H0E4yuudM9SHX3P5SlC0U= Subject key identifier: AC:60:7E:42:5B:03:4D:54:66:CD:2A:A1:D1:34:C1:3F:AC:36:D1:7A Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584EFCACC158E633B9CF950D7380 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/bcda651f-6a0b-32f4-8858-9ce12ed25332.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 20473 IP address blocks: 8.9.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:c1:58:e6:33:b9:cf:95:0d:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=ae720fe1-7362-4382-92f5-57ba6d9ec74b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:52:5e:ac:6d:8c:d8:f0:e4:6f:c2:d0:63:8e: 08:59:a9:bf:02:f4:8a:0b:46:d8:e6:a0:bf:8b:bb: ab:47:a8:25:c4:d9:b6:49:bd:f6:37:e6:bd:ed:e4: 73:04:14:8d:e7:61:f2:c1:24:5a:4b:12:a6:7a:f7: da:49:8b:54:da:35:eb:19:94:48:7c:1a:b2:1c:5e: b8:ca:d8:64:c4:b8:b6:21:02:96:12:d8:2e:58:f0: 56:d9:97:4d:43:1e:42:1e:73:73:02:b0:b3:66:50: ef:4f:4a:24:93:ac:2e:5e:15:fd:fc:dd:30:82:1b: 45:f0:a6:4e:69:ac:32:8a:15:1a:1f:5a:7e:4b:6a: 3c:1d:0f:1c:78:d6:49:63:a0:15:e0:b8:16:1f:f0: 17:38:5e:d8:06:2f:e9:17:51:64:60:84:30:94:07: 16:2a:3a:43:c9:43:ee:9f:25:20:25:46:04:02:8d: 7f:ac:b3:4d:52:6b:6e:8f:f0:fa:5c:ce:5c:e2:ba: f1:62:1d:10:15:c1:93:64:8c:57:30:25:1a:81:aa: c9:c2:bd:b6:e0:88:77:44:0a:e7:e5:f9:a5:d2:39: 3e:93:85:55:40:48:72:2b:2b:b5:37:c2:c1:9a:be: ba:35:3e:e7:a1:92:b6:4c:22:0d:8b:d9:cb:ee:51: 45:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:60:7E:42:5B:03:4D:54:66:CD:2A:A1:D1:34:C1:3F:AC:36:D1:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/bcda651f-6a0b-32f4-8858-9ce12ed25332.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.9.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:c3:c1:b2:3b:f4:68:0d:2e:6a:ae:d5:81:59:8b:13:61:50: ad:eb:b8:de:fd:55:57:2f:fb:03:56:98:c9:f3:f0:64:3d:d9: 43:c6:b7:d2:8f:7b:a7:37:c8:f3:7a:f0:c3:ea:15:10:1b:50: 94:ae:b2:9e:66:55:0f:5a:e0:fb:69:30:51:c5:3f:ce:c7:9a: 32:8e:4f:84:8a:c8:06:5e:a3:86:51:6a:02:8c:f4:01:ee:3d: 95:92:83:87:63:6d:3c:15:94:00:8c:a3:c6:25:2d:92:ff:c8: 72:a5:a0:15:bb:b5:b9:d4:93:fc:6a:4e:f3:14:a6:9d:13:2e: 24:61:c9:aa:96:6e:e4:d7:2e:77:c7:7b:6b:06:99:9e:04:45: df:23:f3:32:f6:9d:f8:5c:74:7e:64:1f:dc:cf:8c:3f:4f:cf: 5c:15:90:e3:9b:79:4a:63:40:21:1e:62:91:a7:67:0d:38:6e: 09:58:36:35:d1:53:9e:5f:df:39:84:30:28:b2:02:98:72:a6: 1f:c3:f0:0c:f4:e9:8a:98:d3:c6:c1:af:6c:ca:dc:a8:f1:85: bd:54:25:96:9a:93:b4:df:d8:c3:f0:81:42:cf:e7:31:ba:4f: 19:62:51:7f:bb:ec:1c:7e:83:23:2c:ca:03:ff:8d:79:dd:dc: 8e:9b:b1:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rMFY5jO5z5UNc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk YWU3MjBmZTEtNzM2Mi00MzgyLTkyZjUtNTdiYTZkOWVjNzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFJerG2M2PDkb8LQY44IWam/AvSKC0bY5qC/ i7urR6glxNm2Sb32N+a97eRzBBSN52HywSRaSxKmevfaSYtU2jXrGZRIfBqyHF64 ythkxLi2IQKWEtguWPBW2ZdNQx5CHnNzArCzZlDvT0okk6wuXhX9/N0wghtF8KZO aawyihUaH1p+S2o8HQ8ceNZJY6AV4LgWH/AXOF7YBi/pF1FkYIQwlAcWKjpDyUPu nyUgJUYEAo1/rLNNUmtuj/D6XM5c4rrxYh0QFcGTZIxXMCUagarJwr224Ih3RArn 5fml0jk+k4VVQEhyKyu1N8LBmr66NT7noZK2TCINi9nL7lFFeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxgfkJbA01UZs0qodE0wT+sNtF6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYmNkYTY1MWYtNmEwYi0z MmY0LTg4NTgtOWNlMTJlZDI1MzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAkPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTDwbI79GgNLmqu1YFZixNhUK3ruN79VVcv+wNWmMnz8GQ92UPGt9KP e6c3yPN68MPqFRAbUJSusp5mVQ9a4PtpMFHFP87HmjKOT4SKyAZeo4ZRagKM9AHu PZWSg4djbTwVlACMo8YlLZL/yHKloBW7tbnUk/xqTvMUpp0TLiRhyaqWbuTXLnfH e2sGmZ4ERd8j8zL2nfhcdH5kH9zPjD9Pz1wVkOObeUpjQCEeYpGnZw04bglYNjXR U55f3zmEMCiyAphyph/D8Az06YqY08bBr2zK3Kjxhb1UJZaak7Tf2MPwgULP5zG6 TxliUX+77Bx+gyMsygP/jXnd3I6bsaE= -----END CERTIFICATE-----Generated at Sun Sep 20 04:40:24 2026 by rpki-client