$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/bff04826-05ba-3da3-98d9-c7ef63745f54.roa File: bff04826-05ba-3da3-98d9-c7ef63745f54.roa (raw, json) Hash identifier: AMnizjP1NEZHsHgUK/wxO9O2WtVev57QMfZjWA2tz84= Subject key identifier: 0C:E9:36:30:14:CA:4F:6B:D2:BF:B0:22:34:08:6D:1C:6F:15:E1:1B Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584F9696588256444318D9959380 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/bff04826-05ba-3da3-98d9-c7ef63745f54.roa Signing time: Thu 22 Oct 2026 16:09:38 +0000 ROA not before: Thu 22 Oct 2026 16:09:38 +0000 ROA not after: Wed 20 Jan 2027 17:09:38 +0000 asID: 400733 IP address blocks: 8.19.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:96:96:58:82:56:44:43:18:d9:95:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Oct 22 16:09:38 2026 GMT Not After : Jan 20 17:09:38 2027 GMT Subject: CN=9ad52e33-ef0d-417d-a04f-fa4f0898b863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0f:b2:d5:06:e1:b3:c8:d1:8a:fc:41:8b:99: 7b:89:00:49:79:46:75:de:f0:65:63:16:bd:14:5b: 00:1d:94:73:60:4b:75:a2:6b:4d:5a:98:1d:5e:89: 89:39:44:8a:2d:ee:bd:b4:1a:32:1d:6c:b8:e6:c7: 62:04:17:7f:c0:dc:e6:59:e4:a4:d9:a3:fa:e2:66: 46:38:f6:bc:4d:19:00:6d:97:9c:52:75:74:f7:d4: 46:ca:8b:04:f2:a4:57:25:4f:a1:67:e6:b8:92:7d: 19:74:ba:78:12:b6:e7:ae:b0:be:56:0e:a9:c7:3a: 8d:1f:ca:32:cd:3f:90:92:8b:83:f3:b7:86:3b:85: 1e:a9:be:81:38:d5:13:d5:da:db:34:4c:c8:d2:57: ea:60:bf:7f:94:71:d5:7d:2b:1a:0a:84:d8:0f:74: ae:10:a7:bf:1d:86:d9:06:94:9d:01:7e:5a:71:e7: 19:e7:4d:0f:fc:f2:ca:29:8d:09:b3:e1:9d:65:69: a1:5c:49:a0:5d:3d:1d:43:9e:a4:de:9b:59:59:83: e8:f7:ff:39:08:8d:52:64:26:05:3a:82:e5:f4:ca: bc:5f:8d:f8:b1:40:49:1a:47:c7:f7:7b:53:c6:7f: 24:87:49:9b:2f:3e:7d:35:6d:76:73:69:32:cf:41: f9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E9:36:30:14:CA:4F:6B:D2:BF:B0:22:34:08:6D:1C:6F:15:E1:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/bff04826-05ba-3da3-98d9-c7ef63745f54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.19.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:c3:76:99:27:90:19:e4:fe:39:e3:5d:c2:e5:00:14:3b:8c: 43:66:2f:94:ec:83:63:51:cd:79:4f:68:88:aa:86:f5:61:7b: 8e:9e:a5:38:f4:8d:9c:ce:19:1f:6f:2c:51:79:33:4a:94:3f: cf:31:4e:46:f6:d0:04:bc:04:9c:c0:2f:a5:6f:c2:27:ad:85: a7:7d:f4:0a:3f:72:78:2b:92:41:26:5b:9c:41:f0:f7:c0:6f: 8d:2f:b7:f5:5e:a0:51:0f:43:88:1c:5f:96:e6:d8:64:f0:fe: ff:ea:bc:b2:d5:8d:bb:b0:6b:cc:2d:b2:29:b9:25:dc:58:ed: 65:92:45:6e:5e:e0:b6:cb:3a:9c:91:ed:22:8f:99:54:60:47: f4:a7:a0:62:d6:ac:06:76:62:af:8d:91:1e:5a:48:d0:19:11: d2:4e:5a:6d:ad:e2:8d:0f:6a:f1:6f:dd:c6:4c:cb:5f:de:57: 12:e6:d1:37:ee:08:b0:e5:3d:65:52:bf:27:2e:5a:fb:37:68: 9b:9c:ba:af:87:b8:04:fd:56:73:fa:c2:02:6f:f0:b3:1d:f7: 79:11:a3:b8:4c:b5:21:20:1c:8c:11:22:ac:29:9a:1d:75:c2: 5d:cf:9b:ab:7c:ad:20:2a:84:f6:66:96:7e:dd:bc:64:65:70: e9:1d:a5:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+WlliCVkRDGNmVk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MTAyMjE2MDkzOFoXDTI3MDEyMDE3MDkzOFowLzEtMCsGA1UEAxMk OWFkNTJlMzMtZWYwZC00MTdkLWEwNGYtZmE0ZjA4OThiODYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow+y1Qbhs8jRivxBi5l7iQBJeUZ13vBlYxa9 FFsAHZRzYEt1omtNWpgdXomJOUSKLe69tBoyHWy45sdiBBd/wNzmWeSk2aP64mZG OPa8TRkAbZecUnV099RGyosE8qRXJU+hZ+a4kn0ZdLp4ErbnrrC+Vg6pxzqNH8oy zT+QkouD87eGO4Ueqb6BONUT1drbNEzI0lfqYL9/lHHVfSsaCoTYD3SuEKe/HYbZ BpSdAX5acecZ500P/PLKKY0Js+GdZWmhXEmgXT0dQ56k3ptZWYPo9/85CI1SZCYF OoLl9Mq8X434sUBJGkfH93tTxn8kh0mbLz59NW12c2kyz0H5SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzpNjAUyk9r0r+wIjQIbRxvFeEbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYmZmMDQ4MjYtMDViYS0z ZGEzLTk4ZDktYzdlZjYzNzQ1ZjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACBNsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnDdpknkBnk/jnjXcLlABQ7jENmL5Tsg2NRzXlPaIiqhvVhe46epTj0 jZzOGR9vLFF5M0qUP88xTkb20AS8BJzAL6Vvwiethad99Ao/cngrkkEmW5xB8PfA b40vt/VeoFEPQ4gcX5bm2GTw/v/qvLLVjbuwa8wtsim5JdxY7WWSRW5e4LbLOpyR 7SKPmVRgR/SnoGLWrAZ2Yq+NkR5aSNAZEdJOWm2t4o0PavFv3cZMy1/eVxLm0Tfu CLDlPWVSvycuWvs3aJucuq+HuAT9VnP6wgJv8LMd93kRo7hMtSEgHIwRIqwpmh11 wl3Pm6t8rSAqhPZmln7dvGRlcOkdpY8= -----END CERTIFICATE-----Generated at Wed Oct 28 16:33:21 2026 by rpki-client