$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/cb001b91-0091-3b1f-ab2c-a65547ba4fef.roa File: cb001b91-0091-3b1f-ab2c-a65547ba4fef.roa (raw, json) Hash identifier: h6HNtApdnokwfZN3EM3izWz9i6/fFhYgtNOtkCgalwY= Subject key identifier: C4:62:90:6E:01:DC:44:3E:22:72:D8:3B:A2:4B:D6:4D:7D:0E:80:87 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584EA7879C957F44D697B3B9E880 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/cb001b91-0091-3b1f-ab2c-a65547ba4fef.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 1008 IP address blocks: 8.6.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:9c:95:7f:44:d6:97:b3:b9:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d5d76491-6bb7-46c6-b960-13354f398109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b0:7d:02:c7:aa:69:a1:3b:2e:6e:e2:84:43: 60:30:19:56:d8:cf:f5:b2:0c:40:aa:a0:a2:f4:e6: 6f:f0:3c:3f:69:71:80:cd:8c:32:ea:8a:38:b5:5e: 00:5e:86:e8:80:88:ad:51:ec:b9:20:ff:ee:63:9d: 2f:55:c3:f3:31:2a:fb:98:53:92:50:04:7f:68:b0: c8:1c:87:de:7b:d2:cc:df:07:f7:57:8e:22:41:61: ee:67:90:41:cf:f9:03:9e:4a:b5:1a:33:03:77:55: a5:7c:eb:09:d1:ea:cb:2c:ca:48:1c:b8:33:bf:cb: f8:31:90:bb:e5:23:a3:c2:e6:76:c8:8b:73:31:42: 7c:9b:ca:e1:d2:0f:04:95:be:ee:7f:e1:08:b6:b1: f1:ad:a7:8c:20:7c:86:c7:c8:00:15:2a:05:f4:53: ea:63:fb:45:a5:3e:53:1d:6b:b0:11:05:00:99:0c: f1:27:a6:a5:7c:df:21:4e:ae:10:6c:57:60:b2:da: 67:e8:bb:79:52:68:97:ac:96:9c:6b:3a:2f:2a:b7: a0:d5:04:72:86:d6:c1:c7:32:6f:ad:52:33:3b:0f: bb:14:bb:95:eb:16:7d:8f:e2:17:15:70:f5:9e:9d: 87:f3:27:1a:39:33:0d:62:66:2e:f7:b6:30:64:0c: e2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:62:90:6E:01:DC:44:3E:22:72:D8:3B:A2:4B:D6:4D:7D:0E:80:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/cb001b91-0091-3b1f-ab2c-a65547ba4fef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.6.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:0b:62:ef:5c:f6:16:dc:1c:62:48:9f:51:69:98:90:54:36: 40:ae:e8:25:7b:36:99:3a:68:05:27:44:d4:14:1f:e3:76:4a: 36:a2:c8:3f:9f:19:4f:9c:0a:ac:54:0f:62:c7:21:94:87:29: a7:b6:a0:f4:f0:86:31:8b:8c:9b:23:12:27:f5:4b:34:be:1c: 5f:c3:5c:23:3a:c8:b8:66:79:68:e5:bb:a9:e1:af:51:ea:cf: fe:bc:d6:c3:6a:61:73:0e:30:c5:67:3a:e1:0a:32:c0:63:ef: 46:45:df:38:5e:75:9b:f5:cb:eb:49:65:27:d0:e1:ae:fd:6c: ca:72:64:3a:5d:f9:79:4c:d5:7a:a7:94:c9:69:ea:2b:30:71: 00:9e:25:7e:c6:e5:14:3d:f3:aa:22:dc:4b:15:66:8f:98:82: 56:4a:26:6f:de:93:a1:c5:09:83:ce:80:74:94:1e:4f:19:2c: b2:ab:e2:8e:37:bd:24:e4:4d:9c:fb:f8:d4:07:0c:4d:ac:f7: be:83:d6:6b:91:02:37:11:78:ad:47:0c:ca:e4:b0:63:eb:92: 9f:18:7d:a7:37:f1:5f:95:40:0f:ef:e5:92:ba:4e:f0:1d:30: 35:60:21:53:42:ae:f9:af:da:92:aa:76:19:19:52:fa:a1:ab: 7d:69:d9:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh5yVf0TWl7O56IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDVkNzY0OTEtNmJiNy00NmM2LWI5NjAtMTMzNTRmMzk4MTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrB9AseqaaE7Lm7ihENgMBlW2M/1sgxAqqCi 9OZv8Dw/aXGAzYwy6oo4tV4AXobogIitUey5IP/uY50vVcPzMSr7mFOSUAR/aLDI HIfee9LM3wf3V44iQWHuZ5BBz/kDnkq1GjMDd1WlfOsJ0erLLMpIHLgzv8v4MZC7 5SOjwuZ2yItzMUJ8m8rh0g8Elb7uf+EItrHxraeMIHyGx8gAFSoF9FPqY/tFpT5T HWuwEQUAmQzxJ6alfN8hTq4QbFdgstpn6Lt5UmiXrJacazovKreg1QRyhtbBxzJv rVIzOw+7FLuV6xZ9j+IXFXD1np2H8ycaOTMNYmYu97YwZAziiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRikG4B3EQ+InLYO6JL1k19DoCHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvY2IwMDFiOTEtMDA5MS0z YjFmLWFiMmMtYTY1NTQ3YmE0ZmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAYJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4LYu9c9hbcHGJIn1FpmJBUNkCu6CV7Npk6aAUnRNQUH+N2SjaiyD+f GU+cCqxUD2LHIZSHKae2oPTwhjGLjJsjEif1SzS+HF/DXCM6yLhmeWjlu6nhr1Hq z/681sNqYXMOMMVnOuEKMsBj70ZF3zhedZv1y+tJZSfQ4a79bMpyZDpd+XlM1Xqn lMlp6iswcQCeJX7G5RQ986oi3EsVZo+YglZKJm/ek6HFCYPOgHSUHk8ZLLKr4o43 vSTkTZz7+NQHDE2s976D1muRAjcReK1HDMrksGPrkp8Yfac38V+VQA/v5ZK6TvAd MDVgIVNCrvmv2pKqdhkZUvqhq31p2TE= -----END CERTIFICATE-----Generated at Thu Aug 13 06:56:06 2026 by rpki-client