$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/cf85149b-3627-3c00-826d-8a24d5483e24.roa File: cf85149b-3627-3c00-826d-8a24d5483e24.roa (raw, json) Hash identifier: UCpgHuVFr37xNUgn1EtxfJzUaVIHpVwlk6wYBHiEST0= Subject key identifier: FE:7A:EA:B1:6D:87:1F:32:8E:B3:C6:0F:7F:0B:84:64:21:9D:36:07 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584E482481DC1C1057D54E028340 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/cf85149b-3627-3c00-826d-8a24d5483e24.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 395290 IP address blocks: 8.45.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:81:dc:1c:10:57:d5:4e:02:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=4e5df858-f7d1-4439-8b26-537e328ad36a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a3:33:64:16:8d:22:47:32:4f:85:09:9c:d6: 63:d9:03:c4:71:cf:9a:5d:46:89:f0:d5:c3:22:52: 31:ce:6d:2d:3b:d8:4d:7e:d5:a4:26:e3:c5:ba:f4: c8:76:a8:1e:50:db:89:30:82:08:27:5d:8e:d3:ff: 07:29:18:f4:8a:e3:a0:49:34:99:be:00:e8:b7:f7: cd:07:9c:0c:5f:b4:46:31:70:af:23:7f:43:ec:af: 96:82:3c:2f:f3:77:3d:96:bf:f3:1b:18:f5:49:57: bd:dc:21:45:20:c7:58:99:1d:04:19:83:48:42:f5: 12:83:f6:6f:b0:4d:32:e7:ac:98:b2:3b:5d:72:e6: b4:40:82:48:fc:2a:bc:95:93:68:90:c1:5b:c1:94: b0:95:58:e6:6d:86:b9:76:d0:0a:ce:15:ad:25:38: 0a:1c:f8:43:5a:16:a1:8f:43:b3:7d:de:c9:30:0b: 6f:cb:d7:2e:e5:39:31:72:ad:47:02:43:c7:31:f1: 8f:4d:93:4c:25:2c:9b:87:fd:06:c9:76:89:6f:1b: 60:e0:f4:fc:f3:79:82:42:6a:f2:b2:c1:0b:b6:bc: 4e:b9:39:b0:80:e2:a0:61:3f:c2:06:cb:80:de:f8: d2:7d:3b:a1:83:b0:03:c4:6a:42:2e:f3:98:5f:64: b0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7A:EA:B1:6D:87:1F:32:8E:B3:C6:0F:7F:0B:84:64:21:9D:36:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/cf85149b-3627-3c00-826d-8a24d5483e24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.45.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:7e:7a:31:ce:30:78:c4:ca:53:91:76:03:e0:99:91:c2:7c: a5:dd:4f:f3:45:e4:f0:56:d4:e2:43:c0:27:24:3d:0f:97:6f: 83:71:aa:20:b9:dd:e6:50:c2:6c:17:7e:40:77:e7:25:6d:34: c5:83:2f:49:c7:b6:69:fb:a5:80:e2:a2:fa:b2:22:c3:ef:c9: 46:ad:2f:40:ef:c3:3f:68:d5:b0:e6:a7:f4:f5:70:05:d0:35: 5b:5d:34:b8:a0:64:28:e4:b4:92:df:0a:e7:8f:98:58:28:96: db:5a:24:48:73:58:3b:4b:6b:09:4e:28:70:6d:a1:e7:53:23: b0:54:3d:ac:34:61:af:bc:cb:d0:e5:24:1b:78:2e:08:d6:b9: 03:38:44:b5:69:57:81:c5:9a:f6:cd:9f:c9:e1:16:25:00:c0: d1:b2:f0:09:95:cb:4c:05:a8:d1:56:bf:7f:33:ed:ac:24:bf: 09:b7:a7:35:44:50:ce:45:c2:f2:ac:dc:70:18:21:49:bf:77: 7f:47:87:fc:31:2c:05:4d:dc:2a:53:d8:09:f8:08:1f:51:74: a2:02:6d:2b:8f:6f:8d:b1:b0:c5:b3:e8:c4:91:6c:d6:e6:ec: 76:9a:96:5d:a2:16:b8:35:c8:c9:b7:1f:1a:b2:21:4f:c7:25: 77:0f:5e:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJIHcHBBX1U4Cg0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk NGU1ZGY4NTgtZjdkMS00NDM5LThiMjYtNTM3ZTMyOGFkMzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6MzZBaNIkcyT4UJnNZj2QPEcc+aXUaJ8NXD IlIxzm0tO9hNftWkJuPFuvTIdqgeUNuJMIIIJ12O0/8HKRj0iuOgSTSZvgDot/fN B5wMX7RGMXCvI39D7K+Wgjwv83c9lr/zGxj1SVe93CFFIMdYmR0EGYNIQvUSg/Zv sE0y56yYsjtdcua0QIJI/Cq8lZNokMFbwZSwlVjmbYa5dtAKzhWtJTgKHPhDWhah j0Ozfd7JMAtvy9cu5Tkxcq1HAkPHMfGPTZNMJSybh/0GyXaJbxtg4PT883mCQmry ssELtrxOuTmwgOKgYT/CBsuA3vjSfTuhg7ADxGpCLvOYX2Sw4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP566rFthx8yjrPGD38LhGQhnTYHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvY2Y4NTE0OWItMzYyNy0z YzAwLTgyNmQtOGEyNGQ1NDgzZTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACC2jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADp+ejHOMHjEylORdgPgmZHCfKXdT/NF5PBW1OJDwCckPQ+Xb4NxqiC5 3eZQwmwXfkB35yVtNMWDL0nHtmn7pYDiovqyIsPvyUatL0Dvwz9o1bDmp/T1cAXQ NVtdNLigZCjktJLfCuePmFgolttaJEhzWDtLawlOKHBtoedTI7BUPaw0Ya+8y9Dl JBt4LgjWuQM4RLVpV4HFmvbNn8nhFiUAwNGy8AmVy0wFqNFWv38z7awkvwm3pzVE UM5FwvKs3HAYIUm/d39Hh/wxLAVN3CpT2An4CB9RdKICbSuPb42xsMWz6MSRbNbm 7Haall2iFrg1yMm3HxqyIU/HJXcPXlI= -----END CERTIFICATE-----Generated at Fri Jul 17 16:10:05 2026 by rpki-client