$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d85ad17a-9443-36be-a0cd-94ed340eaab8.roa File: d85ad17a-9443-36be-a0cd-94ed340eaab8.roa (raw, json) Hash identifier: re5v7ZznsseUUmBjBphlc/YLuEYOdbnyjgM3fto2tp4= Subject key identifier: 1C:47:E5:EA:83:FC:7C:CF:B5:DF:FE:A7:31:16:09:54:E9:98:35:A0 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584B1F0165463EA74592E71B74C0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d85ad17a-9443-36be-a0cd-94ed340eaab8.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 989 IP address blocks: 8.36.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 10 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:65:46:3e:a7:45:92:e7:1b:74:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=d142c935-c08d-4b6d-9eb0-da87e4cbaf62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f9:b7:32:87:f7:5f:2b:44:9c:df:2f:10:33: bf:75:f7:92:6e:a1:10:c3:9f:dd:28:14:ea:dc:b6: d7:ff:c6:96:22:4e:2f:ab:2b:aa:96:5e:b1:31:cb: 14:a9:bd:1b:2b:8f:25:f5:31:8b:c1:0a:61:fb:c5: dd:4d:9c:a6:59:35:59:97:41:23:29:68:46:df:c0: 5c:2f:d7:43:58:c1:09:f3:84:5d:ab:c4:d2:0b:6c: 00:95:85:ed:67:80:ef:94:ff:bc:f1:47:cd:c6:0a: f8:b6:27:20:4e:62:86:a4:c8:06:cc:12:a1:68:da: 8a:a3:a6:e5:90:37:ad:0f:e4:3e:ea:fe:d1:d1:88: e6:d8:4d:53:fb:a8:eb:b1:73:01:e3:15:cc:65:19: 43:29:b1:70:13:c9:30:4b:76:fc:53:84:df:8a:6f: 4d:90:49:24:42:83:be:80:c5:d8:d1:2b:62:c6:bf: 4d:57:e2:07:93:97:1a:70:63:10:c9:bd:6d:90:a3: 56:d1:cf:a8:53:c0:46:9b:8b:cb:f4:60:6e:39:26: 5f:09:e7:68:a5:83:a5:7e:c0:e1:7d:bb:1a:50:d1: c4:6f:44:13:45:50:23:bc:a6:37:70:68:45:44:ef: 77:91:38:d0:d6:ed:39:8e:ae:60:4a:53:e6:2e:08: 75:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:47:E5:EA:83:FC:7C:CF:B5:DF:FE:A7:31:16:09:54:E9:98:35:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d85ad17a-9443-36be-a0cd-94ed340eaab8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.36.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:25:ff:db:cc:6a:74:b7:89:9d:d1:96:29:59:f9:ed:93:29: 0d:02:e6:a2:27:16:a8:11:6f:c9:46:18:17:7b:6e:2f:69:9c: e4:36:88:2e:39:d8:45:86:bf:41:19:75:4c:f3:05:2d:40:22: 96:31:c6:64:c0:1c:81:7a:b3:cd:7a:52:52:30:d0:75:d2:b9: 7e:6d:9c:a8:b4:27:90:65:ff:25:9f:1a:88:9f:4d:49:16:d9: 1b:ba:aa:67:95:2d:16:69:58:56:ca:b8:0e:96:0a:eb:06:d7: f6:74:83:1b:49:4c:a4:23:75:dd:b2:1c:ba:b5:be:83:a8:3e: b5:57:a1:2b:0f:9b:b1:06:15:a3:b3:08:b5:93:9c:c9:08:48: 45:c8:27:de:37:eb:c7:bf:a9:df:65:d7:73:33:93:b4:d8:f3: a1:74:50:66:f1:96:98:e2:46:1b:83:a7:03:3a:62:5e:42:6f: ab:1f:1c:ec:53:59:4b:f1:8d:b4:c4:3a:ee:c8:30:ce:54:45: 5b:30:f7:cd:fc:bc:63:e9:4c:4e:9b:4d:5d:aa:f4:eb:88:7c: 7e:66:63:80:33:45:99:c3:07:9f:09:87:6e:c1:46:8d:6d:1b: cc:68:fd:78:15:73:9b:f2:ea:71:bb:dc:2f:3a:c9:9f:29:46: 08:59:09:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAWVGPqdFkucbdMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZDE0MmM5MzUtYzA4ZC00YjZkLTllYjAtZGE4N2U0Y2JhZjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivm3Mof3XytEnN8vEDO/dfeSbqEQw5/dKBTq 3LbX/8aWIk4vqyuqll6xMcsUqb0bK48l9TGLwQph+8XdTZymWTVZl0EjKWhG38Bc L9dDWMEJ84Rdq8TSC2wAlYXtZ4DvlP+88UfNxgr4ticgTmKGpMgGzBKhaNqKo6bl kDetD+Q+6v7R0Yjm2E1T+6jrsXMB4xXMZRlDKbFwE8kwS3b8U4Tfim9NkEkkQoO+ gMXY0Stixr9NV+IHk5cacGMQyb1tkKNW0c+oU8BGm4vL9GBuOSZfCedopYOlfsDh fbsaUNHEb0QTRVAjvKY3cGhFRO93kTjQ1u05jq5gSlPmLgh1FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxH5eqD/HzPtd/+pzEWCVTpmDWgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZDg1YWQxN2EtOTQ0My0z NmJlLWEwY2QtOTRlZDM0MGVhYWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBCCTuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFol/9vManS3iZ3RlilZ+e2TKQ0C5qInFqgRb8lGGBd7bi9pnOQ2iC45 2EWGv0EZdUzzBS1AIpYxxmTAHIF6s816UlIw0HXSuX5tnKi0J5Bl/yWfGoifTUkW 2Ru6qmeVLRZpWFbKuA6WCusG1/Z0gxtJTKQjdd2yHLq1voOoPrVXoSsPm7EGFaOz CLWTnMkISEXIJ94368e/qd9l13Mzk7TY86F0UGbxlpjiRhuDpwM6Yl5Cb6sfHOxT WUvxjbTEOu7IMM5URVsw9838vGPpTE6bTV2q9OuIfH5mY4AzRZnDB58Jh27BRo1t G8xo/XgVc5vy6nG73C86yZ8pRghZCVo= -----END CERTIFICATE-----Generated at Sun Nov 9 04:01:36 2025 by rpki-client