$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/dc71f361-a2ed-3109-b093-fe4b4860cae3.roa File: dc71f361-a2ed-3109-b093-fe4b4860cae3.roa (raw, json) Hash identifier: p6Hs6xT+74Vv8oMlh/DIWZzgMbNhwGYtHKb7eDAOYmo= Subject key identifier: 9D:F0:BC:35:E3:7B:BE:B1:8D:F6:5E:85:D2:38:D1:6E:01:86:FA:94 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584EEEB77D521813392B7FE76D00 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/dc71f361-a2ed-3109-b093-fe4b4860cae3.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 402035 IP address blocks: 8.24.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:7d:52:18:13:39:2b:7f:e7:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=1636dafe-785d-4bbd-88fb-29b0bd039d56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:36:b6:0f:63:9b:66:00:f4:0d:e1:76:1d:f1: aa:37:db:c2:60:6f:26:51:cc:6f:c7:35:70:49:0b: 68:b2:ac:a4:98:18:10:64:d6:c4:1c:a2:fa:7d:43: be:aa:3c:51:be:38:16:0b:2e:b1:e1:1b:bc:13:da: e7:65:09:07:69:0c:a6:d4:67:54:68:87:c3:66:12: 92:7c:31:c6:ba:37:d8:49:ac:75:cf:36:14:3d:98: 84:e3:1a:d6:d2:87:9f:6b:3e:54:20:94:3d:1b:26: 4d:d6:b8:ea:ee:1b:ab:3f:8a:8d:ef:9e:8b:97:03: 01:cb:f3:80:b6:ae:67:c2:4c:70:91:49:02:16:46: 90:f3:02:43:e9:bc:90:09:3c:4a:0a:de:43:8b:ee: 67:00:b1:60:fe:0e:d1:34:ef:f6:1d:fd:45:cf:90: 73:de:cc:a9:51:62:9a:e8:91:a4:22:c1:ea:2f:b6: b4:d5:c9:35:6a:5a:9c:c2:5b:30:b2:4c:5d:87:92: a5:ac:08:c2:cd:22:97:ba:8d:9c:84:15:e4:7d:9b: dc:d9:61:8b:6f:4f:47:6b:ac:87:b1:47:1a:97:5e: 0a:81:a2:cd:74:c8:57:18:d3:5b:f2:59:ab:6f:85: 61:3a:91:a8:4e:1b:49:07:8e:39:a6:54:e5:73:8b: 46:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F0:BC:35:E3:7B:BE:B1:8D:F6:5E:85:D2:38:D1:6E:01:86:FA:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/dc71f361-a2ed-3109-b093-fe4b4860cae3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.24.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:dc:5c:94:5b:af:a4:a7:b2:a4:ee:00:f1:cf:36:3f:e9:50: 54:3f:76:7d:22:df:22:ff:14:a0:e9:3a:09:24:d5:55:96:ac: ca:64:29:1f:f0:df:2f:43:d5:34:e4:b7:31:a7:16:65:0d:db: 4e:19:70:21:fd:97:a8:68:33:13:fc:d7:2d:9a:dd:58:d0:b9: 4e:a5:2d:c7:1c:d5:49:3d:e3:ec:61:47:04:20:46:a1:90:4f: a1:e1:65:12:5c:57:e7:ca:f1:43:8f:82:2b:26:91:ba:c0:41: 48:9c:f7:a2:b6:dc:bb:ed:5e:6b:4b:6d:e4:fa:6f:e6:84:29: 43:7d:51:91:fe:8b:89:ab:25:82:c6:9c:5e:27:10:be:30:20: ef:45:aa:49:c7:d5:35:13:b7:5d:85:f6:bc:38:fe:56:a0:2c: 9f:b1:e1:b6:49:9d:c0:1c:45:a5:7c:79:3e:6d:36:a4:33:8a: 3c:6c:2d:09:b8:db:3c:3a:50:64:e9:95:02:64:5a:f8:1c:8e: 15:4c:5a:99:60:07:bd:08:64:fa:52:65:99:e3:23:8e:d1:fd: 55:47:b3:5f:e6:b9:a4:1d:b5:77:c2:47:03:3d:5b:55:26:e1: 22:6e:74:7c:cc:0f:e2:34:de:fb:cd:04:44:d9:70:42:7d:ff: db:2c:a0:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut31SGBM5K3/nbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk MTYzNmRhZmUtNzg1ZC00YmJkLTg4ZmItMjliMGJkMDM5ZDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiza2D2ObZgD0DeF2HfGqN9vCYG8mUcxvxzVw SQtosqykmBgQZNbEHKL6fUO+qjxRvjgWCy6x4Ru8E9rnZQkHaQym1GdUaIfDZhKS fDHGujfYSax1zzYUPZiE4xrW0oefaz5UIJQ9GyZN1rjq7hurP4qN756LlwMBy/OA tq5nwkxwkUkCFkaQ8wJD6byQCTxKCt5Di+5nALFg/g7RNO/2Hf1Fz5Bz3sypUWKa 6JGkIsHqL7a01ck1alqcwlswskxdh5KlrAjCzSKXuo2chBXkfZvc2WGLb09Ha6yH sUcal14KgaLNdMhXGNNb8lmrb4VhOpGoThtJB445plTlc4tG6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3wvDXje76xjfZehdI40W4BhvqUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZGM3MWYzNjEtYTJlZC0z MTA5LWIwOTMtZmU0YjQ4NjBjYWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACBiOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHcXJRbr6SnsqTuAPHPNj/pUFQ/dn0i3yL/FKDpOgkk1VWWrMpkKR/w 3y9D1TTktzGnFmUN204ZcCH9l6hoMxP81y2a3VjQuU6lLccc1Uk94+xhRwQgRqGQ T6HhZRJcV+fK8UOPgismkbrAQUic96K23LvtXmtLbeT6b+aEKUN9UZH+i4mrJYLG nF4nEL4wIO9FqknH1TUTt12F9rw4/lagLJ+x4bZJncAcRaV8eT5tNqQzijxsLQm4 2zw6UGTplQJkWvgcjhVMWplgB70IZPpSZZnjI47R/VVHs1/muaQdtXfCRwM9W1Um 4SJudHzMD+I03vvNBETZcEJ9/9ssoJY= -----END CERTIFICATE-----Generated at Sun Sep 20 05:33:54 2026 by rpki-client