$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ed1f9a9a-e1cd-32f9-bbe3-6f8089c23b87.roa File: ed1f9a9a-e1cd-32f9-bbe3-6f8089c23b87.roa (raw, json) Hash identifier: HPJUkwd1snfwYX7IkLfEl7ZC5NOJGKRpENWxGsGnfPA= Subject key identifier: 99:50:C0:40:9B:E1:73:97:24:45:38:FF:14:78:5A:2F:73:C6:D4:F8 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584D1F4A1C6DCF83D1B4F62C3980 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ed1f9a9a-e1cd-32f9-bbe3-6f8089c23b87.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 16491 IP address blocks: 8.37.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:1c:6d:cf:83:d1:b4:f6:2c:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=a57e0708-46dd-407f-8668-db91d5f2d229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:da:85:7e:d4:65:ea:1f:46:3f:55:51:a7:a5: d6:1f:09:82:15:be:9e:2d:a6:17:31:cd:bc:2a:c5: 6e:15:89:48:ba:09:34:d8:d3:ab:9c:71:18:71:0c: 5a:02:cd:d9:52:30:df:90:39:d5:17:0a:3b:c9:21: 77:13:13:8d:31:04:d4:b0:ae:8c:87:bd:fe:1f:0f: dd:df:28:da:7c:55:73:e5:2a:61:d2:3f:4c:76:dc: f1:2b:56:f8:19:4d:92:6f:08:bf:ce:5d:d9:c9:a8: 81:48:98:b8:b9:59:a9:ce:f7:9a:c8:73:15:68:00: 1c:44:ea:e7:a2:36:b2:b3:45:bd:67:39:66:a3:81: 7a:a4:79:66:d0:74:00:ac:5d:51:07:8e:ae:d9:75: e5:84:31:64:df:02:78:9a:e5:23:0d:ef:2b:57:a7: 3c:b3:2a:0a:e2:12:14:f6:07:40:6c:6d:db:18:f7: 5c:79:95:59:21:73:5f:24:b8:5a:0e:09:4f:c1:b7: e7:b4:95:d8:69:ac:a9:e9:4a:1c:49:7b:d2:9d:36: f6:c9:91:92:47:46:2e:8a:26:01:ee:bb:d4:e0:7f: 5d:6a:53:58:ef:e8:25:53:0d:84:00:99:b1:d2:71: ae:d9:16:0b:0d:eb:18:34:be:00:5c:98:35:4a:2e: 0e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:50:C0:40:9B:E1:73:97:24:45:38:FF:14:78:5A:2F:73:C6:D4:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ed1f9a9a-e1cd-32f9-bbe3-6f8089c23b87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.37.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:74:25:60:30:be:35:ce:fe:e4:8d:7a:5e:e4:de:62:85:56: 5e:5a:58:e8:f3:ce:bb:f4:b5:c3:63:b9:87:ce:be:44:8d:8a: e8:9e:a1:eb:54:af:de:b6:e0:b5:7b:ce:a6:a3:06:b5:66:64: 33:43:1a:15:2f:34:7c:e7:8a:13:32:a9:53:0e:d7:8c:93:ec: 9b:59:ad:89:ae:2c:10:11:cc:b1:fa:69:41:5d:8e:c8:9d:90: e0:26:0a:58:c2:eb:3a:95:8b:c0:92:db:6c:80:a2:4f:00:d0: 15:48:de:eb:44:61:50:e2:1a:1c:8c:d3:8d:04:ab:2d:34:9f: 79:a0:1a:c1:f4:fd:77:4b:c3:e0:91:54:33:e2:d8:65:d1:81: e5:77:1a:b8:ca:af:dc:fc:8a:b3:76:e3:a7:68:32:42:4e:4d: cb:87:be:25:c4:4e:d3:26:23:bd:e2:40:53:e3:8e:1d:4c:26: 82:b2:67:52:d8:fb:44:5d:51:cc:f4:31:78:be:79:a2:03:ff: 15:3a:54:af:9a:e0:d9:bb:e8:c5:f9:6e:78:17:cc:d0:12:c5: 15:0a:c9:a2:1a:fe:7d:ed:d1:58:a8:8a:00:fa:f6:29:ba:0c: 4e:e4:91:fa:be:3e:f9:ac:11:30:8c:31:3b:1f:f8:0b:65:b7: f5:9b:af:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fShxtz4PRtPYsOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk YTU3ZTA3MDgtNDZkZC00MDdmLTg2NjgtZGI5MWQ1ZjJkMjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9qFftRl6h9GP1VRp6XWHwmCFb6eLaYXMc28 KsVuFYlIugk02NOrnHEYcQxaAs3ZUjDfkDnVFwo7ySF3ExONMQTUsK6Mh73+Hw/d 3yjafFVz5Sph0j9MdtzxK1b4GU2Sbwi/zl3ZyaiBSJi4uVmpzveayHMVaAAcROrn ojays0W9Zzlmo4F6pHlm0HQArF1RB46u2XXlhDFk3wJ4muUjDe8rV6c8syoK4hIU 9gdAbG3bGPdceZVZIXNfJLhaDglPwbfntJXYaayp6UocSXvSnTb2yZGSR0YuiiYB 7rvU4H9dalNY7+glUw2EAJmx0nGu2RYLDesYNL4AXJg1Si4OUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlQwECb4XOXJEU4/xR4Wi9zxtT4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZWQxZjlhOWEtZTFjZC0z MmY5LWJiZTMtNmY4MDg5YzIzYjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQECCVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC50JWAwvjXO/uSNel7k3mKFVl5aWOjzzrv0tcNjuYfOvkSNiuieoetU r9624LV7zqajBrVmZDNDGhUvNHznihMyqVMO14yT7JtZrYmuLBARzLH6aUFdjsid kOAmCljC6zqVi8CS22yAok8A0BVI3utEYVDiGhyM040Eqy00n3mgGsH0/XdLw+CR VDPi2GXRgeV3GrjKr9z8irN246doMkJOTcuHviXETtMmI73iQFPjjh1MJoKyZ1LY +0RdUcz0MXi+eaID/xU6VK+a4Nm76MX5bngXzNASxRUKyaIa/n3t0VioigD69im6 DE7kkfq+PvmsETCMMTsf+Atlt/Wbr5g= -----END CERTIFICATE-----Generated at Tue Mar 24 08:50:05 2026 by rpki-client