$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f0dab10e-4582-3cea-9c9b-95e61ade618d.roa File: f0dab10e-4582-3cea-9c9b-95e61ade618d.roa (raw, json) Hash identifier: cTOJJZjYFpmCUYErXwxf/rIWHI+Ta/z0HfpGnkIFOHM= Subject key identifier: EC:1B:34:A6:EC:0E:F8:79:EF:C7:0C:55:8C:39:21:23:B2:FD:2E:3D Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584D9FB5650D27EBE9ED1ADDB080 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f0dab10e-4582-3cea-9c9b-95e61ade618d.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 11178 IP address blocks: 8.20.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:65:0d:27:eb:e9:ed:1a:dd:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=fdc0996d-2a65-4dac-9cb7-f154f3a561fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5e:6a:14:e6:b5:68:9d:7c:81:5c:71:48:b8: e9:1d:de:d0:62:59:e8:1f:10:a3:c1:91:73:9b:01: 29:99:c5:c1:0f:df:1c:d0:c4:05:c3:d7:a6:e1:12: d9:e5:3b:9f:18:99:f1:90:21:b9:13:2e:c4:b5:86: a8:11:01:ab:c8:08:e4:ca:06:90:b2:b8:a8:9f:df: 29:59:44:5c:cc:6b:e6:9b:03:9a:0e:0d:3f:44:67: a6:b4:9f:82:dd:c6:58:2d:c0:05:46:78:41:11:f6: 60:b0:50:de:db:82:5f:f3:d7:3f:7f:8e:6b:aa:66: cb:12:d5:a9:9e:ea:68:79:49:6d:38:bf:5e:5e:cf: d8:b6:5f:0e:6a:b4:fd:f5:83:bb:c0:2c:30:71:49: 83:f5:ef:1e:30:d6:0f:a0:e9:c8:9c:65:32:51:8f: 99:d3:48:23:3a:85:50:96:20:de:9b:81:39:f5:6f: 05:58:9d:96:23:a3:89:ed:06:b6:ab:19:41:95:b7: 42:b9:1e:17:a0:05:1e:1b:49:0f:88:69:2f:c6:1f: ae:b5:61:2c:a2:de:ed:81:fe:57:b7:57:8d:dd:b5: 6f:31:5a:38:24:8a:81:fc:85:83:6f:24:70:ec:86: 05:41:a0:75:1a:5e:54:d5:7d:cc:9a:46:29:94:e7: d4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:1B:34:A6:EC:0E:F8:79:EF:C7:0C:55:8C:39:21:23:B2:FD:2E:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f0dab10e-4582-3cea-9c9b-95e61ade618d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.20.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:61:a0:ae:30:e5:62:dc:5a:df:c6:d6:dd:1a:1b:f0:39:7c: 21:df:5b:a9:26:f5:9a:3c:61:09:ca:0a:1f:97:64:1a:af:cd: aa:94:95:7a:89:4d:38:36:32:88:40:e4:90:11:47:de:77:cc: ed:a3:50:83:27:59:cf:58:ea:7a:71:37:37:a0:6b:29:b7:41: 31:95:25:eb:ba:e4:9e:65:f7:ca:c0:f0:36:bd:93:fe:c4:a6: 66:08:bc:d2:b1:e0:bf:76:7c:42:a1:96:fa:ec:76:68:ac:b6: 7b:83:e8:ec:5a:e8:ea:30:62:a9:b6:4c:53:76:9e:bf:cd:0f: 85:8e:da:6c:be:e8:c0:4d:ef:39:f1:21:fa:a0:ee:92:04:68: e3:d7:59:51:ed:dd:c0:3a:da:57:39:03:99:4b:e9:1c:da:3c: 05:64:c0:68:7b:2a:de:da:24:bb:4b:73:28:88:1f:49:5d:f2: fa:e0:03:29:05:d5:b9:24:c8:9b:d3:1e:b8:66:1b:15:cb:d5: ae:09:70:b8:4f:9f:3d:1a:25:51:85:84:6c:21:fd:48:7e:e6: 7a:cb:30:cc:38:77:ac:75:13:34:0f:83:15:a5:95:02:e3:e2: a7:4b:25:d3:27:1d:d8:ab:84:81:94:d1:23:22:d0:59:d0:eb: 41:e9:23:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftWUNJ+vp7RrdsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk ZmRjMDk5NmQtMmE2NS00ZGFjLTljYjctZjE1NGYzYTU2MWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0F5qFOa1aJ18gVxxSLjpHd7QYlnoHxCjwZFz mwEpmcXBD98c0MQFw9em4RLZ5TufGJnxkCG5Ey7EtYaoEQGryAjkygaQsrion98p WURczGvmmwOaDg0/RGemtJ+C3cZYLcAFRnhBEfZgsFDe24Jf89c/f45rqmbLEtWp nupoeUltOL9eXs/Ytl8OarT99YO7wCwwcUmD9e8eMNYPoOnInGUyUY+Z00gjOoVQ liDem4E59W8FWJ2WI6OJ7Qa2qxlBlbdCuR4XoAUeG0kPiGkvxh+utWEsot7tgf5X t1eN3bVvMVo4JIqB/IWDbyRw7IYFQaB1Gl5U1X3MmkYplOfUfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwbNKbsDvh578cMVYw5ISOy/S49MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZjBkYWIxMGUtNDU4Mi0z Y2VhLTljOWItOTVlNjFhZGU2MThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBCBS6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxhoK4w5WLcWt/G1t0aG/A5fCHfW6km9Zo8YQnKCh+XZBqvzaqUlXqJ TTg2MohA5JARR953zO2jUIMnWc9Y6npxNzegaym3QTGVJeu65J5l98rA8Da9k/7E pmYIvNKx4L92fEKhlvrsdmistnuD6Oxa6OowYqm2TFN2nr/ND4WO2my+6MBN7znx Ifqg7pIEaOPXWVHt3cA62lc5A5lL6RzaPAVkwGh7Kt7aJLtLcyiIH0ld8vrgAykF 1bkkyJvTHrhmGxXL1a4JcLhPnz0aJVGFhGwh/Uh+5nrLMMw4d6x1EzQPgxWllQLj 4qdLJdMnHdirhIGU0SMi0FnQ60HpI+A= -----END CERTIFICATE-----Generated at Fri May 8 17:02:25 2026 by rpki-client