$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/a04e273c-0bad-30e9-9712-71862e0e0c75.roa File: a04e273c-0bad-30e9-9712-71862e0e0c75.roa (raw, json) Hash identifier: D+KGjUKdSr/mHPDz9fSCi54c4MEDR8+eJ1M+XO57X8Q= Subject key identifier: 58:46:55:3E:2C:58:EA:27:8B:75:3B:E2:FF:2A:08:8A:DA:98:5E:57 Certificate issuer: /CN=ae55b5de-dd92-467b-8e52-a8892152f63e Certificate serial: 010D0C9F4328584B048A050FC73D9B8394932180 Authority key identifier: 3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/a04e273c-0bad-30e9-9712-71862e0e0c75.roa Signing time: Fri 29 Aug 2025 13:29:02 +0000 ROA not before: Fri 29 Aug 2025 13:29:02 +0000 ROA not after: Thu 27 Nov 2025 14:29:02 +0000 asID: 399300 IP address blocks: 167.88.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:8a:05:0f:c7:3d:9b:83:94:93:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae55b5de-dd92-467b-8e52-a8892152f63e Validity Not Before: Aug 29 13:29:02 2025 GMT Not After : Nov 27 14:29:02 2025 GMT Subject: CN=0c0a2c84-b41a-44c8-982b-50ab2bae7d26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:46:f5:32:b6:e0:56:43:02:11:be:9c:63:5d: 33:f5:48:5b:bb:43:e0:0d:1e:ca:9d:ad:fb:a0:47: a2:08:79:e3:17:a9:ad:c4:a9:8a:81:db:32:6a:23: d4:ea:fe:31:31:60:8f:ce:85:fe:2e:a8:82:16:78: 8f:7a:9b:c7:65:f1:cf:c1:11:48:2a:22:e2:36:31: 91:f0:6f:c5:8e:e4:f2:a8:f6:fb:36:ae:ee:ed:a7: 27:62:e9:6e:0f:f8:68:35:b8:f5:8c:2a:86:bd:bb: b1:a4:16:c9:cf:53:79:3a:e4:c4:b2:2f:4f:e9:fc: 6d:c7:74:c8:eb:0a:4a:48:e7:2f:20:b9:2f:f7:75: 81:bd:43:2f:96:7b:c0:66:08:15:be:90:38:49:0c: b9:8d:f6:5c:f4:57:3e:36:68:52:cb:bc:e2:27:71: cb:ca:27:67:63:8f:93:fa:00:91:0f:28:6a:3a:92: eb:5c:7f:e0:60:4c:19:6d:21:2f:99:66:7a:7e:3e: db:3d:bf:99:89:ca:f2:32:98:d1:d8:bd:3e:87:e5: ac:b7:84:e8:4e:69:12:d9:76:ce:64:0f:f3:46:2e: f9:f1:27:1e:f4:af:2e:e0:cb:7d:2f:86:8e:c9:ae: 8f:0d:02:ee:89:9e:99:a4:5d:e5:10:ba:e9:ed:3c: 5d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:46:55:3E:2C:58:EA:27:8B:75:3B:E2:FF:2A:08:8A:DA:98:5E:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/a04e273c-0bad-30e9-9712-71862e0e0c75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.crl X509v3 Authority Key Identifier: keyid:3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer sbgp-ipAddrBlock: critical IPv4: 167.88.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:52:04:93:56:1a:44:8e:c8:81:6d:6e:cd:cc:f5:33:17:74: 16:ca:14:fe:5e:f4:20:45:f6:83:ec:24:94:af:27:70:62:4b: cf:dc:fb:54:a4:65:4a:85:6a:53:34:8e:46:c2:7b:98:9b:32: 6d:2f:da:61:61:38:b9:30:a2:37:51:ee:85:98:c1:7a:8a:ca: ca:24:3a:47:a3:03:2b:8f:d5:ca:83:31:4e:05:39:3e:b8:a8: a4:58:cd:13:62:62:bc:46:bf:eb:50:d5:8b:19:60:34:36:95: 8e:ca:2f:69:7e:d9:4b:fd:97:d6:77:df:f8:99:bd:a1:0f:13: cd:38:d2:e1:ab:f6:29:47:55:85:ca:57:f8:f4:39:c0:15:fa: 71:57:db:7f:d9:cf:80:66:2b:9c:9d:08:e9:96:f9:dd:95:2d: ac:fa:cc:69:0b:40:01:31:ce:25:20:e9:11:81:09:69:e5:a7: 98:1d:c0:88:10:d6:ee:1f:d5:1f:51:f5:2b:2b:fe:26:42:b0: e1:f9:10:37:f8:30:6b:7f:29:c5:e8:77:09:8e:05:45:0b:86: fc:8a:54:1c:64:f7:fb:08:01:b8:18:fc:00:ca:04:0f:e1:76: 56:0e:2d:1e:99:f3:85:eb:13:09:da:2e:94:d4:5b:6c:f3:0d: 0a:a9:c7:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEigUPxz2bg5STIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU1NWI1ZGUtZGQ5Mi00NjdiLThlNTItYTg4OTIxNTJm NjNlMB4XDTI1MDgyOTEzMjkwMloXDTI1MTEyNzE0MjkwMlowLzEtMCsGA1UEAxMk MGMwYTJjODQtYjQxYS00NGM4LTk4MmItNTBhYjJiYWU3ZDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEb1MrbgVkMCEb6cY10z9Uhbu0PgDR7Kna37 oEeiCHnjF6mtxKmKgdsyaiPU6v4xMWCPzoX+LqiCFniPepvHZfHPwRFIKiLiNjGR 8G/FjuTyqPb7Nq7u7acnYuluD/hoNbj1jCqGvbuxpBbJz1N5OuTEsi9P6fxtx3TI 6wpKSOcvILkv93WBvUMvlnvAZggVvpA4SQy5jfZc9Fc+NmhSy7ziJ3HLyidnY4+T +gCRDyhqOpLrXH/gYEwZbSEvmWZ6fj7bPb+ZicryMpjR2L0+h+Wst4ToTmkS2XbO ZA/zRi758Sce9K8u4Mt9L4aOya6PDQLuiZ6ZpF3lELrp7Txd/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhGVT4sWOoni3U74v8qCIramF5XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hZTU1 YjVkZS1kZDkyLTQ2N2ItOGU1Mi1hODg5MjE1MmY2M2UvYTA0ZTI3M2MtMGJhZC0z MGU5LTk3MTItNzE4NjJlMGUwYzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWU1NWI1ZGUtZGQ5Mi00NjdiLThl NTItYTg4OTIxNTJmNjNlL2FlNTViNWRlLWRkOTItNDY3Yi04ZTUyLWE4ODkyMTUy ZjYzZS5jcmwwHwYDVR0jBBgwFoAUPMt/qLOjKT6wfi+/0Gt1PNCFnFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hZTU1YjVkZS1kZDkyLTQ2N2ItOGU1Mi1hODg5 MjE1MmY2M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp1jRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBSBJNWGkSOyIFtbs3M9TMXdBbKFP5e9CBF9oPsJJSvJ3BiS8/c+1Sk ZUqFalM0jkbCe5ibMm0v2mFhOLkwojdR7oWYwXqKysokOkejAyuP1cqDMU4FOT64 qKRYzRNiYrxGv+tQ1YsZYDQ2lY7KL2l+2Uv9l9Z33/iZvaEPE8040uGr9ilHVYXK V/j0OcAV+nFX23/Zz4BmK5ydCOmW+d2VLaz6zGkLQAExziUg6RGBCWnlp5gdwIgQ 1u4f1R9R9Ssr/iZCsOH5EDf4MGt/KcXodwmOBUULhvyKVBxk9/sIAbgY/ADKBA/h dlYOLR6Z84XrEwnaLpTUW2zzDQqpx94= -----END CERTIFICATE-----Generated at Mon Nov 3 01:38:23 2025 by rpki-client