$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac/8df264b1-40cf-3ac2-9486-ae088c2c3173.roa File: 8df264b1-40cf-3ac2-9486-ae088c2c3173.roa (raw, json) Hash identifier: vMMjt3lKDvBlsQJgKzAKuOB7UGnXmDDyGBMysGLssNQ= Subject key identifier: 2A:D8:50:66:A6:FE:B7:9C:40:91:23:96:71:96:2E:65:68:30:66:AA Certificate issuer: /CN=ae28eec8-afdc-41a3-8af9-7fd6c40e68ac Certificate serial: 010D0C9F4328584B3C490CDA154C969E8EB03400 Authority key identifier: C4:D1:EB:E6:A4:69:B0:AE:04:66:6F:76:A8:95:C2:DD:9A:4E:4E:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac/8df264b1-40cf-3ac2-9486-ae088c2c3173.roa Signing time: Thu 18 Sep 2025 12:43:23 +0000 ROA not before: Thu 18 Sep 2025 12:43:23 +0000 ROA not after: Wed 17 Dec 2025 13:43:23 +0000 asID: 203963 IP address blocks: 216.238.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:49:0c:da:15:4c:96:9e:8e:b0:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae28eec8-afdc-41a3-8af9-7fd6c40e68ac Validity Not Before: Sep 18 12:43:23 2025 GMT Not After : Dec 17 13:43:23 2025 GMT Subject: CN=cd14bf5c-ac28-405e-ac63-4d464cfdf284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7e:19:1c:9d:0e:66:9f:4c:91:c3:84:1f:55: 97:92:61:35:52:02:b4:db:50:e8:48:94:42:bc:69: d3:3e:b2:c2:74:07:e9:36:0c:59:cb:e0:6f:86:ff: 77:a6:77:db:ae:f8:48:b1:99:33:f0:5f:62:a1:1f: 95:09:5a:02:c9:e6:d6:5b:3c:a6:91:d9:e1:3f:cf: 82:bb:eb:98:3f:f3:63:ae:ae:42:22:98:0c:36:d1: 65:c1:5b:7b:8d:d8:21:9f:2b:58:9a:71:c7:f4:3f: 7e:5e:b0:75:7c:82:7e:4a:48:c7:5d:8b:cc:10:4d: 44:17:fe:0d:c7:33:df:00:26:35:c5:61:41:2c:d8: 5b:1b:a1:11:98:9c:1e:58:30:58:34:f5:f2:d7:40: fc:09:81:38:dc:59:aa:2c:3d:97:f4:36:c0:c1:f6: 75:2c:8d:66:d9:4a:61:e7:a2:d8:97:12:38:7c:0b: bd:fe:a0:d9:8b:77:d2:a0:b6:f0:46:1a:4a:f2:77: e0:a5:78:c9:ee:24:0d:35:c0:08:b7:93:35:03:47: 64:e6:2b:56:69:d2:4a:1e:2a:4f:41:e9:25:67:79: ca:1c:14:3a:ca:fb:10:aa:48:d8:87:29:7b:b6:7b: b7:57:55:51:36:35:8d:9f:88:eb:45:15:04:90:be: 92:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D8:50:66:A6:FE:B7:9C:40:91:23:96:71:96:2E:65:68:30:66:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac/8df264b1-40cf-3ac2-9486-ae088c2c3173.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac.crl X509v3 Authority Key Identifier: keyid:C4:D1:EB:E6:A4:69:B0:AE:04:66:6F:76:A8:95:C2:DD:9A:4E:4E:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae28eec8-afdc-41a3-8af9-7fd6c40e68ac.cer sbgp-ipAddrBlock: critical IPv4: 216.238.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:f5:1c:21:00:39:2e:b3:29:67:db:23:c0:8a:f1:4a:f9:e6: b7:bb:dc:4c:de:27:a1:ad:5e:aa:73:40:09:ae:c9:ed:79:57: 70:2e:86:ef:ec:7a:d9:09:d7:4f:5d:0c:01:31:7a:52:7a:25: ac:9e:9a:c1:27:0b:ec:ee:59:26:a2:0d:ef:44:11:6a:46:2e: c9:b9:78:92:19:f7:0c:38:e1:e8:2a:0b:72:64:e9:ba:a9:a2: cb:8b:9b:ed:88:f4:90:3f:6d:f8:ce:d5:61:15:53:12:85:45: ce:75:4e:44:ec:f3:05:f6:e7:9e:fb:19:c0:e4:c5:02:d6:f8: 2d:1b:c7:c6:e3:2a:dc:f7:f6:82:74:96:ab:95:10:c8:bf:4c: 6c:b9:0f:98:a7:16:97:0c:fa:d5:04:0f:6a:c9:4d:8b:f0:2e: 83:28:f8:85:91:cc:15:36:61:de:f1:8d:78:d0:f6:59:a8:35: e7:5b:e4:d4:86:7f:94:55:c0:ac:8a:8a:b4:f3:48:b0:46:fd: dc:81:c8:38:93:45:59:ea:3d:0c:92:1e:fe:78:d5:2d:a8:86: 83:f4:84:55:08:91:0f:4a:c9:f9:45:39:2a:12:46:b2:79:a2: 19:ed:50:4a:c7:66:2c:8e:01:78:d4:95:e4:92:1b:59:22:37: 4d:43:83:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8SQzaFUyWno6wNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWUyOGVlYzgtYWZkYy00MWEzLThhZjktN2ZkNmM0MGU2 OGFjMB4XDTI1MDkxODEyNDMyM1oXDTI1MTIxNzEzNDMyM1owLzEtMCsGA1UEAxMk Y2QxNGJmNWMtYWMyOC00MDVlLWFjNjMtNGQ0NjRjZmRmMjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp34ZHJ0OZp9MkcOEH1WXkmE1UgK021DoSJRC vGnTPrLCdAfpNgxZy+Bvhv93pnfbrvhIsZkz8F9ioR+VCVoCyebWWzymkdnhP8+C u+uYP/Njrq5CIpgMNtFlwVt7jdghnytYmnHH9D9+XrB1fIJ+SkjHXYvMEE1EF/4N xzPfACY1xWFBLNhbG6ERmJweWDBYNPXy10D8CYE43FmqLD2X9DbAwfZ1LI1m2Uph 56LYlxI4fAu9/qDZi3fSoLbwRhpK8nfgpXjJ7iQNNcAIt5M1A0dk5itWadJKHipP QeklZ3nKHBQ6yvsQqkjYhyl7tnu3V1VRNjWNn4jrRRUEkL6SxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrYUGam/recQJEjlnGWLmVoMGaqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hZTI4 ZWVjOC1hZmRjLTQxYTMtOGFmOS03ZmQ2YzQwZTY4YWMvOGRmMjY0YjEtNDBjZi0z YWMyLTk0ODYtYWUwODhjMmMzMTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWUyOGVlYzgtYWZkYy00MWEzLThh ZjktN2ZkNmM0MGU2OGFjL2FlMjhlZWM4LWFmZGMtNDFhMy04YWY5LTdmZDZjNDBl NjhhYy5jcmwwHwYDVR0jBBgwFoAUxNHr5qRpsK4EZm92qJXC3ZpOTkYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hZTI4ZWVjOC1hZmRjLTQxYTMtOGFmOS03ZmQ2 YzQwZTY4YWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2O4kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIr1HCEAOS6zKWfbI8CK8Ur55re73EzeJ6GtXqpzQAmuye15V3Auhu/s etkJ109dDAExelJ6JayemsEnC+zuWSaiDe9EEWpGLsm5eJIZ9ww44egqC3Jk6bqp osuLm+2I9JA/bfjO1WEVUxKFRc51TkTs8wX25577GcDkxQLW+C0bx8bjKtz39oJ0 lquVEMi/TGy5D5inFpcM+tUED2rJTYvwLoMo+IWRzBU2Yd7xjXjQ9lmoNedb5NSG f5RVwKyKirTzSLBG/dyByDiTRVnqPQySHv541S2ohoP0hFUIkQ9KyflFOSoSRrJ5 ohntUErHZiyOAXjUleSSG1kiN01Dg+0= -----END CERTIFICATE-----Generated at Wed Oct 8 21:00:18 2025 by rpki-client