$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8ca76fe4-8f88-33e2-bda3-f8606881abf6.roa File: 8ca76fe4-8f88-33e2-bda3-f8606881abf6.roa (raw, json) Hash identifier: dUWlZ0sFDJFpr3qYgHSc7+IgxYIkpBwsSR0l7XEa+uw= Subject key identifier: A9:A5:DB:58:9D:A0:E3:5F:89:19:1C:D1:91:A0:35:21:40:A6:F8:BB Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B2FC1B916623316EC5F494980 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8ca76fe4-8f88-33e2-bda3-f8606881abf6.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 3949 IP address blocks: 157.238.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:b9:16:62:33:16:ec:5f:49:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=a040e1e3-14cb-40a7-9162-fe5d25679eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f7:5d:45:32:e5:98:cd:34:15:c9:df:09:45: ce:a4:e2:06:30:43:db:28:96:2d:a5:de:59:46:4a: 1b:cb:44:ac:54:ec:ed:d0:ee:17:7a:82:a1:02:85: 3a:b2:6c:c3:eb:1b:a8:5e:8c:89:1b:f6:66:9d:c3: b6:25:76:b2:18:1e:18:3c:97:4c:eb:ab:d7:14:1d: b1:15:f0:42:88:38:36:ad:65:b6:e6:dc:38:fe:61: 96:26:48:a7:a4:d6:13:f7:f8:4c:23:a6:35:a1:97: 93:ef:e2:91:53:9e:f3:b0:d5:98:4d:2b:be:86:64: ea:92:5a:3f:15:9b:18:62:29:f1:71:88:c2:c8:9f: 12:32:67:07:f9:1b:77:df:99:95:80:ed:da:08:e1: 2e:3b:01:78:e8:89:65:89:e3:2f:6a:73:40:eb:71: e8:31:d7:fd:8f:27:f5:6f:97:a3:9a:0c:2f:c5:48: 3c:d5:9d:e2:68:c0:ba:92:db:3f:c8:19:e4:57:75: 56:68:7c:d0:e4:d5:4c:d7:32:02:8f:9a:66:b3:af: 58:1b:8b:89:c8:63:56:4d:34:fb:4a:38:43:5d:0e: fd:86:96:39:e5:f5:a7:86:7c:1b:fb:63:16:87:69: 23:0f:ff:45:54:e8:b2:3b:46:23:35:15:89:b9:7c: 23:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A5:DB:58:9D:A0:E3:5F:89:19:1C:D1:91:A0:35:21:40:A6:F8:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8ca76fe4-8f88-33e2-bda3-f8606881abf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 157.238.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:b6:85:d4:65:11:b4:6b:01:a7:10:0d:f9:ea:09:9e:d2:05: f7:da:43:ac:7a:26:ec:85:87:11:08:6a:02:3e:0c:56:bb:8e: 72:0b:83:f6:cf:5c:3b:ab:a9:8a:e0:fd:9b:0a:2b:c9:fe:8f: 7b:85:4c:1c:06:4b:40:db:ee:83:23:e3:1e:9f:2d:8d:4b:02: 99:f0:b2:3d:5b:ff:25:e7:d5:41:78:c9:da:bb:28:93:c3:06: 65:d7:f9:a2:8d:96:06:9c:9c:63:a8:e4:5a:68:fe:77:0b:0b: eb:14:df:6e:58:58:c0:2c:76:93:3f:9d:6d:7c:d4:0f:ac:d1: 8c:a2:3b:75:74:4a:3c:4b:23:c0:a8:fd:7a:2f:0d:a9:28:28: df:d6:54:29:43:b6:11:36:f9:5d:d9:39:10:38:b7:ed:42:2c: f3:67:fe:22:88:da:0b:a2:aa:24:da:ed:62:cf:f6:98:c6:5b: e7:4d:c1:0e:32:c9:2f:0c:41:be:17:80:e0:db:d7:b2:27:0e: 07:d0:b9:0a:08:c4:2d:e0:bd:e7:10:b1:b4:a7:4e:59:68:47: cd:12:17:5d:d7:12:a9:8d:93:6c:ea:ca:a7:9c:36:0d:4c:3b: 1b:e6:90:86:51:7b:6f:1e:00:48:69:35:00:1b:1c:08:29:05: 28:c1:ab:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwbkWYjMW7F9JSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk YTA0MGUxZTMtMTRjYi00MGE3LTkxNjItZmU1ZDI1Njc5ZWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfddRTLlmM00FcnfCUXOpOIGMEPbKJYtpd5Z Rkoby0SsVOzt0O4XeoKhAoU6smzD6xuoXoyJG/ZmncO2JXayGB4YPJdM66vXFB2x FfBCiDg2rWW25tw4/mGWJkinpNYT9/hMI6Y1oZeT7+KRU57zsNWYTSu+hmTqklo/ FZsYYinxcYjCyJ8SMmcH+Rt335mVgO3aCOEuOwF46IllieMvanNA63HoMdf9jyf1 b5ejmgwvxUg81Z3iaMC6kts/yBnkV3VWaHzQ5NVM1zICj5pms69YG4uJyGNWTTT7 SjhDXQ79hpY55fWnhnwb+2MWh2kjD/9FVOiyO0YjNRWJuXwjSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKml21idoONfiRkc0ZGgNSFApvi7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOGNhNzZmZTQtOGY4OC0z M2UyLWJkYTMtZjg2MDY4ODFhYmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCne7UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKW2hdRlEbRrAacQDfnqCZ7SBffaQ6x6JuyFhxEIagI+DFa7jnILg/bP XDurqYrg/ZsKK8n+j3uFTBwGS0Db7oMj4x6fLY1LApnwsj1b/yXn1UF4ydq7KJPD BmXX+aKNlgacnGOo5Fpo/ncLC+sU325YWMAsdpM/nW181A+s0YyiO3V0SjxLI8Co /XovDakoKN/WVClDthE2+V3ZORA4t+1CLPNn/iKI2guiqiTa7WLP9pjGW+dNwQ4y yS8MQb4XgODb17InDgfQuQoIxC3gvecQsbSnTlloR80SF13XEqmNk2zqyqecNg1M OxvmkIZRe28eAEhpNQAbHAgpBSjBq5w= -----END CERTIFICATE-----Generated at Tue Oct 14 10:51:43 2025 by rpki-client