$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/ae0a55c7-9f99-37de-bebc-cb4c40bdc630.roa File: ae0a55c7-9f99-37de-bebc-cb4c40bdc630.roa (raw, json) Hash identifier: wJocX2Ma3BAui/taeHBTa+eCjcAxoT4a/IjBCIF0SVk= Subject key identifier: 9C:E7:B6:0C:F9:87:80:C1:34:15:C2:4B:FC:AB:11:D0:A1:27:F3:B5 Certificate issuer: /CN=9ae61efc-a402-4975-bfe7-f7ddda75a628 Certificate serial: 010D0C9F4328584AFC1C06890934E798853F8B00 Authority key identifier: 57:FC:76:D2:36:2F:CA:A9:90:CD:DA:FB:B7:BF:EE:7B:B6:80:9A:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/ae0a55c7-9f99-37de-bebc-cb4c40bdc630.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 6206 IP address blocks: 209.135.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/9ae61efc-a402-4975-bfe7-f7ddda75a628.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/9ae61efc-a402-4975-bfe7-f7ddda75a628.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:06:89:09:34:e7:98:85:3f:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ae61efc-a402-4975-bfe7-f7ddda75a628 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=d35aa40c-bd35-4466-a8af-4094317402a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:39:9f:0c:13:61:86:7b:8e:c5:88:d6:28:e6: 05:54:d8:03:96:f4:5c:ba:ea:0b:a5:98:a5:f0:a6: 08:e5:a1:d3:5d:e0:cb:bc:86:06:d2:cf:e9:ea:c9: cd:d3:fa:e7:5d:7b:2e:66:15:a9:77:ba:33:e1:d9: fa:f5:41:b7:d4:19:5e:eb:b5:b2:49:1c:ef:d0:27: 71:ba:32:2a:53:a3:59:a3:d7:a3:0c:38:c0:8e:da: a5:66:3e:8b:0a:ff:35:bf:bb:a3:ac:01:a9:2f:3f: aa:cd:d3:f0:fe:9c:4f:51:eb:50:8c:52:04:26:22: 49:97:94:20:8f:f1:ba:ed:93:13:58:bd:4e:06:43: e4:e1:59:e9:9d:3f:73:95:a7:5d:b7:7f:92:aa:63: 80:14:81:6f:3e:0a:e4:8f:f3:23:73:c0:4d:35:db: 54:24:27:84:d4:f1:a0:53:6d:20:43:f7:14:d5:a9: 47:d3:a8:13:fa:92:d6:0e:8d:de:1a:f4:eb:d4:97: 7a:45:1a:8b:c0:0e:f6:0c:84:0d:56:2d:f5:d2:9e: 37:69:4d:66:ae:e7:a5:a0:1a:06:f9:f7:d6:84:9f: e1:3a:b6:e0:e2:e3:36:aa:03:e1:fb:c8:fe:5c:03: 3c:3d:28:01:f4:07:66:c9:0b:a8:1a:20:ab:1e:43: 60:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E7:B6:0C:F9:87:80:C1:34:15:C2:4B:FC:AB:11:D0:A1:27:F3:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/ae0a55c7-9f99-37de-bebc-cb4c40bdc630.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/9ae61efc-a402-4975-bfe7-f7ddda75a628.crl X509v3 Authority Key Identifier: keyid:57:FC:76:D2:36:2F:CA:A9:90:CD:DA:FB:B7:BF:EE:7B:B6:80:9A:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628.cer sbgp-ipAddrBlock: critical IPv4: 209.135.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:39:bd:cc:18:66:c3:58:ea:63:64:d8:d6:42:fb:dc:4c:6b: bb:c9:3f:e3:a4:1d:3e:fc:c9:70:53:68:33:23:26:e5:f9:85: 7a:27:b5:22:12:a1:f2:35:ca:d5:76:12:ae:b2:60:9b:e0:c0: 82:d4:0c:75:b5:e1:41:4c:c6:9c:c0:fc:3a:9f:34:7a:2b:d3: e5:1b:81:f7:74:ad:9a:cd:a2:74:6c:0d:d6:a7:af:bf:a9:d3: a8:91:7f:f2:22:ac:d4:f9:54:24:78:5e:97:0f:81:92:5f:51: 8b:43:e0:b2:79:70:21:87:a7:79:30:36:33:a2:85:54:b8:2b: ab:1c:b2:6f:20:66:e5:d2:44:99:8f:7a:8e:01:32:6c:df:eb: df:50:95:b1:11:f6:9c:44:8b:99:ee:a7:26:37:c6:07:13:1b: 07:9a:06:4c:05:e9:5a:3e:8d:22:b6:3f:b4:04:ea:d8:43:8c: 13:ff:eb:8d:c0:72:7f:29:16:06:75:7b:f6:d1:0a:e4:e7:74: a8:9e:97:9a:a4:c4:bb:71:5a:58:c4:64:fe:ef:5e:56:d0:23: 69:f6:32:c9:a6:c9:fb:37:c0:84:30:0a:8e:32:36:c2:27:8d: 09:7a:01:47:e7:b7:e8:86:65:23:b5:4e:a9:ab:a5:6e:4e:8a: fa:d9:a9:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HAaJCTTnmIU/iwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFlNjFlZmMtYTQwMi00OTc1LWJmZTctZjdkZGRhNzVh NjI4MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZDM1YWE0MGMtYmQzNS00NDY2LWE4YWYtNDA5NDMxNzQwMmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTmfDBNhhnuOxYjWKOYFVNgDlvRcuuoLpZil 8KYI5aHTXeDLvIYG0s/p6snN0/rnXXsuZhWpd7oz4dn69UG31Ble67WySRzv0Cdx ujIqU6NZo9ejDDjAjtqlZj6LCv81v7ujrAGpLz+qzdPw/pxPUetQjFIEJiJJl5Qg j/G67ZMTWL1OBkPk4VnpnT9zladdt3+SqmOAFIFvPgrkj/Mjc8BNNdtUJCeE1PGg U20gQ/cU1alH06gT+pLWDo3eGvTr1Jd6RRqLwA72DIQNVi310p43aU1mrueloBoG +ffWhJ/hOrbg4uM2qgPh+8j+XAM8PSgB9AdmyQuoGiCrHkNgmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzntgz5h4DBNBXCS/yrEdChJ/O1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85YWU2 MWVmYy1hNDAyLTQ5NzUtYmZlNy1mN2RkZGE3NWE2MjgvYWUwYTU1YzctOWY5OS0z N2RlLWJlYmMtY2I0YzQwYmRjNjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOWFlNjFlZmMtYTQwMi00OTc1LWJm ZTctZjdkZGRhNzVhNjI4LzlhZTYxZWZjLWE0MDItNDk3NS1iZmU3LWY3ZGRkYTc1 YTYyOC5jcmwwHwYDVR0jBBgwFoAUV/x20jYvyqmQzdr7t7/ue7aAmuQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85YWU2MWVmYy1hNDAyLTQ5NzUtYmZlNy1mN2Rk ZGE3NWE2MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0YewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACY5vcwYZsNY6mNk2NZC+9xMa7vJP+OkHT78yXBTaDMjJuX5hXontSIS ofI1ytV2Eq6yYJvgwILUDHW14UFMxpzA/DqfNHor0+Ubgfd0rZrNonRsDdanr7+p 06iRf/IirNT5VCR4XpcPgZJfUYtD4LJ5cCGHp3kwNjOihVS4K6scsm8gZuXSRJmP eo4BMmzf699QlbER9pxEi5nupyY3xgcTGweaBkwF6Vo+jSK2P7QE6thDjBP/643A cn8pFgZ1e/bRCuTndKiel5qkxLtxWljEZP7vXlbQI2n2Msmmyfs3wIQwCo4yNsIn jQl6AUfnt+iGZSO1TqmrpW5OivrZqbE= -----END CERTIFICATE-----Generated at Sun Sep 7 00:11:56 2025 by rpki-client