$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/38415cef-c01c-329c-8c56-19ea085fd8f1.roa File: 38415cef-c01c-329c-8c56-19ea085fd8f1.roa (raw, json) Hash identifier: TqZg9Mz94Zy+5rL6FJ+cE2bdI3n/c9NdBzKpKLkplM8= Subject key identifier: 95:10:CA:F2:F9:61:A6:BD:B0:1A:CE:9F:73:FC:09:4C:6F:89:F5:53 Certificate issuer: /CN=858c4eda-1c14-4575-affe-9e4368bf208d Certificate serial: 010D0C9F4328584B047C16EC7ECA8031E3737F00 Authority key identifier: 3F:78:6B:A8:C4:71:A2:5B:59:61:A0:42:6B:C4:88:EE:2D:BB:13:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/38415cef-c01c-329c-8c56-19ea085fd8f1.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 203618 IP address blocks: 23.226.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/858c4eda-1c14-4575-affe-9e4368bf208d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/858c4eda-1c14-4575-affe-9e4368bf208d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:16:ec:7e:ca:80:31:e3:73:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=858c4eda-1c14-4575-affe-9e4368bf208d Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=ae8067a2-ac44-4111-a959-a6e599b2a37f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f3:a2:15:7f:05:7c:33:60:40:ef:6c:2a:09: 98:70:c8:b7:ba:b4:e3:92:c6:d1:17:41:f4:20:55: f3:13:0d:38:6b:93:97:74:dc:94:92:35:39:88:33: 05:68:89:0a:9e:99:71:6e:e6:2b:e8:5b:48:5d:6d: d4:1e:37:31:2d:ee:5e:fd:41:0d:d8:65:e3:a1:d6: 25:d5:1f:f4:bd:91:6e:5b:ee:5a:b4:81:13:b9:96: 69:90:f9:e4:c6:45:c6:fe:ee:24:81:70:99:63:35: 78:b0:e8:bf:30:00:88:f5:c4:a2:4a:2f:a9:01:cf: 00:b7:9a:36:4b:41:b0:e0:4a:90:2d:81:32:4f:09: 6f:7c:b8:15:70:0c:38:59:4a:3c:eb:c8:b6:5c:16: 76:84:ea:7c:2b:0b:6c:56:b2:6d:f2:37:ad:8d:ba: 6e:b6:f7:b6:af:16:af:52:04:17:cb:2c:5a:0d:d2: 43:3f:5d:ac:29:b4:f8:33:64:ad:11:18:be:ca:80: d4:5d:46:e1:c7:8b:f3:27:49:85:e6:92:3e:e8:64: de:69:e2:9f:d4:a8:9b:c9:47:14:66:51:8b:7d:c7: 1d:76:1c:0c:fc:f6:e0:96:e9:5c:8b:50:cc:69:41: 67:1b:da:8d:71:30:d1:87:d1:b9:91:31:ad:6e:53: 86:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:10:CA:F2:F9:61:A6:BD:B0:1A:CE:9F:73:FC:09:4C:6F:89:F5:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/38415cef-c01c-329c-8c56-19ea085fd8f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/858c4eda-1c14-4575-affe-9e4368bf208d.crl X509v3 Authority Key Identifier: keyid:3F:78:6B:A8:C4:71:A2:5B:59:61:A0:42:6B:C4:88:EE:2D:BB:13:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d.cer sbgp-ipAddrBlock: critical IPv4: 23.226.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:53:f3:ce:a5:b0:25:40:a3:b8:87:64:11:52:ef:ac:ab:e0: 3c:c2:85:11:5a:5e:5b:16:70:ce:95:6f:ef:d5:09:73:8a:e6: 6d:95:c3:5c:38:cc:a6:8d:d6:3c:81:dc:4a:b0:3f:92:ba:25: d1:e3:8d:a3:d8:00:08:9e:11:5e:0a:4f:66:be:bf:c4:45:47: 00:ec:f7:d7:64:e8:29:f2:9e:66:14:9d:f2:71:26:82:d3:81: 0d:82:fc:c7:59:7f:36:a3:cc:25:b2:05:44:35:40:93:e6:1b: ed:bd:6e:4e:aa:fc:4d:d3:aa:8a:5f:c8:ac:0e:73:12:5a:56: 37:00:c7:29:7b:39:19:e5:a5:60:de:66:28:63:0b:4a:9a:40: b2:31:f5:1a:c9:c5:70:ac:fd:ef:f3:7f:8a:0d:42:a7:c4:00: 1f:bd:ac:1d:9d:35:bd:10:91:71:64:4a:1f:29:c0:20:0d:82: 9c:28:a7:00:5b:3c:7a:72:6a:4a:89:3a:09:b5:a0:ef:59:38: 01:0e:ef:0d:8e:67:16:f6:c6:2d:37:e7:c4:30:2a:53:46:97: 87:25:09:44:7c:a0:8b:dd:4d:c3:17:6c:ba:b1:4d:1b:bc:ac: a3:2a:8e:f7:37:98:db:a5:ce:24:c1:ea:fa:e3:25:47:c5:94: e2:13:67:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfBbsfsqAMeNzfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODU4YzRlZGEtMWMxNC00NTc1LWFmZmUtOWU0MzY4YmYy MDhkMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk YWU4MDY3YTItYWM0NC00MTExLWE5NTktYTZlNTk5YjJhMzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPOiFX8FfDNgQO9sKgmYcMi3urTjksbRF0H0 IFXzEw04a5OXdNyUkjU5iDMFaIkKnplxbuYr6FtIXW3UHjcxLe5e/UEN2GXjodYl 1R/0vZFuW+5atIETuZZpkPnkxkXG/u4kgXCZYzV4sOi/MACI9cSiSi+pAc8At5o2 S0Gw4EqQLYEyTwlvfLgVcAw4WUo868i2XBZ2hOp8KwtsVrJt8jetjbputve2rxav UgQXyyxaDdJDP12sKbT4M2StERi+yoDUXUbhx4vzJ0mF5pI+6GTeaeKf1KibyUcU ZlGLfccddhwM/Pbglulci1DMaUFnG9qNcTDRh9G5kTGtblOGmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUQyvL5Yaa9sBrOn3P8CUxvifVTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84NThj NGVkYS0xYzE0LTQ1NzUtYWZmZS05ZTQzNjhiZjIwOGQvMzg0MTVjZWYtYzAxYy0z MjljLThjNTYtMTllYTA4NWZkOGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODU4YzRlZGEtMWMxNC00NTc1LWFm ZmUtOWU0MzY4YmYyMDhkLzg1OGM0ZWRhLTFjMTQtNDU3NS1hZmZlLTllNDM2OGJm MjA4ZC5jcmwwHwYDVR0jBBgwFoAUP3hrqMRxoltZYaBCa8SI7i27E4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84NThjNGVkYS0xYzE0LTQ1NzUtYWZmZS05ZTQz NjhiZjIwOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+JyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJT886lsCVAo7iHZBFS76yr4DzChRFaXlsWcM6Vb+/VCXOK5m2Vw1w4 zKaN1jyB3EqwP5K6JdHjjaPYAAieEV4KT2a+v8RFRwDs99dk6CnynmYUnfJxJoLT gQ2C/MdZfzajzCWyBUQ1QJPmG+29bk6q/E3TqopfyKwOcxJaVjcAxyl7ORnlpWDe ZihjC0qaQLIx9RrJxXCs/e/zf4oNQqfEAB+9rB2dNb0QkXFkSh8pwCANgpwopwBb PHpyakqJOgm1oO9ZOAEO7w2OZxb2xi0358QwKlNGl4clCUR8oIvdTcMXbLqxTRu8 rKMqjvc3mNulziTB6vrjJUfFlOITZ/o= -----END CERTIFICATE-----Generated at Mon Oct 20 02:43:17 2025 by rpki-client