$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/16ae4c60-d4fd-3f64-99a0-859eb6099c14.roa File: 16ae4c60-d4fd-3f64-99a0-859eb6099c14.roa (raw, json) Hash identifier: DQ5gcsVdhqQehWnrkQ0ailHh8d11C4uLoswxWJI7wUY= Subject key identifier: 7F:71:03:3B:00:DD:F2:D0:E4:EB:36:EE:B5:01:61:7D:CE:8A:7D:71 Certificate issuer: /CN=369643f4-a849-4a0c-af2a-677957de74bc Certificate serial: 010D0C9F4328584B891778E08E21861B89917680 Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/16ae4c60-d4fd-3f64-99a0-859eb6099c14.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 397032 IP address blocks: 208.87.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:78:e0:8e:21:86:1b:89:91:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=49c8907e-8250-4320-bfe3-05ac2955acb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:af:b9:1c:e6:27:cf:1a:26:98:d8:05:95:86: 4d:db:c6:6a:d2:64:5d:fc:6b:ea:02:3f:61:11:0f: 38:56:e4:a5:2e:6e:db:ca:f8:10:8d:26:6c:fc:dc: d3:71:39:5b:21:23:2d:e6:c2:31:05:41:83:83:7e: 8e:a2:94:0a:96:e1:3b:bf:a0:e9:cc:09:38:1a:f1: ea:ab:7b:a5:29:d5:e4:1e:c7:22:5b:ae:ac:84:34: cb:f9:58:fc:64:88:25:82:0b:78:59:10:a8:32:94: 93:dc:a6:87:58:24:f2:cb:ac:62:99:34:15:56:d2: 14:d4:ea:f0:24:4c:d7:96:2f:ca:38:2f:54:d8:fc: 1c:f8:9e:34:4b:04:3b:4d:5a:86:65:bd:2c:fc:f2: f2:bd:ae:3a:a4:9d:cf:ce:61:be:4e:3f:38:48:e2: bf:5d:43:2a:a7:c3:b4:68:1f:de:78:4f:9b:54:a0: ac:82:d9:ab:6f:82:dd:51:20:db:e9:83:db:dc:ea: f7:d3:fc:cb:7e:6e:5a:87:34:e2:ba:45:e6:ad:9d: d4:e2:53:ab:a6:ea:5b:1f:9b:ac:a4:ba:56:3d:5b: 05:d2:96:2c:66:5f:b3:28:0b:53:f6:1e:ac:85:07: ca:bb:95:dc:af:e5:12:5f:17:d8:2a:10:c6:2c:c5: 1a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:71:03:3B:00:DD:F2:D0:E4:EB:36:EE:B5:01:61:7D:CE:8A:7D:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/16ae4c60-d4fd-3f64-99a0-859eb6099c14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl X509v3 Authority Key Identifier: keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer sbgp-ipAddrBlock: critical IPv4: 208.87.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:f9:9d:76:fc:b1:d5:a7:50:d3:ad:46:d3:cc:28:8e:70:b6: 51:57:5a:35:28:47:92:44:96:a3:b6:b0:76:f5:da:7e:f2:8e: ee:b8:ff:b8:78:42:84:1b:21:4d:64:a8:88:ab:35:b7:4e:d3: 83:f6:dd:e0:9b:50:85:6c:85:a2:2c:4c:ee:ed:86:b0:9f:1d: a2:d4:d3:df:6a:ba:59:49:a8:7b:80:3b:7f:79:e7:8e:33:d9: 07:7e:c0:ac:6a:f8:47:7a:f0:0d:fb:3b:65:44:6e:48:c8:29: 7b:e0:eb:b8:c2:79:b2:6c:8f:a2:9b:98:a0:69:cb:60:87:4e: 9c:23:2c:1b:d7:7c:cd:d1:79:37:9b:58:73:31:43:e8:c8:e6: 63:91:20:8d:f5:66:cc:03:eb:f3:ed:e1:ef:16:04:94:46:a4: 15:d4:9d:50:5d:34:ac:54:4e:5a:1d:44:2e:0f:d9:3a:6b:e1: a6:cf:6d:18:62:2f:53:42:ec:ad:52:5a:c8:10:fd:32:b4:14: e7:24:9c:2c:43:c6:09:85:d7:88:7e:8d:54:72:b6:d6:d6:a4: b8:a5:56:52:dc:90:54:c2:63:29:6c:7e:d0:dc:89:ad:96:7c: 63:00:a6:84:65:9c:14:4c:48:9c:04:49:63:c5:ca:3f:16:75: 20:8b:14:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF3jgjiGGG4mRdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3 NGJjMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk NDljODkwN2UtODI1MC00MzIwLWJmZTMtMDVhYzI5NTVhY2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq+5HOYnzxommNgFlYZN28Zq0mRd/GvqAj9h EQ84VuSlLm7byvgQjSZs/NzTcTlbISMt5sIxBUGDg36OopQKluE7v6DpzAk4GvHq q3ulKdXkHsciW66shDTL+Vj8ZIglggt4WRCoMpST3KaHWCTyy6ximTQVVtIU1Orw JEzXli/KOC9U2Pwc+J40SwQ7TVqGZb0s/PLyva46pJ3PzmG+Tj84SOK/XUMqp8O0 aB/eeE+bVKCsgtmrb4LdUSDb6YPb3Or30/zLfm5ahzTiukXmrZ3U4lOrpupbH5us pLpWPVsF0pYsZl+zKAtT9h6shQfKu5Xcr+USXxfYKhDGLMUaSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9xAzsA3fLQ5Os27rUBYX3Oin1xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2 NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvMTZhZTRjNjAtZDRmZC0z ZjY0LTk5YTAtODU5ZWI2MDk5YzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5 NTdkZTc0YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FdlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKD5nXb8sdWnUNOtRtPMKI5wtlFXWjUoR5JElqO2sHb12n7yju64/7h4 QoQbIU1kqIirNbdO04P23eCbUIVshaIsTO7thrCfHaLU099qullJqHuAO395544z 2Qd+wKxq+Ed68A37O2VEbkjIKXvg67jCebJsj6KbmKBpy2CHTpwjLBvXfM3ReTeb WHMxQ+jI5mORII31ZswD6/Pt4e8WBJRGpBXUnVBdNKxUTlodRC4P2Tpr4abPbRhi L1NC7K1SWsgQ/TK0FOcknCxDxgmF14h+jVRyttbWpLilVlLckFTCYylsftDcia2W fGMApoRlnBRMSJwESWPFyj8WdSCLFMA= -----END CERTIFICATE-----Generated at Mon Oct 20 10:05:57 2025 by rpki-client