$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/be14934f-b3aa-3c8e-9ab3-eaebaa311063.roa File: be14934f-b3aa-3c8e-9ab3-eaebaa311063.roa (raw, json) Hash identifier: hwr2u9hWOZeSRjwP8Jkc9aBGJBumbXog+WW3lOpg9SE= Subject key identifier: B6:6C:C4:32:B6:84:AA:5E:94:C3:52:A6:21:13:E9:EA:EA:7E:B7:A9 Certificate issuer: /CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Certificate serial: 010D0C9F4328584B48E1C6F480539FBD3BA90D00 Authority key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/be14934f-b3aa-3c8e-9ab3-eaebaa311063.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 395567 IP address blocks: 216.153.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:c6:f4:80:53:9f:bd:3b:a9:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=30b8c889-2711-4f85-995b-9c79d2e02aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:dd:17:36:ea:df:0f:74:8e:17:ca:a0:3e:d3: 07:3d:6d:ba:8f:e0:4d:9d:21:75:20:48:b1:e6:97: 13:17:e1:1a:49:34:43:29:c6:67:fd:ab:11:af:58: ee:45:df:3e:df:68:48:0d:02:64:55:6b:a2:b8:e1: d6:ff:7d:4d:20:98:e8:85:44:8b:24:25:b1:bd:d2: 6c:92:d9:77:4f:8d:b8:cb:55:a4:ba:2b:62:60:08: 69:41:6e:6f:61:fd:65:3c:91:a0:f9:d3:75:0a:f2: c1:27:d5:9e:a9:36:9a:a5:2d:9c:ba:8a:a3:35:70: 89:51:c4:24:c9:e0:0f:78:92:fb:a8:c3:0c:9b:f6: c5:30:26:83:e2:75:b8:22:0c:43:da:e2:47:39:b6: 42:44:39:dc:e5:ca:43:6e:2b:aa:e0:91:1e:b9:91: 02:f9:e3:91:15:38:bb:d1:49:2e:1b:14:b6:97:e8: a4:a3:56:dd:6e:57:34:b3:a7:2b:c5:29:bd:d2:d8: 62:7a:6f:ef:d3:b8:83:06:20:de:5c:c0:9c:53:c9: b5:b4:48:f3:f9:7f:77:6d:bf:5b:be:33:06:18:f5: fa:7c:49:da:d2:78:37:4f:2b:bd:49:dc:72:a2:7a: 8b:dd:0d:12:10:23:6a:e6:7f:34:0e:6a:ca:6a:fc: e8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:6C:C4:32:B6:84:AA:5E:94:C3:52:A6:21:13:E9:EA:EA:7E:B7:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/be14934f-b3aa-3c8e-9ab3-eaebaa311063.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl X509v3 Authority Key Identifier: keyid:43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer sbgp-ipAddrBlock: critical IPv4: 216.153.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:5a:da:1c:fa:f6:51:bb:ed:8e:7f:e2:12:56:41:d5:eb:b9: 67:04:7c:2f:e0:5b:0d:46:a0:dd:ef:5f:b0:79:bc:09:0b:51: f3:a4:c2:c6:03:8a:c4:75:9f:e9:ae:6c:e5:fc:0d:21:e3:ee: b5:7b:c3:1c:1a:ab:d3:7a:9a:bb:4a:db:b1:11:6f:4a:16:3c: 1f:91:98:c9:79:1a:0c:91:b9:91:80:dc:92:59:61:cc:ec:67: 46:39:80:36:57:3b:54:61:b4:37:6b:32:bd:f4:5b:a3:e8:a8: 2c:8e:88:4a:65:97:6e:36:5c:91:23:de:1a:cb:56:f0:5f:30: 16:5d:01:cb:fc:67:bb:80:26:8d:99:5d:a7:45:46:12:67:2e: 15:4b:89:2e:d2:2b:bf:57:e2:67:74:cf:cf:e4:8d:b4:73:b8: 88:3a:b1:cb:e9:c8:16:e0:d1:d6:4d:14:6e:e4:0c:5b:4f:56: f5:d6:bd:a0:9d:02:87:e6:98:b3:87:df:9f:1b:e1:c6:36:53: b2:bd:49:ed:c4:db:82:37:8f:b7:6d:b8:65:d4:02:fd:bb:8c: 5c:3b:e7:4d:cc:16:ea:26:5d:62:a0:4e:10:8b:4a:5e:bc:a1: 2f:f2:20:b7:ba:fa:47:9c:94:77:fd:4a:4d:2e:64:2d:64:e9: 48:43:72:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4cb0gFOfvTupDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU3N2I1YWYtYTFiNS00ODU4LWI2MWQtZjA5ZmQ2N2Y3 Y2IzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MzBiOGM4ODktMjcxMS00Zjg1LTk5NWItOWM3OWQyZTAyYWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN0XNurfD3SOF8qgPtMHPW26j+BNnSF1IEix 5pcTF+EaSTRDKcZn/asRr1juRd8+32hIDQJkVWuiuOHW/31NIJjohUSLJCWxvdJs ktl3T424y1WkuitiYAhpQW5vYf1lPJGg+dN1CvLBJ9WeqTaapS2cuoqjNXCJUcQk yeAPeJL7qMMMm/bFMCaD4nW4IgxD2uJHObZCRDnc5cpDbiuq4JEeuZEC+eORFTi7 0UkuGxS2l+iko1bdblc0s6crxSm90thiem/v07iDBiDeXMCcU8m1tEjz+X93bb9b vjMGGPX6fEna0ng3Tyu9SdxyonqL3Q0SECNq5n80DmrKavzo2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZsxDK2hKpelMNSpiET6erqfrepMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3 YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlmZDY3ZjdjYjMvYmUxNDkzNGYtYjNhYS0z YzhlLTlhYjMtZWFlYmFhMzExMDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWU3N2I1YWYtYTFiNS00ODU4LWI2 MWQtZjA5ZmQ2N2Y3Y2IzL2FlNzdiNWFmLWExYjUtNDg1OC1iNjFkLWYwOWZkNjdm N2NiMy5jcmwwHwYDVR0jBBgwFoAUQ8bZZVYwh5KCSgXB185ho81dPhkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlm ZDY3ZjdjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2JkYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9a2hz69lG77Y5/4hJWQdXruWcEfC/gWw1GoN3vX7B5vAkLUfOkwsYD isR1n+mubOX8DSHj7rV7wxwaq9N6mrtK27ERb0oWPB+RmMl5GgyRuZGA3JJZYczs Z0Y5gDZXO1RhtDdrMr30W6PoqCyOiEpll242XJEj3hrLVvBfMBZdAcv8Z7uAJo2Z XadFRhJnLhVLiS7SK79X4md0z8/kjbRzuIg6scvpyBbg0dZNFG7kDFtPVvXWvaCd AofmmLOH358b4cY2U7K9Se3E24I3j7dtuGXUAv27jFw7503MFuomXWKgThCLSl68 oS/yILe6+keclHf9Sk0uZC1k6UhDchw= -----END CERTIFICATE-----Generated at Mon Oct 20 20:43:18 2025 by rpki-client