$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/38baa28c-5f18-3003-b482-8efaa6947bef.roa File: 38baa28c-5f18-3003-b482-8efaa6947bef.roa (raw, json) Hash identifier: qireGxjsMxsJiT56XvBy5d+FGfWEPbv0b/JJx6AmeYo= Subject key identifier: 32:AB:B7:E7:C7:82:45:5B:84:F3:E5:37:FF:4F:0F:1D:38:08:0F:9C Certificate issuer: /CN=d9a6669b-6d25-4186-a757-3c289bdc8031 Certificate serial: 010D0C9F4328584B2496D975EC31D9689133C800 Authority key identifier: EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/38baa28c-5f18-3003-b482-8efaa6947bef.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 12022 IP address blocks: 208.83.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:d9:75:ec:31:d9:68:91:33:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9a6669b-6d25-4186-a757-3c289bdc8031 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=353a8da1-7793-43ea-900e-6ef66d544116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c5:9e:55:fa:d4:20:10:3c:2d:c8:5b:29:b0: 73:62:82:8a:eb:46:6f:99:69:4a:66:c7:f6:05:06: 37:b0:54:f0:c7:d9:48:51:f7:a8:89:34:80:48:f3: ff:99:cf:d8:e1:a1:dd:d5:9e:52:30:90:67:0f:f7: f4:6d:33:e8:8e:b2:dc:17:be:03:fe:01:4c:49:23: a8:8e:93:8d:c0:19:99:e3:a9:79:de:c1:8e:8f:f1: b8:49:fb:0e:c9:45:ef:60:68:72:52:c7:46:28:1a: 75:05:03:41:fb:2d:31:5c:4a:ab:af:ff:4e:ce:72: b7:c1:39:b8:4e:b6:57:2c:b4:4c:3b:90:67:42:43: 75:59:e4:43:af:64:eb:bf:13:b3:fb:30:47:dd:18: a8:bb:5a:36:f3:3c:65:01:bf:dc:a7:80:4f:3e:cb: dc:9d:ba:ca:4f:5c:e0:c9:b7:13:5c:67:80:80:03: 18:d3:97:37:bc:41:04:a2:cc:af:10:a7:68:db:8b: a9:c0:60:99:e8:88:74:be:cb:bb:17:39:e7:a3:44: 08:a5:3e:29:60:03:4f:ad:83:a0:0b:ae:ff:34:60: ad:b8:f8:2b:dc:8c:7a:8a:22:36:ba:e8:b0:35:94: b9:c5:05:4b:18:e1:4e:8a:fe:fa:ea:38:b0:fc:cb: d2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AB:B7:E7:C7:82:45:5B:84:F3:E5:37:FF:4F:0F:1D:38:08:0F:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/38baa28c-5f18-3003-b482-8efaa6947bef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.crl X509v3 Authority Key Identifier: keyid:EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer sbgp-ipAddrBlock: critical IPv4: 208.83.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:cc:11:37:a2:b2:d9:f5:7b:81:f6:4e:92:25:3e:a5:e7:7a: f5:40:1d:6f:91:bb:07:59:ff:4b:4b:8b:fc:76:cf:85:29:0e: c1:fd:6d:a9:20:5b:bd:87:13:77:c1:6e:13:08:f5:0c:aa:74: 10:42:39:3a:37:17:e7:fd:b0:65:81:2d:fc:0c:14:10:d7:d6: d8:88:04:e4:91:35:f6:42:92:6e:a8:fd:34:14:73:38:51:0b: 49:fa:13:b3:ec:d2:da:15:76:8e:7a:37:49:36:7b:7e:f2:72: 6c:00:7d:ce:81:4f:cb:4d:08:c6:10:8f:b5:b4:3b:e2:90:3d: 6f:71:8c:3d:81:78:71:5f:2f:63:8f:32:89:ef:dc:d2:5a:2d: 14:9b:24:2b:31:15:25:45:12:49:08:50:11:1f:52:f4:7a:34: 30:e5:94:b7:6d:b3:35:43:6d:9d:b4:ed:be:a1:b7:9c:ee:95: ef:4a:fb:e5:a7:9d:25:3c:d1:b9:31:46:9a:b6:38:72:d9:15: 13:25:d6:ac:6f:79:04:62:76:57:57:f0:3a:d1:72:3f:42:4d: 48:8b:e4:7b:ca:5c:5e:80:00:8f:52:5f:b4:5f:c4:50:ae:ac: 89:43:2c:c8:d7:05:a8:22:1e:73:2b:e2:86:ee:c9:4b:d8:3a: 17:21:a8:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskltl17DHZaJEzyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlhNjY2OWItNmQyNS00MTg2LWE3NTctM2MyODliZGM4 MDMxMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk MzUzYThkYTEtNzc5My00M2VhLTkwMGUtNmVmNjZkNTQ0MTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcWeVfrUIBA8LchbKbBzYoKK60ZvmWlKZsf2 BQY3sFTwx9lIUfeoiTSASPP/mc/Y4aHd1Z5SMJBnD/f0bTPojrLcF74D/gFMSSOo jpONwBmZ46l53sGOj/G4SfsOyUXvYGhyUsdGKBp1BQNB+y0xXEqrr/9OznK3wTm4 TrZXLLRMO5BnQkN1WeRDr2TrvxOz+zBH3Riou1o28zxlAb/cp4BPPsvcnbrKT1zg ybcTXGeAgAMY05c3vEEEosyvEKdo24upwGCZ6Ih0vsu7Fznno0QIpT4pYANPrYOg C67/NGCtuPgr3Ix6iiI2uuiwNZS5xQVLGOFOiv766jiw/MvSMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKrt+fHgkVbhPPlN/9PDx04CA+cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kOWE2 NjY5Yi02ZDI1LTQxODYtYTc1Ny0zYzI4OWJkYzgwMzEvMzhiYWEyOGMtNWYxOC0z MDAzLWI0ODItOGVmYWE2OTQ3YmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDlhNjY2OWItNmQyNS00MTg2LWE3 NTctM2MyODliZGM4MDMxL2Q5YTY2NjliLTZkMjUtNDE4Ni1hNzU3LTNjMjg5YmRj ODAzMS5jcmwwHwYDVR0jBBgwFoAU7lIQLy5n25yXT3T+levfSezkaxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kOWE2NjY5Yi02ZDI1LTQxODYtYTc1Ny0zYzI4 OWJkYzgwMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FOeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLMETeistn1e4H2TpIlPqXnevVAHW+RuwdZ/0tLi/x2z4UpDsH9bakg W72HE3fBbhMI9QyqdBBCOTo3F+f9sGWBLfwMFBDX1tiIBOSRNfZCkm6o/TQUczhR C0n6E7Ps0toVdo56N0k2e37ycmwAfc6BT8tNCMYQj7W0O+KQPW9xjD2BeHFfL2OP Monv3NJaLRSbJCsxFSVFEkkIUBEfUvR6NDDllLdtszVDbZ207b6ht5zule9K++Wn nSU80bkxRpq2OHLZFRMl1qxveQRidldX8DrRcj9CTUiL5HvKXF6AAI9SX7RfxFCu rIlDLMjXBagiHnMr4obuyUvYOhchqPo= -----END CERTIFICATE-----Generated at Mon Oct 20 10:48:06 2025 by rpki-client