$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/0a4474d2-fcd1-3338-8cb9-4278aa4e8aca.roa File: 0a4474d2-fcd1-3338-8cb9-4278aa4e8aca.roa (raw, json) Hash identifier: N7cMBzfTUN1t9ilqmYIctVy0GZn9JDR2wqRZ/k34XPI= Subject key identifier: C4:4B:CA:EC:E6:B2:02:30:B4:F5:D5:1E:BA:22:50:CB:DA:63:C6:78 Certificate issuer: /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Certificate serial: 010D0C9F4328584B3821A2FAFE95212CCB715A00 Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/0a4474d2-fcd1-3338-8cb9-4278aa4e8aca.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 168.203.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:a2:fa:fe:95:21:2c:cb:71:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=7d9f5c6a-c37a-4557-b7b4-36841a2854ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:92:f9:1b:83:d6:61:0d:46:40:38:43:a9:aa: 85:aa:2a:e5:e0:00:dc:5d:4b:cf:63:ac:99:80:5d: 64:2c:cb:99:39:7a:2d:4e:5b:1b:c8:e3:e4:eb:46: 9f:e9:da:b9:e1:42:19:6c:60:76:52:02:03:6f:d2: f5:b9:02:c0:a9:95:35:b5:31:dd:67:29:02:9a:dc: 28:12:d4:73:cd:8a:f9:a7:3b:71:43:87:c1:5d:c6: 61:b2:50:c5:bc:ac:53:97:d4:bc:d2:ec:59:df:bb: c3:fa:8a:14:97:37:a1:5d:f5:dd:00:61:48:28:cf: 9d:80:3f:49:ea:2d:93:2a:c6:d9:95:49:07:20:6c: 72:aa:df:23:f5:b2:b7:6e:89:2e:ca:0a:b6:07:3e: c4:c0:c4:ff:b6:6f:71:44:e6:b1:b1:7f:e3:67:40: 65:cd:29:fb:f8:7b:3a:85:e3:2a:49:27:40:70:32: f1:1e:7c:57:5c:53:d7:5b:3a:18:0b:a2:0f:d5:7c: df:0e:87:a8:95:d7:17:bc:0f:31:52:5f:9c:4d:21: 83:9e:b7:4e:54:01:7e:72:0a:b6:30:56:66:e3:bf: e0:a7:78:e3:d7:b9:c5:58:b8:69:01:ad:dc:c2:1c: a9:ae:9a:4d:23:ef:fa:5d:d3:da:1a:28:cb:c6:81: 58:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:4B:CA:EC:E6:B2:02:30:B4:F5:D5:1E:BA:22:50:CB:DA:63:C6:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/0a4474d2-fcd1-3338-8cb9-4278aa4e8aca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl X509v3 Authority Key Identifier: keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer sbgp-ipAddrBlock: critical IPv4: 168.203.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:46:a2:8a:46:dc:0a:9e:c4:ca:6b:45:85:24:17:65:36:2c: 3b:91:7f:9d:0b:04:b3:52:1f:a6:b0:3c:15:14:ef:d4:28:01: 7c:36:45:2d:a9:2d:ad:56:d5:87:77:0a:18:d0:da:a5:29:0c: 18:00:0e:91:83:c1:9b:2d:54:08:f6:d6:22:83:af:88:0c:18: b6:de:46:81:87:4d:58:f9:bf:43:9c:fb:27:3b:64:5b:09:22: a5:5a:c2:0d:eb:e9:8a:0a:53:e3:c9:a5:aa:33:b0:03:c4:84: 7c:1c:dd:a6:56:50:51:96:f8:34:52:9d:67:ff:13:88:63:d9: 6e:57:62:bf:99:2f:35:a0:80:a0:ec:fa:85:5c:c7:06:20:1b: 93:07:11:b7:de:c5:95:9e:27:e8:2e:83:0c:99:7f:a2:97:28: 96:9e:b5:87:2d:8e:ac:19:15:ff:9b:e6:49:b7:e0:62:73:4e: dd:f4:ea:e7:dc:56:ba:97:6d:de:d3:65:40:df:de:7d:3f:e3: d1:5b:29:c5:92:5d:e3:36:bf:61:59:d1:b1:7c:3f:6f:61:21: 2f:da:f3:7f:84:ba:89:e5:0d:a5:22:2c:db:57:10:43:9a:5e: 4c:01:b5:28:17:a2:68:8e:74:01:a7:35:79:5a:b0:93:57:fd: 21:4f:34:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IaL6/pUhLMtxWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM4YzgzMTYtMDhkYy00YmVmLTk5ZjYtYTQxNmZmYTBi MDRhMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk N2Q5ZjVjNmEtYzM3YS00NTU3LWI3YjQtMzY4NDFhMjg1NGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZL5G4PWYQ1GQDhDqaqFqirl4ADcXUvPY6yZ gF1kLMuZOXotTlsbyOPk60af6dq54UIZbGB2UgIDb9L1uQLAqZU1tTHdZykCmtwo EtRzzYr5pztxQ4fBXcZhslDFvKxTl9S80uxZ37vD+ooUlzehXfXdAGFIKM+dgD9J 6i2TKsbZlUkHIGxyqt8j9bK3bokuygq2Bz7EwMT/tm9xROaxsX/jZ0BlzSn7+Hs6 heMqSSdAcDLxHnxXXFPXWzoYC6IP1XzfDoeoldcXvA8xUl+cTSGDnrdOVAF+cgq2 MFZm47/gp3jj17nFWLhpAa3cwhyprppNI+/6XdPaGijLxoFYsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRLyuzmsgIwtPXVHroiUMvaY8Z4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81Yzhj ODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2ZmZhMGIwNGEvMGE0NDc0ZDItZmNkMS0z MzM4LThjYjktNDI3OGFhNGU4YWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWM4YzgzMTYtMDhkYy00YmVmLTk5 ZjYtYTQxNmZmYTBiMDRhLzVjOGM4MzE2LTA4ZGMtNGJlZi05OWY2LWE0MTZmZmEw YjA0YS5jcmwwHwYDVR0jBBgwFoAUMTSeCHAsq7KeL7SqUigmFPMcCSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81YzhjODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2 ZmZhMGIwNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqMsmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVGoopG3AqexMprRYUkF2U2LDuRf50LBLNSH6awPBUU79QoAXw2RS2p La1W1Yd3ChjQ2qUpDBgADpGDwZstVAj21iKDr4gMGLbeRoGHTVj5v0Oc+yc7ZFsJ IqVawg3r6YoKU+PJpaozsAPEhHwc3aZWUFGW+DRSnWf/E4hj2W5XYr+ZLzWggKDs +oVcxwYgG5MHEbfexZWeJ+gugwyZf6KXKJaetYctjqwZFf+b5km34GJzTt306ufc VrqXbd7TZUDf3n0/49FbKcWSXeM2v2FZ0bF8P29hIS/a83+EuonlDaUiLNtXEEOa XkwBtSgXomiOdAGnNXlasJNX/SFPNPw= -----END CERTIFICATE-----Generated at Mon Oct 20 05:25:19 2025 by rpki-client