$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/2d388d51-a371-39d1-bf5a-73549a9917de.roa File: 2d388d51-a371-39d1-bf5a-73549a9917de.roa (raw, json) Hash identifier: tzxRXrVg5Q0OIu2oWLPdvCe+BsMSxTHaao1IUt2M6Pc= Subject key identifier: 88:48:72:DE:C2:A1:32:55:B4:26:46:02:31:F7:49:8E:DA:5C:E3:0D Certificate issuer: /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Certificate serial: 010D0C9F4328584B3821A31EC83D766DA41D9900 Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/2d388d51-a371-39d1-bf5a-73549a9917de.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 23528 IP address blocks: 168.203.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:a3:1e:c8:3d:76:6d:a4:1d:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=71021c72-028d-4450-9f27-68455604403f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:10:38:e2:1a:9c:2b:be:fd:ae:c5:85:0b:fa: 01:45:ac:23:0d:e0:20:d4:b9:87:67:82:50:0d:39: 0a:51:ed:24:4c:04:71:4f:d8:a8:0b:f6:3e:44:d3: 0c:3c:a5:01:6f:12:3b:76:95:7e:e2:25:92:ab:ee: a1:88:f8:99:ed:df:6a:7d:8f:d1:4f:3c:31:05:38: 01:fb:0c:57:c1:42:1f:b7:da:83:f9:23:d1:c7:b4: 16:e5:61:e5:90:79:42:e4:ce:d4:44:f3:47:38:bc: 47:73:d1:dd:1c:d9:9e:4d:1f:72:30:d6:e3:78:48: 7f:1c:d3:a1:fd:82:fe:cb:23:5a:b7:29:49:8e:38: 4a:cf:ae:fd:b7:b7:e2:c8:07:6b:dc:db:3d:da:21: 3a:5b:33:92:35:32:b1:01:a3:d2:f1:f5:ef:3b:7b: 38:67:b6:77:c1:82:74:c7:90:8c:f2:e6:7e:42:58: 27:8d:29:b0:25:2d:7d:79:43:64:9e:50:ec:77:5b: d9:5a:ce:7e:86:b8:3a:b7:04:3a:07:03:af:6e:6d: 6d:6f:61:22:82:da:cf:66:e1:31:7b:a1:8a:71:f8: 1b:a9:c5:d2:e9:c3:78:e4:73:8f:b1:47:ff:24:60: 6e:1a:11:35:9a:a6:3e:22:4d:84:81:83:99:c0:55: ec:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:48:72:DE:C2:A1:32:55:B4:26:46:02:31:F7:49:8E:DA:5C:E3:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/2d388d51-a371-39d1-bf5a-73549a9917de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl X509v3 Authority Key Identifier: keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer sbgp-ipAddrBlock: critical IPv4: 168.203.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:1d:ff:22:79:b1:cb:ef:03:1a:02:74:b0:08:e0:89:f6:3d: e8:f5:a4:b6:30:56:bc:16:0b:dd:01:5d:18:d7:53:a3:05:47: 67:55:e6:22:2f:b8:fe:c9:4c:b7:8b:ce:5f:81:a4:a0:a7:96: 5e:3f:71:c6:d0:f7:0c:19:d9:03:a2:83:e0:25:5e:54:48:df: 72:e8:10:68:22:48:7d:91:67:ab:aa:55:14:2f:8c:04:2e:a9: 15:4c:71:fe:7f:81:0a:53:35:b0:f8:1d:dc:2c:e9:ee:ac:29: 9a:50:e4:8e:5d:74:b2:21:d4:eb:cb:c6:83:b2:70:ee:e1:7d: d7:0d:bb:62:f3:28:63:02:05:a6:1f:1f:9f:39:b7:54:75:9d: f9:b1:b5:ee:5b:3c:df:29:cd:87:d0:06:77:64:23:08:e1:4c: bb:96:1e:20:ad:82:49:af:0e:b5:18:14:2b:26:b7:90:40:ff: b6:cf:02:3a:74:0a:36:4c:43:ea:c6:f2:10:aa:51:fd:18:7c: 92:64:d8:22:57:6d:c0:e6:f4:5a:24:59:7e:78:38:5c:a9:fe: 25:b5:8e:b3:66:bd:0e:5a:2b:cf:4c:8d:63:21:ae:81:eb:e6: 82:47:5d:1c:f1:3d:2a:c4:8d:b7:39:b7:5e:e4:ed:31:05:46: 1f:1d:b3:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IaMeyD12baQdmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM4YzgzMTYtMDhkYy00YmVmLTk5ZjYtYTQxNmZmYTBi MDRhMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk NzEwMjFjNzItMDI4ZC00NDUwLTlmMjctNjg0NTU2MDQ0MDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRA44hqcK779rsWFC/oBRawjDeAg1LmHZ4JQ DTkKUe0kTARxT9ioC/Y+RNMMPKUBbxI7dpV+4iWSq+6hiPiZ7d9qfY/RTzwxBTgB +wxXwUIft9qD+SPRx7QW5WHlkHlC5M7URPNHOLxHc9HdHNmeTR9yMNbjeEh/HNOh /YL+yyNatylJjjhKz679t7fiyAdr3Ns92iE6WzOSNTKxAaPS8fXvO3s4Z7Z3wYJ0 x5CM8uZ+QlgnjSmwJS19eUNknlDsd1vZWs5+hrg6twQ6BwOvbm1tb2EigtrPZuEx e6GKcfgbqcXS6cN45HOPsUf/JGBuGhE1mqY+Ik2EgYOZwFXsbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhIct7CoTJVtCZGAjH3SY7aXOMNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81Yzhj ODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2ZmZhMGIwNGEvMmQzODhkNTEtYTM3MS0z OWQxLWJmNWEtNzM1NDlhOTkxN2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWM4YzgzMTYtMDhkYy00YmVmLTk5 ZjYtYTQxNmZmYTBiMDRhLzVjOGM4MzE2LTA4ZGMtNGJlZi05OWY2LWE0MTZmZmEw YjA0YS5jcmwwHwYDVR0jBBgwFoAUMTSeCHAsq7KeL7SqUigmFPMcCSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81YzhjODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2 ZmZhMGIwNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqMsmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgd/yJ5scvvAxoCdLAI4In2Pej1pLYwVrwWC90BXRjXU6MFR2dV5iIv uP7JTLeLzl+BpKCnll4/ccbQ9wwZ2QOig+AlXlRI33LoEGgiSH2RZ6uqVRQvjAQu qRVMcf5/gQpTNbD4Hdws6e6sKZpQ5I5ddLIh1OvLxoOycO7hfdcNu2LzKGMCBaYf H585t1R1nfmxte5bPN8pzYfQBndkIwjhTLuWHiCtgkmvDrUYFCsmt5BA/7bPAjp0 CjZMQ+rG8hCqUf0YfJJk2CJXbcDm9FokWX54OFyp/iW1jrNmvQ5aK89MjWMhroHr 5oJHXRzxPSrEjbc5t17k7TEFRh8dsx4= -----END CERTIFICATE-----Generated at Mon Oct 20 13:05:49 2025 by rpki-client