$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447/f38394a9-9305-305b-8be8-402a7a0c00b9.roa File: f38394a9-9305-305b-8be8-402a7a0c00b9.roa (raw, json) Hash identifier: VIk1nsXbhNu2xMFzaeSDd6w9cpRGq32zDT5S+Mt5llM= Subject key identifier: 0D:0F:0C:7A:1A:12:5F:D5:CC:34:1E:EB:C6:A0:31:C6:23:66:50:55 Certificate issuer: /CN=6a5786d8-68bf-4c69-b086-11587b550447 Certificate serial: 010D0C9F4328584B7DECAA51647C0CCD518CB6C8 Authority key identifier: 0C:CA:4A:6B:90:74:B8:91:F7:8D:75:32:2F:72:EF:48:B7:81:A9:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447/f38394a9-9305-305b-8be8-402a7a0c00b9.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 22070 IP address blocks: 216.197.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447/6a5786d8-68bf-4c69-b086-11587b550447.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447/6a5786d8-68bf-4c69-b086-11587b550447.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:aa:51:64:7c:0c:cd:51:8c:b6:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a5786d8-68bf-4c69-b086-11587b550447 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=cf7b9c98-f27b-42cc-9ba0-fe0e069002ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:da:a5:43:86:98:cf:54:78:3c:7a:56:9f:53: a9:5b:af:ba:f3:9c:a2:73:44:4e:b9:09:d7:f9:89: 30:e3:94:16:35:6f:96:93:bd:eb:3f:89:09:f4:4a: 98:c5:38:12:64:8b:77:ee:c8:da:19:d3:52:df:83: 69:9e:7e:81:c8:b8:4b:5f:ae:66:e0:2e:e7:47:c4: 3b:98:29:b6:6a:89:be:fd:f3:75:02:32:c6:69:aa: 8c:7b:0d:90:df:74:22:0c:b0:54:a6:fb:bd:7e:6c: 43:0c:6e:3d:d1:98:a3:ae:59:40:e7:42:5a:1e:b1: 77:b2:6d:96:19:cc:2e:e6:87:58:4c:03:0f:69:bb: 48:55:41:17:9b:de:2d:df:05:30:30:8c:5a:05:35: f6:9f:9a:59:5a:ec:d1:62:2c:01:10:cd:e3:4c:8e: 3d:26:b8:ed:8c:6f:bb:e7:50:ee:80:a2:19:7b:7a: be:16:8a:ae:6d:1c:25:d8:40:f6:84:4c:e5:11:dc: 9c:9d:e6:28:d3:01:46:05:e2:2e:aa:3b:14:ee:f2: 04:4d:b8:8d:48:f6:ab:b0:a6:09:49:b0:a9:96:fa: 2f:24:53:50:c5:6b:8c:cb:91:47:d4:e3:a8:3a:12: fa:e7:bf:5a:b0:74:c2:5d:fe:51:4e:e2:61:1e:77: 4a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:0F:0C:7A:1A:12:5F:D5:CC:34:1E:EB:C6:A0:31:C6:23:66:50:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447/f38394a9-9305-305b-8be8-402a7a0c00b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447/6a5786d8-68bf-4c69-b086-11587b550447.crl X509v3 Authority Key Identifier: keyid:0C:CA:4A:6B:90:74:B8:91:F7:8D:75:32:2F:72:EF:48:B7:81:A9:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447.cer sbgp-ipAddrBlock: critical IPv4: 216.197.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:eb:d7:34:f5:3a:de:fb:44:10:24:36:7a:8c:66:f7:c6:89: c3:6d:f3:7c:8b:ab:29:2b:5e:70:2d:6c:d5:1a:4b:13:78:12: 80:e0:59:2c:db:12:40:6b:d1:2d:2c:3f:30:7c:ec:9a:69:b8: 7e:c5:72:50:60:0f:74:8c:2d:ed:4c:bc:4e:b3:02:b9:4d:f5: ca:6e:d8:d0:9e:2b:32:d4:fc:7d:af:07:27:5e:0c:ce:3a:f0: 57:78:a5:2d:69:6b:0d:22:6e:34:46:d6:7b:ad:e8:a7:e6:eb: 45:5e:20:7e:c1:85:41:b9:6d:d1:81:81:d5:bf:d0:8a:d0:b6: 9c:4a:5a:18:3a:49:90:b9:55:51:f8:af:f1:01:fe:a9:d7:00: ed:92:66:fd:21:ce:60:71:33:2b:8f:55:b8:93:5b:9f:7f:39: 1c:c9:9b:77:c6:d8:aa:76:1b:3f:fe:30:2b:76:3e:06:97:f8: ce:e8:07:ad:94:34:71:79:07:6c:4c:b1:83:1d:88:a0:e5:ea: 43:1d:1c:1c:bc:09:18:89:45:64:79:19:44:06:07:b3:7a:ab: 82:74:65:a5:e1:e9:5a:04:0b:50:98:ff:b3:dd:3f:a5:4a:dc: 5d:cd:24:6b:80:4f:0a:30:d8:fd:ca:d8:5b:ef:30:c2:ed:48: 23:de:79:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97KpRZHwMzVGMtsgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmE1Nzg2ZDgtNjhiZi00YzY5LWIwODYtMTE1ODdiNTUw NDQ3MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk Y2Y3YjljOTgtZjI3Yi00MmNjLTliYTAtZmUwZTA2OTAwMmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNqlQ4aYz1R4PHpWn1OpW6+685yic0ROuQnX +Ykw45QWNW+Wk73rP4kJ9EqYxTgSZIt37sjaGdNS34Npnn6ByLhLX65m4C7nR8Q7 mCm2aom+/fN1AjLGaaqMew2Q33QiDLBUpvu9fmxDDG490ZijrllA50JaHrF3sm2W Gcwu5odYTAMPabtIVUEXm94t3wUwMIxaBTX2n5pZWuzRYiwBEM3jTI49JrjtjG+7 51DugKIZe3q+FoqubRwl2ED2hEzlEdycneYo0wFGBeIuqjsU7vIETbiNSParsKYJ SbCplvovJFNQxWuMy5FH1OOoOhL6579asHTCXf5RTuJhHndK5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0PDHoaEl/VzDQe68agMcYjZlBVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82YTU3 ODZkOC02OGJmLTRjNjktYjA4Ni0xMTU4N2I1NTA0NDcvZjM4Mzk0YTktOTMwNS0z MDViLThiZTgtNDAyYTdhMGMwMGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmE1Nzg2ZDgtNjhiZi00YzY5LWIw ODYtMTE1ODdiNTUwNDQ3LzZhNTc4NmQ4LTY4YmYtNGM2OS1iMDg2LTExNTg3YjU1 MDQ0Ny5jcmwwHwYDVR0jBBgwFoAUDMpKa5B0uJH3jXUyL3LvSLeBqRgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82YTU3ODZkOC02OGJmLTRjNjktYjA4Ni0xMTU4 N2I1NTA0NDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2MVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbr1zT1Ot77RBAkNnqMZvfGicNt83yLqykrXnAtbNUaSxN4EoDgWSzb EkBr0S0sPzB87JppuH7FclBgD3SMLe1MvE6zArlN9cpu2NCeKzLU/H2vBydeDM46 8Fd4pS1paw0ibjRG1nut6Kfm60VeIH7BhUG5bdGBgdW/0IrQtpxKWhg6SZC5VVH4 r/EB/qnXAO2SZv0hzmBxMyuPVbiTW59/ORzJm3fG2Kp2Gz/+MCt2PgaX+M7oB62U NHF5B2xMsYMdiKDl6kMdHBy8CRiJRWR5GUQGB7N6q4J0ZaXh6VoEC1CY/7PdP6VK 3F3NJGuATwow2P3K2FvvMMLtSCPeeZ8= -----END CERTIFICATE-----Generated at Mon Oct 20 14:21:10 2025 by rpki-client