$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/2895d8b0-687a-3f45-aed1-2df64ae5fb25.roa File: 2895d8b0-687a-3f45-aed1-2df64ae5fb25.roa (raw, json) Hash identifier: 95YJV7aJX5mcTuT3mtc7cmRHcgVgzQBDXpLHdYp3JJc= Subject key identifier: F8:70:B0:70:92:50:F6:FA:77:BA:C7:3B:A9:82:22:43:06:B8:14:90 Certificate issuer: /CN=0538ef3c-e342-4e27-a075-8167bc73c054 Certificate serial: 010D0C9F4328584B8EACE2E0B2BE3EB5AB540800 Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/2895d8b0-687a-3f45-aed1-2df64ae5fb25.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 11260 IP address blocks: 66.103.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:e2:e0:b2:be:3e:b5:ab:54:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=52bd4e4e-b303-4516-aec9-6c0031477d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4b:72:06:88:11:f6:77:fc:a9:14:e6:71:c9: 3f:f3:8b:6d:54:41:50:3b:db:19:59:f3:6c:b2:f7: 16:4c:fd:cb:fb:81:a3:f8:7b:54:2e:7e:ea:ef:f5: da:41:d2:45:37:d7:fb:d4:d2:b0:c0:e7:4e:07:3e: fa:97:42:2f:52:d3:c2:7b:69:be:b6:d3:dc:cc:4e: 99:ec:bc:fa:3b:1e:56:47:91:11:36:3f:b0:e8:ea: c8:ea:94:1c:6b:03:d8:88:6d:be:d9:95:d4:2d:96: 8a:d6:18:d0:f2:12:c2:4f:1e:f5:7d:3a:1e:91:33: ab:ba:88:6c:b1:36:ae:a6:d5:69:b8:47:bd:df:e0: 4b:75:03:da:af:6f:fb:39:07:3e:f2:6a:76:3d:3a: ae:ba:70:fa:62:a1:70:ca:50:0c:24:c3:5c:c0:2c: b7:f5:71:a1:4b:e3:df:47:30:6f:fa:81:f7:29:a8: 63:a6:4a:d4:aa:de:8c:04:7d:67:1a:db:cd:6a:51: 9d:a6:46:be:63:0b:3f:bc:72:ea:40:c5:2a:94:89: 00:20:fc:67:12:e4:8b:ea:a7:9e:56:f8:bd:fe:c7: c9:96:dd:7d:9c:eb:b6:c9:77:24:a9:2a:60:72:b4: cb:0e:cb:14:6d:b3:d1:1c:fa:07:1b:c5:78:a2:ba: b7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:70:B0:70:92:50:F6:FA:77:BA:C7:3B:A9:82:22:43:06:B8:14:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/2895d8b0-687a-3f45-aed1-2df64ae5fb25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl X509v3 Authority Key Identifier: keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer sbgp-ipAddrBlock: critical IPv4: 66.103.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:22:6c:55:ad:ad:cc:4c:1a:93:89:ea:31:5a:7d:18:e8:d0: 19:c2:92:c9:12:59:b5:f4:2a:b4:bb:92:28:aa:58:5d:f2:aa: c2:60:dc:3e:b1:cd:1e:4c:0c:6a:48:0d:c0:0d:ea:a8:3a:40: a2:3d:88:de:64:a1:bc:75:4c:c9:6b:f8:35:b6:f9:a3:c1:0a: 68:d6:0d:78:dd:58:76:9a:9a:03:3b:a1:fc:79:e9:e3:51:14: f7:5b:0e:4e:0e:69:0f:82:65:50:ed:ad:c9:5d:e3:04:60:8d: 86:11:85:b8:db:2c:bc:f0:4f:59:4f:52:ca:2f:05:46:1a:9d: c1:83:de:8a:38:c3:23:b5:c5:86:de:2a:6c:1f:ae:bc:e8:6a: a7:b0:3b:1d:e9:11:7d:4d:11:1d:04:68:e1:24:eb:12:1b:19: 8a:3e:ed:69:cc:ee:46:2c:6b:46:1a:50:37:20:c9:d8:06:0e: 6f:f0:72:74:0e:3f:4a:51:1d:92:f6:13:59:b2:b0:c1:1d:ca: 14:66:fd:7c:12:c7:76:26:09:8d:64:d0:bb:17:cd:08:af:08: 28:59:dd:99:b1:a6:ae:04:ef:ef:5c:2f:22:b4:c4:1e:a3:09: b6:f4:77:56:90:51:d5:18:9c:b9:21:b6:86:0a:8d:77:f3:d1: ce:e3:84:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrOLgsr4+tatUCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOGVmM2MtZTM0Mi00ZTI3LWEwNzUtODE2N2JjNzNj MDU0MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk NTJiZDRlNGUtYjMwMy00NTE2LWFlYzktNmMwMDMxNDc3ZDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEtyBogR9nf8qRTmcck/84ttVEFQO9sZWfNs svcWTP3L+4Gj+HtULn7q7/XaQdJFN9f71NKwwOdOBz76l0IvUtPCe2m+ttPczE6Z 7Lz6Ox5WR5ERNj+w6OrI6pQcawPYiG2+2ZXULZaK1hjQ8hLCTx71fToekTOruohs sTauptVpuEe93+BLdQPar2/7OQc+8mp2PTquunD6YqFwylAMJMNcwCy39XGhS+Pf RzBv+oH3KahjpkrUqt6MBH1nGtvNalGdpka+Yws/vHLqQMUqlIkAIPxnEuSL6qee Vvi9/sfJlt19nOu2yXckqSpgcrTLDssUbbPRHPoHG8V4orq3QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhwsHCSUPb6d7rHO6mCIkMGuBSQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4 ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3YmM3M2MwNTQvMjg5NWQ4YjAtNjg3YS0z ZjQ1LWFlZDEtMmRmNjRhZTVmYjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDUzOGVmM2MtZTM0Mi00ZTI3LWEw NzUtODE2N2JjNzNjMDU0LzA1MzhlZjNjLWUzNDItNGUyNy1hMDc1LTgxNjdiYzcz YzA1NC5jcmwwHwYDVR0jBBgwFoAUPawtOE5IBuFdK6OE1h3WEIXOM4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3 YmM3M2MwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQmcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4ibFWtrcxMGpOJ6jFafRjo0BnCkskSWbX0KrS7kiiqWF3yqsJg3D6x zR5MDGpIDcAN6qg6QKI9iN5kobx1TMlr+DW2+aPBCmjWDXjdWHaamgM7ofx56eNR FPdbDk4OaQ+CZVDtrcld4wRgjYYRhbjbLLzwT1lPUsovBUYancGD3oo4wyO1xYbe KmwfrrzoaqewOx3pEX1NER0EaOEk6xIbGYo+7WnM7kYsa0YaUDcgydgGDm/wcnQO P0pRHZL2E1mysMEdyhRm/XwSx3YmCY1k0LsXzQivCChZ3Zmxpq4E7+9cLyK0xB6j Cbb0d1aQUdUYnLkhtoYKjXfz0c7jhMQ= -----END CERTIFICATE-----Generated at Mon Oct 20 04:12:14 2025 by rpki-client