$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/b51ecc88-9c5f-35dd-a9be-385fb8cac698.roa File: b51ecc88-9c5f-35dd-a9be-385fb8cac698.roa (raw, json) Hash identifier: 2sE4/5FimVkYVGf92+ZudfwdqRgVUyxCgmnKXgTKxpk= Subject key identifier: 15:06:88:B6:F4:B7:F0:C1:14:C5:DB:2A:FF:97:CA:86:1D:DB:86:3C Certificate issuer: /CN=0538ef3c-e342-4e27-a075-8167bc73c054 Certificate serial: 010D0C9F4328584B8EACE2F205C14298C7D26600 Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/b51ecc88-9c5f-35dd-a9be-385fb8cac698.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 11260 IP address blocks: 64.178.128.0/19 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:e2:f2:05:c1:42:98:c7:d2:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=1c9860e5-369a-4785-aff6-eb1872356635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1a:32:96:6a:6b:56:bc:54:a5:11:9c:6c:bc: e3:20:85:42:fa:4d:c8:f2:74:8a:0a:49:2b:67:22: 35:55:3b:66:78:6b:45:dd:cd:ed:64:a8:40:9d:c5: 98:06:a7:a9:ce:40:ce:f9:f6:cf:c8:2c:15:4f:9f: 34:96:52:c7:38:f1:a1:fd:de:b8:dd:2c:0c:7a:10: 63:e5:ae:52:e1:0d:1e:a5:3f:93:92:ca:bb:5b:87: 90:33:d7:83:e6:bb:64:4f:6e:ff:1c:d1:6f:32:01: f9:24:25:c3:d4:1f:dd:79:7a:bc:c0:52:87:9a:51: 40:57:c3:d5:77:68:0d:a6:7a:95:46:dd:2f:90:07: 5d:3f:3f:65:8c:89:74:35:a8:8e:52:a6:f3:03:a5: b4:c8:af:94:b7:4c:7d:4b:43:3a:ee:67:e6:71:66: 82:7f:74:b9:61:27:17:c8:c7:0d:1e:9b:d4:b3:78: 7c:27:c7:cd:47:c0:a2:32:ae:38:50:c2:86:0f:b5: 87:9c:3e:a5:6e:84:16:4e:33:05:f8:14:8d:a8:1c: 6d:13:56:dc:ed:bc:7c:d9:38:eb:9e:91:6b:a9:9e: 4f:b1:11:18:fd:cd:0b:3a:b4:6d:47:0a:ef:cd:42: cc:4f:7d:f2:03:f6:27:84:4f:dd:89:6e:a6:c5:e6: b1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:06:88:B6:F4:B7:F0:C1:14:C5:DB:2A:FF:97:CA:86:1D:DB:86:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/b51ecc88-9c5f-35dd-a9be-385fb8cac698.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl X509v3 Authority Key Identifier: keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer sbgp-ipAddrBlock: critical IPv4: 64.178.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:2f:06:f1:f8:12:b0:e6:f7:33:dc:8c:a8:7b:96:10:ce:d2: b3:12:0b:99:ab:e3:c0:09:38:5c:a3:ad:36:10:2d:bf:88:df: 4d:d9:bd:35:f3:f0:b3:cb:db:13:34:e8:b2:7c:0f:84:5a:8a: 60:9a:13:db:35:0c:97:3c:ac:b0:c7:c8:99:1a:96:09:dc:0d: 33:fa:10:b4:1a:44:1b:e8:d1:47:2c:9e:bc:ae:a4:26:92:dd: c2:fc:34:f6:7c:70:e4:71:fb:72:15:f6:a3:70:cc:0c:4b:93: 59:40:24:7b:29:c7:87:a8:09:e8:f5:df:04:3a:9d:21:20:5f: b2:9b:00:41:d5:a2:a2:97:36:23:e0:15:c2:b3:a7:7f:70:f6: 88:e1:f6:fe:10:27:08:c8:0d:3f:f2:bb:95:56:9d:8b:0b:57: 31:ef:ed:1c:50:6f:9c:ff:2d:76:82:ff:c8:7c:15:c2:21:21: 04:e8:8f:07:84:e7:39:f6:7d:90:66:9c:c1:90:0c:9b:55:2c: f4:5c:bd:f0:e9:a8:c7:e4:2d:60:4d:0a:b3:62:77:99:64:f3: 3a:fd:f3:78:e8:7a:09:13:39:3d:93:82:04:01:5c:b9:b1:97: cf:e0:ee:7a:42:99:a6:8d:ea:f6:69:52:d5:a6:ce:70:26:e6: c2:c9:1d:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrOLyBcFCmMfSZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOGVmM2MtZTM0Mi00ZTI3LWEwNzUtODE2N2JjNzNj MDU0MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MWM5ODYwZTUtMzY5YS00Nzg1LWFmZjYtZWIxODcyMzU2NjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRoylmprVrxUpRGcbLzjIIVC+k3I8nSKCkkr ZyI1VTtmeGtF3c3tZKhAncWYBqepzkDO+fbPyCwVT580llLHOPGh/d643SwMehBj 5a5S4Q0epT+Tksq7W4eQM9eD5rtkT27/HNFvMgH5JCXD1B/deXq8wFKHmlFAV8PV d2gNpnqVRt0vkAddPz9ljIl0NaiOUqbzA6W0yK+Ut0x9S0M67mfmcWaCf3S5YScX yMcNHpvUs3h8J8fNR8CiMq44UMKGD7WHnD6lboQWTjMF+BSNqBxtE1bc7bx82Tjr npFrqZ5PsREY/c0LOrRtRwrvzULMT33yA/YnhE/diW6mxeaxawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUGiLb0t/DBFMXbKv+XyoYd24Y8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4 ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3YmM3M2MwNTQvYjUxZWNjODgtOWM1Zi0z NWRkLWE5YmUtMzg1ZmI4Y2FjNjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDUzOGVmM2MtZTM0Mi00ZTI3LWEw NzUtODE2N2JjNzNjMDU0LzA1MzhlZjNjLWUzNDItNGUyNy1hMDc1LTgxNjdiYzcz YzA1NC5jcmwwHwYDVR0jBBgwFoAUPawtOE5IBuFdK6OE1h3WEIXOM4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3 YmM3M2MwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQLKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUvBvH4ErDm9zPcjKh7lhDO0rMSC5mr48AJOFyjrTYQLb+I303ZvTXz 8LPL2xM06LJ8D4RaimCaE9s1DJc8rLDHyJkalgncDTP6ELQaRBvo0UcsnryupCaS 3cL8NPZ8cORx+3IV9qNwzAxLk1lAJHspx4eoCej13wQ6nSEgX7KbAEHVoqKXNiPg FcKzp39w9ojh9v4QJwjIDT/yu5VWnYsLVzHv7RxQb5z/LXaC/8h8FcIhIQTojweE 5zn2fZBmnMGQDJtVLPRcvfDpqMfkLWBNCrNid5lk8zr983joegkTOT2TggQBXLmx l8/g7npCmaaN6vZpUtWmznAm5sLJHZg= -----END CERTIFICATE-----Generated at Mon Oct 20 09:29:19 2025 by rpki-client