$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/fcd8ef4b-0632-3d6a-89e1-840ed9931851.roa File: fcd8ef4b-0632-3d6a-89e1-840ed9931851.roa (raw, json) Hash identifier: CFM6DXyfGKbMDWANZp7YU4T8xBtbnjumU6VizhfVOBo= Subject key identifier: 12:48:5D:EF:D3:28:F0:AC:3A:DE:9C:A0:9F:BB:0D:F6:A6:3F:28:48 Certificate issuer: /CN=0538ef3c-e342-4e27-a075-8167bc73c054 Certificate serial: 010D0C9F4328584B8EACE028A568B0E592711D00 Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/fcd8ef4b-0632-3d6a-89e1-840ed9931851.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 11260 IP address blocks: 208.96.64.0/18 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:e0:28:a5:68:b0:e5:92:71:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=5cddbcc9-0192-44e0-9462-55150d65a52e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:be:8a:4c:8c:b0:c6:c4:12:9f:d2:3a:c9:75: 81:3c:a7:c0:a3:69:cd:e2:71:d2:cc:2b:8f:35:a2: b2:ac:2a:24:b6:8e:1b:6a:eb:ce:64:27:79:86:de: 4b:69:21:42:94:5f:26:75:81:3c:45:8c:1c:0d:1b: c1:be:66:9c:8b:6c:2c:18:62:c3:85:da:30:5d:b2: 8e:54:ea:b7:8a:71:de:da:42:23:d0:49:ca:24:2f: 55:50:27:e7:b4:38:75:8b:f9:20:0c:57:98:c0:64: 3a:e9:58:d3:89:7f:85:d9:8b:4a:5e:08:12:12:22: 00:01:27:8c:7a:28:30:d1:db:c1:23:c6:f1:97:e8: c1:b9:69:c4:a3:5e:2d:02:24:db:eb:2a:a9:ea:31: 5f:fd:4b:20:8b:b3:7f:4b:ae:82:0d:31:d8:c1:35: 41:e2:33:af:aa:54:a5:81:bf:3a:e4:8d:0a:df:98: ab:2e:0a:72:b6:e5:c6:35:77:f0:24:09:49:f3:81: 45:5b:68:f9:bc:dc:66:ae:2f:2b:1e:17:96:f1:05: 4f:62:f1:be:79:05:80:b6:21:69:c5:9f:59:d4:ff: fe:9a:1c:60:e1:ec:15:d1:0f:37:03:0d:3d:60:05: 70:6c:a1:af:16:d1:85:0c:81:64:52:7e:51:50:67: d5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:48:5D:EF:D3:28:F0:AC:3A:DE:9C:A0:9F:BB:0D:F6:A6:3F:28:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/fcd8ef4b-0632-3d6a-89e1-840ed9931851.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl X509v3 Authority Key Identifier: keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer sbgp-ipAddrBlock: critical IPv4: 208.96.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:7c:4f:6f:b5:b5:47:11:20:76:53:44:19:ca:0a:13:a5:ea: 0a:e5:3b:5d:ba:12:0e:1b:0b:37:04:d9:d3:1b:a5:65:8f:88: 0c:20:b4:a9:7c:d7:42:b7:10:3e:49:34:2d:54:f8:e8:30:6c: 24:8a:0c:c0:86:45:6a:33:50:8f:52:34:12:44:b4:2e:ad:01: 0d:6a:42:d9:9d:f3:79:b8:28:c7:8b:ce:3c:af:5a:2d:c9:5c: 1b:f8:44:17:4a:2a:37:0c:08:b6:4b:e3:11:90:bc:32:7e:9b: db:f8:c0:6f:3e:67:94:52:7d:36:17:a1:8f:ff:a3:cc:46:6c: 6b:7a:6b:56:db:22:12:74:5e:01:11:3c:8c:94:e0:ab:03:31: 7e:78:20:a7:0c:7d:7a:05:d9:d3:ec:5a:31:44:cd:d8:35:33: f4:4e:f5:93:55:a6:20:1c:ba:65:2e:c4:d6:9f:d2:fa:85:cb: 16:d2:e6:13:9b:60:bd:90:9d:62:5a:82:aa:98:73:3a:44:da: 26:f0:6c:1f:ea:a6:cf:c2:9d:a2:29:cf:bf:51:91:33:54:54: 3f:48:9f:d2:7d:e6:20:c8:9b:0a:70:46:ac:4d:f8:c7:96:0d: 93:a6:52:0b:63:17:6b:c7:2c:86:e6:c0:3f:45:36:3e:59:a0: a5:d6:37:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrOAopWiw5ZJxHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOGVmM2MtZTM0Mi00ZTI3LWEwNzUtODE2N2JjNzNj MDU0MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk NWNkZGJjYzktMDE5Mi00NGUwLTk0NjItNTUxNTBkNjVhNTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb6KTIywxsQSn9I6yXWBPKfAo2nN4nHSzCuP NaKyrCokto4bauvOZCd5ht5LaSFClF8mdYE8RYwcDRvBvmaci2wsGGLDhdowXbKO VOq3inHe2kIj0EnKJC9VUCfntDh1i/kgDFeYwGQ66VjTiX+F2YtKXggSEiIAASeM eigw0dvBI8bxl+jBuWnEo14tAiTb6yqp6jFf/Usgi7N/S66CDTHYwTVB4jOvqlSl gb865I0K35irLgpytuXGNXfwJAlJ84FFW2j5vNxmri8rHheW8QVPYvG+eQWAtiFp xZ9Z1P/+mhxg4ewV0Q83Aw09YAVwbKGvFtGFDIFkUn5RUGfVrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJIXe/TKPCsOt6coJ+7DfamPyhIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4 ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3YmM3M2MwNTQvZmNkOGVmNGItMDYzMi0z ZDZhLTg5ZTEtODQwZWQ5OTMxODUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDUzOGVmM2MtZTM0Mi00ZTI3LWEw NzUtODE2N2JjNzNjMDU0LzA1MzhlZjNjLWUzNDItNGUyNy1hMDc1LTgxNjdiYzcz YzA1NC5jcmwwHwYDVR0jBBgwFoAUPawtOE5IBuFdK6OE1h3WEIXOM4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3 YmM3M2MwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0GBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZ8T2+1tUcRIHZTRBnKChOl6grlO126Eg4bCzcE2dMbpWWPiAwgtKl8 10K3ED5JNC1U+OgwbCSKDMCGRWozUI9SNBJEtC6tAQ1qQtmd83m4KMeLzjyvWi3J XBv4RBdKKjcMCLZL4xGQvDJ+m9v4wG8+Z5RSfTYXoY//o8xGbGt6a1bbIhJ0XgER PIyU4KsDMX54IKcMfXoF2dPsWjFEzdg1M/RO9ZNVpiAcumUuxNaf0vqFyxbS5hOb YL2QnWJagqqYczpE2ibwbB/qps/CnaIpz79RkTNUVD9In9J95iDImwpwRqxN+MeW DZOmUgtjF2vHLIbmwD9FNj5ZoKXWN3Y= -----END CERTIFICATE-----Generated at Tue Oct 21 06:27:13 2025 by rpki-client