$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/1c0d7381-86d9-3edd-ad16-6ad5907b707b.roa File: 1c0d7381-86d9-3edd-ad16-6ad5907b707b.roa (raw, json) Hash identifier: LCbGQMRsRaoCVY8SM2f71FLViea0nEptKFovGfw3TxU= Subject key identifier: 1D:08:2B:8B:09:F6:6C:8A:4F:2A:D5:52:3E:75:CD:D8:34:C6:35:72 Certificate issuer: /CN=38e671ad-3e19-48ff-801c-f18f3c194278 Certificate serial: 010D0C9F4328584B2CF6E69EABC7AD4517681600 Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/1c0d7381-86d9-3edd-ad16-6ad5907b707b.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 62563 IP address blocks: 198.57.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:e6:9e:ab:c7:ad:45:17:68:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=8b79ecca-b53a-49cc-b552-667fdfea842d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:69:cd:7c:5b:1b:45:40:e9:f9:e5:e8:8f:b3: 5c:87:4e:c2:5b:36:dd:bd:c3:b5:a8:33:8f:9d:3a: a2:3c:6d:d7:39:68:4e:f7:32:78:12:17:0a:76:86: de:98:ec:16:52:2a:f5:4e:8d:74:c8:0e:c9:a6:62: cc:72:80:e4:04:0e:f7:5f:11:4e:8a:d8:33:a5:6d: b3:17:40:43:60:6a:37:a2:d2:4d:fd:84:f3:c9:8f: cc:c9:80:bf:25:27:63:dd:e6:eb:3d:a3:b0:ac:e6: ff:91:e1:40:63:a8:5f:a2:61:30:97:19:a2:51:36: 3c:d8:14:b0:48:88:b8:80:44:5b:f5:b2:e1:0d:ed: 20:af:4d:57:5e:70:0c:cb:c8:9c:c8:7b:a1:de:42: ad:e5:4f:34:32:a4:10:be:30:a5:9c:27:bb:ab:46: db:ce:30:89:3a:f3:a9:2e:e3:fe:62:16:30:f6:e9: ea:57:6b:a1:7a:ce:bf:b4:e3:bc:05:f7:60:ae:04: 44:c1:e7:4a:b6:4c:d5:d0:23:6c:b5:98:cd:2a:63: 55:0d:c2:05:46:88:eb:7e:b5:a7:c1:79:6c:cf:98: 8d:89:cb:02:29:9d:6f:bd:cb:6a:65:b1:8a:0b:92: 11:f2:6b:ab:bb:fe:85:5b:c5:16:ed:9b:77:b5:9b: 55:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:08:2B:8B:09:F6:6C:8A:4F:2A:D5:52:3E:75:CD:D8:34:C6:35:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/1c0d7381-86d9-3edd-ad16-6ad5907b707b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl X509v3 Authority Key Identifier: keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer sbgp-ipAddrBlock: critical IPv4: 198.57.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:ae:5a:82:89:9c:a9:25:09:5f:6a:a5:19:e6:e4:73:4f:49: 5f:30:d0:8c:04:b3:26:fb:b6:e9:70:50:51:22:60:34:be:b6: 57:5c:90:28:01:5c:65:05:a5:86:2e:14:66:01:ba:7a:18:e5: 05:6d:b9:e5:89:a6:cf:7f:b2:8e:f2:3e:39:9c:04:e3:c2:62: 0a:df:9b:de:5a:e9:fc:20:07:36:f9:5e:57:b9:b0:db:c6:49: 08:45:cb:90:eb:bb:d2:35:1b:f1:e7:f3:53:e1:15:36:fb:e7: e8:6d:8a:86:d3:91:0c:15:e2:7c:e6:23:eb:d1:a1:98:44:87: de:73:5d:a0:02:24:c7:01:ab:c0:fb:2f:f7:28:fe:85:11:fc: ae:8c:63:02:d1:aa:cd:66:86:3e:5e:77:54:61:b1:7e:40:a8: 29:93:a4:4b:e8:dd:2e:d7:e2:87:ae:28:fd:c0:bd:c9:19:01: 6f:97:cb:4a:73:40:e6:eb:eb:ce:09:f7:aa:48:a8:19:c0:e8: 46:48:2c:f2:80:9f:b1:25:88:4c:69:ec:0b:8d:3e:25:8b:6a: e0:a1:b4:99:95:6b:9a:7a:1a:36:17:06:e8:7d:72:82:ef:e9: 33:9b:37:1d:17:4f:11:ea:63:cd:e2:76:d8:27:5b:7b:b6:35: 7c:ce:2e:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9uaeq8etRRdoFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlNjcxYWQtM2UxOS00OGZmLTgwMWMtZjE4ZjNjMTk0 Mjc4MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk OGI3OWVjY2EtYjUzYS00OWNjLWI1NTItNjY3ZmRmZWE4NDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGnNfFsbRUDp+eXoj7Nch07CWzbdvcO1qDOP nTqiPG3XOWhO9zJ4EhcKdobemOwWUir1To10yA7JpmLMcoDkBA73XxFOitgzpW2z F0BDYGo3otJN/YTzyY/MyYC/JSdj3ebrPaOwrOb/keFAY6hfomEwlxmiUTY82BSw SIi4gERb9bLhDe0gr01XXnAMy8icyHuh3kKt5U80MqQQvjClnCe7q0bbzjCJOvOp LuP+YhYw9unqV2uhes6/tOO8BfdgrgREwedKtkzV0CNstZjNKmNVDcIFRojrfrWn wXlsz5iNicsCKZ1vvctqZbGKC5IR8muru/6FW8UW7Zt3tZtVSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0IK4sJ9myKTyrVUj51zdg0xjVyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2 NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThmM2MxOTQyNzgvMWMwZDczODEtODZkOS0z ZWRkLWFkMTYtNmFkNTkwN2I3MDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhlNjcxYWQtM2UxOS00OGZmLTgw MWMtZjE4ZjNjMTk0Mjc4LzM4ZTY3MWFkLTNlMTktNDhmZi04MDFjLWYxOGYzYzE5 NDI3OC5jcmwwHwYDVR0jBBgwFoAU0c/1zkbBlqJdyuADKGIFCAjz7BAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThm M2MxOTQyNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjkaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKmuWoKJnKklCV9qpRnm5HNPSV8w0IwEsyb7tulwUFEiYDS+tldckCgB XGUFpYYuFGYBunoY5QVtueWJps9/so7yPjmcBOPCYgrfm95a6fwgBzb5Xle5sNvG SQhFy5Dru9I1G/Hn81PhFTb75+htiobTkQwV4nzmI+vRoZhEh95zXaACJMcBq8D7 L/co/oUR/K6MYwLRqs1mhj5ed1RhsX5AqCmTpEvo3S7X4oeuKP3AvckZAW+Xy0pz QObr684J96pIqBnA6EZILPKAn7EliExp7AuNPiWLauChtJmVa5p6GjYXBuh9coLv 6TObNx0XTxHqY83idtgnW3u2NXzOLkY= -----END CERTIFICATE-----Generated at Mon Oct 20 17:54:13 2025 by rpki-client