$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/0dcdbddd-8039-390a-a9f8-ba31fb07953d.roa File: 0dcdbddd-8039-390a-a9f8-ba31fb07953d.roa (raw, json) Hash identifier: YBM+CtIr4Ok0Ydyy2EbbZGfoKxDqpk0WMYy9clzqqeI= Subject key identifier: 61:86:B5:3D:6A:6B:E5:8C:39:EA:BC:1B:C8:45:24:ED:4F:16:6B:53 Certificate issuer: /CN=38c5255f-5193-4ef7-92e9-db326ee1d690 Certificate serial: 010D0C9F4328584B21CC2BA007B2349D92BA4680 Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/0dcdbddd-8039-390a-a9f8-ba31fb07953d.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 6498 IP address blocks: 75.78.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:2b:a0:07:b2:34:9d:92:ba:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=2ebd2c49-8066-4f75-8cf3-fe730d6cecba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e1:5f:e8:67:0a:d2:bd:e4:12:b1:db:e0:f4: fd:54:bd:47:46:e6:43:15:d6:55:69:8d:21:c9:75: 2b:ab:1d:2c:d1:e2:42:13:32:0c:00:d6:8d:05:c7: d5:ff:4b:ea:62:49:99:9b:c0:96:21:2d:a1:5d:77: ec:80:c6:cd:31:79:cd:8b:f0:32:ab:51:b9:f5:dd: 17:36:00:d5:40:01:d4:27:74:f5:79:cf:fc:5d:3d: 85:04:dc:47:54:c9:b0:24:a6:a7:ba:f1:55:43:82: 80:85:c3:8c:67:e6:dc:3e:4b:b8:4a:f2:f8:5c:0e: ae:71:2b:6c:78:86:7d:d4:fb:d8:63:7c:69:e8:ea: 7f:2d:08:4b:a0:46:51:c0:69:a9:09:c1:12:58:15: 48:37:b3:12:28:17:e2:24:cd:6c:a5:2a:38:0e:d2: 2e:62:b7:67:91:d7:de:ca:c7:f7:66:64:d0:0c:d1: a7:f9:af:89:fd:3d:09:bb:1b:fa:5c:d0:12:0d:1a: 8a:fa:61:d4:70:92:5e:34:aa:a5:e1:bf:40:04:10: 91:f9:39:16:f6:dc:0f:78:06:05:4e:18:02:21:b7: 33:f4:23:ec:85:72:ec:19:d5:38:2f:e3:37:47:c8: bb:e0:64:87:a0:af:53:e1:f9:0b:f3:f2:a0:f5:a6: 28:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:86:B5:3D:6A:6B:E5:8C:39:EA:BC:1B:C8:45:24:ED:4F:16:6B:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/0dcdbddd-8039-390a-a9f8-ba31fb07953d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl X509v3 Authority Key Identifier: keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer sbgp-ipAddrBlock: critical IPv4: 75.78.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:8c:44:f2:98:b3:66:3b:c9:7a:fb:4b:64:39:3e:75:b3:dd: 98:dd:1b:a9:40:4e:40:18:cc:7b:8d:d3:a2:bb:cb:7d:99:30: 65:43:57:97:77:e5:2a:74:d0:ee:1a:6d:6f:02:8a:77:cb:fe: 31:90:bb:6c:47:1c:8c:fb:bb:dc:88:d9:66:ba:92:1a:49:e9: e7:1e:5d:f2:d9:67:11:4b:24:da:11:84:2a:23:8d:59:ce:a3: 8d:6c:3c:44:6c:00:8b:e1:2a:a5:e3:de:fd:9e:97:27:ed:63: 64:be:7f:02:16:2c:1e:37:2c:ef:24:eb:ff:b0:04:71:c6:d0: 61:b9:00:b1:31:5a:3c:4a:2c:49:d0:77:39:a1:b3:e1:21:49: af:07:9c:b5:72:0f:ea:dd:b8:9c:a4:ff:36:dd:d8:93:ef:a1: cd:e9:84:79:ab:86:c9:fd:b9:64:90:16:68:d2:02:a3:ed:31: 65:66:e0:23:85:1b:9f:b7:0c:54:61:91:73:9b:b3:70:98:a8: f5:64:34:ec:01:27:39:74:82:bb:94:29:3f:64:f6:02:21:c7: b5:2e:18:5e:c6:7f:16:aa:8f:25:f8:d7:d6:90:b3:86:ea:15: e9:d8:48:7d:46:da:03:db:6b:12:35:de:a2:cb:1a:cd:0e:df: 63:e8:8e:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzCugB7I0nZK6RoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhjNTI1NWYtNTE5My00ZWY3LTkyZTktZGIzMjZlZTFk NjkwMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk MmViZDJjNDktODA2Ni00Zjc1LThjZjMtZmU3MzBkNmNlY2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeFf6GcK0r3kErHb4PT9VL1HRuZDFdZVaY0h yXUrqx0s0eJCEzIMANaNBcfV/0vqYkmZm8CWIS2hXXfsgMbNMXnNi/Ayq1G59d0X NgDVQAHUJ3T1ec/8XT2FBNxHVMmwJKanuvFVQ4KAhcOMZ+bcPku4SvL4XA6ucSts eIZ91PvYY3xp6Op/LQhLoEZRwGmpCcESWBVIN7MSKBfiJM1spSo4DtIuYrdnkdfe ysf3ZmTQDNGn+a+J/T0Juxv6XNASDRqK+mHUcJJeNKql4b9ABBCR+TkW9twPeAYF ThgCIbcz9CPshXLsGdU4L+M3R8i74GSHoK9T4fkL8/Kg9aYopwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGGtT1qa+WMOeq8G8hFJO1PFmtTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1 MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMyNmVlMWQ2OTAvMGRjZGJkZGQtODAzOS0z OTBhLWE5ZjgtYmEzMWZiMDc5NTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhjNTI1NWYtNTE5My00ZWY3LTky ZTktZGIzMjZlZTFkNjkwLzM4YzUyNTVmLTUxOTMtNGVmNy05MmU5LWRiMzI2ZWUx ZDY5MC5jcmwwHwYDVR0jBBgwFoAU6OtRdt4L2VYIX2NOD0gHny6QnZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMy NmVlMWQ2OTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS064MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCMRPKYs2Y7yXr7S2Q5PnWz3ZjdG6lATkAYzHuN06K7y32ZMGVDV5d3 5Sp00O4abW8CinfL/jGQu2xHHIz7u9yI2Wa6khpJ6eceXfLZZxFLJNoRhCojjVnO o41sPERsAIvhKqXj3v2elyftY2S+fwIWLB43LO8k6/+wBHHG0GG5ALExWjxKLEnQ dzmhs+EhSa8HnLVyD+rduJyk/zbd2JPvoc3phHmrhsn9uWSQFmjSAqPtMWVm4COF G5+3DFRhkXObs3CYqPVkNOwBJzl0gruUKT9k9gIhx7UuGF7GfxaqjyX419aQs4bq FenYSH1G2gPbaxI13qLLGs0O32PojmE= -----END CERTIFICATE-----Generated at Mon Oct 20 13:20:43 2025 by rpki-client