$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/97c2b4ca-4a79-32eb-b082-dc817d4a95fd.roa File: 97c2b4ca-4a79-32eb-b082-dc817d4a95fd.roa (raw, json) Hash identifier: oFwfBb1AH9APzhGSF1joJ+ae0DlsqjmHlgsn7XdD9/4= Subject key identifier: 3C:7E:0F:0B:1E:DF:0F:6A:26:5D:39:BB:22:54:25:58:F1:B3:7E:F7 Certificate issuer: /CN=38c5255f-5193-4ef7-92e9-db326ee1d690 Certificate serial: 010D0C9F4328584B21CC2C3BA36E6E1D4B591000 Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/97c2b4ca-4a79-32eb-b082-dc817d4a95fd.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 6498 IP address blocks: 75.78.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:2c:3b:a3:6e:6e:1d:4b:59:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=3af1aac5-11ea-455d-ba69-f57c2a5d6c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ad:f5:4b:78:f1:40:66:cf:dc:bb:e9:e0:32: 4b:2d:87:1c:02:d2:5c:9a:44:c1:0d:38:8c:82:41: 40:cd:ec:4f:2f:70:ec:73:e0:13:50:0a:38:72:3b: 76:b4:43:76:d2:06:6f:bd:79:75:3b:b9:37:bc:d7: 88:0b:fb:07:4a:34:79:53:f0:75:d7:99:1c:b9:b9: a4:f9:3a:2f:b5:74:95:3f:f7:ed:59:7b:ac:8d:bd: bc:ed:4a:ce:7b:41:c4:21:78:36:2e:26:3a:f5:2d: a3:ee:b0:6f:10:b6:dc:02:96:ef:f1:07:c8:fc:5e: 8d:7e:83:52:51:27:b9:74:fa:d5:fe:7a:b9:b5:b7: 9f:18:a7:89:fd:56:d5:01:9d:86:4a:9e:54:4a:48: be:54:c2:03:10:b9:6b:32:2a:96:1b:79:1a:3d:3c: 65:4b:1f:67:12:d0:ed:47:ba:d7:ce:3e:2c:31:7d: 57:42:71:45:6a:13:ab:b5:e9:1a:48:d7:80:11:dc: 5a:2d:0a:20:40:8e:bc:3e:bd:d6:59:39:b4:7e:89: 81:4b:ae:b0:74:37:84:22:69:36:78:8e:1d:6d:0d: 40:69:94:8a:cf:a2:c8:6e:37:13:a9:ff:e0:46:c0: 4f:be:bb:4d:79:8f:7e:13:a7:86:a2:82:f0:f1:60: 33:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:7E:0F:0B:1E:DF:0F:6A:26:5D:39:BB:22:54:25:58:F1:B3:7E:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/97c2b4ca-4a79-32eb-b082-dc817d4a95fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl X509v3 Authority Key Identifier: keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer sbgp-ipAddrBlock: critical IPv4: 75.78.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:d5:54:54:2b:6a:b6:49:fb:64:18:3a:eb:ab:8b:e7:92:44: 6d:4e:77:20:4c:26:38:33:2d:03:77:d3:a5:8e:ce:27:e8:e2: d7:5c:7e:9e:77:45:ef:ad:69:7f:98:d2:dd:1d:5e:62:09:17: 7e:93:00:63:3d:78:4b:40:72:7c:27:d3:ef:f9:ec:07:41:da: 13:d9:65:ac:9f:37:48:02:7f:81:15:f5:63:e6:ca:16:ee:58: af:b3:e0:2b:0b:7b:21:d5:da:e3:5e:26:f6:a2:3b:63:21:67: af:a6:18:41:0d:cd:12:73:c4:42:01:4a:95:0a:d7:fb:d5:71: 1b:c3:f0:b3:25:61:fd:94:75:d1:38:18:84:0c:fe:9c:cf:24: f6:ed:65:09:43:12:3f:ce:1b:59:83:51:8a:1c:50:81:30:1c: 83:04:9e:63:e1:aa:24:d7:61:fb:db:64:dd:bc:60:d1:eb:5b: a1:f0:83:69:dc:84:66:ab:2d:e4:de:79:cf:cd:2d:90:6a:d8: 15:cc:cb:05:40:cf:98:8d:a6:45:43:b8:d2:17:a4:d4:35:c4: 6c:70:d0:db:6c:79:88:4b:37:24:67:4a:64:0b:bc:49:ed:30: e6:a1:43:56:4a:b6:d2:af:a0:60:9c:9c:8f:0d:92:b2:af:ba: a2:f8:76:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzCw7o25uHUtZEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhjNTI1NWYtNTE5My00ZWY3LTkyZTktZGIzMjZlZTFk NjkwMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk M2FmMWFhYzUtMTFlYS00NTVkLWJhNjktZjU3YzJhNWQ2Yzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq631S3jxQGbP3Lvp4DJLLYccAtJcmkTBDTiM gkFAzexPL3Dsc+ATUAo4cjt2tEN20gZvvXl1O7k3vNeIC/sHSjR5U/B115kcubmk +TovtXSVP/ftWXusjb287UrOe0HEIXg2LiY69S2j7rBvELbcApbv8QfI/F6NfoNS USe5dPrV/nq5tbefGKeJ/VbVAZ2GSp5USki+VMIDELlrMiqWG3kaPTxlSx9nEtDt R7rXzj4sMX1XQnFFahOrtekaSNeAEdxaLQogQI68Pr3WWTm0fomBS66wdDeEImk2 eI4dbQ1AaZSKz6LIbjcTqf/gRsBPvrtNeY9+E6eGooLw8WAz/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDx+Dwse3w9qJl05uyJUJVjxs373MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1 MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMyNmVlMWQ2OTAvOTdjMmI0Y2EtNGE3OS0z MmViLWIwODItZGM4MTdkNGE5NWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhjNTI1NWYtNTE5My00ZWY3LTky ZTktZGIzMjZlZTFkNjkwLzM4YzUyNTVmLTUxOTMtNGVmNy05MmU5LWRiMzI2ZWUx ZDY5MC5jcmwwHwYDVR0jBBgwFoAU6OtRdt4L2VYIX2NOD0gHny6QnZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMy NmVlMWQ2OTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS050MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKvVVFQrarZJ+2QYOuuri+eSRG1OdyBMJjgzLQN306WOzifo4tdcfp53 Re+taX+Y0t0dXmIJF36TAGM9eEtAcnwn0+/57AdB2hPZZayfN0gCf4EV9WPmyhbu WK+z4CsLeyHV2uNeJvaiO2MhZ6+mGEENzRJzxEIBSpUK1/vVcRvD8LMlYf2UddE4 GIQM/pzPJPbtZQlDEj/OG1mDUYocUIEwHIMEnmPhqiTXYfvbZN28YNHrW6Hwg2nc hGarLeTeec/NLZBq2BXMywVAz5iNpkVDuNIXpNQ1xGxw0NtseYhLNyRnSmQLvEnt MOahQ1ZKttKvoGCcnI8NkrKvuqL4duM= -----END CERTIFICATE-----Generated at Mon Oct 20 15:48:51 2025 by rpki-client