$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/490df297-53eb-3685-bd50-38a8fd33dcb1.roa File: 490df297-53eb-3685-bd50-38a8fd33dcb1.roa (raw, json) Hash identifier: 30OhaVxI+AHxryivWafGCRr78WfKUTRxJDsK5IS2QSI= Subject key identifier: 3F:F1:A8:9A:B4:2C:95:B0:2B:B5:FB:A0:A8:D9:75:5D:BE:23:66:58 Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F4328584B5F372B5FF860E9826CF99640 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/490df297-53eb-3685-bd50-38a8fd33dcb1.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 198949 IP address blocks: 64.251.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:2b:5f:f8:60:e9:82:6c:f9:96:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=0639b51b-c7f6-4ed6-b812-c71e74ce2317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1a:73:c6:79:4d:e4:a2:49:49:af:b0:df:9c: 46:54:a1:2e:7a:c8:73:91:ca:e3:74:84:5b:c4:b7: de:b2:8c:46:19:f7:77:2f:ff:8b:07:03:c8:e1:3e: 38:56:34:18:e4:37:ed:77:d0:98:46:63:13:ca:43: 41:2a:2b:43:10:dc:4b:b9:e9:f0:01:82:21:68:ca: 19:23:77:a8:ea:8b:84:a0:42:21:de:86:d1:be:5e: 21:24:e1:4f:17:4d:71:ea:12:c3:2a:f3:54:4e:eb: 3a:82:9d:97:97:39:a4:69:32:1d:47:41:48:ce:ed: 84:6f:3d:3a:47:60:89:8c:aa:2e:47:42:f8:3b:e9: 79:3a:1d:50:eb:ad:66:aa:0b:24:76:c2:29:15:1f: fc:91:93:53:b7:0b:88:73:3d:f1:93:73:ca:7b:2b: 6f:11:96:07:be:0f:13:4d:be:85:48:f8:64:07:8d: a4:cc:6d:34:3c:e2:89:71:40:f7:7c:9a:42:a5:16: 87:09:48:9d:75:10:b4:e3:79:67:97:0f:1a:0f:67: 5f:2c:1a:a5:11:b6:44:c9:29:a2:5d:19:07:ac:ee: 33:b4:99:d0:a8:23:cf:de:e6:84:b0:07:11:ce:b5: 54:a6:3f:67:7c:43:e0:49:e7:4c:85:02:ac:e8:a4: 83:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F1:A8:9A:B4:2C:95:B0:2B:B5:FB:A0:A8:D9:75:5D:BE:23:66:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/490df297-53eb-3685-bd50-38a8fd33dcb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 64.251.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:2a:b1:82:bc:cd:7b:f3:4e:78:d0:45:89:a2:c5:a9:f4:20: 0c:70:06:c3:ec:77:b3:20:51:72:f6:bb:20:c7:7a:43:f3:78: aa:1d:98:04:d6:33:64:10:89:97:d1:21:9c:48:f5:89:c0:a7: c7:d9:26:30:80:1b:1b:b0:02:95:93:97:20:e7:56:09:b1:ec: 68:7a:c2:79:41:f4:2b:72:66:e0:48:c3:67:8d:de:d0:b1:b1: 1d:d4:ef:3d:f1:71:fe:f5:cf:90:f1:fd:19:17:d7:2c:df:0a: 5e:06:88:95:21:2d:f9:28:9b:51:b6:41:62:ad:a6:cf:22:c7: d3:23:3d:8d:a2:a9:7c:79:69:4e:fd:5d:e6:45:5a:8e:62:ce: 91:1a:83:72:57:64:e9:1f:5b:bc:c9:66:9e:fe:11:36:fe:c5: 73:41:53:a0:76:ee:2a:3b:0d:c7:ad:b6:c1:09:c2:80:eb:ab: 49:b4:88:27:db:3d:a2:4c:97:27:08:28:91:36:72:99:7e:65: 88:40:79:9c:3c:a9:b0:80:59:6f:d2:e7:3c:7c:16:a9:a9:15: 34:89:58:19:8f:ca:f2:b7:fc:43:44:b3:6b:7a:ec:c1:05:06: 83:12:e0:e7:2b:ab:9f:2b:aa:fb:e2:d3:b9:de:2e:39:0b:22: 77:8f:ed:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNytf+GDpgmz5lkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk MDYzOWI1MWItYzdmNi00ZWQ2LWI4MTItYzcxZTc0Y2UyMzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBpzxnlN5KJJSa+w35xGVKEueshzkcrjdIRb xLfesoxGGfd3L/+LBwPI4T44VjQY5Dftd9CYRmMTykNBKitDENxLuenwAYIhaMoZ I3eo6ouEoEIh3obRvl4hJOFPF01x6hLDKvNUTus6gp2XlzmkaTIdR0FIzu2Ebz06 R2CJjKouR0L4O+l5Oh1Q661mqgskdsIpFR/8kZNTtwuIcz3xk3PKeytvEZYHvg8T Tb6FSPhkB42kzG00POKJcUD3fJpCpRaHCUiddRC043lnlw8aD2dfLBqlEbZEySmi XRkHrO4ztJnQqCPP3uaEsAcRzrVUpj9nfEPgSedMhQKs6KSDewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/xqJq0LJWwK7X7oKjZdV2+I2ZYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvNDkwZGYyOTctNTNlYi0z Njg1LWJkNTAtMzhhOGZkMzNkY2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQPswMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEqsYK8zXvzTnjQRYmixan0IAxwBsPsd7MgUXL2uyDHekPzeKodmATW M2QQiZfRIZxI9YnAp8fZJjCAGxuwApWTlyDnVgmx7Gh6wnlB9CtyZuBIw2eN3tCx sR3U7z3xcf71z5Dx/RkX1yzfCl4GiJUhLfkom1G2QWKtps8ix9MjPY2iqXx5aU79 XeZFWo5izpEag3JXZOkfW7zJZp7+ETb+xXNBU6B27io7DcettsEJwoDrq0m0iCfb PaJMlycIKJE2cpl+ZYhAeZw8qbCAWW/S5zx8FqmpFTSJWBmPyvK3/ENEs2t67MEF BoMS4Ocrq58rqvvi07neLjkLIneP7ZY= -----END CERTIFICATE-----Generated at Mon Oct 20 00:06:28 2025 by rpki-client