$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/bc0e3de6-82d3-318a-ad9b-d14e2f338d16.roa File: bc0e3de6-82d3-318a-ad9b-d14e2f338d16.roa (raw, json) Hash identifier: r3vU6D8Rttb698tmavuZku197x2oLxkUq8DswxXVMSA= Subject key identifier: B2:56:1E:5B:BC:BF:44:9C:7F:F3:95:DA:FE:37:13:D9:2F:BC:53:F0 Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F4328584B891767A9CAD83425DED1C3C0 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/bc0e3de6-82d3-318a-ad9b-d14e2f338d16.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 22742 IP address blocks: 67.218.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:67:a9:ca:d8:34:25:de:d1:c3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=5877199c-ff9a-4f52-b52c-49f8819bdaa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4e:ed:8d:6c:ae:c6:d3:f2:34:27:6d:5e:28: a3:c6:51:f8:8e:75:c6:d0:ba:f1:2e:5d:5a:e7:6e: 8d:1c:6c:37:83:a9:79:e4:2f:a2:77:c7:51:03:bb: da:47:0f:69:f8:fc:50:cf:35:05:e5:a6:7f:e3:60: 42:2d:5c:01:a9:ec:cd:eb:8c:65:10:6a:66:3b:f0: 7b:e0:6d:bd:b9:94:b9:cf:cc:57:50:f4:88:bb:36: 0d:86:c6:b6:9f:82:3e:ab:79:92:22:0f:e0:05:13: 67:0f:4c:f3:2a:c5:3e:d0:c8:75:2b:ad:56:d2:95: 2f:a7:75:ae:ab:bb:12:58:95:8a:a1:07:23:70:c6: aa:bd:93:50:0e:96:b6:2d:32:7b:08:c7:4c:39:01: 05:e7:5b:bf:ab:df:48:e7:d7:e8:f6:cc:05:6e:9e: eb:1f:eb:9c:77:e1:6f:5f:2b:c6:04:7e:1c:fc:cd: 1e:05:31:66:72:31:25:08:11:de:ec:8c:4d:0b:6b: 9c:3f:0a:cb:8a:7f:0b:0e:2f:3b:f8:bc:d5:24:63: 66:19:69:da:94:23:63:98:ed:97:3a:b5:a9:18:51: 3b:f7:45:2b:73:a7:90:27:e0:a0:63:ca:a5:59:78: 3a:1e:76:4c:60:c7:5e:90:d9:8c:30:13:9a:f1:3f: 9d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:56:1E:5B:BC:BF:44:9C:7F:F3:95:DA:FE:37:13:D9:2F:BC:53:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/bc0e3de6-82d3-318a-ad9b-d14e2f338d16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 67.218.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:97:6b:01:f2:07:83:f1:c3:35:d9:a6:36:0c:19:f3:41:d4: 17:d8:0f:c8:12:a1:cb:25:9d:51:f9:5f:b5:d0:8a:27:4b:96: 92:4e:39:60:98:dd:d3:bd:eb:1c:f0:ba:9a:73:d4:8c:c5:65: 68:86:8d:d4:27:61:09:fc:69:36:e1:a9:66:f5:b1:f6:36:33: 3c:f8:b5:12:07:4b:82:17:78:27:19:7a:a9:85:a2:c3:b8:b3: 3f:d1:47:23:47:02:a4:58:37:95:09:41:b9:7d:b9:12:67:37: 23:ad:20:94:10:41:66:45:e9:80:21:97:e9:0e:af:d6:6a:73: 78:b0:10:57:95:b4:6f:8b:aa:28:cf:24:02:b6:68:33:80:f3: 4c:3d:6b:dd:69:70:cb:54:f2:44:9a:01:a6:97:55:66:3e:09: f9:74:37:0e:0d:47:28:52:0f:2b:bc:72:e8:55:23:0f:da:22: 8a:a3:53:10:8b:e2:69:45:a9:7c:81:ed:f4:fa:d1:5c:81:50: 72:06:87:a5:27:af:0f:91:22:e8:b4:77:fd:12:d5:42:1f:5d: 87:5e:5b:f3:b8:37:c2:8e:f0:24:9f:6f:80:18:6d:f1:e5:57: 4c:3b:36:64:7f:dc:fc:1e:bf:83:c2:6b:05:4e:4d:e1:f6:c5: a3:bc:4a:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF2epytg0Jd7Rw8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk NTg3NzE5OWMtZmY5YS00ZjUyLWI1MmMtNDlmODgxOWJkYWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk7tjWyuxtPyNCdtXiijxlH4jnXG0LrxLl1a 526NHGw3g6l55C+id8dRA7vaRw9p+PxQzzUF5aZ/42BCLVwBqezN64xlEGpmO/B7 4G29uZS5z8xXUPSIuzYNhsa2n4I+q3mSIg/gBRNnD0zzKsU+0Mh1K61W0pUvp3Wu q7sSWJWKoQcjcMaqvZNQDpa2LTJ7CMdMOQEF51u/q99I59fo9swFbp7rH+ucd+Fv XyvGBH4c/M0eBTFmcjElCBHe7IxNC2ucPwrLin8LDi87+LzVJGNmGWnalCNjmO2X OrWpGFE790Urc6eQJ+CgY8qlWXg6HnZMYMdekNmMMBOa8T+dhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJWHlu8v0Scf/OV2v43E9kvvFPwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvYmMwZTNkZTYtODJkMy0z MThhLWFkOWItZDE0ZTJmMzM4ZDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9pQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+XawHyB4PxwzXZpjYMGfNB1BfYD8gSocslnVH5X7XQiidLlpJOOWCY 3dO96xzwuppz1IzFZWiGjdQnYQn8aTbhqWb1sfY2Mzz4tRIHS4IXeCcZeqmFosO4 sz/RRyNHAqRYN5UJQbl9uRJnNyOtIJQQQWZF6YAhl+kOr9Zqc3iwEFeVtG+LqijP JAK2aDOA80w9a91pcMtU8kSaAaaXVWY+Cfl0Nw4NRyhSDyu8cuhVIw/aIoqjUxCL 4mlFqXyB7fT60VyBUHIGh6Unrw+RIui0d/0S1UIfXYdeW/O4N8KO8CSfb4AYbfHl V0w7NmR/3Pwev4PCawVOTeH2xaO8Sls= -----END CERTIFICATE-----Generated at Mon Oct 20 07:52:19 2025 by rpki-client