$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/c8cd6d1e-fca4-3a08-a296-4c6b62dd2f05.roa File: c8cd6d1e-fca4-3a08-a296-4c6b62dd2f05.roa (raw, json) Hash identifier: sb0NkqpIZHRdHKjN7o2I9278oLjtBIyUMJ5YDXEb8L0= Subject key identifier: AB:69:5E:E6:46:E7:4D:1D:25:83:29:34:20:F2:B0:06:8F:E3:B2:76 Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F4328584B8917700F4043824247882D00 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/c8cd6d1e-fca4-3a08-a296-4c6b62dd2f05.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 22742 IP address blocks: 199.241.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:70:0f:40:43:82:42:47:88:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=1580ca32-c95d-473f-9b70-24b49ec5a265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:de:d4:c6:c3:39:b3:f7:c5:19:5e:92:d6:7e: a6:ed:fe:86:39:d0:19:6f:a1:8d:15:ba:a0:ec:9a: 8a:c8:f1:f1:ee:c1:48:50:dc:3a:8b:e7:79:fe:41: 07:53:41:d2:9a:2c:3e:66:07:cb:79:64:15:ac:e7: 62:49:04:19:72:fb:a0:1e:d4:e1:7f:0e:6c:a6:85: 91:73:da:37:44:04:a9:05:32:05:3e:48:b7:60:5c: f3:08:5e:ba:a7:4c:69:aa:b2:5f:2f:62:ee:07:f2: 76:22:89:0a:d4:c9:48:09:cf:86:8f:34:f9:a3:43: c4:b6:c7:a4:95:66:45:58:eb:16:91:5e:76:0e:7c: a4:87:e6:4e:90:89:39:15:6d:ff:13:b1:b0:95:8a: 49:9c:9d:47:a3:71:ed:36:be:45:0a:39:a0:82:f7: f9:cb:0d:5d:08:79:b9:ef:d1:4a:8c:a7:e6:4a:cd: 59:57:00:71:0e:88:95:73:94:24:c6:0b:91:9e:00: aa:99:d7:08:0a:7b:82:2c:ce:a8:f6:fa:29:82:7b: f3:0f:9f:de:06:e3:f8:b7:b2:cf:e1:e9:02:49:dc: b3:b2:6e:6f:95:50:80:a4:87:e2:bc:f0:b4:3c:80: 8f:c5:49:0d:e0:b4:2d:4a:97:7b:c5:5e:50:40:b6: e1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:69:5E:E6:46:E7:4D:1D:25:83:29:34:20:F2:B0:06:8F:E3:B2:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/c8cd6d1e-fca4-3a08-a296-4c6b62dd2f05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 199.241.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:b7:c9:c6:f3:34:97:5d:0a:10:07:0a:22:a2:24:c4:c0:ad: 90:a2:a4:d3:70:5c:c0:51:81:94:31:36:1a:b3:ab:08:34:de: 17:ec:ca:a3:64:39:8a:ee:4d:1b:27:dc:fa:64:4e:e1:f2:62: eb:52:6f:ed:70:9d:c4:8b:d4:11:c0:9e:da:a5:a2:04:c2:78: 70:b5:e0:62:2c:71:86:42:4a:2f:2a:9a:43:e0:9b:66:6e:d4: 4e:5e:29:60:5f:c3:1c:38:1f:23:f5:94:a7:1f:30:44:16:d4: 08:9d:2f:9b:21:ae:12:31:41:ae:51:be:db:9c:a7:a7:66:34: fa:8c:04:74:97:e0:c4:af:7d:f0:89:cc:e3:c1:05:c2:d3:ed: 09:46:12:e3:4d:e4:7f:28:b4:bd:a4:18:8d:41:c9:27:97:c3: 0b:f5:97:a2:68:1a:b0:8f:7e:ac:da:1e:ca:98:31:9f:b1:84: 45:40:0c:39:78:4c:af:bf:5c:b1:8d:9c:b9:d5:c3:e6:cc:92: 07:fc:c1:a2:74:f3:bf:16:2c:24:a9:f3:8f:bc:a7:28:f6:bf: 75:3b:5d:c3:52:f0:5f:f1:f7:14:e2:79:28:8d:f4:29:25:16: 59:fd:02:a5:e6:b3:ad:80:47:28:db:ee:22:5a:bf:46:9c:9c: 84:ab:f1:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF3APQEOCQkeILQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk MTU4MGNhMzItYzk1ZC00NzNmLTliNzAtMjRiNDllYzVhMjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+N7UxsM5s/fFGV6S1n6m7f6GOdAZb6GNFbqg 7JqKyPHx7sFIUNw6i+d5/kEHU0HSmiw+ZgfLeWQVrOdiSQQZcvugHtThfw5spoWR c9o3RASpBTIFPki3YFzzCF66p0xpqrJfL2LuB/J2IokK1MlICc+GjzT5o0PEtsek lWZFWOsWkV52Dnykh+ZOkIk5FW3/E7GwlYpJnJ1Ho3HtNr5FCjmggvf5yw1dCHm5 79FKjKfmSs1ZVwBxDoiVc5QkxguRngCqmdcICnuCLM6o9vopgnvzD5/eBuP4t7LP 4ekCSdyzsm5vlVCApIfivPC0PICPxUkN4LQtSpd7xV5QQLbhHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtpXuZG500dJYMpNCDysAaP47J2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvYzhjZDZkMWUtZmNhNC0z YTA4LWEyOTYtNGM2YjYyZGQyZjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx/H0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAW3ycbzNJddChAHCiKiJMTArZCipNNwXMBRgZQxNhqzqwg03hfsyqNk OYruTRsn3PpkTuHyYutSb+1wncSL1BHAntqlogTCeHC14GIscYZCSi8qmkPgm2Zu 1E5eKWBfwxw4HyP1lKcfMEQW1AidL5shrhIxQa5Rvtucp6dmNPqMBHSX4MSvffCJ zOPBBcLT7QlGEuNN5H8otL2kGI1BySeXwwv1l6JoGrCPfqzaHsqYMZ+xhEVADDl4 TK+/XLGNnLnVw+bMkgf8waJ0878WLCSp84+8pyj2v3U7XcNS8F/x9xTieSiN9Ckl Fln9AqXms62ARyjb7iJav0acnISr8U8= -----END CERTIFICATE-----Generated at Mon Oct 20 08:08:05 2025 by rpki-client