$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/e220aed9-7e89-3ceb-bdc4-b078d95a7f26.roa File: e220aed9-7e89-3ceb-bdc4-b078d95a7f26.roa (raw, json) Hash identifier: KH8fLh9+Bf0ofOGbak9XLKcjIBN8Ne3vqAnd6uCToHs= Subject key identifier: 8A:D5:E7:3F:39:20:B4:82:77:78:07:13:73:B7:83:FB:E4:1D:AA:0D Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F4328584B89176FFD584A0F4F527C3B00 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/e220aed9-7e89-3ceb-bdc4-b078d95a7f26.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 22742 IP address blocks: 162.221.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:6f:fd:58:4a:0f:4f:52:7c:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=218a3625-b650-4c2a-ba51-85028786a250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e6:0a:7a:af:02:c9:4f:56:da:35:86:62:28: d3:41:42:b2:a9:91:8e:13:f6:6a:1f:09:2b:29:bf: 0c:ea:d7:f2:5a:a0:e2:1c:77:50:a7:6e:fb:cb:c7: 1e:5b:8d:ea:2b:b5:94:83:9e:89:69:a3:84:2a:50: 3d:51:16:0b:a7:b6:16:e6:33:2c:70:2e:19:33:75: ba:ba:5e:ce:8b:2d:4a:8c:f8:cb:1a:b2:98:94:ca: a0:8e:67:11:b6:37:46:be:17:43:2e:e2:28:f5:73: 6d:91:7a:21:76:52:9e:83:58:c7:e2:1a:09:6f:1a: 99:32:bb:52:1c:b2:79:11:3b:f9:92:41:83:f8:92: ac:74:94:d8:c6:c0:54:86:43:83:c7:c6:1d:8c:48: a9:d8:74:4f:70:a9:fd:2a:37:ce:53:f1:5d:88:0a: 41:5f:0b:dd:0f:74:a7:70:81:96:b5:16:21:69:a7: 16:4f:4b:6d:d8:ca:6e:6b:4c:ea:a7:95:dd:6b:98: 61:07:a6:7e:ff:dc:4e:4a:cf:28:c4:09:af:62:ed: ee:77:28:58:2a:0d:75:b7:77:d4:a4:db:dd:91:49: 6f:6e:d5:f1:f2:be:cb:a7:1f:cb:2c:02:40:76:78: 27:e0:74:8a:3c:46:fd:88:0d:22:f5:ae:c3:60:4a: 33:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D5:E7:3F:39:20:B4:82:77:78:07:13:73:B7:83:FB:E4:1D:AA:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/e220aed9-7e89-3ceb-bdc4-b078d95a7f26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 162.221.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:7a:91:a8:46:7c:ff:99:9e:b9:e6:a1:1e:d3:2d:ce:e1:2a: d0:af:49:83:f8:fd:7a:13:cc:2b:6a:70:91:f2:29:93:f7:d0: 85:92:9f:4c:1a:ca:5c:38:5f:91:3d:46:47:f5:ea:39:9e:bb: 11:a4:07:99:a6:e3:0f:f8:0c:a4:bd:22:05:21:5a:1f:89:d6: a1:9f:77:d7:4d:bb:b4:4f:60:96:e6:8c:87:8c:b0:b6:c7:ed: 94:dd:d0:02:55:04:6c:7d:e9:eb:f9:dc:5d:3a:67:63:3c:a6: c3:31:12:b4:4c:86:e5:7c:7e:4d:73:a2:4a:35:0a:a4:6f:17: 75:6b:08:29:10:3e:ec:13:cb:c5:b6:dc:b0:c6:0b:e1:38:6b: 79:2c:b4:45:75:90:6f:cc:0b:5c:59:eb:92:fc:36:3c:37:92: 13:eb:ef:84:a3:a7:1f:b7:6e:5a:8a:b6:48:0d:ac:b8:b8:0d: e4:51:da:89:8c:aa:97:57:02:db:9b:cd:f8:66:80:88:36:5d: 71:cb:4c:36:3e:29:ad:b6:7f:df:65:26:73:ad:58:0b:c3:c1: ad:f4:94:79:5d:06:ca:4f:ab:7f:da:d8:2e:a1:52:43:fd:93: 44:43:1c:29:73:ed:df:97:1a:a7:52:bf:cd:74:e3:df:21:8a: 57:bd:09:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF2/9WEoPT1J8OwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk MjE4YTM2MjUtYjY1MC00YzJhLWJhNTEtODUwMjg3ODZhMjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOYKeq8CyU9W2jWGYijTQUKyqZGOE/ZqHwkr Kb8M6tfyWqDiHHdQp277y8ceW43qK7WUg56JaaOEKlA9URYLp7YW5jMscC4ZM3W6 ul7Oiy1KjPjLGrKYlMqgjmcRtjdGvhdDLuIo9XNtkXohdlKeg1jH4hoJbxqZMrtS HLJ5ETv5kkGD+JKsdJTYxsBUhkODx8YdjEip2HRPcKn9KjfOU/FdiApBXwvdD3Sn cIGWtRYhaacWT0tt2Mpua0zqp5Xda5hhB6Z+/9xOSs8oxAmvYu3udyhYKg11t3fU pNvdkUlvbtXx8r7Lpx/LLAJAdngn4HSKPEb9iA0i9a7DYEoz4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIrV5z85ILSCd3gHE3O3g/vkHaoNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvZTIyMGFlZDktN2U4OS0z Y2ViLWJkYzQtYjA3OGQ5NWE3ZjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCot0IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHl6kahGfP+ZnrnmoR7TLc7hKtCvSYP4/XoTzCtqcJHyKZP30IWSn0wa ylw4X5E9Rkf16jmeuxGkB5mm4w/4DKS9IgUhWh+J1qGfd9dNu7RPYJbmjIeMsLbH 7ZTd0AJVBGx96ev53F06Z2M8psMxErRMhuV8fk1zoko1CqRvF3VrCCkQPuwTy8W2 3LDGC+E4a3kstEV1kG/MC1xZ65L8Njw3khPr74Sjpx+3blqKtkgNrLi4DeRR2omM qpdXAtubzfhmgIg2XXHLTDY+Ka22f99lJnOtWAvDwa30lHldBspPq3/a2C6hUkP9 k0RDHClz7d+XGqdSv810498hile9CXE= -----END CERTIFICATE-----Generated at Tue Oct 21 00:00:26 2025 by rpki-client