$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38815d06-3606-3fa0-aadd-e342f5a588f5.roa File: 38815d06-3606-3fa0-aadd-e342f5a588f5.roa (raw, json) Hash identifier: U606mfGj/nOwzJU557tpMzqH7daEAE9sa+qkOlVAsYQ= Subject key identifier: F7:69:40:A7:D9:A4:E7:A7:AF:47:E1:44:DA:20:AF:EE:A7:38:36:CD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B3AEC404AD49FB24E669C7710 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38815d06-3606-3fa0-aadd-e342f5a588f5.roa Signing time: Thu 18 Sep 2025 01:00:32 +0000 ROA not before: Thu 18 Sep 2025 01:00:32 +0000 ROA not after: Wed 17 Dec 2025 02:00:32 +0000 asID: 63949 IP address blocks: 170.187.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3a:ec:40:4a:d4:9f:b2:4e:66:9c:77:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 18 01:00:32 2025 GMT Not After : Dec 17 02:00:32 2025 GMT Subject: CN=1d893df3-2240-413a-8a3f-4c19a92e3d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fd:00:09:3c:4e:70:2b:eb:3c:82:ed:77:b9: 1c:fb:31:e9:68:6d:9a:03:aa:55:e0:27:51:68:a3: 98:d2:6b:ee:66:6a:8d:98:73:8c:45:7b:25:75:1f: 69:6e:10:d0:69:bf:fc:54:dd:d6:f2:e3:17:26:4e: 6c:fe:c6:8c:82:e7:3a:33:11:01:67:0a:25:de:bf: b0:b0:bb:c3:0a:bf:9d:25:ba:aa:62:3f:38:c0:7c: cf:3b:0e:f5:97:9b:ef:4d:8f:ee:e6:21:fc:ee:e9: 98:34:22:4a:b1:ed:5b:f3:80:f3:ec:6d:54:95:5c: 26:3b:53:cb:ea:29:9d:a6:ab:ac:b2:9f:1a:bf:16: 30:04:17:a1:62:91:15:de:d1:1c:6d:24:3b:3f:d2: fa:f5:22:49:8e:ba:45:eb:6f:c7:94:ce:e7:0b:18: 33:09:88:59:c5:0c:0e:b9:c1:09:3e:f7:06:56:eb: 4a:3a:bf:98:00:1a:5c:61:c4:e5:0c:18:0c:29:0d: c1:3f:0c:9c:06:bc:04:65:bf:2e:07:1c:f6:a6:df: 87:9d:7f:63:17:1d:8f:26:6c:7a:e8:43:21:63:36: 9d:75:0b:4a:a0:56:d1:f9:59:34:98:3a:a2:f4:aa: 10:90:bf:87:85:0f:96:d1:d0:94:8f:10:0e:b7:12: e6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:69:40:A7:D9:A4:E7:A7:AF:47:E1:44:DA:20:AF:EE:A7:38:36:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38815d06-3606-3fa0-aadd-e342f5a588f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 170.187.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:66:ef:9d:69:3f:8f:c6:9e:c9:39:c4:f7:26:a0:39:72:46: 55:80:84:81:f4:b7:e0:38:ec:8a:34:65:54:0a:66:43:de:6f: b6:5d:9f:27:a4:c0:8a:03:5a:03:e7:40:b1:41:af:f6:71:71: d8:5b:11:16:fe:8b:59:77:e7:b2:f4:c5:75:64:65:1e:33:99: a7:54:1d:6c:4e:c3:6b:17:8b:a7:94:26:c2:7c:a0:f8:31:52: c8:95:dd:5a:58:12:6a:da:9a:5b:94:32:50:ff:f6:fb:a4:eb: 3c:17:2f:a2:7f:09:5f:79:85:cd:54:8d:a3:5f:f4:08:f6:bc: 13:8f:d5:8d:eb:65:be:4f:5e:cd:c0:4a:f7:b3:aa:fe:e1:0e: 58:fe:eb:3e:8a:88:3c:97:58:6f:5b:db:98:25:da:31:22:54: 66:49:c1:81:5f:01:09:e8:b5:f4:f2:00:4b:a9:96:4b:12:75: 20:54:72:b7:19:6a:ae:a0:5e:bb:d3:dd:cb:1e:ef:51:a6:4a: 4b:e4:8d:d5:01:ff:40:ac:71:9d:9e:56:78:98:da:73:06:45: 2f:45:84:f0:af:57:a2:8f:c4:8e:76:f2:05:35:5e:df:aa:5b: 50:98:10:d8:12:62:4c:74:99:01:e9:43:e0:64:31:1d:f0:41: 3e:14:cf:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs67EBK1J+yTmacdxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxODAxMDAzMloXDTI1MTIxNzAyMDAzMlowLzEtMCsGA1UEAxMk MWQ4OTNkZjMtMjI0MC00MTNhLThhM2YtNGMxOWE5MmUzZDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/0ACTxOcCvrPILtd7kc+zHpaG2aA6pV4CdR aKOY0mvuZmqNmHOMRXsldR9pbhDQab/8VN3W8uMXJk5s/saMguc6MxEBZwol3r+w sLvDCr+dJbqqYj84wHzPOw71l5vvTY/u5iH87umYNCJKse1b84Dz7G1UlVwmO1PL 6imdpqussp8avxYwBBehYpEV3tEcbSQ7P9L69SJJjrpF62/HlM7nCxgzCYhZxQwO ucEJPvcGVutKOr+YABpcYcTlDBgMKQ3BPwycBrwEZb8uBxz2pt+HnX9jFx2PJmx6 6EMhYzaddQtKoFbR+Vk0mDqi9KoQkL+HhQ+W0dCUjxAOtxLmFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdpQKfZpOenr0fhRNogr+6nODbNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzg4MTVkMDYtMzYwNi0z ZmEwLWFhZGQtZTM0MmY1YTU4OGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqruEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlm751pP4/Gnsk5xPcmoDlyRlWAhIH0t+A47Io0ZVQKZkPeb7Zdnyek wIoDWgPnQLFBr/ZxcdhbERb+i1l357L0xXVkZR4zmadUHWxOw2sXi6eUJsJ8oPgx UsiV3VpYEmramluUMlD/9vuk6zwXL6J/CV95hc1UjaNf9Aj2vBOP1Y3rZb5PXs3A Svezqv7hDlj+6z6KiDyXWG9b25gl2jEiVGZJwYFfAQnotfTyAEuplksSdSBUcrcZ aq6gXrvT3cse71GmSkvkjdUB/0CscZ2eVniY2nMGRS9FhPCvV6KPxI528gU1Xt+q W1CYENgSYkx0mQHpQ+BkMR3wQT4Uz5g= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:37 2025 by rpki-client