$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/7338804c-06af-3f38-becc-5baa3b3d5cee.roa File: 7338804c-06af-3f38-becc-5baa3b3d5cee.roa (raw, json) Hash identifier: 2DxKY6o0Wl4aHsMZCwxZHq+N/EjknJIbA728gLi0QeM= Subject key identifier: 5B:EB:E7:20:6C:66:A1:55:5C:87:A9:89:81:E5:29:9D:CF:28:85:4B Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F4328584B891767EE1677ECB956C920C0 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/7338804c-06af-3f38-becc-5baa3b3d5cee.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 1207 IP address blocks: 128.182.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:67:ee:16:77:ec:b9:56:c9:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=59a66225-9329-479c-9449-7cdc3c98cb20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:74:76:5b:fb:12:c4:e4:9b:0f:2b:c6:f6:15: c3:1c:c7:db:51:13:f4:5f:e8:2f:05:19:e8:cd:18: ac:9a:59:ad:a0:5c:b4:49:c8:02:36:64:67:4d:f8: 6a:d6:e8:f5:00:75:f5:aa:86:1c:c3:5a:7f:a8:3f: dc:b7:07:59:da:77:cd:e8:39:52:0b:b1:17:25:71: 68:23:63:7f:3d:df:ca:69:e2:6b:08:f0:0e:4b:5a: 47:bf:f3:26:7d:3a:ec:3d:64:6f:99:0f:39:80:4b: 7b:65:e2:db:39:49:8b:35:5b:4b:e4:cc:0d:9f:6a: be:f6:f9:36:55:17:c1:51:b7:ac:bc:e5:19:10:3c: 82:8c:70:a1:43:ed:53:ce:ab:72:6e:03:8d:22:dd: 9f:d6:5f:ca:4f:4c:59:1e:13:3a:38:4e:ef:8a:bd: 10:34:5a:04:3c:63:99:d0:ec:e8:b9:04:f0:a9:74: d2:7d:5a:f8:c9:fd:26:84:23:f9:85:76:b9:81:b4: 21:f9:67:fd:a6:d1:3c:75:44:fd:8a:e5:30:17:ae: 09:bf:4a:28:cf:bd:dc:00:c7:ca:4e:bd:52:72:ac: 24:fa:16:78:8f:24:e5:7c:dd:58:7c:8e:64:85:6e: ed:e6:be:06:dc:bd:c4:f0:f9:5d:37:fd:2b:46:b3: fc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:EB:E7:20:6C:66:A1:55:5C:87:A9:89:81:E5:29:9D:CF:28:85:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/7338804c-06af-3f38-becc-5baa3b3d5cee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 128.182.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:7d:55:1e:c3:17:15:e2:e1:4b:ca:b3:70:87:b6:40:48:f4: 8a:7e:32:46:60:12:8b:70:5d:dc:5a:21:6f:f3:68:37:b4:7f: 8a:4c:db:83:93:f4:27:00:0a:ed:96:c3:ca:32:1a:0f:62:30: a7:f6:98:b7:33:a7:de:49:31:a4:e4:7e:ff:9e:7d:c1:e7:f0: 78:bd:69:2b:2d:07:fc:60:a8:5d:c8:f6:7a:a8:6d:b6:80:5c: 8e:74:ed:40:13:e1:ba:54:3d:f6:2f:fd:08:2a:1d:27:ce:c1: 7c:2a:77:6c:23:75:29:26:95:a0:9b:38:06:63:8c:48:01:ac: 11:a3:37:05:87:50:5e:ef:c4:70:61:eb:45:ed:5b:45:ee:d3: bf:04:c8:d6:02:5a:81:4c:4b:0d:27:bd:3a:c7:2e:d5:32:24: a2:88:cc:32:6b:03:57:28:e7:ff:c0:ff:12:e6:cb:ec:e9:56: 90:42:14:00:d5:1e:13:ba:80:0a:f6:6b:7e:10:dd:75:6f:51: f0:c9:af:6e:c9:26:20:ec:6a:f3:20:92:31:e2:a1:76:de:65: 94:8f:46:a8:f7:ac:60:80:de:19:60:f2:5e:63:03:20:25:10: 44:40:f4:bc:00:bf:1e:19:c3:64:5b:7a:2e:c2:4d:30:e7:f0: 43:c9:c9:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF2fuFnfsuVbJIMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk NTlhNjYyMjUtOTMyOS00NzljLTk0NDktN2NkYzNjOThjYjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHR2W/sSxOSbDyvG9hXDHMfbURP0X+gvBRno zRismlmtoFy0ScgCNmRnTfhq1uj1AHX1qoYcw1p/qD/ctwdZ2nfN6DlSC7EXJXFo I2N/Pd/KaeJrCPAOS1pHv/MmfTrsPWRvmQ85gEt7ZeLbOUmLNVtL5MwNn2q+9vk2 VRfBUbesvOUZEDyCjHChQ+1TzqtybgONIt2f1l/KT0xZHhM6OE7vir0QNFoEPGOZ 0OzouQTwqXTSfVr4yf0mhCP5hXa5gbQh+Wf9ptE8dUT9iuUwF64Jv0ooz73cAMfK Tr1Scqwk+hZ4jyTlfN1YfI5khW7t5r4G3L3E8PldN/0rRrP8aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvr5yBsZqFVXIepiYHlKZ3PKIVLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvNzMzODgwNGMtMDZhZi0z ZjM4LWJlY2MtNWJhYTNiM2Q1Y2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgLZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ19VR7DFxXi4UvKs3CHtkBI9Ip+MkZgEotwXdxaIW/zaDe0f4pM24OT 9CcACu2Ww8oyGg9iMKf2mLczp95JMaTkfv+efcHn8Hi9aSstB/xgqF3I9nqobbaA XI507UAT4bpUPfYv/QgqHSfOwXwqd2wjdSkmlaCbOAZjjEgBrBGjNwWHUF7vxHBh 60XtW0Xu078EyNYCWoFMSw0nvTrHLtUyJKKIzDJrA1co5//A/xLmy+zpVpBCFADV HhO6gAr2a34Q3XVvUfDJr27JJiDsavMgkjHioXbeZZSPRqj3rGCA3hlg8l5jAyAl EERA9LwAvx4Zw2Rbei7CTTDn8EPJyY8= -----END CERTIFICATE-----Generated at Mon Oct 20 19:08:11 2025 by rpki-client