$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/f81c14b2-c9bf-36a6-a6a3-cbb53a49196b.roa File: f81c14b2-c9bf-36a6-a6a3-cbb53a49196b.roa (raw, json) Hash identifier: rKsuBJbIOXab9Nk22syNsjTJsJk/1h3Vei1uvz/UbnA= Subject key identifier: 63:D8:E6:05:9E:79:C7:4F:41:54:03:CB:59:AE:42:2F:6F:8E:7F:2F Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584BA7CD17EBB4EAFE7692DEDE80 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/f81c14b2-c9bf-36a6-a6a3-cbb53a49196b.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 396253 IP address blocks: 207.198.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:17:eb:b4:ea:fe:76:92:de:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=585f1d3a-c78f-4493-9528-8ca9d91fb0ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3a:bb:03:9c:00:f2:d1:22:ec:9e:53:86:f1: 90:38:a4:7b:bd:4f:d5:12:31:3a:05:e6:4e:e8:5d: 5d:ca:e1:81:a0:30:e5:84:ba:dd:f1:0b:70:2d:53: 05:9a:88:b8:d4:99:47:9a:68:10:e0:fe:2a:29:f4: 1c:ea:31:2b:60:89:a6:5c:08:a0:60:a3:b1:47:c3: ae:89:40:84:f6:ad:de:67:e9:52:cd:22:95:f1:13: 90:5b:c4:d1:4c:a2:11:b3:7e:a6:da:91:c5:54:bc: c9:9f:bf:1e:3b:7c:5b:06:7c:f5:52:81:b6:80:08: 32:74:1a:2f:73:eb:12:c0:89:b4:fc:83:c3:36:1f: 30:ad:90:88:eb:0f:f5:af:46:1a:b2:70:bc:cc:4d: 79:83:d2:6b:13:9f:c0:f0:bc:a3:34:e4:d0:56:81: 53:ee:76:bb:1d:e9:ef:d0:67:e2:45:43:ee:ce:a3: 7f:10:5b:67:86:ba:ea:9d:63:82:11:65:ad:e0:13: 0e:09:24:ef:ef:d1:6d:0f:9d:96:18:d3:31:5b:e3: 11:c6:4b:93:24:32:75:3e:d1:27:eb:fc:89:82:f1: 3b:ee:47:7e:dd:e7:25:60:6b:44:30:14:65:d5:b4: 42:37:40:c0:14:93:74:5d:a8:32:dd:6d:38:fd:f7: 4a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D8:E6:05:9E:79:C7:4F:41:54:03:CB:59:AE:42:2F:6F:8E:7F:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/f81c14b2-c9bf-36a6-a6a3-cbb53a49196b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 207.198.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:49:91:80:58:3a:90:eb:47:51:91:0a:e3:42:dc:37:3c:de: 99:8e:b8:e0:4e:4d:6c:db:cc:a8:8b:35:3a:2f:c6:35:6f:d4: f1:5e:5f:04:f0:91:76:1d:77:e2:89:9b:2c:b4:db:7a:4c:cb: 98:51:2c:32:b2:14:b9:ca:d6:fe:ad:db:09:f5:14:8f:5d:e5: 9a:f0:2e:dc:b7:49:b1:ee:5e:aa:32:13:17:07:3b:e5:d0:56: 5c:91:2b:78:a3:0e:c9:0c:43:a9:97:50:bd:4c:78:82:70:f8: a9:65:a9:65:40:79:ee:d7:f5:48:29:87:ca:8c:ac:9f:59:b9: 8a:c0:50:61:bd:07:06:f6:7e:56:e7:82:38:08:7b:91:51:9e: 40:61:21:1d:ef:3f:65:89:09:50:02:63:26:cd:45:b0:94:14: d4:2b:a6:f5:a7:e2:36:73:3b:1f:5d:1a:75:ab:4d:7c:69:25: b0:4b:73:58:ba:ee:e2:48:d6:80:f0:4f:76:57:63:51:61:a2: 41:f7:ad:f6:b1:bd:89:21:a3:70:06:2f:52:20:97:45:25:ab: dc:7e:b7:93:2a:cb:64:84:2b:6b:f4:f8:fb:8e:e4:b2:6f:ea: 24:23:1d:df:c9:3a:f9:7b:65:91:33:c1:8b:98:4b:50:e7:6f: b7:2b:31:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzRfrtOr+dpLe3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk NTg1ZjFkM2EtYzc4Zi00NDkzLTk1MjgtOGNhOWQ5MWZiMGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjq7A5wA8tEi7J5ThvGQOKR7vU/VEjE6BeZO 6F1dyuGBoDDlhLrd8QtwLVMFmoi41JlHmmgQ4P4qKfQc6jErYImmXAigYKOxR8Ou iUCE9q3eZ+lSzSKV8ROQW8TRTKIRs36m2pHFVLzJn78eO3xbBnz1UoG2gAgydBov c+sSwIm0/IPDNh8wrZCI6w/1r0YasnC8zE15g9JrE5/A8LyjNOTQVoFT7na7Henv 0GfiRUPuzqN/EFtnhrrqnWOCEWWt4BMOCSTv79FtD52WGNMxW+MRxkuTJDJ1PtEn 6/yJgvE77kd+3eclYGtEMBRl1bRCN0DAFJN0Xagy3W04/fdKgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPY5gWeecdPQVQDy1muQi9vjn8vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvZjgxYzE0YjItYzliZi0z NmE2LWE2YTMtY2JiNTNhNDkxOTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8ZCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVJkYBYOpDrR1GRCuNC3Dc83pmOuOBOTWzbzKiLNTovxjVv1PFeXwTw kXYdd+KJmyy023pMy5hRLDKyFLnK1v6t2wn1FI9d5ZrwLty3SbHuXqoyExcHO+XQ VlyRK3ijDskMQ6mXUL1MeIJw+KllqWVAee7X9Ugph8qMrJ9ZuYrAUGG9Bwb2flbn gjgIe5FRnkBhIR3vP2WJCVACYybNRbCUFNQrpvWn4jZzOx9dGnWrTXxpJbBLc1i6 7uJI1oDwT3ZXY1FhokH3rfaxvYkho3AGL1Igl0Ulq9x+t5Mqy2SEK2v0+PuO5LJv 6iQjHd/JOvl7ZZEzwYuYS1Dnb7crMZI= -----END CERTIFICATE-----Generated at Wed Nov 5 02:33:06 2025 by rpki-client