$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/38774f99-c8aa-378a-8182-6262607bbe73.roa File: 38774f99-c8aa-378a-8182-6262607bbe73.roa (raw, json) Hash identifier: ogbASS5qrFXA2YJjTDMONk9YbN3+0TgO0hQ7x7zhdHM= Subject key identifier: 02:E1:5F:3F:E7:4B:CB:BC:C2:62:57:99:02:E0:61:2E:EF:CD:2C:76 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BB88D541B0EE3341A0FCE3300 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/38774f99-c8aa-378a-8182-6262607bbe73.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 22691 IP address blocks: 216.44.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:54:1b:0e:e3:34:1a:0f:ce:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=3e7d1fe6-6b45-4f23-841f-b1c1769d82ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a0:42:d5:20:05:1f:c7:17:b5:0a:89:37:9f: 8d:78:c9:8b:a8:be:9a:bd:a4:45:70:33:dd:2f:35: 23:ba:64:1a:84:fc:72:fe:e2:a6:a4:6f:8e:92:5a: 50:57:d4:b5:eb:5a:0d:0a:c6:09:db:ab:b3:eb:4a: f5:10:d9:3a:d5:7f:fb:b9:ed:54:83:8b:ff:f4:d6: df:00:68:59:4c:8f:3d:df:35:fd:5a:81:f8:c3:c4: 6e:8d:2a:52:9d:31:c1:a5:06:b4:1e:c6:b4:0c:de: 3f:bd:cb:9e:82:4a:92:fe:61:92:01:66:52:44:12: 23:79:45:16:18:35:81:9e:53:b3:55:0c:e2:47:8c: 42:46:f8:1c:bd:71:d1:da:ac:54:5e:69:4a:bf:9c: 52:a9:67:8b:db:ba:f5:b1:b0:1b:59:c4:28:72:97: e6:75:e8:6a:9b:32:6c:27:c3:5f:e5:40:d6:69:f3: 0a:1c:ce:3b:5b:44:74:a4:dc:18:50:10:8f:7b:82: d2:01:b8:cf:b6:c5:f1:0c:a7:02:93:dc:0f:2e:03: f0:94:69:dd:4c:90:1a:59:18:0c:35:70:bb:03:bb: 32:88:bc:50:ba:2a:3c:31:3c:11:cf:32:a0:0f:ad: 49:83:75:6a:90:3e:4f:e2:19:ec:94:88:22:9a:49: 3d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E1:5F:3F:E7:4B:CB:BC:C2:62:57:99:02:E0:61:2E:EF:CD:2C:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/38774f99-c8aa-378a-8182-6262607bbe73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 216.44.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:c2:5b:2f:3b:06:b3:06:bb:77:e0:07:44:95:95:e4:00:46: b1:7c:f1:47:c2:15:bb:4c:fb:40:7a:b2:b3:a8:bd:10:35:60: e4:e7:01:57:40:8e:ce:c1:25:0a:4d:7c:c4:ea:3b:07:5e:e5: 95:14:8a:90:6a:79:91:db:ba:98:04:56:7e:c9:8f:30:e9:de: 0b:e8:15:d6:4b:e1:03:c6:0f:85:2b:cf:62:99:67:19:11:5a: 50:63:e0:76:dd:58:5c:83:14:14:9a:22:dd:80:5f:43:78:fb: 3e:91:ff:b8:a7:aa:30:43:85:a8:22:32:49:33:35:d6:b2:9d: 5b:5a:33:fb:bc:4b:48:d0:7a:70:cf:6b:4f:ad:51:08:2c:4d: 8a:dd:88:a0:ca:74:7d:58:bc:66:4c:be:f2:ca:8a:79:95:54: 0b:5f:bc:d2:27:7f:f8:c8:7a:0e:24:ac:69:0e:0c:77:70:a3: b4:2f:c3:6e:8c:aa:ce:a9:d1:40:fc:aa:58:a6:bb:36:ab:ab: 22:fe:5e:92:2a:29:71:45:3f:ef:ec:32:8d:90:ab:41:4b:5f: 52:a3:07:24:1b:86:6c:5b:1c:ca:ba:04:3e:27:12:bc:c6:c2: 51:ee:91:45:09:63:f7:33:31:89:93:25:c1:aa:da:8a:e5:63: e6:89:41:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jVQbDuM0Gg/OMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk M2U3ZDFmZTYtNmI0NS00ZjIzLTg0MWYtYjFjMTc2OWQ4MmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKBC1SAFH8cXtQqJN5+NeMmLqL6avaRFcDPd LzUjumQahPxy/uKmpG+OklpQV9S161oNCsYJ26uz60r1ENk61X/7ue1Ug4v/9Nbf AGhZTI893zX9WoH4w8RujSpSnTHBpQa0Hsa0DN4/vcuegkqS/mGSAWZSRBIjeUUW GDWBnlOzVQziR4xCRvgcvXHR2qxUXmlKv5xSqWeL27r1sbAbWcQocpfmdehqmzJs J8Nf5UDWafMKHM47W0R0pNwYUBCPe4LSAbjPtsXxDKcCk9wPLgPwlGndTJAaWRgM NXC7A7syiLxQuio8MTwRzzKgD61Jg3VqkD5P4hnslIgimkk9WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALhXz/nS8u8wmJXmQLgYS7vzSx2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMzg3NzRmOTktYzhhYS0z NzhhLTgxODItNjI2MjYwN2JiZTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2CwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTCWy87BrMGu3fgB0SVleQARrF88UfCFbtM+0B6srOovRA1YOTnAVdA js7BJQpNfMTqOwde5ZUUipBqeZHbupgEVn7JjzDp3gvoFdZL4QPGD4Urz2KZZxkR WlBj4HbdWFyDFBSaIt2AX0N4+z6R/7inqjBDhagiMkkzNdaynVtaM/u8S0jQenDP a0+tUQgsTYrdiKDKdH1YvGZMvvLKinmVVAtfvNInf/jIeg4krGkODHdwo7Qvw26M qs6p0UD8qlimuzarqyL+XpIqKXFFP+/sMo2Qq0FLX1KjByQbhmxbHMq6BD4nErzG wlHukUUJY/czMYmTJcGq2orlY+aJQZ0= -----END CERTIFICATE-----Generated at Tue Nov 4 21:27:26 2025 by rpki-client