$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa File: 2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa (raw, json) Hash identifier: Jngd0bujjYX07s5LJ5VBHEb5zKG6EtrIZBtZB9l5bOk= Subject key identifier: 38:D7:0F:11:79:49:25:0B:0A:59:00:00:B0:AD:25:62:5E:33:17:DC Certificate issuer: /CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Certificate serial: 010D0C9F4328584BAEC7B2BE21D2BBC654DD2E80 Authority key identifier: 16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 399717 IP address blocks: 23.179.176.0/24 maxlen: 24 64.112.106.0/24 maxlen: 24 2602:fc7e::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:b2:be:21:d2:bb:c6:54:dd:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=70ae8780-c0c1-48ad-a86f-d35392fdd24c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:da:e5:6a:2d:df:c8:85:da:6d:28:8c:c8:0e: ab:59:74:00:22:b4:dd:38:9a:bd:ea:e6:c0:29:e0: 3c:37:8f:23:72:0a:22:a5:e8:c3:76:6c:86:ed:c7: e0:6b:9c:eb:90:59:68:c1:b3:88:7e:11:58:c9:5b: 9d:22:76:5f:ac:84:e1:83:99:55:7a:d4:26:2c:5d: c8:93:71:9a:d6:4a:58:e0:be:2e:14:8d:f3:3f:ef: 7a:39:1b:75:03:e4:c9:6c:88:d7:40:90:6f:9d:6e: 9b:bb:82:b7:eb:aa:9b:99:36:df:d8:c8:d9:d5:c8: 0a:af:d7:d4:96:b9:bc:22:03:60:d4:24:ab:45:d6: 1b:80:45:12:82:b1:cc:ae:64:4e:21:ce:d0:ad:3e: 81:d8:be:cc:cc:45:47:7f:35:71:ca:d5:40:71:d1: 08:20:ae:ba:f0:bb:85:dd:a2:b5:13:e4:f8:f0:7a: 78:71:86:e0:22:61:e0:be:e7:ac:27:22:06:0c:5f: b2:87:f6:8f:6b:e7:f2:88:57:80:4a:0b:fe:fe:9a: 0d:0f:3a:dc:6b:ba:78:b9:21:80:a2:8a:64:9b:c8: d8:17:8e:4d:ac:69:dc:fe:da:2e:e8:d9:14:e6:77: f3:fd:81:cc:7f:14:45:1c:af:fc:25:b6:58:ea:c0: 8e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D7:0F:11:79:49:25:0B:0A:59:00:00:B0:AD:25:62:5E:33:17:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl X509v3 Authority Key Identifier: keyid:16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer sbgp-ipAddrBlock: critical IPv4: 23.179.176.0/24 64.112.106.0/24 IPv6: 2602:fc7e::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:ec:30:44:76:e6:ad:44:c4:58:9c:51:a8:f1:c8:f0:60:41: fc:80:46:9d:a9:b4:be:25:db:c5:4b:9f:c8:29:3a:bb:02:cf: 11:36:fa:db:28:c3:b6:03:c4:78:a3:b6:07:60:9d:b8:90:94: a4:08:84:68:b0:71:0b:79:e4:7e:74:2f:3f:90:b5:93:52:08: 55:41:f0:df:f2:66:0a:81:8c:1b:f2:de:ac:c7:50:d4:87:ca: 1e:b9:99:17:9e:ae:1b:d4:69:da:34:46:db:c2:17:91:c2:4a: e6:38:cd:3a:4c:17:2f:55:a1:f1:62:2c:4c:51:de:ca:e4:dc: c0:9c:3a:e1:ad:c7:1e:9c:72:c7:c7:b9:f2:4b:8d:20:53:19: ed:92:c9:c3:ac:33:e2:21:ca:e2:76:fd:5f:f8:df:33:60:8a: a1:f6:03:90:0d:2a:df:d5:77:2e:68:ad:96:f7:99:80:12:a0: 36:5f:1f:47:dd:7f:5e:c1:75:83:69:41:fa:cd:a2:d0:48:34: b1:da:fe:83:a2:71:f1:b0:b6:8f:e2:97:22:60:ad:3e:52:74: 4e:16:3c:60:fa:7e:48:96:c9:f6:ee:dc:80:73:90:e7:3b:a7: 64:f9:2c:5e:42:34:5d:ca:18:83:b6:a9:9b:6b:20:92:1a:72: 08:aa:7e:d2 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEuux7K+IdK7xlTdLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhhOTZhOWEtNjI1Ny00YTYzLWExNDktMjFmNmFkNjdh ZTE1MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk NzBhZTg3ODAtYzBjMS00OGFkLWE4NmYtZDM1MzkyZmRkMjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdrlai3fyIXabSiMyA6rWXQAIrTdOJq96ubA KeA8N48jcgoipejDdmyG7cfga5zrkFlowbOIfhFYyVudInZfrIThg5lVetQmLF3I k3Ga1kpY4L4uFI3zP+96ORt1A+TJbIjXQJBvnW6bu4K366qbmTbf2MjZ1cgKr9fU lrm8IgNg1CSrRdYbgEUSgrHMrmROIc7QrT6B2L7MzEVHfzVxytVAcdEIIK668LuF 3aK1E+T48Hp4cYbgImHgvuesJyIGDF+yh/aPa+fyiFeASgv+/poNDzrca7p4uSGA oopkm8jYF45NrGnc/tou6NkU5nfz/YHMfxRFHK/8JbZY6sCOBQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFDjXDxF5SSULClkAALCtJWJeMxfcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5 NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2YWQ2N2FlMTUvMmQ2NDViMWItYzY5NS0z YjJlLWE0NTItMTVjZGJiMzAyYjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhhOTZhOWEtNjI1Ny00YTYzLWEx NDktMjFmNmFkNjdhZTE1LzM4YTk2YTlhLTYyNTctNGE2My1hMTQ5LTIxZjZhZDY3 YWUxNS5jcmwwHwYDVR0jBBgwFoAUFi4QRHzVqs+6NigDq0Tj6g6tSVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2 YWQ2N2FlMTUuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF7OwAwQA QHBqMA4EAgACMAgDBgAmAvx+ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBj7DBEduatRMRYnFGo8cjwYEH8 gEadqbS+JdvFS5/IKTq7As8RNvrbKMO2A8R4o7YHYJ24kJSkCIRosHELeeR+dC8/ kLWTUghVQfDf8mYKgYwb8t6sx1DUh8oeuZkXnq4b1GnaNEbbwheRwkrmOM06TBcv VaHxYixMUd7K5NzAnDrhrccenHLHx7nyS40gUxntksnDrDPiIcridv1f+N8zYIqh 9gOQDSrf1XcuaK2W95mAEqA2Xx9H3X9ewXWDaUH6zaLQSDSx2v6DonHxsLaP4pci YK0+UnROFjxg+n5Ilsn27tyAc5DnO6dk+SxeQjRdyhiDtqmbayCSGnIIqn7S -----END CERTIFICATE-----Generated at Wed Nov 5 14:56:35 2025 by rpki-client