$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/cf38211e-a9ed-37ec-9041-432fd370bc59.roa File: cf38211e-a9ed-37ec-9041-432fd370bc59.roa (raw, json) Hash identifier: MFqp9xFDfiFhTzvUNjXES/aD21H+L0tOUgTucElVWOw= Subject key identifier: C7:EA:85:62:98:0F:5C:6B:46:05:35:42:33:AA:DA:31:89:60:65:4E Certificate issuer: /CN=84bfb9e8-1bae-4540-9cae-b6811ecadff5 Certificate serial: 010D0C9F4328584B5F3722B97832F7091F07D560 Authority key identifier: 33:87:39:DF:1C:AC:F8:79:BB:E8:E9:5D:84:6F:84:56:83:2C:A5:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/cf38211e-a9ed-37ec-9041-432fd370bc59.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 398653 IP address blocks: 198.62.160.0/24 maxlen: 24 2602:fbd3::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/84bfb9e8-1bae-4540-9cae-b6811ecadff5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/84bfb9e8-1bae-4540-9cae-b6811ecadff5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:22:b9:78:32:f7:09:1f:07:d5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84bfb9e8-1bae-4540-9cae-b6811ecadff5 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=2b7b202c-d7f2-406f-bece-91af44e9fe89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3c:5a:bd:46:2e:49:59:68:d3:8c:2c:6d:32: e2:1b:f3:cd:ee:cc:9c:3c:66:2d:ff:46:31:d3:3e: 23:09:16:e2:a8:90:72:69:f1:53:02:27:e7:92:c8: 38:bb:2a:ce:15:8d:1c:f5:57:10:39:be:40:b0:1a: 2f:04:4b:73:38:39:da:d6:cd:eb:b5:43:93:82:77: 64:15:cf:2c:fe:6f:51:00:d9:06:0b:c3:e9:ca:d1: 98:7a:86:0e:4e:15:e6:25:8c:0a:84:b2:ca:30:f4: 61:f4:f5:40:be:25:de:92:55:43:43:c9:9e:01:1d: 47:01:ae:49:df:ae:8d:74:1a:6e:ac:23:7c:7d:08: 0e:99:23:54:8a:ef:03:75:cf:45:8a:a2:36:3e:bd: 10:12:56:76:d1:50:54:48:98:41:28:6b:5e:fd:45: 8f:62:63:97:5c:05:c9:bf:7c:00:7e:87:ea:ad:2f: b1:16:05:8c:82:28:01:f7:d2:07:4c:4c:70:94:44: 8d:b5:3d:d5:88:69:7b:aa:a6:f5:bc:5f:53:95:96: 7c:0a:9c:0d:c6:3f:c2:8e:a2:dc:6f:b1:ed:90:d3: 7d:f3:a5:a2:93:8d:fa:22:76:07:cd:82:6d:62:76: 19:48:a0:33:28:00:7c:bc:e2:87:bb:cd:c6:b3:c3: 61:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:EA:85:62:98:0F:5C:6B:46:05:35:42:33:AA:DA:31:89:60:65:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/cf38211e-a9ed-37ec-9041-432fd370bc59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/84bfb9e8-1bae-4540-9cae-b6811ecadff5.crl X509v3 Authority Key Identifier: keyid:33:87:39:DF:1C:AC:F8:79:BB:E8:E9:5D:84:6F:84:56:83:2C:A5:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5.cer sbgp-ipAddrBlock: critical IPv4: 198.62.160.0/24 IPv6: 2602:fbd3::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:e9:72:37:44:f4:a6:bb:bd:9a:5b:59:27:1e:86:a0:71:22: ba:e7:2c:31:fb:ef:fa:6b:6a:d0:3f:26:e1:49:3e:e2:a3:5d: 8c:0b:39:39:25:c2:c2:2b:58:8a:36:a0:3c:ed:a3:73:6d:46: e7:e8:0b:a9:21:bc:70:1f:d9:de:2a:7a:6d:1c:0b:43:a6:af: 0f:ee:04:42:d6:f2:2a:fd:4d:d9:58:0a:11:6a:e6:da:5e:d8: 37:54:9e:b9:ac:0d:3e:85:3a:c2:b3:da:0e:16:79:ec:73:cd: a4:62:72:b3:74:b5:fe:ac:69:e6:00:e9:68:50:04:90:84:1b: 15:87:7d:7c:74:98:3b:98:37:d2:17:90:8b:f5:26:94:de:d2: 42:ba:74:d2:8f:af:91:ac:ad:59:de:49:40:a2:c4:75:b7:69: ad:f3:08:9b:59:bb:66:64:a6:29:82:44:cd:d3:96:c4:75:c6: fe:9d:7d:c8:15:0a:ed:69:69:99:de:92:43:cf:8a:c9:b4:47: 23:92:72:5a:e3:00:c9:57:91:06:b6:6b:c5:54:be:93:fa:2b: 35:c0:e0:c5:be:90:7c:c1:de:0e:4c:09:bc:29:17:7a:17:98: 99:64:32:ef:fb:d8:3c:7f:cd:55:e7:f6:0e:b0:ed:c3:6d:df: 49:17:61:96 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEtfNyK5eDL3CR8H1WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRiZmI5ZTgtMWJhZS00NTQwLTljYWUtYjY4MTFlY2Fk ZmY1MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk MmI3YjIwMmMtZDdmMi00MDZmLWJlY2UtOTFhZjQ0ZTlmZTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjxavUYuSVlo04wsbTLiG/PN7sycPGYt/0Yx 0z4jCRbiqJByafFTAifnksg4uyrOFY0c9VcQOb5AsBovBEtzODna1s3rtUOTgndk Fc8s/m9RANkGC8PpytGYeoYOThXmJYwKhLLKMPRh9PVAviXeklVDQ8meAR1HAa5J 366NdBpurCN8fQgOmSNUiu8Ddc9FiqI2Pr0QElZ20VBUSJhBKGte/UWPYmOXXAXJ v3wAfofqrS+xFgWMgigB99IHTExwlESNtT3ViGl7qqb1vF9TlZZ8CpwNxj/CjqLc b7HtkNN986Wik436InYHzYJtYnYZSKAzKAB8vOKHu83Gs8NhMwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFMfqhWKYD1xrRgU1QjOq2jGJYGVOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84NGJm YjllOC0xYmFlLTQ1NDAtOWNhZS1iNjgxMWVjYWRmZjUvY2YzODIxMWUtYTllZC0z N2VjLTkwNDEtNDMyZmQzNzBiYzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODRiZmI5ZTgtMWJhZS00NTQwLTlj YWUtYjY4MTFlY2FkZmY1Lzg0YmZiOWU4LTFiYWUtNDU0MC05Y2FlLWI2ODExZWNh ZGZmNS5jcmwwHwYDVR0jBBgwFoAUM4c53xys+Hm76OldhG+EVoMspWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84NGJmYjllOC0xYmFlLTQ1NDAtOWNhZS1iNjgx MWVjYWRmZjUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAxj6gMA4E AgACMAgDBgAmAvvTADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBR6XI3RPSmu72aW1knHoagcSK65ywx++/6 a2rQPybhST7io12MCzk5JcLCK1iKNqA87aNzbUbn6AupIbxwH9neKnptHAtDpq8P 7gRC1vIq/U3ZWAoRaubaXtg3VJ65rA0+hTrCs9oOFnnsc82kYnKzdLX+rGnmAOlo UASQhBsVh318dJg7mDfSF5CL9SaU3tJCunTSj6+RrK1Z3klAosR1t2mt8wibWbtm ZKYpgkTN05bEdcb+nX3IFQrtaWmZ3pJDz4rJtEcjknJa4wDJV5EGtmvFVL6T+is1 wODFvpB8wd4OTAm8KRd6F5iZZDLv+9g8f81V5/YOsO3Dbd9JF2GW -----END CERTIFICATE-----Generated at Wed Nov 5 19:22:15 2025 by rpki-client