$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2/b60f6871-bf1e-313d-a518-8618b46d517a.roa File: b60f6871-bf1e-313d-a518-8618b46d517a.roa (raw, json) Hash identifier: fk5hAI6QDI1+5yXb2geBJ7o5Y1zvna2TeEzCytK7mGE= Subject key identifier: FB:E8:F1:AF:82:E4:15:DD:BD:7D:DD:FD:B5:55:A8:D4:84:7B:9A:54 Certificate issuer: /CN=1040c089-26bf-4af5-9c25-bcef963829d2 Certificate serial: 010D0C9F4328584BA0D251A9B1477F2F7AD14B00 Authority key identifier: 20:DD:EC:4A:B6:08:24:0A:53:F2:07:C7:47:62:F0:32:CC:8F:8C:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2/b60f6871-bf1e-313d-a518-8618b46d517a.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 32704 IP address blocks: 198.38.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2/1040c089-26bf-4af5-9c25-bcef963829d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2/1040c089-26bf-4af5-9c25-bcef963829d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:51:a9:b1:47:7f:2f:7a:d1:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1040c089-26bf-4af5-9c25-bcef963829d2 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=e6b986fb-cac8-4a2f-81e2-b1a35ca314b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:62:04:c7:a4:4f:f6:b0:d0:ec:4f:a5:ce:e5: a1:e7:33:e6:f5:52:4f:0f:a2:92:1c:da:d0:91:2b: dc:04:1e:72:a4:59:01:2d:92:3d:eb:b1:ea:38:fc: fe:20:46:40:7e:4b:ab:0a:43:f5:f7:0d:39:20:88: c1:3a:c1:24:91:7e:bc:15:b6:77:c6:e5:f2:d1:6d: 62:71:d4:5b:16:c9:bd:0c:d4:8f:73:71:b9:58:8a: 9b:d6:87:28:f8:73:46:53:6e:48:ab:93:43:eb:e7: 4e:03:2e:0e:e7:6d:f9:73:5f:f4:38:92:76:81:2e: 78:86:f9:d6:14:b0:c8:09:7d:f1:9d:d0:b8:a3:0a: 9f:bc:9b:9a:a0:aa:e3:c9:4f:3f:52:88:c7:4e:4b: 07:4f:4f:d4:65:fc:22:94:ef:ea:91:8c:83:95:98: 45:a7:0a:59:64:e2:49:f8:9f:3a:a9:ad:bf:4d:04: 9f:58:d4:24:69:5f:b0:c3:8e:5a:91:e0:4e:57:bc: c1:3b:ea:09:77:c2:77:e8:e8:77:bc:ce:60:3e:2e: 77:09:99:7c:ef:02:f7:d4:4f:33:bc:94:7b:c9:0d: 41:19:d6:b2:92:f7:9c:25:32:bb:e5:7d:6a:04:7d: 7e:91:62:62:71:a6:f4:67:b5:f2:9d:bb:6b:ab:28: a4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E8:F1:AF:82:E4:15:DD:BD:7D:DD:FD:B5:55:A8:D4:84:7B:9A:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2/b60f6871-bf1e-313d-a518-8618b46d517a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2/1040c089-26bf-4af5-9c25-bcef963829d2.crl X509v3 Authority Key Identifier: keyid:20:DD:EC:4A:B6:08:24:0A:53:F2:07:C7:47:62:F0:32:CC:8F:8C:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2.cer sbgp-ipAddrBlock: critical IPv4: 198.38.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:f7:25:30:57:44:9e:57:48:0e:c3:cf:fd:a6:39:79:b2:cf: 7c:87:86:4d:39:81:c9:8d:87:53:a1:c5:70:42:94:75:06:41: 8b:34:8f:12:e7:aa:07:a1:f3:43:0c:ea:61:b2:39:7a:1a:2c: 12:d9:3a:a2:2e:27:d6:9d:e5:39:9e:d6:79:17:2a:33:ac:ae: 0c:b0:84:a1:d0:44:85:97:c2:0c:e9:40:81:69:50:3a:cc:1b: 40:bc:91:9e:c3:e0:6f:c4:01:5c:49:d7:7a:b9:56:b8:83:15: da:19:22:6f:e9:ae:76:9a:03:e2:03:81:e0:af:2f:75:e3:1b: 90:03:a6:3e:49:af:a1:e2:15:b8:2e:87:bf:86:c8:16:10:95: 5c:e9:ca:c2:49:00:eb:4e:08:80:64:9c:24:09:42:73:01:43: 84:59:5f:f5:b6:e0:48:d8:d0:8c:6a:b5:8b:09:ca:f1:6f:da: 84:79:1d:b3:03:cb:80:7d:eb:80:d5:85:83:a4:e3:6c:34:8a: c6:bf:a2:c7:4a:94:59:98:95:84:ca:4e:b9:e3:a5:8b:8a:ae: da:4b:8a:bf:fc:60:61:30:c4:6e:dd:0b:d8:a0:15:3e:48:39: fb:e6:4b:0f:af:ce:e4:08:e1:c1:aa:a2:74:cc:a1:c4:92:57: d8:89:18:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0lGpsUd/L3rRSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTA0MGMwODktMjZiZi00YWY1LTljMjUtYmNlZjk2Mzgy OWQyMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ZTZiOTg2ZmItY2FjOC00YTJmLTgxZTItYjFhMzVjYTMxNGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmIEx6RP9rDQ7E+lzuWh5zPm9VJPD6KSHNrQ kSvcBB5ypFkBLZI967HqOPz+IEZAfkurCkP19w05IIjBOsEkkX68FbZ3xuXy0W1i cdRbFsm9DNSPc3G5WIqb1oco+HNGU25Iq5ND6+dOAy4O5235c1/0OJJ2gS54hvnW FLDICX3xndC4owqfvJuaoKrjyU8/UojHTksHT0/UZfwilO/qkYyDlZhFpwpZZOJJ +J86qa2/TQSfWNQkaV+ww45akeBOV7zBO+oJd8J36Oh3vM5gPi53CZl87wL31E8z vJR7yQ1BGdaykvecJTK75X1qBH1+kWJicab0Z7XynbtrqyikAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPvo8a+C5BXdvX3d/bVVqNSEe5pUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xMDQw YzA4OS0yNmJmLTRhZjUtOWMyNS1iY2VmOTYzODI5ZDIvYjYwZjY4NzEtYmYxZS0z MTNkLWE1MTgtODYxOGI0NmQ1MTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTA0MGMwODktMjZiZi00YWY1LTlj MjUtYmNlZjk2MzgyOWQyLzEwNDBjMDg5LTI2YmYtNGFmNS05YzI1LWJjZWY5NjM4 MjlkMi5jcmwwHwYDVR0jBBgwFoAUIN3sSrYIJApT8gfHR2LwMsyPjG4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xMDQwYzA4OS0yNmJmLTRhZjUtOWMyNS1iY2Vm OTYzODI5ZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiYNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH73JTBXRJ5XSA7Dz/2mOXmyz3yHhk05gcmNh1OhxXBClHUGQYs0jxLn qgeh80MM6mGyOXoaLBLZOqIuJ9ad5Tme1nkXKjOsrgywhKHQRIWXwgzpQIFpUDrM G0C8kZ7D4G/EAVxJ13q5VriDFdoZIm/prnaaA+IDgeCvL3XjG5ADpj5Jr6HiFbgu h7+GyBYQlVzpysJJAOtOCIBknCQJQnMBQ4RZX/W24EjY0IxqtYsJyvFv2oR5HbMD y4B964DVhYOk42w0isa/osdKlFmYlYTKTrnjpYuKrtpLir/8YGEwxG7dC9igFT5I OfvmSw+vzuQI4cGqonTMocSSV9iJGHE= -----END CERTIFICATE-----Generated at Wed Nov 5 18:06:25 2025 by rpki-client