$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa File: 53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa (raw, json) Hash identifier: cnpwjYb1tPErRhxBuryJPzZiC+4Lfj6dxf56O1bitOc= Subject key identifier: AB:49:22:53:8D:5C:7C:5E:6B:4F:0E:50:34:31:44:3B:2E:2E:00:1E Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F4328584B95A78CA4BF0609D397D26280 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 25649 IP address blocks: 161.38.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:8c:a4:bf:06:09:d3:97:d2:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=03cd8864-0679-4d83-b58a-3421b644696a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:82:82:47:ab:92:b7:86:0b:21:7c:6b:b1:a8: ad:45:b1:07:ce:18:4a:1f:fc:85:68:6f:74:53:a3: 3b:6e:53:08:f2:69:4f:5c:6f:bd:f8:f9:1c:a9:b8: 11:3e:85:be:e8:e9:ae:b9:0b:83:c6:ff:53:f0:fe: df:69:89:e3:03:51:ad:11:4e:0f:eb:e0:55:9b:ba: e0:21:84:19:84:89:3d:16:8b:85:ba:cf:4d:ef:8f: 7b:7d:f0:d1:86:30:66:9f:dd:9e:e6:ff:c2:2e:e7: 87:d8:ad:9a:45:4e:dc:d3:0b:b8:9b:00:76:2f:e0: 57:3b:a8:8c:d3:cd:c4:97:a1:62:e5:e2:96:b4:63: 72:aa:f6:36:7c:08:ae:fd:7a:74:ef:e0:17:9e:a0: 36:cc:f7:0f:42:fb:82:75:87:40:76:bb:06:68:79: 96:6c:cf:6c:f6:83:02:e7:15:2b:20:43:62:61:c0: 2f:01:ed:1d:25:29:19:ae:b2:af:f8:0d:a5:66:3d: 58:31:48:aa:4f:9a:42:3a:a6:e5:bc:1a:40:e3:18: 27:b8:18:b2:bf:fb:ac:3f:35:2e:c1:c1:63:31:bf: ef:7d:94:bf:c0:07:7c:2d:f6:8a:64:d4:19:fa:12: 1b:74:8e:a9:6b:1d:24:04:22:96:01:47:9f:16:da: 53:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:49:22:53:8D:5C:7C:5E:6B:4F:0E:50:34:31:44:3B:2E:2E:00:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 161.38.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:46:cc:88:fc:a0:df:3e:21:80:ec:e4:5d:29:e7:e2:cb:c9: 31:b1:25:86:14:18:64:e6:5b:45:47:d1:4e:c1:08:63:ce:06: bc:2c:6d:a9:52:5c:68:b3:00:00:24:a8:ea:f5:6f:98:00:f4: 1c:c0:45:53:e2:49:06:b1:42:37:a3:a7:61:d7:e8:92:a6:e1: 24:d7:b7:ae:b6:aa:a7:7e:06:b5:47:29:06:d7:90:9b:f3:a2: 73:3b:9c:e5:e2:55:7c:ee:30:0a:bd:74:e5:d8:d8:c5:dd:6d: fa:49:c1:16:6c:3b:1b:32:4e:8a:d3:59:d8:69:e0:c4:dc:18: 21:a0:42:43:51:d6:70:bb:09:ef:da:3e:6c:1c:79:fb:60:cf: b8:76:b9:0a:3e:65:fe:5e:08:49:59:f5:72:11:dd:56:e0:1b: 4e:78:d5:f2:62:f5:9a:14:b5:e4:19:ee:14:17:cf:8c:dd:30: 07:4a:3a:ee:8f:bd:a7:c0:c8:a1:f9:72:ed:05:17:d2:7e:dd: 47:23:4e:e6:14:7e:44:8e:70:c4:c0:e9:e0:1d:62:db:7d:2d: 12:81:f2:44:9b:ba:0b:75:58:d9:c5:d4:b6:5e:cb:02:6a:66: f0:26:23:b8:36:31:1d:b8:2b:ad:9a:6b:fe:a5:96:50:41:fe: a2:ce:a0:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp4ykvwYJ05fSYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MDNjZDg4NjQtMDY3OS00ZDgzLWI1OGEtMzQyMWI2NDQ2OTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YKCR6uSt4YLIXxrsaitRbEHzhhKH/yFaG90 U6M7blMI8mlPXG+9+PkcqbgRPoW+6OmuuQuDxv9T8P7faYnjA1GtEU4P6+BVm7rg IYQZhIk9FouFus9N7497ffDRhjBmn92e5v/CLueH2K2aRU7c0wu4mwB2L+BXO6iM 083El6Fi5eKWtGNyqvY2fAiu/Xp07+AXnqA2zPcPQvuCdYdAdrsGaHmWbM9s9oMC 5xUrIENiYcAvAe0dJSkZrrKv+A2lZj1YMUiqT5pCOqblvBpA4xgnuBiyv/usPzUu wcFjMb/vfZS/wAd8LfaKZNQZ+hIbdI6pax0kBCKWAUefFtpTeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtJIlONXHxea08OUDQxRDsuLgAeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvNTNjOGY2ZGQtNzFlZi0z ZDU2LWFjOTgtY2M0YzVlYTRmOGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoSYqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdGzIj8oN8+IYDs5F0p5+LLyTGxJYYUGGTmW0VH0U7BCGPOBrwsbalS XGizAAAkqOr1b5gA9BzARVPiSQaxQjejp2HX6JKm4STXt662qqd+BrVHKQbXkJvz onM7nOXiVXzuMAq9dOXY2MXdbfpJwRZsOxsyTorTWdhp4MTcGCGgQkNR1nC7Ce/a Pmwceftgz7h2uQo+Zf5eCElZ9XIR3VbgG0541fJi9ZoUteQZ7hQXz4zdMAdKOu6P vafAyKH5cu0FF9J+3UcjTuYUfkSOcMTA6eAdYtt9LRKB8kSbugt1WNnF1LZeywJq ZvAmI7g2MR24K62aa/6lllBB/qLOoJs= -----END CERTIFICATE-----Generated at Wed Nov 5 14:06:22 2025 by rpki-client