$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/5ebcd16e-1ba8-3203-84b8-09de0c1f4380.roa File: 5ebcd16e-1ba8-3203-84b8-09de0c1f4380.roa (raw, json) Hash identifier: btPFklAG2IgLOXpm/YTJyV2cGlXMXbFiUI+5FVHlNIE= Subject key identifier: 62:45:6D:CA:DD:B7:B7:1A:63:3A:63:E5:3D:75:61:33:31:3B:CC:84 Certificate issuer: /CN=0538ef3c-e342-4e27-a075-8167bc73c054 Certificate serial: 010D0C9F4328584BB88D1E756F8DF7F42B9AFD60 Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/5ebcd16e-1ba8-3203-84b8-09de0c1f4380.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 11260 IP address blocks: 24.129.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:1e:75:6f:8d:f7:f4:2b:9a:fd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=a976300a-6fa3-4d28-bad0-f566d43a1c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:44:f2:9b:17:b0:1b:50:13:ae:3f:ab:23:95: 4d:80:71:fc:8f:aa:16:dd:4e:5b:72:24:31:a0:b1: a4:6b:c6:dc:be:c2:8a:db:fa:2f:5d:e0:56:26:34: 56:c2:d5:bb:f2:c5:6e:78:37:f9:bb:e1:b1:74:4e: b6:6b:88:ec:de:39:6d:e7:32:bc:34:07:bf:9d:1e: f2:51:ad:e7:10:70:ed:68:c2:73:c0:74:3d:3d:39: 29:7c:19:e9:c7:40:9e:03:a1:da:65:0e:7b:16:8a: ed:09:31:a3:dc:e1:5f:c4:d2:98:45:a4:45:41:c4: a3:d8:02:53:4b:98:17:14:d6:7f:7a:7e:03:a3:3c: bd:7c:ab:28:8e:18:12:39:c0:3e:72:0b:1a:83:a6: b7:af:02:54:eb:12:92:c5:b5:67:35:ff:47:47:2b: ec:84:36:dd:ed:ac:0b:af:57:1a:bf:9b:34:43:2a: f1:fa:6d:f8:73:f0:4e:28:3d:46:79:96:38:60:bf: 71:c5:44:78:a5:aa:e1:ca:3a:c5:ee:b4:bf:75:2c: fe:ca:8b:12:74:44:da:1a:33:ae:4d:89:ac:da:29: c4:3a:08:89:bd:d0:f2:1a:70:66:3c:fb:ad:53:ba: 7d:c1:69:3b:fa:c3:10:38:3a:d3:a3:51:34:8e:22: 7b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:45:6D:CA:DD:B7:B7:1A:63:3A:63:E5:3D:75:61:33:31:3B:CC:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/5ebcd16e-1ba8-3203-84b8-09de0c1f4380.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl X509v3 Authority Key Identifier: keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer sbgp-ipAddrBlock: critical IPv4: 24.129.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:5c:a9:ce:70:b6:ed:33:c9:6f:5a:ad:3d:1d:4b:c6:3d:1e: 85:d1:e8:0c:9b:5b:40:60:06:30:95:a2:2d:bb:57:a0:3b:32: 06:87:26:47:ab:db:bb:61:51:d7:59:12:6a:72:9b:ca:c8:d4: 3d:4a:76:3e:b4:fa:23:6a:a4:c4:13:41:20:90:e2:0f:88:4c: 9c:82:82:ee:82:5c:b9:bf:0f:33:99:10:98:80:49:bd:41:1e: 61:b3:98:e4:fa:f7:a9:ff:26:ec:c7:2c:d6:b5:6c:97:ec:d8: 19:f4:35:bb:a6:5e:5c:b1:05:f4:47:97:fd:22:ae:9d:46:04: 90:5f:ae:cc:06:42:16:1a:08:bc:cf:de:7d:80:4a:1c:d2:dc: cf:73:26:46:06:ca:3c:54:36:a3:05:9c:98:a2:9a:90:e4:58: df:89:db:38:ee:25:3e:d3:de:8c:40:32:dd:a1:4f:ff:83:27: 16:94:dd:a5:b7:80:c5:73:1a:52:19:5e:96:a0:e4:42:fb:63: 57:f6:6d:b4:04:9d:6d:f6:8a:26:c5:e7:3c:9c:75:ee:8a:cd: 9d:e5:05:5e:c2:86:37:9e:6c:8d:14:34:03:98:8d:e5:b0:37: 25:9c:25:a7:80:61:ff:44:16:5d:78:60:57:85:ff:b3:3a:13: 94:6a:c8:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jR51b4339Cua/WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOGVmM2MtZTM0Mi00ZTI3LWEwNzUtODE2N2JjNzNj MDU0MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk YTk3NjMwMGEtNmZhMy00ZDI4LWJhZDAtZjU2NmQ0M2ExYzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0TymxewG1ATrj+rI5VNgHH8j6oW3U5bciQx oLGka8bcvsKK2/ovXeBWJjRWwtW78sVueDf5u+GxdE62a4js3jlt5zK8NAe/nR7y Ua3nEHDtaMJzwHQ9PTkpfBnpx0CeA6HaZQ57FortCTGj3OFfxNKYRaRFQcSj2AJT S5gXFNZ/en4Dozy9fKsojhgSOcA+cgsag6a3rwJU6xKSxbVnNf9HRyvshDbd7awL r1cav5s0Qyrx+m34c/BOKD1GeZY4YL9xxUR4parhyjrF7rS/dSz+yosSdETaGjOu TYms2inEOgiJvdDyGnBmPPutU7p9wWk7+sMQODrTo1E0jiJ7sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJFbcrdt7caYzpj5T11YTMxO8yEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4 ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3YmM3M2MwNTQvNWViY2QxNmUtMWJhOC0z MjAzLTg0YjgtMDlkZTBjMWY0MzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDUzOGVmM2MtZTM0Mi00ZTI3LWEw NzUtODE2N2JjNzNjMDU0LzA1MzhlZjNjLWUzNDItNGUyNy1hMDc1LTgxNjdiYzcz YzA1NC5jcmwwHwYDVR0jBBgwFoAUPawtOE5IBuFdK6OE1h3WEIXOM4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3 YmM3M2MwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGIHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlcqc5wtu0zyW9arT0dS8Y9HoXR6AybW0BgBjCVoi27V6A7MgaHJker 27thUddZEmpym8rI1D1Kdj60+iNqpMQTQSCQ4g+ITJyCgu6CXLm/DzOZEJiASb1B HmGzmOT696n/JuzHLNa1bJfs2Bn0NbumXlyxBfRHl/0irp1GBJBfrswGQhYaCLzP 3n2AShzS3M9zJkYGyjxUNqMFnJiimpDkWN+J2zjuJT7T3oxAMt2hT/+DJxaU3aW3 gMVzGlIZXpag5EL7Y1f2bbQEnW32iibF5zycde6KzZ3lBV7ChjeebI0UNAOYjeWw NyWcJaeAYf9EFl14YFeF/7M6E5RqyBE= -----END CERTIFICATE-----Generated at Wed Nov 5 21:30:48 2025 by rpki-client