$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/96377f13-9828-377f-8847-5a9e522ad52d.roa File: 96377f13-9828-377f-8847-5a9e522ad52d.roa (raw, json) Hash identifier: dz2bLnnOG7/qyyDSKClnBhzOslMve3qwO/pxsqaoox8= Subject key identifier: 4E:A3:22:F7:05:92:37:21:51:00:04:0C:5F:9E:58:30:E1:D2:66:F9 Certificate issuer: /CN=0538ef3c-e342-4e27-a075-8167bc73c054 Certificate serial: 010D0C9F4328584BB88D29E8990A0DC0144C2D80 Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/96377f13-9828-377f-8847-5a9e522ad52d.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 11260 IP address blocks: 216.167.224.0/19 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:29:e8:99:0a:0d:c0:14:4c:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=5530e879-1871-41fd-90e7-48318d8caecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2f:05:ac:6b:97:2e:4c:4a:25:32:21:c0:68: 1b:4e:b0:4f:df:33:50:ac:2e:8f:64:db:e9:36:c8: 99:27:d4:aa:bc:34:ea:6d:f0:16:77:0e:c6:a6:01: c0:17:6f:53:37:32:b1:c6:2e:ba:4c:8b:02:50:27: df:f8:2e:a6:f3:79:86:cf:ad:61:03:5d:11:1e:d0: 23:58:92:4f:51:3f:7d:ea:58:dd:9e:3e:41:2d:e8: 55:ab:6d:f7:de:df:6d:0d:a6:f4:37:68:7b:51:cb: f2:62:d0:3d:8e:d1:82:02:35:89:f8:70:ad:27:9e: 9a:19:8b:08:86:de:2c:4d:60:a6:30:3b:a6:61:99: 71:a1:2a:5c:71:a7:4e:bb:e0:7f:dd:ac:a3:cc:56: dd:ff:25:c1:65:08:92:37:a2:85:b5:1b:f9:c1:03: 57:2f:7d:7b:21:1c:9c:3c:55:3f:27:d2:04:c8:35: e2:67:b3:0c:7e:65:65:d0:36:6a:b7:b0:df:10:55: d2:94:ba:ba:3b:75:16:d9:8d:ff:9d:f8:b3:08:9b: 82:ce:f5:29:54:db:83:d0:48:91:f6:ee:03:a2:ba: 7b:62:9b:1c:23:64:b1:3f:2b:4a:10:3f:fe:2c:b2: 48:28:37:fd:6f:77:8d:85:44:8b:fa:f7:ee:36:1c: f7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A3:22:F7:05:92:37:21:51:00:04:0C:5F:9E:58:30:E1:D2:66:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/96377f13-9828-377f-8847-5a9e522ad52d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl X509v3 Authority Key Identifier: keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer sbgp-ipAddrBlock: critical IPv4: 216.167.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:8b:85:93:6a:7b:c0:0f:93:64:2a:dd:f3:c9:66:b9:b0:0b: 98:ce:f0:41:d8:2d:4f:74:95:4e:36:b4:7b:9f:01:65:1a:98: 4a:e6:c7:59:d9:e9:d6:77:d8:4b:db:4c:97:9e:73:b1:de:4a: 41:5e:48:d6:bc:43:0e:95:ac:a7:e5:be:79:15:a6:34:44:38: c0:68:09:b2:eb:ea:63:48:dc:28:42:c4:1d:77:96:50:3a:5e: f2:1d:fe:27:fd:5f:16:0c:90:e1:56:e7:12:e9:ce:b7:cb:38: e2:a3:8b:33:f2:67:b3:91:85:03:ce:31:2e:e3:d3:c9:d1:46: 02:0f:4f:4d:f4:08:87:02:9f:c9:3b:02:42:bc:5b:ec:3a:63: 4d:0c:f4:96:bc:72:fc:9c:2d:26:d2:94:33:c5:c7:d8:91:7a: ac:ba:55:d9:fb:46:f0:ab:e9:82:02:53:33:a1:70:90:b4:f4: 63:7f:46:62:1a:25:94:6a:80:1f:b1:43:8e:47:ba:d4:25:c5: 9f:f0:d2:26:55:ab:b5:3d:fa:07:25:3a:67:13:b3:96:cf:1b: 48:f7:a9:bf:60:60:64:28:72:1a:c2:12:b5:8d:7a:25:7b:de: 05:23:ba:fb:1c:dd:60:a3:48:a2:27:6c:db:8f:58:d8:9a:a7: a2:8d:4a:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jSnomQoNwBRMLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOGVmM2MtZTM0Mi00ZTI3LWEwNzUtODE2N2JjNzNj MDU0MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NTUzMGU4NzktMTg3MS00MWZkLTkwZTctNDgzMThkOGNhZWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy8FrGuXLkxKJTIhwGgbTrBP3zNQrC6PZNvp NsiZJ9SqvDTqbfAWdw7GpgHAF29TNzKxxi66TIsCUCff+C6m83mGz61hA10RHtAj WJJPUT996ljdnj5BLehVq2333t9tDab0N2h7UcvyYtA9jtGCAjWJ+HCtJ56aGYsI ht4sTWCmMDumYZlxoSpccadOu+B/3ayjzFbd/yXBZQiSN6KFtRv5wQNXL317IRyc PFU/J9IEyDXiZ7MMfmVl0DZqt7DfEFXSlLq6O3UW2Y3/nfizCJuCzvUpVNuD0EiR 9u4Dorp7YpscI2SxPytKED/+LLJIKDf9b3eNhUSL+vfuNhz3/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6jIvcFkjchUQAEDF+eWDDh0mb5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4 ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3YmM3M2MwNTQvOTYzNzdmMTMtOTgyOC0z NzdmLTg4NDctNWE5ZTUyMmFkNTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDUzOGVmM2MtZTM0Mi00ZTI3LWEw NzUtODE2N2JjNzNjMDU0LzA1MzhlZjNjLWUzNDItNGUyNy1hMDc1LTgxNjdiYzcz YzA1NC5jcmwwHwYDVR0jBBgwFoAUPawtOE5IBuFdK6OE1h3WEIXOM4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3 YmM3M2MwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2KfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2LhZNqe8APk2Qq3fPJZrmwC5jO8EHYLU90lU42tHufAWUamErmx1nZ 6dZ32EvbTJeec7HeSkFeSNa8Qw6VrKflvnkVpjREOMBoCbLr6mNI3ChCxB13llA6 XvId/if9XxYMkOFW5xLpzrfLOOKjizPyZ7ORhQPOMS7j08nRRgIPT030CIcCn8k7 AkK8W+w6Y00M9Ja8cvycLSbSlDPFx9iReqy6Vdn7RvCr6YICUzOhcJC09GN/RmIa JZRqgB+xQ45HutQlxZ/w0iZVq7U9+gclOmcTs5bPG0j3qb9gYGQochrCErWNeiV7 3gUjuvsc3WCjSKInbNuPWNiap6KNSvU= -----END CERTIFICATE-----Generated at Wed Nov 5 20:00:48 2025 by rpki-client