$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/d8bf669e-bc79-3c6f-a8c4-f416f2d4c466.roa File: d8bf669e-bc79-3c6f-a8c4-f416f2d4c466.roa (raw, json) Hash identifier: +iuBODBdZJa9mgEwTyCgDvt/NJDPDGW0IBYjW26fadI= Subject key identifier: 19:58:3D:B8:66:29:F0:06:43:C1:98:BF:6B:17:99:ED:41:08:9B:EA Certificate issuer: /CN=0538ef3c-e342-4e27-a075-8167bc73c054 Certificate serial: 010D0C9F4328584B9CA232C5F6720E37902270E0 Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/d8bf669e-bc79-3c6f-a8c4-f416f2d4c466.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 11260 IP address blocks: 149.19.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:32:c5:f6:72:0e:37:90:22:70:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=88fabc71-77ff-4dd6-9cc6-18ce207a588c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2f:88:eb:a6:ef:79:f3:f9:67:d1:d2:7b:de: be:bf:2d:bc:ca:75:45:19:be:d5:3d:fa:ed:68:dd: 3e:31:2b:75:ec:35:dc:9e:7d:23:01:d5:b0:28:71: 12:29:40:bd:b0:cf:4f:d7:9d:fb:95:c9:ea:1f:d0: f7:66:33:68:bd:f9:5f:cc:a4:02:16:8e:24:61:56: df:68:4d:14:ed:c2:73:d8:8d:91:0e:b0:d0:19:8e: dd:4e:56:8b:df:1a:14:19:a2:e3:91:c6:71:2e:4d: 46:18:4b:90:be:5c:f9:ef:58:19:d1:70:66:71:eb: 84:ed:95:fb:16:1e:de:10:df:6e:9e:da:12:8e:e3: 5f:90:c8:3d:76:88:f9:11:52:40:3e:d7:93:24:33: 4b:9d:67:58:b9:96:f4:67:5e:b5:bc:b2:f8:a1:28: a0:8d:f5:95:f2:45:47:52:c9:a8:e4:7c:f6:e2:c0: fb:06:2b:be:18:00:63:32:95:f2:a9:f3:f5:61:8e: 52:d8:7b:a9:59:c2:47:5b:91:c2:ab:74:62:d7:72: 9f:1c:c0:62:75:96:42:92:4b:1c:b4:8d:3e:a5:ef: 81:29:55:67:ac:70:72:17:6f:f1:fc:a1:0d:ae:c0: ec:60:b7:f9:ef:62:68:13:a3:bd:f4:fe:57:23:48: bb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:58:3D:B8:66:29:F0:06:43:C1:98:BF:6B:17:99:ED:41:08:9B:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/d8bf669e-bc79-3c6f-a8c4-f416f2d4c466.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl X509v3 Authority Key Identifier: keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer sbgp-ipAddrBlock: critical IPv4: 149.19.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:63:cb:fc:83:9e:75:34:1d:94:a9:45:98:2c:17:85:89:68: 53:f1:cb:cb:d4:1a:b7:9b:ca:77:90:7e:f5:45:ef:a2:ff:83: 27:33:22:4a:3a:98:78:59:ee:8a:41:11:45:6f:f4:42:23:0e: fd:09:26:e1:f9:a6:5c:fc:02:9b:1f:2f:26:56:11:f2:c4:1f: 78:9e:33:70:d7:f2:8e:9d:e2:70:a8:18:78:4b:3b:4c:bc:9f: cf:d2:af:c8:a8:10:77:e8:d2:17:bc:e2:b3:2b:bd:e5:1c:54: 9b:0d:64:68:47:be:be:0f:01:de:92:4d:97:2a:16:64:98:e4: 98:e0:32:7a:b1:8c:47:06:fb:71:0f:d0:e7:fd:88:83:63:16: 88:a7:31:e0:42:27:1d:58:16:a5:6e:ee:30:d1:20:a0:59:f7: 4a:a3:e0:a2:e9:89:58:e1:23:bf:93:d6:53:49:66:3e:64:7b: 7f:75:03:ab:f0:a1:7d:d9:96:4f:68:1b:cd:2a:76:1d:d0:bc: fb:10:76:05:b6:9a:80:ec:20:28:ca:0a:47:74:31:15:06:93: 4e:83:8b:f8:87:c9:73:3b:dc:eb:ed:78:63:4a:6c:8c:00:0d: 8e:75:26:2e:61:c0:4b:02:5b:a7:64:8b:b4:6f:49:b1:50:f1: 17:29:5b:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEucojLF9nION5AicOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOGVmM2MtZTM0Mi00ZTI3LWEwNzUtODE2N2JjNzNj MDU0MB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk ODhmYWJjNzEtNzdmZi00ZGQ2LTljYzYtMThjZTIwN2E1ODhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC+I66bvefP5Z9HSe96+vy28ynVFGb7VPfrt aN0+MSt17DXcnn0jAdWwKHESKUC9sM9P1537lcnqH9D3ZjNovflfzKQCFo4kYVbf aE0U7cJz2I2RDrDQGY7dTlaL3xoUGaLjkcZxLk1GGEuQvlz571gZ0XBmceuE7ZX7 Fh7eEN9untoSjuNfkMg9doj5EVJAPteTJDNLnWdYuZb0Z161vLL4oSigjfWV8kVH Usmo5Hz24sD7Biu+GABjMpXyqfP1YY5S2HupWcJHW5HCq3Ri13KfHMBidZZCkksc tI0+pe+BKVVnrHByF2/x/KENrsDsYLf572JoE6O99P5XI0i73wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlYPbhmKfAGQ8GYv2sXme1BCJvqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4 ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3YmM3M2MwNTQvZDhiZjY2OWUtYmM3OS0z YzZmLWE4YzQtZjQxNmYyZDRjNDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDUzOGVmM2MtZTM0Mi00ZTI3LWEw NzUtODE2N2JjNzNjMDU0LzA1MzhlZjNjLWUzNDItNGUyNy1hMDc1LTgxNjdiYzcz YzA1NC5jcmwwHwYDVR0jBBgwFoAUPawtOE5IBuFdK6OE1h3WEIXOM4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3 YmM3M2MwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlRNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtjy/yDnnU0HZSpRZgsF4WJaFPxy8vUGrebyneQfvVF76L/gyczIko6 mHhZ7opBEUVv9EIjDv0JJuH5plz8ApsfLyZWEfLEH3ieM3DX8o6d4nCoGHhLO0y8 n8/Sr8ioEHfo0he84rMrveUcVJsNZGhHvr4PAd6STZcqFmSY5JjgMnqxjEcG+3EP 0Of9iINjFoinMeBCJx1YFqVu7jDRIKBZ90qj4KLpiVjhI7+T1lNJZj5ke391A6vw oX3Zlk9oG80qdh3QvPsQdgW2moDsICjKCkd0MRUGk06Di/iHyXM73OvteGNKbIwA DY51Ji5hwEsCW6dki7RvSbFQ8RcpW6I= -----END CERTIFICATE-----Generated at Thu Nov 6 00:24:36 2025 by rpki-client