$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/4b0843ab-fef2-3122-99d7-15049fb493c3.roa File: 4b0843ab-fef2-3122-99d7-15049fb493c3.roa (raw, json) Hash identifier: UYmZ9M5GZDIzpTYcgazfihcW9dkGsu8PESbZb+utk7o= Subject key identifier: 2D:B2:F2:E7:C6:9F:1C:E5:08:1A:86:85:47:61:2B:8E:9F:0D:7E:C1 Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F4328584B891767938B80478D709FCCA0 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/4b0843ab-fef2-3122-99d7-15049fb493c3.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 22742 IP address blocks: 64.251.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:67:93:8b:80:47:8d:70:9f:cc:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=0d4241b9-3311-4c09-bbb0-f2fc2a16f40a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c7:fd:f3:db:22:7c:c3:b5:13:9e:63:05:64: 5f:b5:26:2f:5d:4f:d5:a8:14:2a:59:cd:fc:d8:bf: 7e:4a:04:4b:26:a7:94:7f:29:56:cf:23:99:87:98: 2c:20:94:0e:f1:29:bf:da:87:58:6a:31:f3:a1:1c: 53:6f:59:63:ef:31:83:a6:4a:27:45:a1:da:df:2e: 3d:18:6b:54:0c:24:e4:db:63:e1:be:4e:1e:56:b6: 18:2a:31:02:b1:33:fd:f8:81:7f:e4:c8:a0:a8:b7: 1d:5c:aa:bd:e0:36:93:aa:1a:04:30:16:06:d1:3c: b4:51:6d:6a:72:59:8c:60:22:15:e5:a0:77:05:99: 4c:3a:0a:3f:c4:cc:16:e7:49:c5:13:18:46:a5:2b: bd:24:1e:b0:61:19:0f:27:82:61:a8:52:e7:d3:d8: ff:82:ee:ff:d0:5f:0b:41:a4:21:87:bb:d2:9d:b5: 19:40:0e:3e:ba:5f:fb:22:4a:18:9f:6e:5c:57:05: 57:83:0d:48:ef:e4:8d:39:36:14:cc:47:f7:34:61: 9c:e9:66:ea:5c:f8:49:95:2e:22:ea:8f:bb:ae:4c: b5:50:f3:fc:59:d8:82:2b:59:4e:0e:aa:ce:e9:fe: b5:94:8e:7b:02:b5:f5:07:0a:52:63:00:07:fa:34: a0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B2:F2:E7:C6:9F:1C:E5:08:1A:86:85:47:61:2B:8E:9F:0D:7E:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/4b0843ab-fef2-3122-99d7-15049fb493c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 64.251.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:5d:ea:32:66:46:67:ac:3a:19:02:29:17:06:d6:e2:df:42: b1:af:b6:af:21:1c:1f:3b:17:58:7d:5d:be:8e:00:8b:6b:96: 10:9e:5b:9c:2d:9a:cf:34:c8:2f:9f:c1:6a:9a:27:91:48:67: de:32:ff:17:1d:20:2c:55:f7:82:53:4d:7f:8e:dc:22:19:2f: 80:80:ee:8d:84:0f:8d:ae:cb:52:a3:34:ab:b1:fa:ce:8d:e1: 1e:86:60:21:7e:47:90:91:43:8a:2a:39:2d:0c:92:dc:b7:21: ef:06:8b:d7:6f:d3:9a:69:0a:ef:70:ac:c1:fe:aa:61:c2:8a: 6a:67:5f:34:80:f8:38:56:80:7e:68:83:cc:13:88:7c:ad:2b: 7f:d5:c9:d2:6a:ac:91:6a:06:7e:76:60:0c:83:f6:04:65:96: 7b:d7:9e:42:cf:a1:fb:9b:73:f0:7b:71:33:e3:e8:b5:ad:7e: 91:af:68:dd:dd:3a:b8:f6:14:11:10:0d:7d:cc:e0:80:d5:5a: b2:d2:9d:e8:55:ed:0d:75:50:22:e3:07:30:d3:76:47:5f:cb: 54:fc:97:9f:6c:40:4b:79:e0:0c:f5:0f:fb:54:b8:56:a4:24: c5:a9:83:4d:6c:67:4d:54:91:48:e1:26:f8:d1:7b:f2:c3:05: b9:87:04:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF2eTi4BHjXCfzKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk MGQ0MjQxYjktMzMxMS00YzA5LWJiYjAtZjJmYzJhMTZmNDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMf989sifMO1E55jBWRftSYvXU/VqBQqWc38 2L9+SgRLJqeUfylWzyOZh5gsIJQO8Sm/2odYajHzoRxTb1lj7zGDpkonRaHa3y49 GGtUDCTk22Phvk4eVrYYKjECsTP9+IF/5MigqLcdXKq94DaTqhoEMBYG0Ty0UW1q clmMYCIV5aB3BZlMOgo/xMwW50nFExhGpSu9JB6wYRkPJ4JhqFLn09j/gu7/0F8L QaQhh7vSnbUZQA4+ul/7IkoYn25cVwVXgw1I7+SNOTYUzEf3NGGc6WbqXPhJlS4i 6o+7rky1UPP8WdiCK1lODqrO6f61lI57ArX1BwpSYwAH+jSgaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2y8ufGnxzlCBqGhUdhK46fDX7BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvNGIwODQzYWItZmVmMi0z MTIyLTk5ZDctMTUwNDlmYjQ5M2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQPswMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtd6jJmRmesOhkCKRcG1uLfQrGvtq8hHB87F1h9Xb6OAItrlhCeW5wt ms80yC+fwWqaJ5FIZ94y/xcdICxV94JTTX+O3CIZL4CA7o2ED42uy1KjNKux+s6N 4R6GYCF+R5CRQ4oqOS0Mkty3Ie8Gi9dv05ppCu9wrMH+qmHCimpnXzSA+DhWgH5o g8wTiHytK3/VydJqrJFqBn52YAyD9gRllnvXnkLPofubc/B7cTPj6LWtfpGvaN3d Orj2FBEQDX3M4IDVWrLSnehV7Q11UCLjBzDTdkdfy1T8l59sQEt54Az1D/tUuFak JMWpg01sZ01UkUjhJvjRe/LDBbmHBHw= -----END CERTIFICATE-----Generated at Wed Nov 5 15:11:45 2025 by rpki-client