$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e16e00ad-982c-33fb-95af-67a63de985b7.roa File: e16e00ad-982c-33fb-95af-67a63de985b7.roa (raw, json) Hash identifier: LSd8g6u51SgRk7wQShbF4vi0wBFvpw2ImUN0b01B2Tc= Subject key identifier: 87:FE:5D:B1:5C:7A:4D:5F:EC:37:88:AD:04:93:EA:86:0B:31:61:D3 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584BA0D25F0BC022C6A7654DA780 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e16e00ad-982c-33fb-95af-67a63de985b7.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 20014 IP address blocks: 64.33.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:5f:0b:c0:22:c6:a7:65:4d:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=48f082ba-6ad0-4275-890d-5ca6e5dc44e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:84:22:77:54:ab:04:09:d8:4d:31:5b:46:7c: d6:7c:89:71:62:e6:3b:9e:c5:6c:45:9f:fc:de:c6: 79:a2:76:8d:e3:38:9b:e3:4b:a6:c8:d4:7d:cf:e8: c1:2a:71:51:67:40:54:6a:2f:f9:18:eb:79:91:95: cc:20:36:9b:d7:27:d9:9b:19:65:fa:d8:a6:08:cf: 02:7b:6a:ac:03:45:e0:d7:2b:50:0d:83:76:97:fe: a5:d9:a4:38:a5:53:8f:af:ab:73:d0:08:08:68:78: fa:a1:7d:0b:94:c8:f0:53:13:86:2b:d4:ee:9f:56: 4d:b1:47:75:fc:1d:fd:9d:a6:4e:a6:e4:d4:bd:de: b5:55:56:5e:4f:3c:db:f7:1b:69:e8:48:ff:e5:a4: ca:62:9f:aa:03:85:d2:49:ad:4b:fb:ca:56:42:5e: ee:c2:ab:89:c9:7c:7b:5a:af:2e:2b:bb:0e:51:05: 8e:89:34:b5:98:d1:4d:3a:c0:05:35:9c:df:2e:2d: 51:73:12:b7:70:3d:ac:bc:2e:1f:f8:fb:e0:25:47: e7:8a:31:eb:cb:50:63:d8:65:2d:e1:49:e5:42:ad: 37:dc:c5:16:a0:88:0d:cf:f6:91:fd:a1:d3:25:f1: 27:0a:db:41:0c:be:1f:9a:ff:50:df:0d:e7:6e:b0: 28:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FE:5D:B1:5C:7A:4D:5F:EC:37:88:AD:04:93:EA:86:0B:31:61:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e16e00ad-982c-33fb-95af-67a63de985b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 64.33.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:79:93:27:70:3c:be:b3:c7:8d:d3:c2:b8:21:e4:51:d4:6b: 03:af:fa:91:fb:93:72:ec:04:a8:ad:be:8d:61:e4:0c:5f:4e: 2c:8d:e3:ee:23:3d:56:0b:67:04:63:5a:6d:3e:b1:fa:7e:8e: 95:c1:42:99:5c:bd:e6:c0:f3:3d:b0:eb:68:57:bc:4f:4c:a7: eb:8c:d0:3c:e2:7d:a7:43:e8:d4:49:4d:98:6b:c3:99:09:5d: d0:67:d9:e6:ea:c9:ad:6b:ee:5a:36:5e:e4:a9:d2:04:10:7c: 5b:58:64:4c:53:5a:4d:cf:14:6f:d0:79:a9:71:1d:d7:a0:77: 79:3a:22:b0:50:16:ae:46:e2:c3:49:33:06:31:c5:60:87:7a: 3a:88:4d:c3:14:94:f0:62:c1:db:7a:ed:90:f9:44:10:35:09: c3:cc:85:8c:f7:ea:bc:29:57:be:d9:ed:c6:9e:56:36:d2:a6: 44:4e:f1:d6:d7:b2:44:30:df:ab:f0:d5:f1:43:fd:4f:69:96: 40:36:8f:25:24:8e:3f:0f:ec:04:c0:fa:8a:eb:19:4f:f4:ec: 84:f5:73:ed:be:45:fc:e9:e0:7f:05:41:33:1e:bd:7f:5f:c4: a0:1f:06:e3:6d:66:60:9e:a7:98:85:c0:ba:5f:db:da:5c:61: 86:1f:3b:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0l8LwCLGp2VNp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NDhmMDgyYmEtNmFkMC00Mjc1LTg5MGQtNWNhNmU1ZGM0NGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIQid1SrBAnYTTFbRnzWfIlxYuY7nsVsRZ/8 3sZ5onaN4zib40umyNR9z+jBKnFRZ0BUai/5GOt5kZXMIDab1yfZmxll+timCM8C e2qsA0Xg1ytQDYN2l/6l2aQ4pVOPr6tz0AgIaHj6oX0LlMjwUxOGK9Tun1ZNsUd1 /B39naZOpuTUvd61VVZeTzzb9xtp6Ej/5aTKYp+qA4XSSa1L+8pWQl7uwquJyXx7 Wq8uK7sOUQWOiTS1mNFNOsAFNZzfLi1RcxK3cD2svC4f+PvgJUfnijHry1Bj2GUt 4UnlQq033MUWoIgNz/aR/aHTJfEnCttBDL4fmv9Q3w3nbrAoZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIf+XbFcek1f7DeIrQST6oYLMWHTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZTE2ZTAwYWQtOTgyYy0z M2ZiLTk1YWYtNjdhNjNkZTk4NWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCHuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJd5kydwPL6zx43Twrgh5FHUawOv+pH7k3LsBKitvo1h5AxfTiyN4+4j PVYLZwRjWm0+sfp+jpXBQplcvebA8z2w62hXvE9Mp+uM0DzifadD6NRJTZhrw5kJ XdBn2ebqya1r7lo2XuSp0gQQfFtYZExTWk3PFG/QealxHdegd3k6IrBQFq5G4sNJ MwYxxWCHejqITcMUlPBiwdt67ZD5RBA1CcPMhYz36rwpV77Z7caeVjbSpkRO8dbX skQw36vw1fFD/U9plkA2jyUkjj8P7ATA+orrGU/07IT1c+2+Rfzp4H8FQTMevX9f xKAfBuNtZmCep5iFwLpf29pcYYYfOwU= -----END CERTIFICATE-----Generated at Wed Nov 5 10:46:32 2025 by rpki-client