$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf/38911b59-4da5-3259-be8a-e5ae2c28a66b.roa File: 38911b59-4da5-3259-be8a-e5ae2c28a66b.roa (raw, json) Hash identifier: 3kJNyUar+OqmXI37phWA/okiFRY/LaZEQlCVQ+3neHY= Subject key identifier: 74:83:CF:BC:CF:90:81:8C:C7:D2:5B:42:AC:BB:21:47:17:45:31:C4 Certificate issuer: /CN=65bc064b-6753-4438-8da3-b0b6d3b4d5bf Certificate serial: 010D0C9F4328584B2496D92A0619C1FF23773580 Authority key identifier: 13:18:C4:39:07:71:22:07:0F:A4:50:EC:64:23:3E:A5:2D:ED:90:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf/38911b59-4da5-3259-be8a-e5ae2c28a66b.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 400510 IP address blocks: 206.202.0.0/18 maxlen: 24 2602:fe17::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf/65bc064b-6753-4438-8da3-b0b6d3b4d5bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf/65bc064b-6753-4438-8da3-b0b6d3b4d5bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:d9:2a:06:19:c1:ff:23:77:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bc064b-6753-4438-8da3-b0b6d3b4d5bf Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=020a4161-2883-4d83-ae11-dd448d2c5335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:33:8c:40:62:a5:1c:b4:b3:7e:d6:7b:b2:7f: 41:65:1f:c5:7b:d7:cb:3d:5b:22:05:ec:6a:43:ab: bc:90:62:a6:88:cc:a8:c5:0f:de:3b:12:37:e9:0e: ad:58:9f:4d:d8:74:a8:b8:cb:c9:b5:6e:11:50:7d: c0:2f:80:d3:10:67:2d:13:f4:59:9b:05:c8:11:f1: b0:15:7e:8b:d6:3a:a1:e9:d6:bc:29:a8:62:09:5f: 5b:9f:a2:7b:ae:6c:af:b9:4b:76:67:97:1c:64:1e: 45:08:a9:6c:6c:59:6f:73:30:f3:47:18:ab:e1:8e: fa:53:ca:6b:89:98:5d:07:1f:38:d5:9b:32:b6:cd: 3d:68:34:f2:1c:fe:ad:68:ac:47:f2:49:67:82:a2: 5d:9c:7c:26:34:a5:d3:28:12:cc:13:a3:01:be:9e: 1d:21:e5:21:d7:54:d7:75:2c:c8:e2:1c:88:d2:45: 32:ab:1a:ae:61:c4:f2:e4:9b:13:95:bd:14:92:d6: 24:a7:27:3b:01:a3:f0:65:05:90:e7:07:d8:ce:1a: 3f:58:6e:19:ba:77:19:ad:2a:4f:c9:2f:51:61:96: f0:b2:c6:7b:22:9b:e3:20:c2:8f:29:76:29:f9:2f: 1a:ac:4e:7d:00:33:35:28:ee:c6:df:0c:ed:0b:c7: 40:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:83:CF:BC:CF:90:81:8C:C7:D2:5B:42:AC:BB:21:47:17:45:31:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf/38911b59-4da5-3259-be8a-e5ae2c28a66b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf/65bc064b-6753-4438-8da3-b0b6d3b4d5bf.crl X509v3 Authority Key Identifier: keyid:13:18:C4:39:07:71:22:07:0F:A4:50:EC:64:23:3E:A5:2D:ED:90:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf.cer sbgp-ipAddrBlock: critical IPv4: 206.202.0.0/18 IPv6: 2602:fe17::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:77:78:93:53:d8:ea:64:55:01:2a:45:d8:90:6f:1d:8e:45: 16:01:47:ff:7b:9a:2d:14:7c:33:8a:70:cc:a8:18:19:2d:fc: 43:d2:34:3a:df:d9:ab:72:65:32:f2:38:64:9f:da:ee:35:6f: df:51:c9:28:5d:2a:ef:e0:78:4e:74:1d:1f:26:bb:de:38:6b: ea:e5:42:af:b5:52:25:fa:7c:3a:44:e3:24:70:07:00:08:69: 62:4c:79:4d:1a:b6:26:17:29:b6:28:8f:f5:08:80:9f:4f:39: c6:71:96:03:74:89:5b:4b:15:78:bc:82:bd:79:61:40:70:d6: 6e:13:89:d8:c6:19:ce:0f:3f:f8:cd:c4:1a:45:ee:55:48:fa: cb:80:c3:98:12:47:15:50:0b:e0:57:f8:57:e2:71:b0:c5:37: a4:f3:ab:ce:bb:85:1b:5c:fc:48:3d:26:be:76:ed:d8:71:58: 56:de:fd:2f:b1:c9:73:0c:56:3e:4e:7f:cf:7a:29:33:a2:43: 5e:0a:03:46:5c:8e:4c:f7:1d:1d:7d:85:86:7d:64:81:85:c7: 09:5a:30:0f:58:fa:9f:28:e3:f9:4a:e9:e2:0c:09:53:6d:37: ee:0c:56:be:d9:d7:05:63:40:33:79:88:1b:ef:b0:79:e7:5f: c5:d0:c0:d9 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEskltkqBhnB/yN3NYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjViYzA2NGItNjc1My00NDM4LThkYTMtYjBiNmQzYjRk NWJmMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk MDIwYTQxNjEtMjg4My00ZDgzLWFlMTEtZGQ0NDhkMmM1MzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTOMQGKlHLSzftZ7sn9BZR/Fe9fLPVsiBexq Q6u8kGKmiMyoxQ/eOxI36Q6tWJ9N2HSouMvJtW4RUH3AL4DTEGctE/RZmwXIEfGw FX6L1jqh6da8KahiCV9bn6J7rmyvuUt2Z5ccZB5FCKlsbFlvczDzRxir4Y76U8pr iZhdBx841Zsyts09aDTyHP6taKxH8klngqJdnHwmNKXTKBLME6MBvp4dIeUh11TX dSzI4hyI0kUyqxquYcTy5JsTlb0UktYkpyc7AaPwZQWQ5wfYzho/WG4ZuncZrSpP yS9RYZbwssZ7IpvjIMKPKXYp+S8arE59ADM1KO7G3wztC8dAMwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFHSDz7zPkIGMx9JbQqy7IUcXRTHEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NWJj MDY0Yi02NzUzLTQ0MzgtOGRhMy1iMGI2ZDNiNGQ1YmYvMzg5MTFiNTktNGRhNS0z MjU5LWJlOGEtZTVhZTJjMjhhNjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjViYzA2NGItNjc1My00NDM4LThk YTMtYjBiNmQzYjRkNWJmLzY1YmMwNjRiLTY3NTMtNDQzOC04ZGEzLWIwYjZkM2I0 ZDViZi5jcmwwHwYDVR0jBBgwFoAUExjEOQdxIgcPpFDsZCM+pS3tkH8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82NWJjMDY0Yi02NzUzLTQ0MzgtOGRhMy1iMGI2 ZDNiNGQ1YmYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQGzsoAMA4E AgACMAgDBgQmAv4XADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB0d3iTU9jqZFUBKkXYkG8djkUWAUf/e5ot FHwzinDMqBgZLfxD0jQ639mrcmUy8jhkn9ruNW/fUckoXSrv4HhOdB0fJrveOGvq 5UKvtVIl+nw6ROMkcAcACGliTHlNGrYmFym2KI/1CICfTznGcZYDdIlbSxV4vIK9 eWFAcNZuE4nYxhnODz/4zcQaRe5VSPrLgMOYEkcVUAvgV/hX4nGwxTek86vOu4Ub XPxIPSa+du3YcVhW3v0vsclzDFY+Tn/PeikzokNeCgNGXI5M9x0dfYWGfWSBhccJ WjAPWPqfKOP5SuniDAlTbTfuDFa+2dcFY0AzeYgb77B551/F0MDZ -----END CERTIFICATE-----Generated at Fri Oct 10 21:16:13 2025 by rpki-client