$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/65e5be92-e6d6-35ed-919a-b3ae37907ce2.roa File: 65e5be92-e6d6-35ed-919a-b3ae37907ce2.roa (raw, json) Hash identifier: OiH4J7lC/NwhpRrnJjmyOmaZUcC08gtOabi3wyIep9w= Subject key identifier: 37:A4:F3:B9:57:C3:4E:50:0A:13:CB:6F:03:6C:24:64:65:56:94:E4 Certificate issuer: /CN=0538ef3c-e342-4e27-a075-8167bc73c054 Certificate serial: 010D0C9F4328584B2BA6730EE3CC2D7917959240 Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/65e5be92-e6d6-35ed-919a-b3ae37907ce2.roa Signing time: Fri 12 Sep 2025 13:42:50 +0000 ROA not before: Fri 12 Sep 2025 13:42:50 +0000 ROA not after: Thu 11 Dec 2025 14:42:50 +0000 asID: 11260 IP address blocks: 148.64.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:a6:73:0e:e3:cc:2d:79:17:95:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054 Validity Not Before: Sep 12 13:42:50 2025 GMT Not After : Dec 11 14:42:50 2025 GMT Subject: CN=438b3813-e3cd-4d0f-9eb6-572f1ce5e91c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:28:0d:96:e7:f0:03:c7:1d:9b:7c:c9:a2:19: 6d:5e:7a:50:d5:07:25:99:2c:f1:e8:a3:ac:6e:82: 99:ef:d6:48:70:ca:d1:de:8c:c8:14:01:66:80:a6: 9c:da:bd:41:bc:bf:1e:00:89:04:ab:4b:da:49:3e: 97:d9:5d:b3:c4:89:af:80:e0:9b:ff:08:72:9e:cf: dd:ab:42:e9:bd:41:70:a5:10:df:0b:7c:42:7b:5f: ba:83:a1:60:95:8e:50:3f:6f:af:57:51:35:72:ec: 7c:2c:d6:af:31:04:57:e3:68:6a:d7:65:a0:52:c8: 7b:dc:a9:38:0f:f8:d5:b9:8c:2b:f6:89:8d:09:59: da:67:2a:02:d7:4c:4e:3f:71:02:aa:fa:ac:1f:05: 98:64:48:0f:35:47:a5:23:14:13:f7:8c:94:47:c6: 84:d2:7d:e5:30:98:44:0f:d6:3e:67:14:0c:cd:c6: 97:14:96:04:99:c4:18:c5:5a:69:63:43:94:8e:b2: f3:d7:48:3d:0f:ec:89:cb:73:aa:f0:45:aa:60:f8: 05:60:b0:60:dc:79:55:9c:eb:28:a4:90:b4:85:ef: 81:a1:d6:7b:d3:46:08:df:e2:3b:91:ad:1a:c0:80: a8:1b:ec:aa:c2:df:2c:df:a6:c5:09:46:d7:b2:7a: 6c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A4:F3:B9:57:C3:4E:50:0A:13:CB:6F:03:6C:24:64:65:56:94:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/65e5be92-e6d6-35ed-919a-b3ae37907ce2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl X509v3 Authority Key Identifier: keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer sbgp-ipAddrBlock: critical IPv4: 148.64.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:72:5d:96:18:25:c0:5f:e1:fa:69:c4:a1:3d:a0:4a:0b:bf: 3d:a9:b3:a0:84:5a:15:44:47:ef:2b:fe:ba:dd:8c:34:69:92: f4:1f:eb:f8:3f:07:df:0b:99:14:a1:31:a5:04:3f:63:21:0f: b7:2c:65:d6:93:91:2b:6e:3d:67:85:97:60:84:bc:cd:82:51: 2b:a1:d6:b1:0a:1c:e7:99:7d:d5:91:97:3f:ca:7e:c1:35:02: a2:c3:3f:d4:bb:ef:00:e7:1d:86:5b:b7:3f:f8:53:43:7c:98: a7:c7:b0:09:11:33:61:1d:b6:11:a7:2e:a0:b1:ad:07:dc:9e: bf:a7:7e:c7:9e:20:8a:4d:52:a5:2f:e8:05:04:03:31:05:d2: 33:91:6d:97:53:6f:56:39:16:23:cb:82:7e:ae:2d:11:b3:27: fa:2f:a8:75:83:83:13:6d:cd:ed:49:64:0f:8f:58:98:b0:30: 63:f9:df:7e:4f:8b:2d:e2:d9:14:75:07:af:78:46:6d:3a:fe: b1:28:f9:8f:46:11:c7:49:b5:4d:1e:8a:e0:75:11:37:da:9a: 59:9a:f9:66:3e:14:2d:63:71:3d:b4:72:11:f1:6d:3c:a7:dd: 21:65:07:07:71:62:4e:27:5b:d9:06:d1:7b:4e:2c:82:1e:c7: 58:4a:66:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsrpnMO48wteReVkkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOGVmM2MtZTM0Mi00ZTI3LWEwNzUtODE2N2JjNzNj MDU0MB4XDTI1MDkxMjEzNDI1MFoXDTI1MTIxMTE0NDI1MFowLzEtMCsGA1UEAxMk NDM4YjM4MTMtZTNjZC00ZDBmLTllYjYtNTcyZjFjZTVlOTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSgNlufwA8cdm3zJohltXnpQ1QclmSzx6KOs boKZ79ZIcMrR3ozIFAFmgKac2r1BvL8eAIkEq0vaST6X2V2zxImvgOCb/whyns/d q0LpvUFwpRDfC3xCe1+6g6FglY5QP2+vV1E1cux8LNavMQRX42hq12WgUsh73Kk4 D/jVuYwr9omNCVnaZyoC10xOP3ECqvqsHwWYZEgPNUelIxQT94yUR8aE0n3lMJhE D9Y+ZxQMzcaXFJYEmcQYxVppY0OUjrLz10g9D+yJy3Oq8EWqYPgFYLBg3HlVnOso pJC0he+BodZ700YI3+I7ka0awICoG+yqwt8s36bFCUbXsnpspQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDek87lXw05QChPLbwNsJGRlVpTkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4 ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3YmM3M2MwNTQvNjVlNWJlOTItZTZkNi0z NWVkLTkxOWEtYjNhZTM3OTA3Y2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDUzOGVmM2MtZTM0Mi00ZTI3LWEw NzUtODE2N2JjNzNjMDU0LzA1MzhlZjNjLWUzNDItNGUyNy1hMDc1LTgxNjdiYzcz YzA1NC5jcmwwHwYDVR0jBBgwFoAUPawtOE5IBuFdK6OE1h3WEIXOM4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3 YmM3M2MwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlEBIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVyXZYYJcBf4fppxKE9oEoLvz2ps6CEWhVER+8r/rrdjDRpkvQf6/g/ B98LmRShMaUEP2MhD7csZdaTkStuPWeFl2CEvM2CUSuh1rEKHOeZfdWRlz/KfsE1 AqLDP9S77wDnHYZbtz/4U0N8mKfHsAkRM2EdthGnLqCxrQfcnr+nfseeIIpNUqUv 6AUEAzEF0jORbZdTb1Y5FiPLgn6uLRGzJ/ovqHWDgxNtze1JZA+PWJiwMGP5335P iy3i2RR1B694Rm06/rEo+Y9GEcdJtU0eiuB1ETfamlma+WY+FC1jcT20chHxbTyn 3SFlBwdxYk4nW9kG0XtOLIIex1hKZoo= -----END CERTIFICATE-----Generated at Sat Oct 11 03:17:08 2025 by rpki-client