$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/84b3d41b-9874-3832-8275-c8dd30ba5f1e.roa File: 84b3d41b-9874-3832-8275-c8dd30ba5f1e.roa (raw, json) Hash identifier: KdhiHK3XF/0crSC/cuNEp4xblZKoWBIeMepdUopazbc= Subject key identifier: 36:36:24:25:27:4E:E5:4C:46:76:ED:16:8C:D1:2E:33:A2:B9:35:2F Certificate issuer: /CN=0538ef3c-e342-4e27-a075-8167bc73c054 Certificate serial: 010D0C9F4328584B2BA5F102D96F2F30ADBE4200 Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/84b3d41b-9874-3832-8275-c8dd30ba5f1e.roa Signing time: Fri 12 Sep 2025 13:41:49 +0000 ROA not before: Fri 12 Sep 2025 13:41:49 +0000 ROA not after: Thu 11 Dec 2025 14:41:49 +0000 asID: 11260 IP address blocks: 148.64.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:a5:f1:02:d9:6f:2f:30:ad:be:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054 Validity Not Before: Sep 12 13:41:49 2025 GMT Not After : Dec 11 14:41:49 2025 GMT Subject: CN=1f0928e0-33e8-4c08-9bcd-e3e514d15907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b2:56:73:ab:f9:43:68:d1:02:91:eb:13:b4: d6:1e:17:97:69:4c:79:d8:94:1a:57:d2:82:1e:9e: 2c:1e:f6:78:a9:40:2d:76:ba:6d:51:76:ed:0e:1f: d6:a9:9a:49:b2:f2:8f:49:97:40:72:ca:e4:cb:5e: 51:47:9b:24:bc:e8:9f:01:5b:ac:c7:6c:2c:98:8e: 62:87:ce:19:a0:2c:fa:e9:bf:01:a5:02:29:d6:d3: 44:16:51:ff:ae:67:b0:33:09:c6:e5:af:b9:b0:72: 6d:a1:c5:5d:82:31:c0:88:86:18:2a:2e:2b:61:fd: 51:2e:d0:91:0f:74:e0:e5:38:4a:c1:10:78:10:6c: 8a:c1:9c:c6:76:b8:0e:d8:fe:ac:cc:e4:44:f8:76: 06:17:14:37:18:9a:ac:05:64:f2:91:0f:7a:c8:9c: d7:f7:29:f0:19:54:50:d5:16:d1:77:23:b8:0c:02: 73:22:3b:19:5d:0c:69:c5:9b:cd:c9:f1:00:65:45: 63:3a:d8:01:3c:08:88:f2:ce:ab:84:90:dd:1f:39: 11:d7:49:36:91:de:eb:38:27:8c:b5:51:cb:37:0c: ec:16:86:35:44:fe:a1:cf:81:b7:39:e2:c4:74:4d: 85:8d:ea:5b:1a:45:ef:f1:54:ff:cd:c7:70:48:b4: a3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:36:24:25:27:4E:E5:4C:46:76:ED:16:8C:D1:2E:33:A2:B9:35:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/84b3d41b-9874-3832-8275-c8dd30ba5f1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl X509v3 Authority Key Identifier: keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer sbgp-ipAddrBlock: critical IPv4: 148.64.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:4c:c9:57:aa:e6:94:e7:a8:b6:93:87:27:a1:9a:49:fa:07: 60:0b:bd:4a:d0:fd:bf:5b:ee:65:6b:00:b0:8a:33:2e:9e:3b: 55:a9:9a:1a:15:9d:ed:71:89:a2:5c:28:0a:d6:06:06:a3:b4: 0c:dd:a4:2c:38:ba:e2:6d:0a:4b:69:37:53:c4:29:52:cf:e8: 1a:f7:19:49:4a:e0:2a:d2:95:49:9b:30:e2:7c:75:ba:e0:35: 67:ed:b0:05:8b:df:27:81:a4:6b:bd:15:0a:52:4f:64:b0:11: c1:bf:53:ff:50:08:a4:cd:08:bb:e3:9e:18:6f:a0:4f:7e:75: 7b:8f:fb:21:9c:c2:53:5e:fd:b8:8c:98:c5:66:10:b6:ec:51: c8:91:b7:a3:39:18:bd:b5:6d:e4:1b:1e:c2:eb:af:d5:de:b5: e5:ad:81:af:04:b1:9e:7b:55:17:7c:1f:23:c1:18:3b:a7:8a: 29:7c:01:6e:97:56:6e:46:c4:b7:36:18:2e:d1:cc:b5:8c:39: 55:fa:f8:6a:6e:4f:7c:4a:0a:76:b1:25:49:95:7d:78:7c:74: 5e:14:82:ff:cb:b1:3c:8b:ef:fd:63:60:23:2c:ce:37:df:32: a4:dc:56:0d:89:c4:e5:10:3e:9d:34:71:be:76:da:aa:94:46: 35:ba:92:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsrpfEC2W8vMK2+QgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOGVmM2MtZTM0Mi00ZTI3LWEwNzUtODE2N2JjNzNj MDU0MB4XDTI1MDkxMjEzNDE0OVoXDTI1MTIxMTE0NDE0OVowLzEtMCsGA1UEAxMk MWYwOTI4ZTAtMzNlOC00YzA4LTliY2QtZTNlNTE0ZDE1OTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbJWc6v5Q2jRApHrE7TWHheXaUx52JQaV9KC Hp4sHvZ4qUAtdrptUXbtDh/WqZpJsvKPSZdAcsrky15RR5skvOifAVusx2wsmI5i h84ZoCz66b8BpQIp1tNEFlH/rmewMwnG5a+5sHJtocVdgjHAiIYYKi4rYf1RLtCR D3Tg5ThKwRB4EGyKwZzGdrgO2P6szORE+HYGFxQ3GJqsBWTykQ96yJzX9ynwGVRQ 1RbRdyO4DAJzIjsZXQxpxZvNyfEAZUVjOtgBPAiI8s6rhJDdHzkR10k2kd7rOCeM tVHLNwzsFoY1RP6hz4G3OeLEdE2FjepbGkXv8VT/zcdwSLSjlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDY2JCUnTuVMRnbtFozRLjOiuTUvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4 ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3YmM3M2MwNTQvODRiM2Q0MWItOTg3NC0z ODMyLTgyNzUtYzhkZDMwYmE1ZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDUzOGVmM2MtZTM0Mi00ZTI3LWEw NzUtODE2N2JjNzNjMDU0LzA1MzhlZjNjLWUzNDItNGUyNy1hMDc1LTgxNjdiYzcz YzA1NC5jcmwwHwYDVR0jBBgwFoAUPawtOE5IBuFdK6OE1h3WEIXOM4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3 YmM3M2MwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlEBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM9MyVeq5pTnqLaThyehmkn6B2ALvUrQ/b9b7mVrALCKMy6eO1WpmhoV ne1xiaJcKArWBgajtAzdpCw4uuJtCktpN1PEKVLP6Br3GUlK4CrSlUmbMOJ8dbrg NWftsAWL3yeBpGu9FQpST2SwEcG/U/9QCKTNCLvjnhhvoE9+dXuP+yGcwlNe/biM mMVmELbsUciRt6M5GL21beQbHsLrr9XeteWtga8EsZ57VRd8HyPBGDuniil8AW6X Vm5GxLc2GC7RzLWMOVX6+GpuT3xKCnaxJUmVfXh8dF4Ugv/LsTyL7/1jYCMszjff MqTcVg2JxOUQPp00cb522qqURjW6kmY= -----END CERTIFICATE-----Generated at Sat Oct 11 03:17:08 2025 by rpki-client