$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad/934160e5-55a7-33a4-be6b-7aad090ddddc.roa File: 934160e5-55a7-33a4-be6b-7aad090ddddc.roa (raw, json) Hash identifier: sjxe+qkaVXxil0QpVf9fEaLWVv4ksHEj7yYvRxSqsUk= Subject key identifier: A7:EB:43:A4:64:DF:3E:D9:29:A1:10:30:85:8C:B6:50:65:45:4B:1F Certificate issuer: /CN=fcafd4be-2865-4c0e-8cf0-831bdd0ecaad Certificate serial: 010D0C9F4328584B715CB9505D6EC2B506149F80 Authority key identifier: 27:30:F6:19:D6:E3:7B:08:E5:F5:22:6A:12:8F:21:C6:56:81:C2:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad/934160e5-55a7-33a4-be6b-7aad090ddddc.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 54196 IP address blocks: 65.38.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:b9:50:5d:6e:c2:b5:06:14:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcafd4be-2865-4c0e-8cf0-831bdd0ecaad Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=65045f9e-5827-40cb-b406-d988f34120d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:55:53:63:98:73:42:d5:c0:e2:04:06:32:82: f3:1e:ab:81:6a:73:3a:b9:f0:be:e9:77:9d:3b:9b: 26:b1:4d:ad:95:01:e2:4c:a6:32:61:4e:41:07:70: 4f:ce:64:de:5e:e8:a3:80:22:38:37:f5:ff:9d:84: 3f:49:31:b5:f6:34:92:2f:b4:53:ed:1e:e8:20:06: cd:48:40:c6:ae:55:af:2b:f5:c0:79:fe:4d:91:b3: 75:a4:e4:54:78:b3:c8:63:0b:3f:e3:7d:67:5c:51: a5:1b:9c:33:6d:bb:b0:ef:a9:fc:d8:f6:02:ad:2c: 02:68:f0:23:08:43:5d:71:7e:33:cf:41:31:f5:cc: 00:8b:82:d9:c4:73:e8:9a:8c:28:e6:12:3d:bc:ee: 2d:dc:b7:2e:c8:bc:d3:99:78:df:f5:61:49:9b:03: 37:62:c9:1d:cd:14:91:8c:91:42:f5:e2:75:ad:15: ae:a8:4d:8c:f0:30:1e:35:dd:0f:38:e1:3e:c0:b4: 83:cd:8b:83:a8:9c:44:bb:36:c7:24:ac:dc:28:3e: d8:21:58:31:c5:ef:31:fa:47:bf:9d:ba:3e:0f:ab: 92:66:6a:bb:bc:41:26:0e:6e:fc:93:4c:35:26:c2: 51:c5:d0:ff:64:d5:e3:0a:09:36:1e:b1:af:90:6a: 8a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:EB:43:A4:64:DF:3E:D9:29:A1:10:30:85:8C:B6:50:65:45:4B:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad/934160e5-55a7-33a4-be6b-7aad090ddddc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad.crl X509v3 Authority Key Identifier: keyid:27:30:F6:19:D6:E3:7B:08:E5:F5:22:6A:12:8F:21:C6:56:81:C2:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad.cer sbgp-ipAddrBlock: critical IPv4: 65.38.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:0d:e4:70:cd:f9:f0:ab:6d:b3:7b:b2:3f:27:07:2f:09:02: 17:f2:5d:0b:59:a3:c9:99:66:aa:55:53:47:87:87:28:80:a7: 33:2c:ac:b3:d3:ee:74:01:d4:12:59:38:c9:25:fc:e4:eb:97: 90:d5:96:2e:4e:c8:8c:e8:06:fe:19:a8:f2:5e:2d:ff:38:30: 2e:92:d4:ee:7c:0f:8f:5e:c2:35:cd:8b:1f:b4:fa:cb:58:73: 26:62:ee:3f:0b:13:56:56:65:92:74:bb:36:5d:71:ed:1c:3d: 4e:7c:02:3d:51:cb:79:4f:fb:67:82:6d:e8:33:ea:ce:98:eb: 7d:e8:67:e7:dc:0f:c7:81:16:32:86:6a:1f:c8:2b:be:9b:51: 56:4f:76:f8:72:a8:4c:c9:0c:7f:a6:1e:83:ed:b3:aa:24:5b: ba:d7:48:5f:88:74:cf:62:07:f1:b5:5e:5e:ac:63:be:c7:57: 5d:38:b4:75:08:99:41:b6:d3:6e:55:2e:3f:20:07:3b:5d:14: 1a:06:d3:47:ae:4a:43:47:0f:97:9e:f5:50:c9:6c:18:68:28: db:87:5a:21:d0:f2:81:15:82:5d:bc:33:86:a4:f1:80:f7:cb: 60:8d:dc:a0:6d:88:2c:dd:64:a6:c2:5f:f9:4f:06:7c:eb:7b: ae:2d:8f:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXLlQXW7CtQYUn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmNhZmQ0YmUtMjg2NS00YzBlLThjZjAtODMxYmRkMGVj YWFkMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NjUwNDVmOWUtNTgyNy00MGNiLWI0MDYtZDk4OGYzNDEyMGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1VTY5hzQtXA4gQGMoLzHquBanM6ufC+6Xed O5smsU2tlQHiTKYyYU5BB3BPzmTeXuijgCI4N/X/nYQ/STG19jSSL7RT7R7oIAbN SEDGrlWvK/XAef5NkbN1pORUeLPIYws/431nXFGlG5wzbbuw76n82PYCrSwCaPAj CENdcX4zz0Ex9cwAi4LZxHPomowo5hI9vO4t3LcuyLzTmXjf9WFJmwM3YskdzRSR jJFC9eJ1rRWuqE2M8DAeNd0POOE+wLSDzYuDqJxEuzbHJKzcKD7YIVgxxe8x+ke/ nbo+D6uSZmq7vEEmDm78k0w1JsJRxdD/ZNXjCgk2HrGvkGqKDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfrQ6Rk3z7ZKaEQMIWMtlBlRUsfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mY2Fm ZDRiZS0yODY1LTRjMGUtOGNmMC04MzFiZGQwZWNhYWQvOTM0MTYwZTUtNTVhNy0z M2E0LWJlNmItN2FhZDA5MGRkZGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZmNhZmQ0YmUtMjg2NS00YzBlLThj ZjAtODMxYmRkMGVjYWFkL2ZjYWZkNGJlLTI4NjUtNGMwZS04Y2YwLTgzMWJkZDBl Y2FhZC5jcmwwHwYDVR0jBBgwFoAUJzD2Gdbjewjl9SJqEo8hxlaBwk4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mY2FmZDRiZS0yODY1LTRjMGUtOGNmMC04MzFi ZGQwZWNhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQSZqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAN5HDN+fCrbbN7sj8nBy8JAhfyXQtZo8mZZqpVU0eHhyiApzMsrLPT 7nQB1BJZOMkl/OTrl5DVli5OyIzoBv4ZqPJeLf84MC6S1O58D49ewjXNix+0+stY cyZi7j8LE1ZWZZJ0uzZdce0cPU58Aj1Ry3lP+2eCbegz6s6Y633oZ+fcD8eBFjKG ah/IK76bUVZPdvhyqEzJDH+mHoPts6okW7rXSF+IdM9iB/G1Xl6sY77HV104tHUI mUG2025VLj8gBztdFBoG00euSkNHD5ee9VDJbBhoKNuHWiHQ8oEVgl28M4ak8YD3 y2CN3KBtiCzdZKbCX/lPBnzre64tj8g= -----END CERTIFICATE-----Generated at Sat Oct 11 18:38:03 2025 by rpki-client