$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ca5e5f65-3ba8-4f92-b2c4-b10ca9949150/38866aa6-4fd8-38cb-ab83-22155e1ed803.roa File: 38866aa6-4fd8-38cb-ab83-22155e1ed803.roa (raw, json) Hash identifier: AjqM9X6OKj4CQ1vPykcRG4nn1k9Qy6IOZFINUXiFvn0= Subject key identifier: 2E:68:56:9A:1A:56:3E:2F:DA:4D:9C:BD:A0:7D:9B:56:B0:18:A1:72 Certificate issuer: /CN=ca5e5f65-3ba8-4f92-b2c4-b10ca9949150 Certificate serial: 010D0C9F4328584B328C5F52AD1019444508FA80 Authority key identifier: 06:FD:E7:05:9B:E7:0A:E5:42:C0:00:FB:A2:3E:71:36:AF:93:38:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ca5e5f65-3ba8-4f92-b2c4-b10ca9949150.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ca5e5f65-3ba8-4f92-b2c4-b10ca9949150/38866aa6-4fd8-38cb-ab83-22155e1ed803.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 18540 IP address blocks: 64.239.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ca5e5f65-3ba8-4f92-b2c4-b10ca9949150/ca5e5f65-3ba8-4f92-b2c4-b10ca9949150.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ca5e5f65-3ba8-4f92-b2c4-b10ca9949150/ca5e5f65-3ba8-4f92-b2c4-b10ca9949150.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ca5e5f65-3ba8-4f92-b2c4-b10ca9949150.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:5f:52:ad:10:19:44:45:08:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca5e5f65-3ba8-4f92-b2c4-b10ca9949150 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=3c0a43bd-7afc-44fc-989a-d54300e29a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:41:24:c2:76:08:57:e3:d7:c2:90:50:37:f1: f4:4b:9f:5c:21:73:be:fa:f4:f1:78:2a:5f:7e:a5: eb:06:97:21:14:9d:96:33:fe:fd:be:b7:20:c2:2b: 08:b9:9d:6b:1a:e0:e6:de:40:a8:6c:9e:5b:10:2f: 38:40:93:c3:8a:a1:e3:9b:b4:c9:b9:d5:b0:f4:a4: 22:80:a0:03:97:d6:d9:00:38:8a:f4:67:e8:aa:03: 6a:d9:94:65:fe:d1:92:30:6f:bc:9c:fb:da:6b:da: 92:b4:59:06:2f:53:64:8f:a7:0a:a0:f6:f0:65:c3: 03:cd:6f:d4:e2:97:1f:d6:1a:06:c2:03:a6:c4:e6: 88:2c:7d:21:ae:a7:aa:22:2f:4b:4d:49:36:44:4a: 63:7a:35:2f:89:57:ac:c2:6b:64:e4:17:f0:1b:85: a7:e6:58:af:ab:73:45:4e:e8:0a:e0:e0:78:81:98: 08:c5:54:82:b2:a8:f9:b2:7b:3e:14:9d:38:10:4d: ed:04:8c:3d:0e:b8:1c:df:2f:00:25:a3:c8:c5:6e: a1:61:5f:f9:15:bb:e4:57:8d:c6:21:b5:b4:0c:7a: c8:e9:1d:f8:08:7d:4a:d2:ee:3c:9e:4e:ea:1d:03: df:58:0b:97:72:74:c2:b1:4d:a9:b7:6a:9d:c2:ec: 24:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:68:56:9A:1A:56:3E:2F:DA:4D:9C:BD:A0:7D:9B:56:B0:18:A1:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ca5e5f65-3ba8-4f92-b2c4-b10ca9949150/38866aa6-4fd8-38cb-ab83-22155e1ed803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ca5e5f65-3ba8-4f92-b2c4-b10ca9949150/ca5e5f65-3ba8-4f92-b2c4-b10ca9949150.crl X509v3 Authority Key Identifier: keyid:06:FD:E7:05:9B:E7:0A:E5:42:C0:00:FB:A2:3E:71:36:AF:93:38:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ca5e5f65-3ba8-4f92-b2c4-b10ca9949150.cer sbgp-ipAddrBlock: critical IPv4: 64.239.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:12:9a:87:a9:70:57:5b:20:77:db:91:4d:ea:f4:0e:e8:1b: db:6f:7f:f5:75:0c:91:96:8f:22:01:d1:a8:e2:4e:e0:2f:4a: a8:68:17:ae:4b:ca:1f:6f:68:2c:75:e5:66:56:c8:c2:a9:66: 8e:f4:2c:da:60:51:47:79:08:1c:67:86:ef:3b:b1:62:72:4c: 5e:c4:93:54:8b:18:6f:bc:5a:c7:ad:15:0f:54:38:5f:bb:07: ac:a7:c0:d3:e4:e0:cf:aa:84:25:bb:71:62:5e:28:98:a2:87: 88:05:bf:3b:52:5a:af:49:97:34:89:c2:19:b9:75:1d:32:ff: f1:6d:61:3a:72:c8:eb:d8:01:a2:17:3d:60:9f:43:7d:ee:0e: 8c:3a:73:cc:0f:4b:fc:75:d1:5c:27:65:ba:ae:f7:b7:5a:e8: d5:18:db:51:e1:bc:3b:17:15:dd:fb:6e:bb:46:98:26:22:5b: 89:de:1b:ea:24:d5:13:28:bf:fa:e9:97:3e:35:3a:46:9e:7d: 1c:aa:c4:62:d9:4a:97:26:a8:56:f8:8b:bc:1b:58:f8:4e:02: 58:a3:dd:86:cc:11:4e:e1:d1:c3:14:c4:a8:ca:05:ea:f0:88: 6b:f8:73:96:42:ab:75:1c:30:9d:16:21:cc:34:02:cb:3e:5d: db:6c:1b:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjF9SrRAZREUI+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2E1ZTVmNjUtM2JhOC00ZjkyLWIyYzQtYjEwY2E5OTQ5 MTUwMB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk M2MwYTQzYmQtN2FmYy00NGZjLTk4OWEtZDU0MzAwZTI5YTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0EkwnYIV+PXwpBQN/H0S59cIXO++vTxeCpf fqXrBpchFJ2WM/79vrcgwisIuZ1rGuDm3kCobJ5bEC84QJPDiqHjm7TJudWw9KQi gKADl9bZADiK9GfoqgNq2ZRl/tGSMG+8nPvaa9qStFkGL1Nkj6cKoPbwZcMDzW/U 4pcf1hoGwgOmxOaILH0hrqeqIi9LTUk2REpjejUviVeswmtk5BfwG4Wn5livq3NF TugK4OB4gZgIxVSCsqj5sns+FJ04EE3tBIw9Drgc3y8AJaPIxW6hYV/5FbvkV43G IbW0DHrI6R34CH1K0u48nk7qHQPfWAuXcnTCsU2pt2qdwuwkEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5oVpoaVj4v2k2cvaB9m1awGKFyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jYTVl NWY2NS0zYmE4LTRmOTItYjJjNC1iMTBjYTk5NDkxNTAvMzg4NjZhYTYtNGZkOC0z OGNiLWFiODMtMjIxNTVlMWVkODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvY2E1ZTVmNjUtM2JhOC00ZjkyLWIy YzQtYjEwY2E5OTQ5MTUwL2NhNWU1ZjY1LTNiYTgtNGY5Mi1iMmM0LWIxMGNhOTk0 OTE1MC5jcmwwHwYDVR0jBBgwFoAUBv3nBZvnCuVCwAD7oj5xNq+TOKIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jYTVlNWY2NS0zYmE4LTRmOTItYjJjNC1iMTBj YTk5NDkxNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQO8EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkSmoepcFdbIHfbkU3q9A7oG9tvf/V1DJGWjyIB0ajiTuAvSqhoF65L yh9vaCx15WZWyMKpZo70LNpgUUd5CBxnhu87sWJyTF7Ek1SLGG+8WsetFQ9UOF+7 B6ynwNPk4M+qhCW7cWJeKJiih4gFvztSWq9JlzSJwhm5dR0y//FtYTpyyOvYAaIX PWCfQ33uDow6c8wPS/x10VwnZbqu97da6NUY21HhvDsXFd37brtGmCYiW4neG+ok 1RMov/rplz41OkaefRyqxGLZSpcmqFb4i7wbWPhOAlij3YbMEU7h0cMUxKjKBerw iGv4c5ZCq3UcMJ0WIcw0Ass+XdtsG6o= -----END CERTIFICATE-----Generated at Sat Oct 11 02:55:53 2025 by rpki-client