$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/38d95139-c9aa-35c6-98f7-0599639ee4a3.roa File: 38d95139-c9aa-35c6-98f7-0599639ee4a3.roa (raw, json) Hash identifier: kSgqG/b4bn2qioIcdRo5ksLu7MGjovU/W1VSoByp76o= Subject key identifier: D2:E5:66:CA:FC:FE:6A:9D:7C:77:23:F0:73:1F:DA:3E:96:79:01:AC Certificate issuer: /CN=97e93673-5d19-4ff2-8250-f1094f4e12c9 Certificate serial: 010D0C9F4328584AFC1C1F73EE45B45F7EC08380 Authority key identifier: 59:A7:65:FA:2D:3E:59:26:BD:68:1C:C1:CC:86:BD:6E:8B:E6:B7:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/38d95139-c9aa-35c6-98f7-0599639ee4a3.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 14618 IP address blocks: 162.120.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:1f:73:ee:45:b4:5f:7e:c0:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97e93673-5d19-4ff2-8250-f1094f4e12c9 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=9e26e932-fcd6-44a8-a7b8-9c2b949cb0f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b4:68:a8:1c:1e:18:a9:26:d8:b1:fb:5e:50: c7:fd:d8:2f:87:11:8a:7a:07:d2:e6:6c:03:f2:db: bf:02:ac:a6:4d:8c:6b:f8:71:a5:24:ba:3f:9d:c0: 36:3c:64:8b:44:0c:79:56:f0:16:f1:d0:72:39:88: f3:2f:af:0a:d4:75:be:ac:9f:6e:f5:13:f4:37:6f: 5f:4b:e9:f0:cd:0c:e9:de:9d:c2:fc:a7:a2:5b:de: be:80:8d:b1:03:39:16:a5:ff:6b:67:0c:0f:20:de: 4a:12:fb:ad:33:04:e8:46:70:4e:ff:d2:5b:4b:79: 73:42:b1:44:e4:d9:67:01:36:6c:95:af:46:b5:ad: 95:1c:73:e5:e2:96:91:84:51:b2:a4:ef:1c:04:1d: 6f:fa:40:3f:60:69:71:ae:55:2e:dd:13:e5:bd:cd: ac:0e:4b:6b:5d:ab:42:1f:33:39:7b:9c:91:a2:39: ac:65:e4:6f:32:a1:66:66:0f:6a:f8:1f:aa:de:95: ba:0b:e6:3f:bb:cc:3c:45:0f:3c:21:3c:d1:9e:dd: b9:69:18:69:ce:19:2f:90:ed:a0:6f:c7:41:e1:c2: d7:0d:6f:26:f6:a7:f0:ee:09:ff:19:8b:8a:1b:0b: 8d:49:6b:9a:43:16:c9:bf:5f:c8:5f:d2:b5:15:65: f7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E5:66:CA:FC:FE:6A:9D:7C:77:23:F0:73:1F:DA:3E:96:79:01:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/38d95139-c9aa-35c6-98f7-0599639ee4a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.crl X509v3 Authority Key Identifier: keyid:59:A7:65:FA:2D:3E:59:26:BD:68:1C:C1:CC:86:BD:6E:8B:E6:B7:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer sbgp-ipAddrBlock: critical IPv4: 162.120.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:24:75:32:71:53:9b:12:6c:38:ce:d3:89:b1:cc:a4:19:61: 7d:70:e2:a8:8c:bd:ee:21:d5:8d:42:86:83:f4:e7:1d:6d:4c: 28:81:7f:70:ff:8c:fb:8e:94:61:b2:a9:f1:77:e6:8d:d9:7c: 22:e2:0a:ed:1f:59:74:20:eb:ca:fe:a7:50:19:51:3a:b7:f5: 65:f4:47:0a:bf:91:8d:30:ff:6d:df:12:6d:4a:1f:3c:c4:43: 9e:48:ae:47:ec:ca:82:28:e8:37:85:b6:4e:5a:05:3b:60:55: d2:4d:52:3b:37:65:8b:75:24:61:54:5f:d8:42:f3:67:f4:ca: 32:b5:f0:0b:38:25:8d:8c:92:a5:d7:db:c7:3d:6c:ef:49:9f: 9b:30:8c:5a:af:c4:b0:26:92:31:0d:0d:c3:f9:dd:90:b1:17: c3:b4:20:4a:88:22:47:a2:50:bc:3d:47:7a:89:c1:10:25:45: 22:5e:45:90:83:4e:2d:f2:e1:e5:9a:f0:1d:61:ef:ad:0a:12: 36:45:4f:f2:7c:e7:4b:e9:61:a0:f0:c7:3e:9c:8e:bc:79:13: f2:77:0f:90:af:de:28:dc:dc:30:7e:a0:14:f6:9b:31:6a:cd: fe:44:a3:da:fa:be:5a:28:02:00:f6:27:e5:42:99:50:94:b8: 2b:c9:fb:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HB9z7kW0X37Ag4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTdlOTM2NzMtNWQxOS00ZmYyLTgyNTAtZjEwOTRmNGUx MmM5MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk OWUyNmU5MzItZmNkNi00NGE4LWE3YjgtOWMyYjk0OWNiMGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLRoqBweGKkm2LH7XlDH/dgvhxGKegfS5mwD 8tu/AqymTYxr+HGlJLo/ncA2PGSLRAx5VvAW8dByOYjzL68K1HW+rJ9u9RP0N29f S+nwzQzp3p3C/KeiW96+gI2xAzkWpf9rZwwPIN5KEvutMwToRnBO/9JbS3lzQrFE 5NlnATZsla9Gta2VHHPl4paRhFGypO8cBB1v+kA/YGlxrlUu3RPlvc2sDktrXatC HzM5e5yRojmsZeRvMqFmZg9q+B+q3pW6C+Y/u8w8RQ88ITzRnt25aRhpzhkvkO2g b8dB4cLXDW8m9qfw7gn/GYuKGwuNSWuaQxbJv1/IX9K1FWX3RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLlZsr8/mqdfHcj8HMf2j6WeQGsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85N2U5 MzY3My01ZDE5LTRmZjItODI1MC1mMTA5NGY0ZTEyYzkvMzhkOTUxMzktYzlhYS0z NWM2LTk4ZjctMDU5OTYzOWVlNGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTdlOTM2NzMtNWQxOS00ZmYyLTgy NTAtZjEwOTRmNGUxMmM5Lzk3ZTkzNjczLTVkMTktNGZmMi04MjUwLWYxMDk0ZjRl MTJjOS5jcmwwHwYDVR0jBBgwFoAUWadl+i0+WSa9aBzBzIa9bovmt/MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85N2U5MzY3My01ZDE5LTRmZjItODI1MC1mMTA5 NGY0ZTEyYzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQConhYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEkdTJxU5sSbDjO04mxzKQZYX1w4qiMve4h1Y1ChoP05x1tTCiBf3D/ jPuOlGGyqfF35o3ZfCLiCu0fWXQg68r+p1AZUTq39WX0Rwq/kY0w/23fEm1KHzzE Q55IrkfsyoIo6DeFtk5aBTtgVdJNUjs3ZYt1JGFUX9hC82f0yjK18As4JY2MkqXX 28c9bO9Jn5swjFqvxLAmkjENDcP53ZCxF8O0IEqIIkeiULw9R3qJwRAlRSJeRZCD Ti3y4eWa8B1h760KEjZFT/J850vpYaDwxz6cjrx5E/J3D5Cv3ijc3DB+oBT2mzFq zf5Eo9r6vlooAgD2J+VCmVCUuCvJ+7s= -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:55 2025 by rpki-client