$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38af3611-c3af-3b8b-adcf-6ce71580a04e.roa File: 38af3611-c3af-3b8b-adcf-6ce71580a04e.roa (raw, json) Hash identifier: tCmPpqiThRMaxlhpLr4ObDo12TVdwVm7UNQm2FjLPAU= Subject key identifier: CA:51:A7:80:42:E3:F9:FF:4B:B9:73:2B:4C:0B:A5:1B:02:2B:D5:8E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA57838A579D48942ADE80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38af3611-c3af-3b8b-adcf-6ce71580a04e.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.37.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:57:83:8a:57:9d:48:94:2a:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=ee280660-bb4f-4136-af19-2431cf78982f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:58:b8:fb:f7:6f:c3:62:28:05:64:10:2e:e6: f7:bc:de:89:c0:73:69:3d:16:86:96:0e:10:f3:22: af:45:83:6e:0f:cd:69:10:3c:28:a1:0e:fe:a5:20: 34:7d:f6:04:5e:fe:f8:b1:9d:c6:39:81:26:b0:09: e3:1b:7f:57:a5:14:d2:54:e2:fc:a7:9b:59:77:93: 4c:8e:cd:ba:77:e9:63:ee:ae:73:50:38:0c:2c:f9: 14:a0:4d:91:04:a0:f1:ee:7b:f0:2c:2e:b9:e6:fa: b7:a2:2c:31:2d:22:dd:e6:7e:62:cf:80:46:64:a7: 1c:0d:83:ae:2c:26:09:a8:09:e2:64:03:6e:68:27: 25:f4:95:b2:ff:e2:67:c9:f6:41:42:21:3f:43:ff: 5a:ee:2c:95:5b:92:65:40:1e:4d:0b:ab:4f:90:54: 59:04:f1:20:ad:a5:25:dd:f3:9f:10:c0:2f:6d:b3: fe:1d:75:46:e2:24:f2:56:75:fc:1e:28:f1:ef:7e: 8e:ce:fc:e2:4f:b5:34:c7:63:54:c1:30:a7:c8:a3: 40:39:72:d7:e0:e7:6d:58:27:04:9b:b1:41:95:63: bb:3c:33:ff:b8:9e:04:95:74:df:3c:56:49:68:39: ab:de:ab:ec:4e:06:d5:ad:69:ca:f1:dc:0a:20:0e: 3c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:51:A7:80:42:E3:F9:FF:4B:B9:73:2B:4C:0B:A5:1B:02:2B:D5:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38af3611-c3af-3b8b-adcf-6ce71580a04e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.37.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:e5:cb:6b:c4:c0:bb:91:0a:26:b0:74:bc:cd:a1:53:54:14: 7f:be:89:38:14:07:f9:97:4a:f3:16:fc:39:c1:49:95:bb:89: 6d:6e:04:85:bc:91:7e:9e:a5:1b:7f:48:31:29:7f:dc:61:9b: e5:3c:d4:c2:bc:42:3f:0e:28:aa:c5:7c:c2:c0:ad:61:7f:3f: 8c:35:b7:80:38:10:c7:d1:b4:2e:e4:56:34:35:e3:92:11:dd: ef:b3:6c:99:c5:e0:4f:86:4e:80:e4:c7:27:38:d1:6f:24:30: 0b:66:3c:63:71:d6:47:48:07:0a:e4:ec:70:f8:94:9a:fb:41: ab:6b:19:b1:61:54:a1:05:d0:76:54:1d:1a:b7:52:15:7a:30: 08:7e:f0:df:b8:67:0a:72:5e:24:6c:35:33:47:e8:d1:11:21: 63:82:1e:6f:42:7b:e6:2d:bf:ec:22:b0:c7:c6:3d:d3:99:ac: 68:49:cb:c6:f2:13:fd:42:6d:cc:48:55:b9:1a:87:3f:c2:d5: f6:db:66:7c:98:86:9a:f9:3a:99:3c:0b:01:7a:25:6b:d5:0e: be:56:c1:ab:1c:19:23:83:fb:81:b3:c4:b4:41:77:ba:62:b9: 1d:33:16:4d:21:90:9f:04:77:33:99:02:6c:67:d2:f9:d4:81: 1c:eb:09:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqleDiledSJQq3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZWUyODA2NjAtYmI0Zi00MTM2LWFmMTktMjQzMWNmNzg5ODJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqli4+/dvw2IoBWQQLub3vN6JwHNpPRaGlg4Q 8yKvRYNuD81pEDwooQ7+pSA0ffYEXv74sZ3GOYEmsAnjG39XpRTSVOL8p5tZd5NM js26d+lj7q5zUDgMLPkUoE2RBKDx7nvwLC655vq3oiwxLSLd5n5iz4BGZKccDYOu LCYJqAniZANuaCcl9JWy/+JnyfZBQiE/Q/9a7iyVW5JlQB5NC6tPkFRZBPEgraUl 3fOfEMAvbbP+HXVG4iTyVnX8Hijx736OzvziT7U0x2NUwTCnyKNAOXLX4OdtWCcE m7FBlWO7PDP/uJ4ElXTfPFZJaDmr3qvsTgbVrWnK8dwKIA48AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpRp4BC4/n/S7lzK0wLpRsCK9WOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzhhZjM2MTEtYzNhZi0z YjhiLWFkY2YtNmNlNzE1ODBhMDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCXuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3ly2vEwLuRCiawdLzNoVNUFH++iTgUB/mXSvMW/DnBSZW7iW1uBIW8 kX6epRt/SDEpf9xhm+U81MK8Qj8OKKrFfMLArWF/P4w1t4A4EMfRtC7kVjQ145IR 3e+zbJnF4E+GToDkxyc40W8kMAtmPGNx1kdIBwrk7HD4lJr7QatrGbFhVKEF0HZU HRq3UhV6MAh+8N+4ZwpyXiRsNTNH6NERIWOCHm9Ce+Ytv+wisMfGPdOZrGhJy8by E/1CbcxIVbkahz/C1fbbZnyYhpr5Opk8CwF6JWvVDr5WwascGSOD+4GzxLRBd7pi uR0zFk0hkJ8EdzOZAmxn0vnUgRzrCZY= -----END CERTIFICATE-----Generated at Tue Oct 21 19:27:44 2025 by rpki-client