$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/38a1563f-ce8e-389b-9f2f-076aa60ec307.roa File: 38a1563f-ce8e-389b-9f2f-076aa60ec307.roa (raw, json) Hash identifier: JR9kgbufwIVdKCAcJWYovnzTueHWk/gZyhwCZ3rVBYY= Subject key identifier: 73:3C:CE:D6:B5:90:35:50:E5:02:99:A7:AE:7F:D4:B9:B4:F1:DD:D5 Certificate issuer: /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce Certificate serial: 010D0C9F4328584B95A79B4A6DE57457112EDA80 Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/38a1563f-ce8e-389b-9f2f-076aa60ec307.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 8560 IP address blocks: 66.179.248.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:9b:4a:6d:e5:74:57:11:2e:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=3d2e2b68-89ed-42e7-ae2e-5caf4bba38d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d6:58:e8:78:cd:35:6f:66:be:36:61:9e:70: d6:17:76:24:de:bb:bc:cc:bc:cb:89:9d:94:16:77: 55:6b:fd:f3:35:91:50:5c:d4:b3:5d:3f:d2:20:8c: 5b:4a:4b:e9:ba:1e:85:65:94:c6:cc:fc:53:9e:b4: 4b:2e:82:57:a5:9b:16:e1:fe:6a:e6:d4:a1:16:19: 28:04:64:74:9d:28:2f:dd:76:34:62:ca:15:29:02: 92:75:b0:60:14:27:01:ee:a1:ac:6b:5c:0e:83:e9: af:03:6b:dd:80:59:d1:30:cf:0c:9d:c2:a3:75:ed: 83:fe:3e:55:16:d7:75:51:7c:9c:ac:f1:2d:09:f2: 40:cf:af:1c:58:b5:22:1a:49:2c:2b:52:ca:c3:2a: ce:24:d9:10:cb:d7:b9:64:40:dc:d7:7c:fe:49:a9: 1e:84:ce:fd:93:76:4a:23:f0:ef:03:76:51:a0:d4: 16:72:75:a5:af:78:ae:04:7e:ff:c6:c5:d5:2f:ba: b9:39:17:d5:60:d4:b3:d8:52:77:63:0b:5f:09:61: 44:18:b7:5b:9a:d7:70:36:88:7c:fe:7f:92:d0:92: c2:6e:4a:bf:3c:ca:0f:54:a2:ab:20:8a:40:e0:12: 12:09:0d:bf:84:90:4d:6f:78:81:9d:91:58:01:94: 23:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:3C:CE:D6:B5:90:35:50:E5:02:99:A7:AE:7F:D4:B9:B4:F1:DD:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/38a1563f-ce8e-389b-9f2f-076aa60ec307.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl X509v3 Authority Key Identifier: keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer sbgp-ipAddrBlock: critical IPv4: 66.179.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:bf:a2:c3:84:b3:5b:c6:94:10:e2:73:fb:ac:be:60:7f:f2: 9d:5c:cb:ed:4a:d7:d0:fe:53:7e:70:fe:73:37:97:e1:ea:78: a7:e4:63:f0:58:cd:93:45:8d:66:44:73:f8:0b:ca:40:9c:53: b4:7a:31:77:9d:b3:a3:93:54:a9:05:10:2c:ad:08:54:16:5b: 8d:4f:2c:8e:b7:df:26:d5:69:cf:b9:db:37:d1:80:29:2f:6c: 0e:88:ff:0c:da:e2:79:59:e6:37:af:3a:8f:35:6b:4c:4f:5a: 7b:0f:e3:ec:e9:e0:c3:a2:2c:fc:a6:f1:5e:11:a6:9d:61:66: 4b:ce:9b:10:16:55:ac:83:8d:77:7f:3b:50:69:69:21:20:77: 62:03:92:3c:a7:cb:fc:f6:89:65:ae:2a:01:76:c2:c2:82:e9: f5:c7:e2:a1:35:22:a3:aa:22:76:46:c7:5d:98:c1:7f:c2:1b: 06:af:de:c2:69:ef:8a:d2:55:58:62:82:e9:34:1e:98:2a:40: ce:50:ab:31:c6:30:0f:39:ee:d6:56:24:e6:d0:da:f9:52:4c: 58:94:91:da:95:18:df:df:ec:38:2e:9e:27:7b:4b:62:3b:88: ff:17:e5:ca:9f:b8:4b:e8:12:c5:c6:25:98:f5:42:62:78:00: 6e:4b:46:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5tKbeV0VxEu2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JhNzk5ODgtODBiYy00ZmNiLThmYWYtNjI0NDAwZDVm MWNlMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk M2QyZTJiNjgtODllZC00MmU3LWFlMmUtNWNhZjRiYmEzOGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dZY6HjNNW9mvjZhnnDWF3Yk3ru8zLzLiZ2U FndVa/3zNZFQXNSzXT/SIIxbSkvpuh6FZZTGzPxTnrRLLoJXpZsW4f5q5tShFhko BGR0nSgv3XY0YsoVKQKSdbBgFCcB7qGsa1wOg+mvA2vdgFnRMM8MncKjde2D/j5V Ftd1UXycrPEtCfJAz68cWLUiGkksK1LKwyrOJNkQy9e5ZEDc13z+SakehM79k3ZK I/DvA3ZRoNQWcnWlr3iuBH7/xsXVL7q5ORfVYNSz2FJ3YwtfCWFEGLdbmtdwNoh8 /n+S0JLCbkq/PMoPVKKrIIpA4BISCQ2/hJBNb3iBnZFYAZQj1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHM8zta1kDVQ5QKZp65/1Lm08d3VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3 OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0MDBkNWYxY2UvMzhhMTU2M2YtY2U4ZS0z ODliLTlmMmYtMDc2YWE2MGVjMzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2JhNzk5ODgtODBiYy00ZmNiLThm YWYtNjI0NDAwZDVmMWNlLzdiYTc5OTg4LTgwYmMtNGZjYi04ZmFmLTYyNDQwMGQ1 ZjFjZS5jcmwwHwYDVR0jBBgwFoAUNBe8v2tKYwrKo8WIvEUP5ZR5xFowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0 MDBkNWYxY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQrP4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAK/osOEs1vGlBDic/usvmB/8p1cy+1K19D+U35w/nM3l+HqeKfkY/BY zZNFjWZEc/gLykCcU7R6MXeds6OTVKkFECytCFQWW41PLI633ybVac+52zfRgCkv bA6I/wza4nlZ5jevOo81a0xPWnsP4+zp4MOiLPym8V4Rpp1hZkvOmxAWVayDjXd/ O1BpaSEgd2IDkjyny/z2iWWuKgF2wsKC6fXH4qE1IqOqInZGx12YwX/CGwav3sJp 74rSVVhiguk0HpgqQM5QqzHGMA857tZWJObQ2vlSTFiUkdqVGN/f7Dgunid7S2I7 iP8X5cqfuEvoEsXGJZj1QmJ4AG5LRmw= -----END CERTIFICATE-----Generated at Tue Oct 28 03:56:16 2025 by rpki-client