$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/036f7573-d6fb-3151-90f5-5a91155a0648.roa File: 036f7573-d6fb-3151-90f5-5a91155a0648.roa (raw, json) Hash identifier: v98+f3heyip47JpM+TPR+woVGGmxfa4Kpg+hf4QFFj4= Subject key identifier: 49:4F:66:06:65:04:5D:85:9B:62:20:0E:02:D5:C9:99:CA:AC:E9:42 Certificate issuer: /CN=38c5255f-5193-4ef7-92e9-db326ee1d690 Certificate serial: 010D0C9F4328584B970CEA0927DC63FE2D3AD780 Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/036f7573-d6fb-3151-90f5-5a91155a0648.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 3356 IP address blocks: 75.78.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:ea:09:27:dc:63:fe:2d:3a:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=bf867232-42e3-44d6-8e42-f8761672b873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9a:91:d9:6d:17:3b:35:b5:22:c2:40:47:01: fa:f7:48:99:75:c1:7d:4e:47:ff:e1:21:09:e5:f8: 46:c2:c0:4f:8c:18:93:76:b6:3b:b4:c2:a4:d7:0d: 57:e9:99:2f:9d:bb:19:d7:9e:f6:0b:19:b8:6b:0c: 48:51:2c:b1:7e:66:df:45:d8:3b:83:88:ae:3d:a1: c8:16:5a:53:76:73:e7:0f:ee:3c:63:a5:f0:9e:ab: c0:7e:2a:3c:7d:93:43:2b:1c:8f:78:79:84:e1:0b: 3b:68:e8:bb:a8:62:b5:20:f7:49:db:01:21:f0:02: 19:99:26:ca:f5:f0:9f:1c:83:fe:01:cd:ab:41:08: c5:a0:73:13:25:e4:f5:4a:27:d5:1d:0f:65:34:63: 2c:7a:1f:43:79:aa:e1:ad:20:c8:23:92:d7:fb:ec: 4c:93:d2:48:e2:db:a0:05:8c:ec:0e:d6:31:c7:54: be:29:63:06:a2:02:c3:18:ae:46:ce:a8:76:cc:5c: cb:01:a5:c0:8f:bd:9c:80:11:ea:57:0c:ac:97:16: 3f:86:47:0c:69:f4:f5:ed:60:b7:00:c5:46:68:4b: f8:fe:dd:71:f2:77:62:a9:db:38:95:3d:e8:f6:60: 51:bc:14:96:ce:51:77:46:8d:80:89:ff:13:9f:70: d8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4F:66:06:65:04:5D:85:9B:62:20:0E:02:D5:C9:99:CA:AC:E9:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/036f7573-d6fb-3151-90f5-5a91155a0648.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl X509v3 Authority Key Identifier: keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer sbgp-ipAddrBlock: critical IPv4: 75.78.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:95:55:0b:33:1a:0f:90:bd:2c:c7:fd:d8:08:70:4c:6c:d9: e2:ce:e3:85:ea:e9:3d:a2:36:b0:10:da:e2:05:3b:33:51:82: f8:8e:ac:0d:8e:38:3e:1b:a3:02:3f:93:60:dc:5c:ef:ab:1d: ce:27:45:20:44:8e:ce:f9:e0:ef:50:78:73:4c:5c:36:9e:15: b8:d8:42:5c:0d:dd:c8:bd:11:dc:8b:34:0f:d2:cb:32:46:4d: 1a:2d:4c:c8:77:46:c3:92:69:f1:de:09:7b:f0:aa:58:4d:58: 96:9e:5f:4c:10:d7:40:92:60:65:37:28:11:bf:3e:cb:80:be: 11:0a:66:7c:a3:3a:56:9e:d7:19:45:b9:8b:27:b6:06:09:b4: c1:9b:de:3b:bb:9c:a3:e0:a8:05:24:70:5a:60:68:aa:e3:8a: 7d:e3:a5:68:ef:ea:28:98:4a:d4:ad:e1:57:32:98:ef:0f:e1: 62:fe:f0:80:6d:05:44:17:b7:e5:15:21:d5:cf:e4:4e:69:5b: 0b:c1:73:1e:68:52:35:0c:b3:f8:f0:36:8d:8c:d2:6e:7e:52: bd:ae:32:f2:a3:bf:b0:55:0e:98:70:8d:69:68:b8:8d:23:4f: 12:d5:e7:fc:85:18:71:73:39:a7:1b:7f:79:09:fa:f9:96:b8: 3e:c3:81:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDOoJJ9xj/i0614AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhjNTI1NWYtNTE5My00ZWY3LTkyZTktZGIzMjZlZTFk NjkwMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk YmY4NjcyMzItNDJlMy00NGQ2LThlNDItZjg3NjE2NzJiODczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJqR2W0XOzW1IsJARwH690iZdcF9Tkf/4SEJ 5fhGwsBPjBiTdrY7tMKk1w1X6ZkvnbsZ1572Cxm4awxIUSyxfmbfRdg7g4iuPaHI FlpTdnPnD+48Y6XwnqvAfio8fZNDKxyPeHmE4Qs7aOi7qGK1IPdJ2wEh8AIZmSbK 9fCfHIP+Ac2rQQjFoHMTJeT1SifVHQ9lNGMseh9DearhrSDII5LX++xMk9JI4tug BYzsDtYxx1S+KWMGogLDGK5Gzqh2zFzLAaXAj72cgBHqVwyslxY/hkcMafT17WC3 AMVGaEv4/t1x8ndiqds4lT3o9mBRvBSWzlF3Ro2Aif8Tn3DYOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElPZgZlBF2Fm2IgDgLVyZnKrOlCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1 MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMyNmVlMWQ2OTAvMDM2Zjc1NzMtZDZmYi0z MTUxLTkwZjUtNWE5MTE1NWEwNjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhjNTI1NWYtNTE5My00ZWY3LTky ZTktZGIzMjZlZTFkNjkwLzM4YzUyNTVmLTUxOTMtNGVmNy05MmU5LWRiMzI2ZWUx ZDY5MC5jcmwwHwYDVR0jBBgwFoAU6OtRdt4L2VYIX2NOD0gHny6QnZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMy NmVlMWQ2OTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS07aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALmVVQszGg+QvSzH/dgIcExs2eLO44Xq6T2iNrAQ2uIFOzNRgviOrA2O OD4bowI/k2DcXO+rHc4nRSBEjs754O9QeHNMXDaeFbjYQlwN3ci9EdyLNA/SyzJG TRotTMh3RsOSafHeCXvwqlhNWJaeX0wQ10CSYGU3KBG/PsuAvhEKZnyjOlae1xlF uYsntgYJtMGb3ju7nKPgqAUkcFpgaKrjin3jpWjv6iiYStSt4VcymO8P4WL+8IBt BUQXt+UVIdXP5E5pWwvBcx5oUjUMs/jwNo2M0m5+Ur2uMvKjv7BVDphwjWlouI0j TxLV5/yFGHFzOacbf3kJ+vmWuD7DgU8= -----END CERTIFICATE-----Generated at Wed Oct 22 09:54:57 2025 by rpki-client