$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/c08f5a86-f15c-34e1-8512-7fb349c6712f.roa File: c08f5a86-f15c-34e1-8512-7fb349c6712f.roa (raw, json) Hash identifier: FMY52i7/xld1cOlFF+c4kg35YfOrK5jgflottliS1EQ= Subject key identifier: 2E:BD:CD:A4:C6:4D:F0:75:F4:C1:BE:26:80:D9:D8:2B:63:74:7D:63 Certificate issuer: /CN=ae8f2797-b6fa-4c49-a3e2-811d0c484615 Certificate serial: 010D0C9F4328584B8EACC6B8EB86F827121C1D80 Authority key identifier: CF:B8:A4:FE:E8:4C:A9:74:D4:6E:00:4D:64:CB:3E:0E:81:2F:C6:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/c08f5a86-f15c-34e1-8512-7fb349c6712f.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 398123 IP address blocks: 161.38.188.0/23 maxlen: 24 2620:13d:e002::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:c6:b8:eb:86:f8:27:12:1c:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae8f2797-b6fa-4c49-a3e2-811d0c484615 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=0dd3e3ab-446a-4aa3-bd00-f27013db3ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0a:65:af:95:f0:a7:b1:3e:c6:17:93:09:53: 0b:1d:16:3e:f6:69:5f:27:6d:b7:f2:c7:15:a1:98: b6:67:84:ae:24:c6:0a:3c:48:48:57:26:87:c6:1d: 3c:35:34:28:dc:07:29:0e:44:30:2f:31:b0:0f:15: ec:48:45:b9:c3:69:07:7d:ef:ad:4b:f8:dd:8f:a2: 3b:47:1f:76:1d:83:05:64:6d:63:02:ec:41:84:6b: 1a:ec:81:a3:40:6e:99:94:1c:7a:98:98:94:d3:1d: d1:c8:af:64:c0:3e:7b:76:fe:44:ed:8c:1d:49:de: 30:b3:8e:dc:d4:d3:76:5d:4c:fa:28:6f:6e:af:60: a4:96:2b:19:40:3e:22:99:5d:d8:9e:7b:9d:90:c7: 3e:c6:a9:48:1f:24:84:76:8a:f0:8f:8f:f2:f3:ae: 14:11:41:00:99:b4:71:c5:f1:c7:53:7a:c9:6e:86: 89:cb:44:f9:f1:cf:39:c6:22:f1:06:e6:62:50:9f: d7:33:23:4b:d7:ec:02:64:a5:e4:99:9c:b3:0e:b5: f4:bd:47:14:53:d2:24:a2:19:a0:2a:70:94:bf:26: 6e:26:e4:28:98:ff:5d:48:9d:46:2d:dd:96:c4:e4: 26:1c:82:57:32:96:45:57:46:ad:7a:f5:9f:d5:4d: 04:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:BD:CD:A4:C6:4D:F0:75:F4:C1:BE:26:80:D9:D8:2B:63:74:7D:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/c08f5a86-f15c-34e1-8512-7fb349c6712f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.crl X509v3 Authority Key Identifier: keyid:CF:B8:A4:FE:E8:4C:A9:74:D4:6E:00:4D:64:CB:3E:0E:81:2F:C6:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer sbgp-ipAddrBlock: critical IPv4: 161.38.188.0/23 IPv6: 2620:13d:e002::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:6d:2f:5b:bf:fd:11:8a:fd:5a:51:c8:0d:2d:e3:ab:ae:0b: 09:14:af:a2:1b:8e:91:dc:19:7d:08:ce:09:93:26:ee:6b:d8: 00:17:fc:64:b4:72:69:a1:75:44:16:a0:8c:bd:81:98:4d:ca: 28:7c:69:ad:7b:64:65:9b:46:4f:f5:26:4e:ae:ff:07:a1:4b: 7b:5c:80:46:8d:85:40:21:bb:f9:d3:e3:6d:f0:4f:64:1f:14: 4a:fe:9c:3f:5b:1b:82:f9:55:f1:89:13:4e:d3:82:5e:3f:3a: 15:61:47:b0:a1:82:28:09:7d:81:65:1e:66:99:07:78:9d:d5: c3:f4:7f:bd:89:74:ca:b4:ff:0f:2f:13:95:84:17:65:6c:44: 89:43:75:5f:e6:cd:0f:5d:37:6f:de:35:ce:b1:a5:c8:46:48: 1d:8d:28:8f:ab:5e:b3:85:37:72:5b:bc:45:b1:0b:cf:ea:b6: 86:e2:7e:da:2f:c1:c2:cf:e3:3a:13:cf:fd:e5:e8:4f:c6:18: bb:cf:5b:ed:ec:e9:a6:71:e5:8a:09:60:21:63:fb:22:3d:09: cd:da:81:6b:02:fb:4e:a4:03:4a:1e:7f:ac:75:09:75:e1:c9: ef:ba:6c:0b:79:07:3f:4b:3e:0d:77:74:c6:89:c3:dc:7a:4e: 94:41:95:d9 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEuOrMa464b4JxIcHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU4ZjI3OTctYjZmYS00YzQ5LWEzZTItODExZDBjNDg0 NjE1MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MGRkM2UzYWItNDQ2YS00YWEzLWJkMDAtZjI3MDEzZGIzYWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgplr5Xwp7E+xheTCVMLHRY+9mlfJ2238scV oZi2Z4SuJMYKPEhIVyaHxh08NTQo3AcpDkQwLzGwDxXsSEW5w2kHfe+tS/jdj6I7 Rx92HYMFZG1jAuxBhGsa7IGjQG6ZlBx6mJiU0x3RyK9kwD57dv5E7YwdSd4ws47c 1NN2XUz6KG9ur2CklisZQD4imV3YnnudkMc+xqlIHySEdorwj4/y864UEUEAmbRx xfHHU3rJboaJy0T58c85xiLxBuZiUJ/XMyNL1+wCZKXkmZyzDrX0vUcUU9Ikohmg KnCUvyZuJuQomP9dSJ1GLd2WxOQmHIJXMpZFV0atevWf1U0ECwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFC69zaTGTfB19MG+JoDZ2CtjdH1jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZThm Mjc5Ny1iNmZhLTRjNDktYTNlMi04MTFkMGM0ODQ2MTUvYzA4ZjVhODYtZjE1Yy0z NGUxLTg1MTItN2ZiMzQ5YzY3MTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWU4ZjI3OTctYjZmYS00YzQ5LWEz ZTItODExZDBjNDg0NjE1L2FlOGYyNzk3LWI2ZmEtNGM0OS1hM2UyLTgxMWQwYzQ4 NDYxNS5jcmwwHwYDVR0jBBgwFoAUz7ik/uhMqXTUbgBNZMs+DoEvxugwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZThmMjc5Ny1iNmZhLTRjNDktYTNlMi04MTFk MGM0ODQ2MTUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBoSa8MA8E AgACMAkDBwEmIAE94AIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbW0vW7/9EYr9WlHIDS3jq64LCRSvohuO kdwZfQjOCZMm7mvYABf8ZLRyaaF1RBagjL2BmE3KKHxprXtkZZtGT/UmTq7/B6FL e1yARo2FQCG7+dPjbfBPZB8USv6cP1sbgvlV8YkTTtOCXj86FWFHsKGCKAl9gWUe ZpkHeJ3Vw/R/vYl0yrT/Dy8TlYQXZWxEiUN1X+bND103b941zrGlyEZIHY0oj6te s4U3clu8RbELz+q2huJ+2i/Bws/jOhPP/eXoT8YYu89b7ezppnHliglgIWP7Ij0J zdqBawL7TqQDSh5/rHUJdeHJ77psC3kHP0s+DXd0xonD3HpOlEGV2Q== -----END CERTIFICATE-----Generated at Mon Nov 3 03:32:53 2025 by rpki-client