$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/38cff7ac-79e5-37d1-8a91-3327b27ea983.roa File: 38cff7ac-79e5-37d1-8a91-3327b27ea983.roa (raw, json) Hash identifier: rJA3Uu2WwJ6D7hIFH4OOjgUMqrg0f+hzHdcUeQVMVK0= Subject key identifier: 5F:86:3C:D4:EC:68:4A:01:3F:72:FE:38:22:A9:FC:1D:97:A1:F7:07 Certificate issuer: /CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Certificate serial: 010D0C9F4328584B8EACC4A6B73624821DFD921A Authority key identifier: F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/38cff7ac-79e5-37d1-8a91-3327b27ea983.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 46408 IP address blocks: 208.84.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:c4:a6:b7:36:24:82:1d:fd:92:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=4d184c74-e0b9-44da-aac9-97a0f4f3c1ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3d:2c:31:ff:04:d5:e3:86:21:57:44:63:4a: 64:0f:bd:e5:bf:b5:c8:f6:e3:51:60:23:70:40:c5: f3:07:42:b6:76:bd:b9:ae:b1:3e:6d:28:23:69:fd: 91:3a:76:31:5c:96:34:91:5e:c1:af:22:57:54:8b: 47:c8:df:20:5a:2c:7a:22:71:d3:fa:3c:b3:41:d6: f3:b3:b9:f2:8f:63:c7:92:39:29:04:0f:cb:6b:65: 98:2e:e6:14:ec:0b:23:c7:ce:c7:5e:48:0d:23:cf: 47:00:b1:30:5c:4d:f3:3c:1b:53:24:d8:fa:fe:26: 0c:d4:28:da:d8:9c:40:5e:d3:48:5c:00:79:af:f6: 12:1b:f6:a1:d4:0d:e5:d9:07:a2:15:13:08:46:68: a8:2a:04:e8:ca:77:96:1c:7b:09:49:1b:4c:27:90: 55:3e:a7:7f:75:76:9b:ed:2a:85:c5:f5:7e:56:0e: fa:56:be:d0:ec:ef:44:ea:fe:19:62:39:25:bf:ad: f7:2a:fd:1f:6f:e0:d0:ad:d3:dd:80:69:0e:f1:3d: 8b:35:e2:08:25:fd:33:e2:7f:f3:80:b3:f3:dd:4c: 67:95:c6:a1:9b:b6:db:b8:4a:25:f4:1a:cf:b4:db: 1d:f4:14:b1:d1:41:70:fb:19:82:d2:ef:15:3b:22: f3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:86:3C:D4:EC:68:4A:01:3F:72:FE:38:22:A9:FC:1D:97:A1:F7:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/38cff7ac-79e5-37d1-8a91-3327b27ea983.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl X509v3 Authority Key Identifier: keyid:F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer sbgp-ipAddrBlock: critical IPv4: 208.84.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:06:07:a5:30:c8:c4:79:e3:65:b7:28:8b:46:30:06:c8:cb: 3c:48:86:02:96:31:eb:e4:7b:ac:39:28:4a:70:88:f3:d0:94: eb:78:af:02:9b:8f:47:f6:cb:cd:5e:80:54:a9:32:6f:f6:bb: c1:bf:3f:98:2d:54:1c:56:bb:bd:8d:a0:7f:96:f0:78:3a:a9: ae:ba:48:00:5a:0f:c9:b0:fc:3d:6c:36:34:6f:24:db:22:17: 0f:93:7a:6c:4f:9c:27:bc:d2:0b:9e:38:d8:e1:7f:85:bb:af: 83:6d:fd:7e:33:75:86:51:13:ed:7a:4e:a6:73:38:8a:af:3d: 88:3d:bc:07:6c:74:93:3a:f9:34:7f:a3:18:92:ec:d0:fb:27: 1c:5b:24:57:3c:4c:7c:9a:d7:a1:24:f4:3a:29:cc:68:8f:b6: 78:5b:9b:9d:5c:e7:c2:d0:90:39:69:04:a5:25:a2:85:f3:40: c6:05:af:6d:a2:ba:ff:c1:49:b5:91:92:6d:94:e4:ff:f6:e2: cd:b8:fa:33:10:7b:02:24:c9:8d:b8:bc:fb:f7:13:f9:18:58: 56:c9:a4:a1:a3:bb:c8:2e:4a:d1:3d:87:73:4c:b4:55:62:e6: 16:5a:4b:d7:92:fa:38:83:73:8c:fa:cb:b0:11:32:24:dd:02: 29:ca:cf:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrMSmtzYkgh39khowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkZjJlN2YtOGU4My00MzJhLThjMjctNTU0Njk0NGRk YTRiMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk NGQxODRjNzQtZTBiOS00NGRhLWFhYzktOTdhMGY0ZjNjMWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD0sMf8E1eOGIVdEY0pkD73lv7XI9uNRYCNw QMXzB0K2dr25rrE+bSgjaf2ROnYxXJY0kV7BryJXVItHyN8gWix6InHT+jyzQdbz s7nyj2PHkjkpBA/La2WYLuYU7Asjx87HXkgNI89HALEwXE3zPBtTJNj6/iYM1Cja 2JxAXtNIXAB5r/YSG/ah1A3l2QeiFRMIRmioKgToyneWHHsJSRtMJ5BVPqd/dXab 7SqFxfV+Vg76Vr7Q7O9E6v4ZYjklv633Kv0fb+DQrdPdgGkO8T2LNeIIJf0z4n/z gLPz3Uxnlcahm7bbuEol9BrPtNsd9BSx0UFw+xmC0u8VOyLzLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+GPNTsaEoBP3L+OCKp/B2XofcHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRm MmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2OTQ0ZGRhNGIvMzhjZmY3YWMtNzllNS0z N2QxLThhOTEtMzMyN2IyN2VhOTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDVkZjJlN2YtOGU4My00MzJhLThj MjctNTU0Njk0NGRkYTRiL2Q1ZGYyZTdmLThlODMtNDMyYS04YzI3LTU1NDY5NDRk ZGE0Yi5jcmwwHwYDVR0jBBgwFoAU901L3g55e/8+XSHXuRqpy68UFwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRmMmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2 OTQ0ZGRhNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FTIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKoGB6UwyMR542W3KItGMAbIyzxIhgKWMevke6w5KEpwiPPQlOt4rwKb j0f2y81egFSpMm/2u8G/P5gtVBxWu72NoH+W8Hg6qa66SABaD8mw/D1sNjRvJNsi Fw+TemxPnCe80gueONjhf4W7r4Nt/X4zdYZRE+16TqZzOIqvPYg9vAdsdJM6+TR/ oxiS7ND7JxxbJFc8THya16Ek9DopzGiPtnhbm51c58LQkDlpBKUlooXzQMYFr22i uv/BSbWRkm2U5P/24s24+jMQewIkyY24vPv3E/kYWFbJpKGju8guStE9h3NMtFVi 5hZaS9eS+jiDc4z6y7ARMiTdAinKzwE= -----END CERTIFICATE-----Generated at Sun Oct 26 08:22:13 2025 by rpki-client