$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fafea8ad-6b18-4909-8d73-a9987dd107f1/38e7bfbc-beb0-32a6-9f14-48077eca6287.roa File: 38e7bfbc-beb0-32a6-9f14-48077eca6287.roa (raw, json) Hash identifier: LLBB8IgVaKp02W261dsCV9fOwsqVB/jnvdznQ2wafn0= Subject key identifier: 8B:1B:D0:79:42:47:43:15:6B:06:3C:71:C3:3B:03:D5:7D:B7:11:81 Certificate issuer: /CN=fafea8ad-6b18-4909-8d73-a9987dd107f1 Certificate serial: 010D0C9F4328584B01F00AD920B5D57438AB3400 Authority key identifier: DC:4A:3D:3A:BD:B8:40:AB:D7:94:03:30:A1:66:07:CA:92:F6:67:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fafea8ad-6b18-4909-8d73-a9987dd107f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fafea8ad-6b18-4909-8d73-a9987dd107f1/38e7bfbc-beb0-32a6-9f14-48077eca6287.roa Signing time: Thu 28 Aug 2025 13:30:49 +0000 ROA not before: Thu 28 Aug 2025 13:30:49 +0000 ROA not after: Wed 26 Nov 2025 14:30:49 +0000 asID: 376 IP address blocks: 204.19.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fafea8ad-6b18-4909-8d73-a9987dd107f1/fafea8ad-6b18-4909-8d73-a9987dd107f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fafea8ad-6b18-4909-8d73-a9987dd107f1/fafea8ad-6b18-4909-8d73-a9987dd107f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fafea8ad-6b18-4909-8d73-a9987dd107f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:01:f0:0a:d9:20:b5:d5:74:38:ab:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fafea8ad-6b18-4909-8d73-a9987dd107f1 Validity Not Before: Aug 28 13:30:49 2025 GMT Not After : Nov 26 14:30:49 2025 GMT Subject: CN=699e9546-68d1-4b14-8aaf-d43d55de812d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9d:22:2d:dd:1d:9a:25:13:c3:c8:e4:df:c5: 52:e5:d9:47:1b:87:70:a5:e0:15:b6:5f:ee:f9:0f: 44:24:f8:25:1d:77:9e:75:b3:d5:e2:f4:d5:cd:9f: 67:20:7f:51:d3:e0:d6:e0:da:fb:48:72:16:b2:ba: 60:c2:74:49:2b:e2:19:02:fd:1a:21:be:cb:2a:ff: cf:cc:75:07:7f:99:7e:a8:a6:20:5b:42:6b:cf:e9: 40:f4:74:52:74:75:60:08:1c:d5:5e:4e:a9:70:38: e7:f1:9f:f6:a6:70:f2:4f:1e:f3:ee:d2:88:3c:40: 98:e4:3b:9c:41:f3:e5:eb:ae:f8:f7:f8:5a:6e:b4: ef:72:8a:a3:cb:fa:b9:b1:b4:a7:bf:34:ec:96:83: 73:a3:36:0e:a9:71:b3:a1:ea:29:cd:d7:15:10:41: ac:cf:f2:ce:ee:ea:a6:51:bb:5d:b7:03:17:43:ab: 29:bf:3d:e4:aa:38:ff:5c:42:08:d9:4e:e0:91:19: 33:dd:46:84:c1:39:86:ed:33:ed:30:6f:30:a4:09: 6a:bc:39:94:66:a2:b6:7a:61:51:0c:6b:0a:86:fd: 91:57:d1:62:f9:8f:7d:5e:31:87:d0:1d:98:ed:c2: 25:4f:bc:1b:48:80:c6:0a:ac:01:0d:07:a3:a0:3f: 98:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:1B:D0:79:42:47:43:15:6B:06:3C:71:C3:3B:03:D5:7D:B7:11:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fafea8ad-6b18-4909-8d73-a9987dd107f1/38e7bfbc-beb0-32a6-9f14-48077eca6287.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fafea8ad-6b18-4909-8d73-a9987dd107f1/fafea8ad-6b18-4909-8d73-a9987dd107f1.crl X509v3 Authority Key Identifier: keyid:DC:4A:3D:3A:BD:B8:40:AB:D7:94:03:30:A1:66:07:CA:92:F6:67:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fafea8ad-6b18-4909-8d73-a9987dd107f1.cer sbgp-ipAddrBlock: critical IPv4: 204.19.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:26:da:2f:35:df:34:0d:c7:3d:5f:81:0c:b5:ad:ae:bc:26: 0a:ed:a3:1c:1e:09:b7:a6:5f:26:58:70:52:e7:d4:98:16:88: 79:8b:33:e5:eb:27:66:be:0b:de:60:28:94:1f:a5:9f:dd:cf: dc:d6:af:4f:4b:f3:3d:9a:a8:40:7d:7e:ba:41:28:78:ac:b2: 4f:5b:5b:4a:68:b6:7c:76:3c:b8:8a:61:70:ba:3d:f2:cd:fb: a3:02:15:57:98:0f:14:79:5e:6e:0d:bb:2a:4b:3a:81:06:5e: 83:17:ae:b2:b8:d2:70:73:68:2d:dc:cc:d5:c9:10:cd:86:b2: 4a:e7:42:58:0d:42:b7:39:e0:1d:40:97:9f:c7:95:07:dd:e3: 50:b0:8c:f1:2a:a5:d0:12:d6:c1:49:5b:07:e0:d5:e2:69:cf: 75:4f:f4:2e:7e:ab:ca:cc:4a:d5:3a:90:52:8d:ef:5a:58:99: 59:13:88:c9:44:e8:b5:cc:4b:15:13:f3:81:68:a1:b1:43:a3: c4:17:9d:f9:92:67:ee:1e:fe:ca:11:e4:1b:b6:33:5e:ec:79: a1:e4:71:11:51:ab:70:3d:25:a2:08:88:3a:19:7d:5e:f9:6f: a6:de:62:97:e4:4c:c3:a3:44:cc:99:38:03:81:ef:2a:d9:f1: 72:b7:aa:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsB8ArZILXVdDirNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFmZWE4YWQtNmIxOC00OTA5LThkNzMtYTk5ODdkZDEw N2YxMB4XDTI1MDgyODEzMzA0OVoXDTI1MTEyNjE0MzA0OVowLzEtMCsGA1UEAxMk Njk5ZTk1NDYtNjhkMS00YjE0LThhYWYtZDQzZDU1ZGU4MTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh50iLd0dmiUTw8jk38VS5dlHG4dwpeAVtl/u +Q9EJPglHXeedbPV4vTVzZ9nIH9R0+DW4Nr7SHIWsrpgwnRJK+IZAv0aIb7LKv/P zHUHf5l+qKYgW0Jrz+lA9HRSdHVgCBzVXk6pcDjn8Z/2pnDyTx7z7tKIPECY5Duc QfPl66749/habrTvcoqjy/q5sbSnvzTsloNzozYOqXGzoeopzdcVEEGsz/LO7uqm UbtdtwMXQ6spvz3kqjj/XEII2U7gkRkz3UaEwTmG7TPtMG8wpAlqvDmUZqK2emFR DGsKhv2RV9Fi+Y99XjGH0B2Y7cIlT7wbSIDGCqwBDQejoD+YzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIsb0HlCR0MVawY8ccM7A9V9txGBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mYWZl YThhZC02YjE4LTQ5MDktOGQ3My1hOTk4N2RkMTA3ZjEvMzhlN2JmYmMtYmViMC0z MmE2LTlmMTQtNDgwNzdlY2E2Mjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZmFmZWE4YWQtNmIxOC00OTA5LThk NzMtYTk5ODdkZDEwN2YxL2ZhZmVhOGFkLTZiMTgtNDkwOS04ZDczLWE5OTg3ZGQx MDdmMS5jcmwwHwYDVR0jBBgwFoAU3Eo9Or24QKvXlAMwoWYHypL2Z8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mYWZlYThhZC02YjE4LTQ5MDktOGQ3My1hOTk4 N2RkMTA3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzBNQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEm2i813zQNxz1fgQy1ra68JgrtoxweCbemXyZYcFLn1JgWiHmLM+Xr J2a+C95gKJQfpZ/dz9zWr09L8z2aqEB9frpBKHissk9bW0potnx2PLiKYXC6PfLN +6MCFVeYDxR5Xm4NuypLOoEGXoMXrrK40nBzaC3czNXJEM2GskrnQlgNQrc54B1A l5/HlQfd41CwjPEqpdAS1sFJWwfg1eJpz3VP9C5+q8rMStU6kFKN71pYmVkTiMlE 6LXMSxUT84FoobFDo8QXnfmSZ+4e/soR5Bu2M17seaHkcRFRq3A9JaIIiDoZfV75 b6beYpfkTMOjRMyZOAOB7yrZ8XK3qqU= -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:28 2025 by rpki-client