$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/38eed031-2f26-37d2-9433-38e44e47e238.roa File: 38eed031-2f26-37d2-9433-38e44e47e238.roa (raw, json) Hash identifier: 5Mbw2w5ySSCXC2sPWfuC3UVzmMaqwmN5/QHQPwxuYmg= Subject key identifier: D4:14:F0:65:25:81:47:47:27:53:B5:69:7D:B9:07:99:3B:5A:8D:49 Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F4328584BAD624C60D0ADF7F2F803F800 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/38eed031-2f26-37d2-9433-38e44e47e238.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 51964 IP address blocks: 196.27.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:4c:60:d0:ad:f7:f2:f8:03:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=5114a030-8424-40d0-9213-ede1fab1b33f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:28:e3:c5:0e:38:1a:99:33:36:84:e1:13:fd: 65:06:d0:bb:7a:ed:d1:68:0d:e2:77:e3:40:a7:70: 26:43:17:51:98:1d:43:47:52:78:e0:62:5a:b9:b0: 8e:12:62:20:f5:95:ce:e5:bb:d3:3a:4e:de:16:42: fe:90:8d:b3:9e:c1:21:f4:eb:56:02:66:06:8f:85: a9:71:2a:ec:c2:81:45:6c:9f:1c:c8:56:e3:1d:06: cd:62:73:f5:b6:38:46:82:4c:20:ff:c8:72:fd:d6: f0:77:66:5a:02:b3:b0:9d:31:a4:50:9a:d6:54:77: fb:a1:2d:97:19:6a:18:02:14:5a:a7:ba:56:1d:ee: b1:3e:41:ea:63:f9:ad:5f:18:fc:2a:4c:6f:67:13: fc:16:30:f0:1b:78:0e:37:66:a7:80:8c:ac:70:32: 83:13:91:d2:a0:33:f8:f6:04:22:10:60:ab:63:9e: 6e:8b:6d:74:9d:25:be:62:e9:33:3c:e8:c3:ab:2d: 32:64:3b:c4:ac:6a:0c:d5:1a:6c:4f:bc:43:26:f2: 18:29:f8:90:0f:66:0e:ba:72:11:f7:23:41:71:8a: f3:f7:1f:cf:6c:33:29:50:7a:56:bb:f8:81:4b:4e: 7a:0c:4b:80:11:89:2c:19:db:93:65:21:8e:c3:31: 70:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:14:F0:65:25:81:47:47:27:53:B5:69:7D:B9:07:99:3B:5A:8D:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/38eed031-2f26-37d2-9433-38e44e47e238.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 196.27.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:ce:8d:cf:e0:c2:09:40:e7:41:1e:4a:14:16:fa:32:b6:98: 27:2f:5a:e8:96:01:bb:1c:4b:84:40:13:0e:f5:4c:32:bd:9b: 63:58:d0:ae:5b:00:ca:6f:27:66:0f:5c:a2:e0:46:ed:76:c6: 6f:94:67:df:10:f8:5a:03:22:92:25:54:66:bf:8b:20:a5:5c: 1d:b2:59:98:a7:a3:4b:b0:05:75:6a:47:43:48:54:40:9f:0e: bd:93:eb:6f:c0:61:8a:2a:01:00:4c:28:0f:b2:41:59:da:f4: 6f:a6:fb:a1:16:12:4a:c8:28:34:93:14:f0:53:3a:3b:6e:58: 64:ca:c8:bb:37:12:74:cf:3e:f5:3a:b3:30:d5:35:00:dc:45: e5:78:c5:34:70:d4:8f:46:3e:7e:e9:c8:6f:a2:4e:64:52:d1: 7a:ed:3f:15:af:8d:a0:ef:10:99:d2:1a:f5:d4:d2:d0:4f:20: 0b:96:8b:86:75:e4:74:3b:f0:5d:65:0e:40:08:8b:65:f9:7a: ef:2c:9f:21:f2:20:63:0a:44:90:fb:d6:ff:d4:1b:42:32:bc: 9f:a7:b2:61:87:37:7d:dd:6d:41:ab:ee:25:d8:6a:08:66:ee: 79:bd:28:63:d8:f4:bc:fc:28:a3:50:84:8a:84:ab:df:3f:59: 99:4a:06:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYkxg0K338vgD+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk NTExNGEwMzAtODQyNC00MGQwLTkyMTMtZWRlMWZhYjFiMzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSjjxQ44GpkzNoThE/1lBtC7eu3RaA3id+NA p3AmQxdRmB1DR1J44GJaubCOEmIg9ZXO5bvTOk7eFkL+kI2znsEh9OtWAmYGj4Wp cSrswoFFbJ8cyFbjHQbNYnP1tjhGgkwg/8hy/dbwd2ZaArOwnTGkUJrWVHf7oS2X GWoYAhRap7pWHe6xPkHqY/mtXxj8KkxvZxP8FjDwG3gON2angIyscDKDE5HSoDP4 9gQiEGCrY55ui210nSW+YukzPOjDqy0yZDvErGoM1RpsT7xDJvIYKfiQD2YOunIR 9yNBcYrz9x/PbDMpUHpWu/iBS056DEuAEYksGduTZSGOwzFwMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQU8GUlgUdHJ1O1aX25B5k7Wo1JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvMzhlZWQwMzEtMmYyNi0z N2QyLTk0MzMtMzhlNDRlNDdlMjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxBsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALfOjc/gwglA50EeShQW+jK2mCcvWuiWAbscS4RAEw71TDK9m2NY0K5b AMpvJ2YPXKLgRu12xm+UZ98Q+FoDIpIlVGa/iyClXB2yWZino0uwBXVqR0NIVECf Dr2T62/AYYoqAQBMKA+yQVna9G+m+6EWEkrIKDSTFPBTOjtuWGTKyLs3EnTPPvU6 szDVNQDcReV4xTRw1I9GPn7pyG+iTmRS0XrtPxWvjaDvEJnSGvXU0tBPIAuWi4Z1 5HQ78F1lDkAIi2X5eu8snyHyIGMKRJD71v/UG0IyvJ+nsmGHN33dbUGr7iXYaghm 7nm9KGPY9Lz8KKNQhIqEq98/WZlKBgo= -----END CERTIFICATE-----Generated at Wed Nov 5 03:59:50 2025 by rpki-client