$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/38ce5e9f-0136-3c2e-a301-b3f29126f64c.roa File: 38ce5e9f-0136-3c2e-a301-b3f29126f64c.roa (raw, json) Hash identifier: itHKoub8ox0KNW62oyo/pil12+iFIAv3M9TCS6MBaKs= Subject key identifier: 10:95:77:CB:B5:D8:5F:6B:9B:5C:3E:32:CB:34:B9:A3:10:8C:9B:CF Certificate issuer: /CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2 Certificate serial: 010D0C9F4328584BAA97A834033DBA31F1269400 Authority key identifier: 49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/38ce5e9f-0136-3c2e-a301-b3f29126f64c.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 63008 IP address blocks: 23.169.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:a8:34:03:3d:ba:31:f1:26:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=5f9310c5-bd0a-4b19-a026-21fe802bbaad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e6:bc:8e:3b:3c:bb:1d:87:ca:30:43:67:ba: 06:8f:b8:20:d0:58:aa:d0:7a:72:75:8d:70:39:f3: 17:29:d7:b2:b8:b5:de:02:2a:41:2c:1d:e2:fd:82: 9c:2b:eb:96:39:4b:83:f5:ce:1b:43:49:c4:d1:ce: fd:8b:42:89:f6:35:50:9c:79:9f:44:e3:cd:f1:e7: d1:ec:f3:36:d8:dd:19:c7:9c:5e:37:55:4b:49:ff: 9b:59:dc:58:a4:76:2f:b6:42:6f:74:b0:2a:b1:48: 0f:16:3e:a1:66:71:93:70:cf:27:c0:fc:e9:76:d7: e0:57:dd:13:ac:be:15:87:41:1f:e5:75:59:83:3d: 67:1b:b9:5b:47:12:b7:6b:3b:84:02:c8:27:61:e7: 4b:0e:dc:2f:19:67:0d:ae:c7:2f:e0:bf:bb:40:e5: a4:09:f5:31:ac:c6:4c:a5:33:dc:87:f6:4b:af:21: 43:19:45:f7:f4:b0:1f:a7:ce:c9:24:a1:00:ed:6c: 71:2c:e2:f9:6c:2e:e2:ff:b9:aa:a5:87:5c:fb:49: 0f:fa:e4:96:32:84:bc:3b:03:29:84:17:ba:23:88: ff:69:1b:d3:5d:d3:d1:26:22:57:49:92:57:64:2c: 9c:cf:63:7e:ad:49:21:fa:3b:24:bf:96:f2:05:41: e2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:95:77:CB:B5:D8:5F:6B:9B:5C:3E:32:CB:34:B9:A3:10:8C:9B:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/38ce5e9f-0136-3c2e-a301-b3f29126f64c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl X509v3 Authority Key Identifier: keyid:49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer sbgp-ipAddrBlock: critical IPv4: 23.169.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:bc:76:f5:17:c4:a0:08:fe:0b:d8:76:e0:50:54:c8:a7:c1: 32:8e:ad:1b:16:36:f6:ce:38:e6:90:93:5b:d0:34:c7:11:c0: 1d:85:cb:4f:da:c4:3b:dd:fc:86:1a:72:cd:7d:8e:18:b0:f3: 1a:e8:a6:52:4d:11:19:56:81:8f:c0:e5:ce:3e:df:2c:ee:ae: f9:17:cc:2c:eb:48:c4:c6:9c:57:b9:41:75:20:07:2a:4c:33: 02:a2:83:5b:a3:3f:01:d2:0f:9e:04:4b:89:08:07:10:df:dc: c0:c7:4c:85:65:a9:0a:2d:a8:97:3e:f8:98:c7:5f:a4:77:1e: 39:54:76:9a:1e:fb:b0:84:e6:ca:ee:84:23:ea:7f:a4:69:6a: 42:19:3e:4e:59:80:67:3d:8b:9b:f6:45:e1:3a:1a:8c:3a:c1: b3:2e:c6:de:f7:03:f2:47:64:18:d6:45:d3:ea:0a:9e:c2:f2: df:a7:4d:7b:64:0d:e4:b4:a0:64:59:a8:45:0f:c9:8e:19:5a: e7:0f:0d:71:8e:a5:02:86:1b:35:d7:c4:00:e2:a0:89:50:69: f5:b3:43:31:7c:72:2f:32:d8:01:c9:9f:40:d9:47:58:ee:19: 62:f3:0a:c4:8a:5b:1f:3b:56:5a:97:c7:a1:f3:25:b0:ed:b4: fc:3c:25:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql6g0Az26MfEmlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyMjc5ZDgtMmVkNS00NzQ1LTkyMzEtOWRiZDEwYmJi MWEyMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk NWY5MzEwYzUtYmQwYS00YjE5LWEwMjYtMjFmZTgwMmJiYWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOa8jjs8ux2HyjBDZ7oGj7gg0Fiq0HpydY1w OfMXKdeyuLXeAipBLB3i/YKcK+uWOUuD9c4bQ0nE0c79i0KJ9jVQnHmfROPN8efR 7PM22N0Zx5xeN1VLSf+bWdxYpHYvtkJvdLAqsUgPFj6hZnGTcM8nwPzpdtfgV90T rL4Vh0Ef5XVZgz1nG7lbRxK3azuEAsgnYedLDtwvGWcNrscv4L+7QOWkCfUxrMZM pTPch/ZLryFDGUX39LAfp87JJKEA7WxxLOL5bC7i/7mqpYdc+0kP+uSWMoS8OwMp hBe6I4j/aRvTXdPRJiJXSZJXZCycz2N+rUkh+jskv5byBUHiJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCVd8u12F9rm1w+Mss0uaMQjJvPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDIy NzlkOC0yZWQ1LTQ3NDUtOTIzMS05ZGJkMTBiYmIxYTIvMzhjZTVlOWYtMDEzNi0z YzJlLWEzMDEtYjNmMjkxMjZmNjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2QyMjc5ZDgtMmVkNS00NzQ1LTky MzEtOWRiZDEwYmJiMWEyLzNkMjI3OWQ4LTJlZDUtNDc0NS05MjMxLTlkYmQxMGJi YjFhMi5jcmwwHwYDVR0jBBgwFoAUSb7JmMg+rj/d6ly9Ou3KOIKBHm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDIyNzlkOC0yZWQ1LTQ3NDUtOTIzMS05ZGJk MTBiYmIxYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6mpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEi8dvUXxKAI/gvYduBQVMinwTKOrRsWNvbOOOaQk1vQNMcRwB2Fy0/a xDvd/IYacs19jhiw8xroplJNERlWgY/A5c4+3yzurvkXzCzrSMTGnFe5QXUgBypM MwKig1ujPwHSD54ES4kIBxDf3MDHTIVlqQotqJc++JjHX6R3HjlUdpoe+7CE5sru hCPqf6RpakIZPk5ZgGc9i5v2ReE6Gow6wbMuxt73A/JHZBjWRdPqCp7C8t+nTXtk DeS0oGRZqEUPyY4ZWucPDXGOpQKGGzXXxADioIlQafWzQzF8ci8y2AHJn0DZR1ju GWLzCsSKWx87VlqXx6HzJbDttPw8JX0= -----END CERTIFICATE-----Generated at Wed Nov 5 04:32:46 2025 by rpki-client