$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0b9465a6-291a-3f98-babc-e1ef82d141ad.roa File: 0b9465a6-291a-3f98-babc-e1ef82d141ad.roa (raw, json) Hash identifier: j9W7Ih3uD4OW8nidFK/Ai+7BhMID4dgMYhkXWPNfHTI= Subject key identifier: 80:64:9D:02:9F:E5:9D:27:A7:99:4B:B9:A4:AB:60:47:55:96:53:96 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B74F6EE8A4C004D64CBCDED80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0b9465a6-291a-3f98-babc-e1ef82d141ad.roa Signing time: Wed 08 Oct 2025 19:59:00 +0000 ROA not before: Wed 08 Oct 2025 19:59:00 +0000 ROA not after: Tue 06 Jan 2026 20:59:00 +0000 asID: 58369 IP address blocks: 38.225.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:f6:ee:8a:4c:00:4d:64:cb:cd:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 8 19:59:00 2025 GMT Not After : Jan 6 20:59:00 2026 GMT Subject: CN=326b81bf-aefb-420f-8425-31a5e86a021f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:06:b2:5d:9f:c3:f6:7e:ca:a8:b6:bf:c1:8a: 58:28:87:19:61:ca:d7:80:f1:e3:33:c2:40:95:1e: 69:f2:e7:87:4c:90:f8:75:60:19:d0:da:34:eb:00: 88:51:45:6f:90:01:bd:7d:4f:34:96:c1:7a:db:97: f9:07:61:b5:80:59:de:0e:9a:36:a4:2d:bd:87:a4: b4:58:69:db:19:6c:59:e5:01:4f:6a:36:59:5b:0c: 2d:6e:28:30:c1:17:f8:6c:d8:bb:99:98:9b:51:c2: 4c:b8:86:4e:f7:e3:f7:34:24:11:30:42:59:59:95: ca:ac:49:fd:8c:55:82:78:0d:8e:fa:a7:b3:d5:96: 2e:29:66:40:02:f0:ac:09:53:84:7f:71:81:79:bd: b8:c8:58:6d:02:b5:01:20:e3:b4:76:78:85:83:68: 67:3b:25:e3:98:e1:0e:c6:54:b0:b3:f3:ef:12:e6: 31:fa:4e:19:4b:39:88:31:bd:a3:43:4a:51:3c:62: a1:4b:78:e0:d1:88:5e:15:69:52:08:29:21:79:c8: 94:b3:22:1a:94:05:e9:ae:62:a3:3a:76:07:6f:67: e9:d9:13:13:fd:38:f1:53:df:67:fc:be:79:1c:7b: 10:ca:b4:3a:04:22:c0:c5:9d:8a:9a:01:36:3a:9e: af:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:64:9D:02:9F:E5:9D:27:A7:99:4B:B9:A4:AB:60:47:55:96:53:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0b9465a6-291a-3f98-babc-e1ef82d141ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.225.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:b6:19:97:c9:c5:29:01:d3:21:8a:ca:61:99:a6:37:ef:2e: 27:9f:32:60:56:47:2a:53:e2:8f:a3:18:a9:48:2e:79:0c:9f: 4b:40:f7:26:71:35:af:83:40:b1:59:cf:28:b8:53:4a:43:68: 70:82:b4:c6:65:ea:91:05:16:d0:12:dc:79:df:86:a2:ff:02: 45:92:2c:cc:a7:66:59:20:7a:1c:b7:0f:cd:07:a0:5c:19:a5: 04:57:7e:d0:57:a1:2f:4b:32:d2:93:2a:40:99:17:c3:9b:2b: 1f:06:95:13:bf:0f:98:86:1a:68:5f:fe:f9:59:a5:18:4d:88: 37:3e:b2:68:7f:08:e0:2e:e8:13:90:33:b8:39:52:10:2d:03: 13:da:c5:5c:40:83:1c:b9:b4:1b:08:c3:6f:9d:c6:92:e1:c8: 80:b9:50:14:f8:24:af:63:8f:83:53:df:87:01:59:a3:ed:b3: 53:cd:4a:d7:5c:da:30:2f:0f:9d:a8:27:90:1e:ae:cd:d1:9b: 2f:b5:37:30:dc:b1:9a:11:4a:5b:8e:db:81:fd:36:06:88:d9: 9e:d4:dc:62:cf:ed:92:7a:dd:57:fa:0c:1e:25:d1:25:2e:a1: 91:6d:e8:a8:d3:79:45:09:49:f9:bd:4d:b1:5d:79:f1:15:9e: 2c:a9:65:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt09u6KTABNZMvN7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAwODE5NTkwMFoXDTI2MDEwNjIwNTkwMFowLzEtMCsGA1UEAxMk MzI2YjgxYmYtYWVmYi00MjBmLTg0MjUtMzFhNWU4NmEwMjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQayXZ/D9n7KqLa/wYpYKIcZYcrXgPHjM8JA lR5p8ueHTJD4dWAZ0No06wCIUUVvkAG9fU80lsF625f5B2G1gFneDpo2pC29h6S0 WGnbGWxZ5QFPajZZWwwtbigwwRf4bNi7mZibUcJMuIZO9+P3NCQRMEJZWZXKrEn9 jFWCeA2O+qez1ZYuKWZAAvCsCVOEf3GBeb24yFhtArUBIOO0dniFg2hnOyXjmOEO xlSws/PvEuYx+k4ZSzmIMb2jQ0pRPGKhS3jg0YheFWlSCCkheciUsyIalAXprmKj OnYHb2fp2RMT/TjxU99n/L55HHsQyrQ6BCLAxZ2KmgE2Op6v5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBknQKf5Z0np5lLuaSrYEdVllOWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMGI5NDY1YTYtMjkxYS0z Zjk4LWJhYmMtZTFlZjgyZDE0MWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJuF4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAu2GZfJxSkB0yGKymGZpjfvLiefMmBWRypT4o+jGKlILnkMn0tA9yZx Na+DQLFZzyi4U0pDaHCCtMZl6pEFFtAS3HnfhqL/AkWSLMynZlkgehy3D80HoFwZ pQRXftBXoS9LMtKTKkCZF8ObKx8GlRO/D5iGGmhf/vlZpRhNiDc+smh/COAu6BOQ M7g5UhAtAxPaxVxAgxy5tBsIw2+dxpLhyIC5UBT4JK9jj4NT34cBWaPts1PNStdc 2jAvD52oJ5Aers3Rmy+1NzDcsZoRSluO24H9NgaI2Z7U3GLP7ZJ63Vf6DB4l0SUu oZFt6KjTeUUJSfm9TbFdefEVniypZa4= -----END CERTIFICATE-----Generated at Tue Nov 4 22:07:34 2025 by rpki-client