$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0bed0f15-568b-3236-aae8-9eed5e3340b4.roa File: 0bed0f15-568b-3236-aae8-9eed5e3340b4.roa (raw, json) Hash identifier: XYdFEqt5v800EDz1IVnf0B52vKFwTkslc0xDo3j2WQg= Subject key identifier: 8D:8A:18:DD:79:29:D7:E9:30:1B:3F:4B:D3:61:59:1D:89:F9:E0:33 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B7185260354880544A1D52340 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0bed0f15-568b-3236-aae8-9eed5e3340b4.roa Signing time: Tue 07 Oct 2025 14:22:19 +0000 ROA not before: Tue 07 Oct 2025 14:22:19 +0000 ROA not after: Mon 05 Jan 2026 15:22:19 +0000 asID: 274720 IP address blocks: 38.52.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:85:26:03:54:88:05:44:a1:d5:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 7 14:22:19 2025 GMT Not After : Jan 5 15:22:19 2026 GMT Subject: CN=ec81c8ce-5d9e-4898-b664-2590c3f999ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:38:4e:34:43:78:59:be:6e:64:c6:56:e3:99: 62:14:43:c3:c5:e3:8c:e8:d1:3d:dd:bf:9d:a0:da: ef:ea:03:45:fc:cd:fb:c7:a0:ea:fc:62:4c:5e:21: c8:c2:da:e5:72:fc:7b:83:f6:a5:f4:0d:1d:d4:c5: e3:7f:45:1f:e3:93:90:34:ea:48:59:c1:a6:db:e3: 51:ed:42:3c:e4:d6:38:5c:4f:7f:25:04:5c:c6:08: de:5a:a0:69:7d:0d:06:13:58:c9:48:91:13:19:aa: 77:89:d2:63:df:e5:52:77:cc:fa:73:9b:99:00:2e: 74:31:89:d3:87:aa:da:ca:3d:22:0a:5a:6b:37:d3: 90:1e:b9:0b:4e:71:74:6d:3f:55:37:d7:94:9d:13: 4f:fa:c5:18:54:26:b7:78:2c:ca:6b:cd:21:c9:c1: 6c:a2:44:1b:e9:cc:7a:d9:ba:35:a5:62:a1:27:3c: 9c:f2:f2:fa:da:dc:bd:04:c1:78:cc:97:5c:34:15: 6b:d0:32:e5:8a:14:d9:dd:45:ad:15:8a:ec:73:e3: 22:df:24:f1:29:17:81:a6:16:8a:9a:77:29:ca:58: c7:80:19:65:c3:c4:e4:28:71:64:98:c8:8c:a5:fd: 39:99:66:b8:bb:0d:86:60:e5:af:30:9b:c0:c1:f9: db:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:8A:18:DD:79:29:D7:E9:30:1B:3F:4B:D3:61:59:1D:89:F9:E0:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0bed0f15-568b-3236-aae8-9eed5e3340b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.52.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:59:32:00:c2:3a:74:16:55:40:54:ac:53:64:cb:03:9d:31: 76:9a:0b:73:19:c2:39:18:f5:e1:9c:12:ef:1a:ba:f4:1f:8f: c5:cf:84:d7:01:77:b0:d3:46:e5:7c:88:c9:a2:f1:c1:2c:1f: 46:7c:2b:bc:aa:e2:23:e2:00:69:7a:3e:ce:79:4c:58:59:63: 1a:f3:2c:33:bb:e4:73:99:05:0d:d0:a8:14:be:13:eb:cb:35: cf:f1:74:38:31:79:49:5f:25:72:88:6a:35:8e:98:13:03:32: d5:0c:f7:b8:06:e4:43:c7:ca:bb:35:40:e3:ad:8f:9e:82:78: 36:a9:4f:0a:b7:c7:18:25:2a:ea:5f:ba:ec:12:9d:93:95:77: e0:ca:24:4f:51:9b:5a:12:06:f4:5b:f3:5c:71:e1:36:de:d1: 18:9c:39:af:3e:61:0e:ac:52:50:2a:54:00:58:ae:8b:88:0f: 51:2f:ed:99:6a:ea:94:c2:da:a2:f7:f1:5e:25:9c:23:5c:2c: 36:2b:62:c1:d2:7b:2a:02:52:e5:8a:d1:a6:4b:cd:8c:fe:c9: 7a:d5:e1:09:ed:6a:73:6b:53:71:26:99:11:4c:60:92:ce:e8: 9b:9a:d3:23:f1:9f:f7:94:68:09:04:e1:dd:64:73:f6:25:4e: d6:a8:1d:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxhSYDVIgFRKHVI0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAwNzE0MjIxOVoXDTI2MDEwNTE1MjIxOVowLzEtMCsGA1UEAxMk ZWM4MWM4Y2UtNWQ5ZS00ODk4LWI2NjQtMjU5MGMzZjk5OWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjhONEN4Wb5uZMZW45liFEPDxeOM6NE93b+d oNrv6gNF/M37x6Dq/GJMXiHIwtrlcvx7g/al9A0d1MXjf0Uf45OQNOpIWcGm2+NR 7UI85NY4XE9/JQRcxgjeWqBpfQ0GE1jJSJETGap3idJj3+VSd8z6c5uZAC50MYnT h6rayj0iClprN9OQHrkLTnF0bT9VN9eUnRNP+sUYVCa3eCzKa80hycFsokQb6cx6 2bo1pWKhJzyc8vL62ty9BMF4zJdcNBVr0DLlihTZ3UWtFYrsc+Mi3yTxKReBphaK mncpyljHgBllw8TkKHFkmMiMpf05mWa4uw2GYOWvMJvAwfnbSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2KGN15KdfpMBs/S9NhWR2J+eAzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMGJlZDBmMTUtNTY4Yi0z MjM2LWFhZTgtOWVlZDVlMzM0MGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJjSWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL9ZMgDCOnQWVUBUrFNkywOdMXaaC3MZwjkY9eGcEu8auvQfj8XPhNcB d7DTRuV8iMmi8cEsH0Z8K7yq4iPiAGl6Ps55TFhZYxrzLDO75HOZBQ3QqBS+E+vL Nc/xdDgxeUlfJXKIajWOmBMDMtUM97gG5EPHyrs1QOOtj56CeDapTwq3xxglKupf uuwSnZOVd+DKJE9Rm1oSBvRb81xx4Tbe0RicOa8+YQ6sUlAqVABYrouID1Ev7Zlq 6pTC2qL38V4lnCNcLDYrYsHSeyoCUuWK0aZLzYz+yXrV4QntanNrU3EmmRFMYJLO 6Jua0yPxn/eUaAkE4d1kc/YlTtaoHRg= -----END CERTIFICATE-----Generated at Wed Nov 5 01:07:08 2025 by rpki-client