$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0cd232a1-ed80-3fb7-890d-50412048ebcc.roa File: 0cd232a1-ed80-3fb7-890d-50412048ebcc.roa (raw, json) Hash identifier: E9C9JMI5EaR1qfPvQJcHl83cf6ZAOVxWRT5fLu2b8X0= Subject key identifier: 96:04:2F:5E:1D:12:68:D1:CD:B4:C1:9F:D2:F2:3C:5C:EB:2B:CF:A8 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B9C40FB74E9751D3502AA9600 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0cd232a1-ed80-3fb7-890d-50412048ebcc.roa Signing time: Wed 22 Oct 2025 21:44:44 +0000 ROA not before: Wed 22 Oct 2025 21:44:44 +0000 ROA not after: Tue 20 Jan 2026 22:44:44 +0000 asID: 271909 IP address blocks: 38.3.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:40:fb:74:e9:75:1d:35:02:aa:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 22 21:44:44 2025 GMT Not After : Jan 20 22:44:44 2026 GMT Subject: CN=ff3ce39e-0c72-4176-9cfd-86a44cf77ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:83:17:33:53:26:5b:d3:c0:c3:c9:0c:a8:69: ab:7f:56:ce:32:25:6a:72:37:a3:38:8c:a2:db:41: 55:d2:3d:49:ac:74:6b:33:ba:c5:e4:a6:40:8b:be: fc:1e:8a:2f:5d:b8:c9:21:b6:5d:0e:90:5a:3f:9b: cb:fd:c3:2e:c1:7d:0d:a9:44:78:42:0e:6c:71:42: ed:2d:a9:cb:c3:64:2d:37:2f:42:3e:1d:f0:2f:ea: a2:c6:e5:8c:ac:80:24:7d:9a:07:3f:c6:ef:77:7e: 25:13:7b:00:5f:96:47:0a:75:7f:de:55:6f:ee:17: a6:40:35:ff:df:94:92:85:a7:48:01:b0:0d:be:30: 87:50:7a:51:84:3a:96:52:05:81:bb:8d:7a:7e:8d: f8:8c:6a:d4:b2:f5:6c:57:85:6d:c8:ae:5d:38:45: 33:21:b3:9c:61:1b:9e:61:5c:c3:e5:db:7e:3a:ea: fe:f5:9f:a5:05:b9:b5:dc:e6:f7:21:87:b0:b2:23: 6a:66:44:76:7b:60:2b:cf:dd:26:65:3e:9c:95:79: 4e:e3:47:1a:fe:8a:7a:91:cc:8f:0e:f0:d5:02:7f: b6:ac:c7:b7:c1:1a:8c:de:58:76:c8:f6:3c:ec:b0: f8:bd:a1:f2:ea:8e:22:f6:6b:f9:b7:83:bf:8e:70: 75:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:04:2F:5E:1D:12:68:D1:CD:B4:C1:9F:D2:F2:3C:5C:EB:2B:CF:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0cd232a1-ed80-3fb7-890d-50412048ebcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.3.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:5e:9b:84:c3:c5:4c:5c:dd:ee:d9:ed:9b:43:af:4a:73:ce: ae:b6:59:53:0e:c2:13:52:d7:f6:7a:0d:7e:a2:d6:3a:35:26: ca:01:3c:b3:e3:8b:d1:07:53:13:36:a3:70:b9:a5:5f:20:3e: 6c:38:6a:28:de:c1:e3:e7:43:83:df:1f:11:4e:6d:a8:3e:f7: a9:9c:c6:97:9b:d3:dd:d3:54:87:b3:58:78:57:33:67:82:33: e4:89:e8:49:82:94:2d:1e:2b:bf:a7:38:aa:a0:b7:89:fa:30: a2:5e:3b:a1:60:f4:04:27:a6:1d:fe:75:85:31:e0:25:79:73: 8f:7b:30:2f:83:48:71:a6:09:66:40:4f:dd:5f:1e:4b:c8:87: d9:05:55:d9:13:46:f0:77:fe:0c:fd:70:2b:a5:ab:33:39:6c: 04:2f:d6:47:d8:8a:ef:f7:e4:e0:63:36:2e:73:78:f0:46:18: 6a:5f:67:66:ab:d2:9a:85:2f:ba:52:a9:5d:76:d3:c5:7d:30: c5:64:ad:05:78:f0:32:f5:b9:51:02:d7:44:98:ea:49:d6:f8: e5:7a:5a:bc:57:ec:32:87:d7:0c:96:71:f0:27:f6:76:3c:0e: 5a:55:4e:1c:5f:02:8f:75:d8:0b:e0:c7:fd:3a:3c:bc:f0:ef: f2:86:2d:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEucQPt06XUdNQKqlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAyMjIxNDQ0NFoXDTI2MDEyMDIyNDQ0NFowLzEtMCsGA1UEAxMk ZmYzY2UzOWUtMGM3Mi00MTc2LTljZmQtODZhNDRjZjc3ZWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYMXM1MmW9PAw8kMqGmrf1bOMiVqcjejOIyi 20FV0j1JrHRrM7rF5KZAi778HoovXbjJIbZdDpBaP5vL/cMuwX0NqUR4Qg5scULt LanLw2QtNy9CPh3wL+qixuWMrIAkfZoHP8bvd34lE3sAX5ZHCnV/3lVv7hemQDX/ 35SShadIAbANvjCHUHpRhDqWUgWBu416fo34jGrUsvVsV4VtyK5dOEUzIbOcYRue YVzD5dt+Our+9Z+lBbm13Ob3IYewsiNqZkR2e2Arz90mZT6clXlO40ca/op6kcyP DvDVAn+2rMe3wRqM3lh2yPY87LD4vaHy6o4i9mv5t4O/jnB1nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYEL14dEmjRzbTBn9LyPFzrK8+oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMGNkMjMyYTEtZWQ4MC0z ZmI3LTg5MGQtNTA0MTIwNDhlYmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEJgPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMJem4TDxUxc3e7Z7ZtDr0pzzq62WVMOwhNS1/Z6DX6i1jo1JsoBPLPj i9EHUxM2o3C5pV8gPmw4aijewePnQ4PfHxFObag+96mcxpeb093TVIezWHhXM2eC M+SJ6EmClC0eK7+nOKqgt4n6MKJeO6Fg9AQnph3+dYUx4CV5c497MC+DSHGmCWZA T91fHkvIh9kFVdkTRvB3/gz9cCulqzM5bAQv1kfYiu/35OBjNi5zePBGGGpfZ2ar 0pqFL7pSqV1208V9MMVkrQV48DL1uVEC10SY6knW+OV6WrxX7DKH1wyWcfAn9nY8 DlpVThxfAo912Avgx/06PLzw7/KGLaQ= -----END CERTIFICATE-----Generated at Tue Nov 4 22:07:27 2025 by rpki-client