$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1271aa39-6b6a-39a9-9818-a7a497734b16.roa File: 1271aa39-6b6a-39a9-9818-a7a497734b16.roa (raw, json) Hash identifier: Z0cfFh4A6TSkid5rFLbph6QPBIztu+sjWXXbFpwlbSI= Subject key identifier: 5F:97:C9:9C:7D:5E:93:61:54:30:EE:73:9D:3B:B4:06:27:BC:EE:4C Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B5E89EBDC95E92C33CC5E3A80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1271aa39-6b6a-39a9-9818-a7a497734b16.roa Signing time: Tue 30 Sep 2025 19:11:35 +0000 ROA not before: Tue 30 Sep 2025 19:11:35 +0000 ROA not after: Mon 29 Dec 2025 20:11:35 +0000 asID: 0 IP address blocks: 38.95.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5e:89:eb:dc:95:e9:2c:33:cc:5e:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 30 19:11:35 2025 GMT Not After : Dec 29 20:11:35 2025 GMT Subject: CN=67f2fbfa-da92-404d-85ea-0ecd00226a8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:66:86:ad:f1:2a:09:db:3c:5b:a9:91:e8:f3: 46:b8:81:8b:09:ec:3c:67:be:e4:08:d8:e9:8e:58: 9b:28:5f:20:21:dd:89:cd:65:c6:16:9b:f0:bd:f0: e5:4c:1f:9d:ad:e2:2e:04:c6:bd:37:95:9c:23:89: 24:0b:43:4b:d3:04:0a:a9:ff:2a:31:b1:6d:08:62: c1:40:13:b5:91:84:89:37:c9:6d:b4:de:42:bd:e3: a7:44:d8:29:d8:1a:b1:68:3e:f4:55:be:0c:dc:f3: f9:6c:03:e6:7a:5c:eb:26:04:f0:a6:52:b3:bb:b4: 18:dc:3e:89:1d:8a:98:e3:5d:ea:aa:75:2d:92:8f: bb:e4:f6:3d:4f:0b:a8:30:f2:60:97:f9:1c:82:66: 6a:13:a3:31:5d:45:fc:db:cb:18:07:2b:13:07:ba: 85:32:e1:f3:7b:35:db:05:dc:48:51:ad:7e:44:23: 66:f9:cc:5a:55:d0:a2:61:4f:11:19:f3:6f:ca:35: e8:dd:21:87:80:97:42:80:ef:b7:3f:f3:ce:32:04: bf:34:20:81:86:79:9f:04:95:f1:08:45:27:33:06: b4:27:25:1a:ef:ee:a8:66:68:7f:73:0c:e0:c4:a4: 4b:82:a4:f6:3c:35:81:0d:94:06:f4:32:03:a1:39: ea:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:97:C9:9C:7D:5E:93:61:54:30:EE:73:9D:3B:B4:06:27:BC:EE:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1271aa39-6b6a-39a9-9818-a7a497734b16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.95.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:20:ee:66:a0:b8:dd:4e:c2:84:11:c1:27:13:cb:b0:bb:bd: a0:fe:73:11:cd:11:20:d8:8b:52:1a:bc:38:48:92:cc:79:b4: f9:f8:58:97:9f:f7:1e:ad:9f:ab:74:b7:7f:1e:1f:6c:09:ad: ec:51:a4:63:7a:07:1b:e4:7d:ad:b7:a2:7e:17:53:7b:c0:53: 1c:48:24:6d:a2:5c:62:8c:e1:26:59:01:36:6e:98:e8:d2:ec: 5c:8b:b9:d1:6a:44:d9:7f:cf:19:b4:b0:76:5d:5a:ef:64:39: 0e:d8:fe:cd:c2:da:c5:b2:7c:88:c8:2b:58:3e:c3:1b:6e:4f: 98:0e:e7:b7:c1:33:4a:b1:36:73:98:2a:1e:ee:81:da:c1:73: 90:12:e7:54:15:ea:21:1c:b2:79:a8:14:9d:b3:5c:ae:77:ed: c8:0c:a1:67:d2:53:ff:f5:66:0e:b2:79:bd:d6:a2:23:32:d8: 82:44:c2:80:81:8d:01:a4:a9:f1:72:4a:46:99:92:cd:20:68: 56:6c:a1:c6:56:94:a3:34:27:8e:1f:c7:da:7d:78:97:19:1a: 66:10:c4:e3:a5:0f:90:16:c6:f6:ba:97:ed:3a:b4:a6:27:de: cf:77:0d:34:28:81:d9:f5:b8:24:37:44:b2:7b:40:69:9b:e1: d7:d8:c9:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEteievcleksM8xeOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MDkzMDE5MTEzNVoXDTI1MTIyOTIwMTEzNVowLzEtMCsGA1UEAxMk NjdmMmZiZmEtZGE5Mi00MDRkLTg1ZWEtMGVjZDAwMjI2YThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmaGrfEqCds8W6mR6PNGuIGLCew8Z77kCNjp jlibKF8gId2JzWXGFpvwvfDlTB+dreIuBMa9N5WcI4kkC0NL0wQKqf8qMbFtCGLB QBO1kYSJN8lttN5CveOnRNgp2BqxaD70Vb4M3PP5bAPmelzrJgTwplKzu7QY3D6J HYqY413qqnUtko+75PY9TwuoMPJgl/kcgmZqE6MxXUX828sYBysTB7qFMuHzezXb BdxIUa1+RCNm+cxaVdCiYU8RGfNvyjXo3SGHgJdCgO+3P/POMgS/NCCBhnmfBJXx CEUnMwa0JyUa7+6oZmh/cwzgxKRLgqT2PDWBDZQG9DIDoTnqUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+XyZx9XpNhVDDuc507tAYnvO5MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMTI3MWFhMzktNmI2YS0z OWE5LTk4MTgtYTdhNDk3NzM0YjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJl8cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkg7maguN1OwoQRwScTy7C7vaD+cxHNESDYi1IavDhIksx5tPn4WJef 9x6tn6t0t38eH2wJrexRpGN6Bxvkfa23on4XU3vAUxxIJG2iXGKM4SZZATZumOjS 7FyLudFqRNl/zxm0sHZdWu9kOQ7Y/s3C2sWyfIjIK1g+wxtuT5gO57fBM0qxNnOY Kh7ugdrBc5AS51QV6iEcsnmoFJ2zXK537cgMoWfSU//1Zg6yeb3WoiMy2IJEwoCB jQGkqfFySkaZks0gaFZsocZWlKM0J44fx9p9eJcZGmYQxOOlD5AWxva6l+06tKYn 3s93DTQogdn1uCQ3RLJ7QGmb4dfYyfI= -----END CERTIFICATE-----Generated at Wed Nov 5 01:45:43 2025 by rpki-client