$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/13fa1adc-6b66-3855-8768-19563c3e8e10.roa File: 13fa1adc-6b66-3855-8768-19563c3e8e10.roa (raw, json) Hash identifier: lwoeEsseGR+dZN8ic8D5Z0OsLYAktvNNDvgIQAX6BKo= Subject key identifier: 06:9B:DF:DC:16:BA:C2:89:65:7D:80:E0:11:96:E0:0D:01:29:14:A5 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B60B56172552F49E50ABA91F0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/13fa1adc-6b66-3855-8768-19563c3e8e10.roa Signing time: Wed 01 Oct 2025 13:50:46 +0000 ROA not before: Wed 01 Oct 2025 13:50:46 +0000 ROA not after: Tue 30 Dec 2025 14:50:46 +0000 asID: 25980 IP address blocks: 38.123.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:b5:61:72:55:2f:49:e5:0a:ba:91:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 1 13:50:46 2025 GMT Not After : Dec 30 14:50:46 2025 GMT Subject: CN=7cf7b93a-ed53-45ee-8227-123f59f9eb70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fc:4b:f0:72:e3:d6:e6:e2:e5:cb:5c:58:db: 75:72:d4:cb:ff:6c:74:84:5a:d5:12:67:15:50:50: 2a:9d:73:b4:9a:71:be:a6:db:1e:fe:71:1e:95:e2: 45:b9:ed:87:b5:00:79:92:28:c1:73:38:17:81:e5: a7:5a:eb:72:4a:16:25:6f:b2:87:dc:0c:77:6e:f4: e0:2b:d0:30:69:47:d0:b3:1e:3d:2d:c2:e3:8b:f5: 0d:ba:38:f1:03:3d:2b:42:41:e5:f6:83:0e:61:c2: 48:06:4c:6f:42:c3:6e:ac:58:f5:62:34:8f:a3:03: be:20:b1:fb:0b:2e:1c:28:1c:cb:4f:7f:fe:2e:fc: 4b:63:c0:d3:be:2b:cd:9b:a2:0c:05:52:56:9f:7c: 67:3a:da:ba:fb:6d:3f:d1:09:84:b2:86:d7:94:de: dd:0d:7c:99:ac:02:28:66:4e:0b:aa:14:e0:fd:c8: e1:0c:21:86:40:e0:51:d5:ee:5b:ba:7a:15:d8:9e: b7:d0:62:d1:a0:51:0f:3d:77:c8:89:9d:7d:22:ed: af:5a:31:df:df:02:b5:72:98:b8:f7:a6:8c:3b:60: c3:35:98:75:5f:e6:63:f1:e3:9a:f7:10:ea:7a:14: b3:ac:c6:f4:94:a2:55:9e:e4:26:a7:c7:0d:6a:38: 0e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:9B:DF:DC:16:BA:C2:89:65:7D:80:E0:11:96:E0:0D:01:29:14:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/13fa1adc-6b66-3855-8768-19563c3e8e10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.123.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:87:ac:99:ad:a0:d8:8b:4b:23:f9:ec:0c:e7:c0:0f:a3:8f: 8c:ff:f2:86:e5:c6:a3:93:53:e0:07:44:47:5d:47:a7:dd:2b: f8:82:0c:d7:73:a0:6a:e4:8c:41:2a:08:68:b9:e5:8a:ca:b2: 92:21:dd:21:d4:2b:ba:8a:17:d1:cd:4a:b6:32:9d:af:67:0d: ca:ef:da:81:b0:d6:d0:99:9e:ad:fc:23:ef:0b:80:5b:20:7e: 5a:6d:0a:d3:5a:c9:a5:69:fe:d7:ed:f7:1b:48:2d:ea:a9:96: 17:25:ac:ce:1c:4a:86:12:84:ad:c6:d0:cb:52:a2:7e:44:10: a7:10:c2:9f:52:4a:9d:a3:e0:6e:5c:9e:a1:8f:46:17:e3:60: 9d:40:63:e7:2a:ee:d8:d6:93:63:df:ab:42:d4:8e:62:77:a4: 79:97:60:df:3a:6e:d9:a2:9c:e3:e7:e9:15:e6:83:9f:a1:76: c2:dc:57:40:84:99:e6:27:84:b2:f2:23:ae:9a:1c:fe:b1:e9: a0:ef:6a:41:7c:27:06:1f:27:e9:08:51:87:d8:f1:a0:4c:3f: bc:2d:f8:f8:50:9a:75:d2:5e:31:a1:62:ff:50:ee:a6:1d:53: 49:a9:fe:3a:25:62:03:4b:ce:8a:dd:a1:18:4c:bf:8f:4d:b4: 84:32:c7:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgtWFyVS9J5Qq6kfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAwMTEzNTA0NloXDTI1MTIzMDE0NTA0NlowLzEtMCsGA1UEAxMk N2NmN2I5M2EtZWQ1My00NWVlLTgyMjctMTIzZjU5ZjllYjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/xL8HLj1ubi5ctcWNt1ctTL/2x0hFrVEmcV UFAqnXO0mnG+ptse/nEeleJFue2HtQB5kijBczgXgeWnWutyShYlb7KH3Ax3bvTg K9AwaUfQsx49LcLji/UNujjxAz0rQkHl9oMOYcJIBkxvQsNurFj1YjSPowO+ILH7 Cy4cKBzLT3/+LvxLY8DTvivNm6IMBVJWn3xnOtq6+20/0QmEsobXlN7dDXyZrAIo Zk4LqhTg/cjhDCGGQOBR1e5bunoV2J630GLRoFEPPXfIiZ19Iu2vWjHf3wK1cpi4 96aMO2DDNZh1X+Zj8eOa9xDqehSzrMb0lKJVnuQmp8cNajgOLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAab39wWusKJZX2A4BGW4A0BKRSlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMTNmYTFhZGMtNmI2Ni0z ODU1LTg3NjgtMTk1NjNjM2U4ZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJnv2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKHrJmtoNiLSyP57AznwA+jj4z/8oblxqOTU+AHREddR6fdK/iCDNdz oGrkjEEqCGi55YrKspIh3SHUK7qKF9HNSrYyna9nDcrv2oGw1tCZnq38I+8LgFsg flptCtNayaVp/tft9xtILeqplhclrM4cSoYShK3G0MtSon5EEKcQwp9SSp2j4G5c nqGPRhfjYJ1AY+cq7tjWk2Pfq0LUjmJ3pHmXYN86btminOPn6RXmg5+hdsLcV0CE meYnhLLyI66aHP6x6aDvakF8JwYfJ+kIUYfY8aBMP7wt+PhQmnXSXjGhYv9Q7qYd U0mp/jolYgNLzordoRhMv49NtIQyxxo= -----END CERTIFICATE-----Generated at Tue Nov 4 22:07:17 2025 by rpki-client