$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/18076b54-1d16-36b3-ab93-3a8e9924895f.roa File: 18076b54-1d16-36b3-ab93-3a8e9924895f.roa (raw, json) Hash identifier: Xykygf1lkeE2PJzIb+4ZuBtIys1bX0R9gt3Tu/qZO8c= Subject key identifier: 17:2C:A3:39:70:9E:63:88:9D:AF:D1:6D:AE:5F:CE:6C:E7:77:8C:05 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B95F278114EF0E57C66769D80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/18076b54-1d16-36b3-ab93-3a8e9924895f.roa Signing time: Mon 20 Oct 2025 15:31:41 +0000 ROA not before: Mon 20 Oct 2025 15:31:41 +0000 ROA not after: Sun 18 Jan 2026 16:31:41 +0000 asID: 273138 IP address blocks: 38.224.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:f2:78:11:4e:f0:e5:7c:66:76:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 20 15:31:41 2025 GMT Not After : Jan 18 16:31:41 2026 GMT Subject: CN=80ad0e91-630f-45d0-aa4d-9463d1de9d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b9:75:0b:52:c5:78:53:2c:95:2c:30:f1:01: 2c:01:d1:95:0d:36:5b:cf:87:c4:ae:3f:23:3e:26: 47:c6:74:d2:e0:fa:a2:df:7f:56:ed:9c:be:5c:40: 7f:b0:5f:7d:e1:63:44:dc:49:3c:9f:cb:3d:54:65: 03:4a:aa:43:ac:2e:95:c9:21:e6:4a:b2:ec:19:6f: 46:55:05:06:3a:96:f9:f4:82:74:41:02:76:99:ac: 5a:80:6b:66:73:e6:02:e3:c6:a5:98:79:8d:a5:a4: e6:1b:0b:0b:ad:95:4f:e6:a1:d7:87:d5:92:ae:32: 95:7a:af:14:d7:e9:59:a2:74:42:14:98:69:1d:4c: 9b:63:8f:04:1d:94:d2:e2:51:37:9c:92:7e:df:ba: 2b:af:b6:d9:b0:a7:5f:44:90:10:cc:51:cc:ef:d6: 32:14:02:6b:fc:d4:f3:bb:47:22:fa:9a:58:32:d6: 27:00:c6:fc:a8:4b:56:2c:43:a9:af:0a:e9:99:a6: 89:14:43:52:69:9c:a2:99:4e:d4:cf:11:e1:ed:96: e1:3d:87:9e:9f:b4:0a:c6:a5:74:71:70:a1:14:b8: 68:07:e2:fe:d6:ec:0c:ee:9d:a3:f8:88:b2:13:89: d2:f9:19:20:26:51:69:c3:95:7a:63:26:31:e0:5d: cf:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:2C:A3:39:70:9E:63:88:9D:AF:D1:6D:AE:5F:CE:6C:E7:77:8C:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/18076b54-1d16-36b3-ab93-3a8e9924895f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.224.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:d6:81:60:ea:57:bb:96:23:4c:33:14:0a:63:01:20:dc:83: 29:ec:29:18:46:72:73:7a:a1:8c:14:02:10:8e:6e:43:7e:7b: 75:a9:f3:31:c2:ee:72:ec:0d:a1:76:23:a8:5b:9d:ea:e6:48: 5f:6e:27:ce:ff:ee:90:c6:93:f6:75:a1:e9:e7:4f:60:5d:e7: f6:64:70:19:bf:2f:1d:7f:55:24:bb:a2:df:7a:e3:9d:b3:28: 70:c9:75:90:2d:16:d9:e1:d4:36:60:c7:2b:dd:34:90:2a:1f: f7:eb:06:7a:60:71:c0:e3:24:67:d0:9b:b6:c5:09:33:cc:0b: 41:99:91:3c:cc:80:e2:db:53:13:b3:51:7a:64:67:b1:1b:1c: 59:f5:a1:00:da:e7:bc:92:9d:8a:b8:7b:0b:ef:b4:a0:1d:9c: c0:14:2a:c9:f2:ee:b0:d9:a2:bd:9d:a6:49:f5:24:64:c3:2e: 9d:61:cb:fa:d6:fe:41:8b:60:4f:6f:f4:7e:48:ea:d9:e4:ef: a5:fe:9a:ae:1a:41:ea:43:41:fa:96:3f:b0:ff:ce:d8:93:19: bf:49:06:ef:c4:4f:55:b6:a5:d6:cf:d7:b6:db:2d:6a:c2:8a: 64:a0:9b:cb:e1:9e:61:5c:a3:50:5b:c1:a1:cb:b2:90:a6:e1: 21:f2:e6:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuV8ngRTvDlfGZ2nYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAyMDE1MzE0MVoXDTI2MDExODE2MzE0MVowLzEtMCsGA1UEAxMk ODBhZDBlOTEtNjMwZi00NWQwLWFhNGQtOTQ2M2QxZGU5ZDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7l1C1LFeFMslSww8QEsAdGVDTZbz4fErj8j PiZHxnTS4Pqi339W7Zy+XEB/sF994WNE3Ek8n8s9VGUDSqpDrC6VySHmSrLsGW9G VQUGOpb59IJ0QQJ2maxagGtmc+YC48almHmNpaTmGwsLrZVP5qHXh9WSrjKVeq8U 1+lZonRCFJhpHUybY48EHZTS4lE3nJJ+37orr7bZsKdfRJAQzFHM79YyFAJr/NTz u0ci+ppYMtYnAMb8qEtWLEOprwrpmaaJFENSaZyimU7UzxHh7ZbhPYeen7QKxqV0 cXChFLhoB+L+1uwM7p2j+IiyE4nS+RkgJlFpw5V6YyYx4F3PTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcsozlwnmOIna/Rba5fzmznd4wFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMTgwNzZiNTQtMWQxNi0z NmIzLWFiOTMtM2E4ZTk5MjQ4OTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJuAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnWgWDqV7uWI0wzFApjASDcgynsKRhGcnN6oYwUAhCObkN+e3Wp8zHC 7nLsDaF2I6hbnermSF9uJ87/7pDGk/Z1oennT2Bd5/ZkcBm/Lx1/VSS7ot96452z KHDJdZAtFtnh1DZgxyvdNJAqH/frBnpgccDjJGfQm7bFCTPMC0GZkTzMgOLbUxOz UXpkZ7EbHFn1oQDa57ySnYq4ewvvtKAdnMAUKsny7rDZor2dpkn1JGTDLp1hy/rW /kGLYE9v9H5I6tnk76X+mq4aQepDQfqWP7D/ztiTGb9JBu/ET1W2pdbP17bbLWrC imSgm8vhnmFco1BbwaHLspCm4SHy5iE= -----END CERTIFICATE-----Generated at Tue Nov 4 22:07:28 2025 by rpki-client