$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2809e53d-a038-3509-9710-3a97b5f3e8bc.roa File: 2809e53d-a038-3509-9710-3a97b5f3e8bc.roa (raw, json) Hash identifier: w29EMFHoVwrhiA2OJ2/tVcEbZZv8zM/2y1l8tBVH/34= Subject key identifier: BF:E3:AB:9D:A3:A0:84:8C:D9:3E:23:C8:D2:D6:96:36:09:24:DC:A0 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B87CB5F1F0DA2DEC83C0E4B20 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2809e53d-a038-3509-9710-3a97b5f3e8bc.roa Signing time: Wed 15 Oct 2025 13:51:36 +0000 ROA not before: Wed 15 Oct 2025 13:51:36 +0000 ROA not after: Tue 13 Jan 2026 14:51:36 +0000 asID: 32115 IP address blocks: 38.75.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:cb:5f:1f:0d:a2:de:c8:3c:0e:4b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 15 13:51:36 2025 GMT Not After : Jan 13 14:51:36 2026 GMT Subject: CN=adcf749a-0a7b-4b69-9e4c-c5665aa5dd81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9e:26:e6:78:89:20:59:ce:60:0c:e4:e0:28: 38:cb:28:af:9d:75:7d:cf:ca:77:da:bc:33:73:44: e5:f2:e7:01:76:33:c9:ee:ba:db:7c:3d:58:30:93: 78:5c:4c:4c:d0:78:20:6b:92:b5:38:d4:ef:81:ec: 00:a6:37:ac:2b:39:bd:a2:e6:eb:8a:d9:2d:c9:7e: 2d:14:02:03:1c:1e:26:04:25:7f:88:84:00:62:9b: 2e:44:54:e4:d1:f7:6d:fc:fe:40:80:d6:4c:e8:e3: 28:43:c3:5e:87:e8:3b:62:10:07:ad:84:a6:62:8f: 00:43:98:47:14:67:26:05:24:44:5a:71:b4:27:9d: df:a3:29:11:a2:83:64:a3:20:30:b7:8c:72:41:68: db:05:70:1f:6d:3c:78:91:c8:6f:dd:12:b9:e1:ce: 4d:0b:e1:60:31:af:47:b8:8a:24:71:41:2f:c8:ab: 4a:54:7d:d9:6d:0e:75:d3:aa:82:5d:db:05:82:11: a9:74:60:90:6a:c6:4f:8a:4e:59:b9:4a:5f:40:ce: de:bb:08:3b:62:a6:a0:52:48:b7:ab:c0:be:79:38: 6e:36:8c:0b:92:5d:86:9c:a7:54:2c:83:6a:f8:1c: d9:58:54:e6:e4:80:0b:52:88:f9:f2:15:d3:89:06: 6d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E3:AB:9D:A3:A0:84:8C:D9:3E:23:C8:D2:D6:96:36:09:24:DC:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2809e53d-a038-3509-9710-3a97b5f3e8bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.75.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:08:25:48:cb:d4:f8:d1:b9:ab:2d:57:1c:b5:15:d5:c3:d3: 1d:cb:21:2a:04:b4:63:c3:c9:be:30:19:4f:4b:b3:b6:5c:49: cb:0a:9e:1b:d6:9e:55:13:48:f1:ae:27:75:f7:47:11:53:8a: e1:f0:3c:68:ad:11:1a:d6:9a:14:7f:8b:6b:ba:d2:02:c8:20: 3f:45:18:e8:30:e0:23:81:09:fe:67:a3:1c:34:2d:18:9d:6a: ce:71:38:32:9f:77:45:d3:96:82:a3:65:c6:a4:af:78:b7:a7: 3a:0a:be:e6:da:01:48:45:33:67:af:9d:56:78:94:fa:35:ee: 31:44:81:04:71:f4:51:cd:07:98:0c:41:de:9a:6c:55:96:e7: 00:3a:a6:8a:65:9f:60:b8:cc:66:9f:a3:10:79:a9:fe:12:40: e6:6c:17:f7:2f:33:89:7f:36:aa:c7:10:8b:93:dd:db:3c:c0: 20:04:f1:fb:03:a9:a1:aa:49:62:94:f0:34:72:a0:2c:3d:7b: 39:36:e5:18:21:75:bc:3d:60:85:e2:9a:b3:fc:59:dc:1a:79: f4:7e:e6:8a:13:f1:60:96:d2:19:62:28:ee:26:58:eb:e2:2c: a4:29:42:61:8e:2b:21:37:94:6f:d3:81:e4:c7:e4:f9:5d:36: 11:41:82:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHy18fDaLeyDwOSyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAxNTEzNTEzNloXDTI2MDExMzE0NTEzNlowLzEtMCsGA1UEAxMk YWRjZjc0OWEtMGE3Yi00YjY5LTllNGMtYzU2NjVhYTVkZDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo54m5niJIFnOYAzk4Cg4yyivnXV9z8p32rwz c0Tl8ucBdjPJ7rrbfD1YMJN4XExM0Hgga5K1ONTvgewApjesKzm9oubritktyX4t FAIDHB4mBCV/iIQAYpsuRFTk0fdt/P5AgNZM6OMoQ8Neh+g7YhAHrYSmYo8AQ5hH FGcmBSREWnG0J53foykRooNkoyAwt4xyQWjbBXAfbTx4kchv3RK54c5NC+FgMa9H uIokcUEvyKtKVH3ZbQ5106qCXdsFghGpdGCQasZPik5ZuUpfQM7euwg7YqagUki3 q8C+eThuNowLkl2GnKdULINq+BzZWFTm5IALUoj58hXTiQZtVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/jq52joISM2T4jyNLWljYJJNygMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMjgwOWU1M2QtYTAzOC0z NTA5LTk3MTAtM2E5N2I1ZjNlOGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJkvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALMIJUjL1PjRuastVxy1FdXD0x3LISoEtGPDyb4wGU9Ls7ZcScsKnhvW nlUTSPGuJ3X3RxFTiuHwPGitERrWmhR/i2u60gLIID9FGOgw4COBCf5noxw0LRid as5xODKfd0XTloKjZcakr3i3pzoKvubaAUhFM2evnVZ4lPo17jFEgQRx9FHNB5gM Qd6abFWW5wA6popln2C4zGafoxB5qf4SQOZsF/cvM4l/NqrHEIuT3ds8wCAE8fsD qaGqSWKU8DRyoCw9ezk25Rghdbw9YIXimrP8WdwaefR+5ooT8WCW0hliKO4mWOvi LKQpQmGOKyE3lG/TgeTH5PldNhFBgsw= -----END CERTIFICATE-----Generated at Tue Nov 4 22:07:32 2025 by rpki-client