$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2a823835-8df9-3a40-b821-bf283314c0f4.roa File: 2a823835-8df9-3a40-b821-bf283314c0f4.roa (raw, json) Hash identifier: gAFuO5jdBLVIYYj1NVuKuy75bmKBSl28FGvDRIIw5TA= Subject key identifier: AE:36:F0:16:1A:ED:3C:AD:1B:FA:53:70:08:DE:2D:9C:A4:A0:22:68 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584BA11FF15B453917B8CBDE6B80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2a823835-8df9-3a40-b821-bf283314c0f4.roa Signing time: Fri 24 Oct 2025 15:37:12 +0000 ROA not before: Fri 24 Oct 2025 15:37:12 +0000 ROA not after: Thu 22 Jan 2026 16:37:12 +0000 asID: 0 IP address blocks: 38.225.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a1:1f:f1:5b:45:39:17:b8:cb:de:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 24 15:37:12 2025 GMT Not After : Jan 22 16:37:12 2026 GMT Subject: CN=1a8c5d6d-60f4-4a64-b182-cd0c1d2b91f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8e:84:22:1e:fc:18:df:b5:7b:cf:5e:e5:7b: 15:4e:f9:ed:e1:44:df:b7:93:66:0b:ec:b3:1c:4b: a2:95:51:df:8c:b3:f3:83:c2:43:21:b5:e6:ff:98: 7c:8d:f8:c5:e1:25:90:59:bc:d2:b9:c3:96:95:98: de:45:7c:8c:71:06:34:dd:1f:68:25:73:d2:c7:b8: 84:4d:ed:2f:22:25:7a:fc:97:1c:1e:5e:b2:6e:df: 33:c8:dd:3d:aa:32:fe:f8:ee:09:4b:27:d4:0b:ad: 20:d6:5e:41:42:a3:21:18:43:da:0e:ef:e2:09:7e: 57:db:5a:8a:5d:f0:1f:34:35:aa:a5:93:cc:04:e7: 0a:9b:a4:fb:86:e2:24:fd:d4:60:ff:29:78:f3:98: 90:2e:fd:7a:ef:d8:37:00:5b:36:35:bb:33:f3:c0: c7:92:7e:5f:e3:80:8d:e2:e8:ac:d5:76:fe:3b:1c: f8:b3:14:19:2c:25:d7:1e:17:96:97:4d:ff:25:6d: 0d:70:85:49:40:b6:58:10:2c:98:70:db:dc:e8:41: e8:fa:fb:87:2d:c5:92:44:da:d2:03:6e:95:99:ab: 48:6b:25:23:0b:7c:88:6d:04:08:a7:ba:fb:74:2b: fe:1e:2f:92:27:b4:2e:34:57:8f:fd:10:3f:59:9e: 95:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:36:F0:16:1A:ED:3C:AD:1B:FA:53:70:08:DE:2D:9C:A4:A0:22:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2a823835-8df9-3a40-b821-bf283314c0f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.225.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:7a:bc:8a:82:85:7e:59:a8:f8:21:4d:8f:11:94:f6:db:0c: 65:a8:d9:90:ee:9e:a9:27:8c:a9:91:35:4f:ee:ca:0a:81:b2: 1d:16:d9:9d:3a:40:15:bf:55:d6:e9:8b:de:25:c8:7b:e4:40: 77:1b:66:30:58:20:f6:54:d2:bd:58:4d:e1:fd:02:0a:25:47: 47:94:7b:f8:ce:1c:8a:42:7b:cf:8b:b3:9a:44:b9:e8:1f:d9: ca:7d:b1:2c:2f:e2:37:3d:f3:aa:43:9e:58:5e:db:10:5d:46: 4a:ff:3a:3c:df:15:52:b1:e8:45:3e:5c:ba:32:9c:d6:87:c2: 97:9a:a7:5e:53:e9:92:2f:0c:fd:45:19:f9:6b:9f:7b:4a:e7: d8:0e:ea:d3:e6:fa:18:36:e3:c0:b4:72:6b:c3:b9:57:87:a4: be:39:f9:40:b6:39:f0:82:72:1a:ea:4f:3a:a6:2b:a8:6d:8d: a1:34:b6:47:01:88:5c:16:26:59:1a:7c:f5:c1:0d:71:e3:15: 6c:42:cc:e6:9c:7a:c6:b3:02:ae:7d:50:91:31:b8:4c:a1:45: 87:4d:20:d5:5d:50:9a:3c:af:92:e1:15:2e:03:61:2c:ce:60: f0:47:5b:77:f5:c0:19:df:37:b2:d4:94:dc:0f:58:2b:4c:b2: fc:21:18:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuhH/FbRTkXuMvea4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAyNDE1MzcxMloXDTI2MDEyMjE2MzcxMlowLzEtMCsGA1UEAxMk MWE4YzVkNmQtNjBmNC00YTY0LWIxODItY2QwYzFkMmI5MWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhI6EIh78GN+1e89e5XsVTvnt4UTft5NmC+yz HEuilVHfjLPzg8JDIbXm/5h8jfjF4SWQWbzSucOWlZjeRXyMcQY03R9oJXPSx7iE Te0vIiV6/JccHl6ybt8zyN09qjL++O4JSyfUC60g1l5BQqMhGEPaDu/iCX5X21qK XfAfNDWqpZPMBOcKm6T7huIk/dRg/yl485iQLv1679g3AFs2Nbsz88DHkn5f44CN 4uis1Xb+Oxz4sxQZLCXXHheWl03/JW0NcIVJQLZYECyYcNvc6EHo+vuHLcWSRNrS A26VmatIayUjC3yIbQQIp7r7dCv+Hi+SJ7QuNFeP/RA/WZ6V0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK428BYa7TytG/pTcAjeLZykoCJoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMmE4MjM4MzUtOGRmOS0z YTQwLWI4MjEtYmYyODMzMTRjMGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJuF3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMp6vIqChX5ZqPghTY8RlPbbDGWo2ZDunqknjKmRNU/uygqBsh0W2Z06 QBW/Vdbpi94lyHvkQHcbZjBYIPZU0r1YTeH9AgolR0eUe/jOHIpCe8+Ls5pEuegf 2cp9sSwv4jc986pDnlhe2xBdRkr/OjzfFVKx6EU+XLoynNaHwpeap15T6ZIvDP1F Gflrn3tK59gO6tPm+hg248C0cmvDuVeHpL45+UC2OfCCchrqTzqmK6htjaE0tkcB iFwWJlkafPXBDXHjFWxCzOacesazAq59UJExuEyhRYdNINVdUJo8r5LhFS4DYSzO YPBHW3f1wBnfN7LUlNwPWCtMsvwhGEg= -----END CERTIFICATE-----Generated at Wed Nov 5 01:45:45 2025 by rpki-client