$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2f1c47fb-75df-3c39-8d92-a6f6eda884c9.roa File: 2f1c47fb-75df-3c39-8d92-a6f6eda884c9.roa (raw, json) Hash identifier: TYvWbASh8ZeMAmSxeXq8oal22bB8ZJ1w9mSF5tc+dAo= Subject key identifier: CF:7B:00:38:94:85:36:1D:E6:2B:BD:22:D5:82:94:3D:03:59:8C:FC Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B9B6DBDCE16B9AD8ABF865F80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2f1c47fb-75df-3c39-8d92-a6f6eda884c9.roa Signing time: Wed 22 Oct 2025 14:39:07 +0000 ROA not before: Wed 22 Oct 2025 14:39:07 +0000 ROA not after: Tue 20 Jan 2026 15:39:07 +0000 asID: 135600 IP address blocks: 38.72.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:6d:bd:ce:16:b9:ad:8a:bf:86:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 22 14:39:07 2025 GMT Not After : Jan 20 15:39:07 2026 GMT Subject: CN=7f71b52a-d785-4311-8eb0-d38c46d6d489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8e:98:12:38:d3:e4:ba:e9:ee:4d:a1:1a:ea: e2:4d:9d:3e:db:54:da:16:67:7b:b8:5d:30:8a:34: 97:ef:c2:2e:4b:b3:1f:8c:a1:3e:91:0b:88:26:65: da:c2:07:f0:35:d4:3f:da:3d:2e:12:bf:f8:e7:28: ec:b4:c9:47:bd:ab:f5:ba:56:3e:89:cf:36:88:05: 63:3f:db:50:00:90:77:e8:2b:9d:b7:74:b6:9a:89: 6f:54:e9:c7:a2:8a:7d:29:56:e4:db:78:73:30:0c: 07:ce:70:03:04:c7:b2:e2:d2:d2:1d:2c:c2:3a:63: 65:ce:9a:99:a5:75:43:0d:15:30:8e:a0:b7:27:60: cf:1b:fd:0d:19:da:2c:dd:c9:2c:6c:a3:1f:2d:42: 84:db:cd:94:63:be:d6:2e:47:2d:7b:8a:68:ff:6f: 72:d7:74:d2:d5:71:d8:04:f1:08:cd:e6:d9:7a:53: 25:df:0c:62:d4:15:00:87:cc:b6:4e:3a:10:47:43: 00:a3:d9:04:fd:cc:03:97:c0:1d:9f:7a:63:2a:a5: 2a:14:2d:a0:78:92:2d:a9:3a:14:7d:bc:9c:7c:d3: 62:75:e6:bd:e7:6d:c9:12:1f:ce:8b:74:d7:1e:c4: 0b:6e:07:e3:3c:52:36:5f:53:ff:9f:39:82:b6:b0: 20:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:7B:00:38:94:85:36:1D:E6:2B:BD:22:D5:82:94:3D:03:59:8C:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2f1c47fb-75df-3c39-8d92-a6f6eda884c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.72.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:76:a4:cd:d6:7d:a7:cb:b0:b3:16:10:7f:48:5c:06:70:7d: b7:9a:48:d4:c3:e9:3c:b7:b5:f8:9a:f8:a4:52:81:cf:bb:02: f4:61:33:c7:f1:b5:98:e6:e1:81:fe:ed:3b:1b:e0:f1:2c:b3: 42:eb:3e:a6:9a:4a:23:17:ba:80:88:c4:4b:27:e4:d9:e0:43: 3e:9f:74:53:6b:31:db:f7:a0:eb:1b:e7:ea:44:be:bf:ad:f6: 6e:9b:5d:50:6f:5f:b4:55:5a:17:81:78:c5:2a:07:d0:d0:e5: ee:e2:ae:b0:ef:34:1d:72:bb:3f:17:49:d2:fe:d2:de:75:32: 72:75:66:8f:d3:5b:50:59:51:d4:4f:23:22:c1:3b:2d:65:94: 0f:5b:00:1c:ee:1f:e3:bf:d1:c3:7f:58:63:30:1d:ff:90:a9: ff:0d:49:d3:29:24:db:9c:1d:5e:75:a9:06:b5:4a:17:01:0b: 89:90:f9:42:04:ab:a2:07:0c:53:53:c4:cb:15:75:7d:be:7c: dd:78:fb:e7:4a:11:bc:fb:95:98:63:c1:5f:62:c1:6f:2c:fd: e4:b5:cd:4f:c5:5f:a6:d9:b4:51:35:02:c1:97:77:f8:14:9e: ba:26:c1:66:62:bb:da:63:2c:5e:4d:85:01:7c:98:0f:ec:fe: 53:8b:41:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubbb3OFrmtir+GX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAyMjE0MzkwN1oXDTI2MDEyMDE1MzkwN1owLzEtMCsGA1UEAxMk N2Y3MWI1MmEtZDc4NS00MzExLThlYjAtZDM4YzQ2ZDZkNDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm46YEjjT5Lrp7k2hGuriTZ0+21TaFmd7uF0w ijSX78IuS7MfjKE+kQuIJmXawgfwNdQ/2j0uEr/45yjstMlHvav1ulY+ic82iAVj P9tQAJB36Cudt3S2molvVOnHoop9KVbk23hzMAwHznADBMey4tLSHSzCOmNlzpqZ pXVDDRUwjqC3J2DPG/0NGdos3cksbKMfLUKE282UY77WLkcte4po/29y13TS1XHY BPEIzebZelMl3wxi1BUAh8y2TjoQR0MAo9kE/cwDl8Adn3pjKqUqFC2geJItqToU fbycfNNidea9523JEh/Oi3TXHsQLbgfjPFI2X1P/nzmCtrAgUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM97ADiUhTYd5iu9ItWClD0DWYz8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMmYxYzQ3ZmItNzVkZi0z YzM5LThkOTItYTZmNmVkYTg4NGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJkhQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK92pM3WfafLsLMWEH9IXAZwfbeaSNTD6Ty3tfia+KRSgc+7AvRhM8fx tZjm4YH+7Tsb4PEss0LrPqaaSiMXuoCIxEsn5NngQz6fdFNrMdv3oOsb5+pEvr+t 9m6bXVBvX7RVWheBeMUqB9DQ5e7irrDvNB1yuz8XSdL+0t51MnJ1Zo/TW1BZUdRP IyLBOy1llA9bABzuH+O/0cN/WGMwHf+Qqf8NSdMpJNucHV51qQa1ShcBC4mQ+UIE q6IHDFNTxMsVdX2+fN14++dKEbz7lZhjwV9iwW8s/eS1zU/FX6bZtFE1AsGXd/gU nromwWZiu9pjLF5NhQF8mA/s/lOLQfo= -----END CERTIFICATE-----Generated at Wed Nov 5 08:12:25 2025 by rpki-client