$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/374e9cdc-9276-3569-8a3b-f0651c8811ab.roa File: 374e9cdc-9276-3569-8a3b-f0651c8811ab.roa (raw, json) Hash identifier: WFxJVELjZiPxby1YE9cTGl31POd05JtXqdoQu/KZEQs= Subject key identifier: 50:0F:34:3D:3D:5B:F3:1B:3E:53:58:3E:66:AF:D8:28:DC:6A:81:71 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B9B6E47980E3236B60605B100 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/374e9cdc-9276-3569-8a3b-f0651c8811ab.roa Signing time: Wed 22 Oct 2025 14:40:12 +0000 ROA not before: Wed 22 Oct 2025 14:40:12 +0000 ROA not after: Tue 20 Jan 2026 15:40:12 +0000 asID: 135600 IP address blocks: 38.191.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:6e:47:98:0e:32:36:b6:06:05:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 22 14:40:12 2025 GMT Not After : Jan 20 15:40:12 2026 GMT Subject: CN=3172c134-f205-4f08-9b20-5bbb122b8f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5c:68:78:bf:7e:9a:47:41:71:ab:10:bb:6d: 77:45:9a:92:3c:90:b9:9a:03:fd:a8:67:59:c4:a3: 35:a9:ce:f1:3e:87:fd:4e:ff:f9:c8:4d:80:b7:3e: 24:62:30:d4:50:df:aa:df:92:f2:2b:fd:d4:b4:0c: b2:ee:1e:12:4a:3f:44:87:fe:ca:cf:4b:db:ff:1c: d6:fd:b9:3e:b5:4a:7e:a1:9f:54:ce:99:38:6e:eb: 1c:90:f2:34:27:b2:1b:2b:93:8a:da:1e:a2:68:00: 8e:5a:d4:99:2b:8f:c5:a4:ae:25:a1:5a:24:1c:7f: 2d:70:e8:2c:b4:c3:fd:45:4d:29:3d:63:f5:ec:f6: 99:4b:91:05:5c:af:16:1a:13:de:1f:3a:da:97:ca: e6:f0:40:58:dc:3a:8b:09:de:ee:df:15:e5:fc:91: 55:0f:89:a0:87:57:d5:61:69:d1:7c:8d:2b:9b:08: 0c:49:fb:15:8e:fb:d6:95:95:08:51:04:93:95:6a: be:bf:97:c2:42:8d:02:5a:4a:79:83:ce:b4:3d:4d: bb:18:83:c2:0a:4c:e4:48:c8:38:25:e8:c9:8f:ea: f5:1a:aa:78:ea:8a:9c:0b:75:54:f0:3f:de:9c:08: a5:19:7b:a1:3a:05:0b:ff:c5:1e:2b:f2:aa:e2:31: ee:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:0F:34:3D:3D:5B:F3:1B:3E:53:58:3E:66:AF:D8:28:DC:6A:81:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/374e9cdc-9276-3569-8a3b-f0651c8811ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.191.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:70:03:04:b2:e7:61:d3:db:04:24:61:a0:4f:48:73:04:d9: 8d:db:44:d9:17:d0:c1:04:77:a1:9b:fe:7c:cf:d6:fa:43:6a: 65:e0:1a:bc:c0:3e:6b:69:0b:70:10:5a:79:bf:53:28:50:3d: 41:17:af:67:fc:7d:f7:83:2b:17:c7:ce:e5:0f:aa:11:40:c9: 64:91:18:30:70:6c:42:00:0a:1d:f1:93:72:08:3b:ff:51:12: fb:f7:13:2c:38:15:08:d2:f3:ee:0c:b4:9b:a2:2a:70:d0:a6: 5e:49:74:ff:e5:eb:6b:fc:67:61:12:60:d0:b6:54:c2:9c:18: da:03:d0:04:12:58:32:33:59:a2:32:a7:45:79:41:1f:e8:7c: 35:57:46:ec:e7:94:3a:fe:5e:c8:d5:c7:68:16:a8:f5:fc:b7: a7:39:cf:be:a1:30:e6:2f:73:ff:69:17:aa:b9:51:66:77:2d: e7:ab:e4:d0:62:40:c8:b5:df:9f:57:77:85:7c:b1:1b:c4:09: 67:e7:16:3f:36:15:79:70:92:34:52:c7:25:fa:a5:aa:cd:30: 67:21:b3:7a:80:0e:2f:b3:73:06:d5:b0:fe:34:b1:fc:5d:3e: ed:6f:ab:6e:d4:dc:68:9b:a5:4a:05:e8:0d:11:c3:6a:52:91: 00:ae:eb:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubbkeYDjI2tgYFsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAyMjE0NDAxMloXDTI2MDEyMDE1NDAxMlowLzEtMCsGA1UEAxMk MzE3MmMxMzQtZjIwNS00ZjA4LTliMjAtNWJiYjEyMmI4ZjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVxoeL9+mkdBcasQu213RZqSPJC5mgP9qGdZ xKM1qc7xPof9Tv/5yE2Atz4kYjDUUN+q35LyK/3UtAyy7h4SSj9Eh/7Kz0vb/xzW /bk+tUp+oZ9Uzpk4busckPI0J7IbK5OK2h6iaACOWtSZK4/FpK4loVokHH8tcOgs tMP9RU0pPWP17PaZS5EFXK8WGhPeHzral8rm8EBY3DqLCd7u3xXl/JFVD4mgh1fV YWnRfI0rmwgMSfsVjvvWlZUIUQSTlWq+v5fCQo0CWkp5g860PU27GIPCCkzkSMg4 JejJj+r1Gqp46oqcC3VU8D/enAilGXuhOgUL/8UeK/Kq4jHuhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAPND09W/MbPlNYPmav2CjcaoFxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMzc0ZTljZGMtOTI3Ni0z NTY5LThhM2ItZjA2NTFjODgxMWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJr/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxwAwSy52HT2wQkYaBPSHME2Y3bRNkX0MEEd6Gb/nzP1vpDamXgGrzA PmtpC3AQWnm/UyhQPUEXr2f8ffeDKxfHzuUPqhFAyWSRGDBwbEIACh3xk3IIO/9R Evv3Eyw4FQjS8+4MtJuiKnDQpl5JdP/l62v8Z2ESYNC2VMKcGNoD0AQSWDIzWaIy p0V5QR/ofDVXRuznlDr+XsjVx2gWqPX8t6c5z76hMOYvc/9pF6q5UWZ3Leer5NBi QMi1359Xd4V8sRvECWfnFj82FXlwkjRSxyX6parNMGchs3qADi+zcwbVsP40sfxd Pu1vq27U3GibpUoF6A0Rw2pSkQCu62o= -----END CERTIFICATE-----Generated at Wed Nov 5 12:48:37 2025 by rpki-client