$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3d2ff0c0-f492-364a-9d1a-dcdd91c0c394.roa File: 3d2ff0c0-f492-364a-9d1a-dcdd91c0c394.roa (raw, json) Hash identifier: 8osOTEwLHa9VzKuiVXq+/DCuSzBRi325lh475gx4N3U= Subject key identifier: E6:40:5A:8C:46:A3:3B:E2:BE:3A:61:5C:A5:FA:EE:DD:49:51:1C:21 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B63DC9AE4B23A1153CFC86480 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3d2ff0c0-f492-364a-9d1a-dcdd91c0c394.roa Signing time: Thu 02 Oct 2025 16:57:13 +0000 ROA not before: Thu 02 Oct 2025 16:57:13 +0000 ROA not after: Wed 31 Dec 2025 17:57:13 +0000 asID: 55066 IP address blocks: 38.76.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:dc:9a:e4:b2:3a:11:53:cf:c8:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 2 16:57:13 2025 GMT Not After : Dec 31 17:57:13 2025 GMT Subject: CN=09614ebc-5ab9-4faf-931a-bc5083d9189e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e8:2c:6b:87:a5:94:28:3a:57:ed:e4:0f:44: 9c:fd:cd:48:f2:e7:86:6c:91:af:37:21:2d:8c:f7: 9c:c9:d9:a0:09:7d:01:71:51:d6:05:ac:d2:f8:7b: bb:78:57:ca:43:97:d9:e2:26:40:66:5d:d4:71:f5: 96:a8:0f:a3:d4:79:03:fe:d3:ab:ba:8c:b8:ed:f7: 89:be:f1:63:00:62:6d:66:88:f8:c6:26:b4:29:40: 67:12:c2:5c:88:fb:10:dc:73:92:ec:df:14:01:12: 64:a3:61:f5:d4:17:da:8b:e5:dd:5b:b5:f4:16:81: 13:cf:de:7b:84:07:5f:81:4c:5a:71:a7:5c:8a:f1: 72:65:0c:f0:0c:7a:d5:60:fc:cf:f3:6e:50:88:d4: 03:ee:75:dc:a3:92:eb:d5:bf:b5:49:0e:55:d3:92: 60:6c:3f:a4:8d:0b:49:0e:48:dc:38:4b:c2:a2:51: 20:de:d6:12:d6:d5:ee:54:80:0f:1d:c0:1e:21:82: c9:0f:6f:52:bf:03:ca:df:7d:1b:ab:e6:1b:68:6c: 54:3a:a6:67:29:6b:d4:b6:bd:ed:a8:4c:97:26:eb: 40:0f:51:f0:7c:27:01:82:77:12:8c:74:fd:b5:5d: e7:cc:a9:00:30:45:5d:91:38:90:ec:02:c9:4e:cc: a1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:40:5A:8C:46:A3:3B:E2:BE:3A:61:5C:A5:FA:EE:DD:49:51:1C:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3d2ff0c0-f492-364a-9d1a-dcdd91c0c394.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.76.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:fe:56:f4:c0:b7:a7:9b:7c:92:8c:8d:66:a7:03:1c:33:8b: 17:dc:76:02:c5:df:e0:3e:98:09:1b:34:88:c8:83:15:2b:3a: 49:71:f6:44:9f:e0:29:e1:2f:d4:fa:77:88:e8:cb:fd:ae:76: 98:f8:e3:e2:a5:38:e5:f0:f7:53:4f:07:b6:e2:87:99:ed:28: c5:42:47:27:36:2e:59:a4:40:2c:67:4a:7d:36:f8:83:f6:31: 43:09:be:3f:62:20:3b:c8:f8:34:27:04:cf:cc:e8:dc:97:d6: ab:0a:50:a5:e4:02:0a:a9:2e:fa:31:86:61:2f:50:2c:45:a8: ca:91:2f:d4:b5:28:b5:ce:54:76:69:62:eb:65:c5:7f:41:a2: 96:18:d4:dc:ac:69:c6:7b:d8:a2:ea:10:45:f4:45:ac:41:8a: 3c:e9:6c:76:17:d0:c9:d9:3e:fd:da:c4:32:93:b5:c9:3c:11: a3:09:89:3b:85:37:e0:a0:e7:95:8d:85:3a:4f:b3:08:11:3f: e2:16:d5:99:8c:27:2d:7f:f4:bd:03:ba:ce:da:75:81:b9:e7: 49:fe:c1:ca:ca:c4:cb:53:8a:85:19:e4:42:9b:83:0c:55:6e: 51:ae:77:ac:1a:7a:b2:72:7f:24:0f:1b:31:0a:d1:80:1e:07: a1:a4:b6:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtj3JrksjoRU8/IZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAwMjE2NTcxM1oXDTI1MTIzMTE3NTcxM1owLzEtMCsGA1UEAxMk MDk2MTRlYmMtNWFiOS00ZmFmLTkzMWEtYmM1MDgzZDkxODllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlegsa4ellCg6V+3kD0Sc/c1I8ueGbJGvNyEt jPecydmgCX0BcVHWBazS+Hu7eFfKQ5fZ4iZAZl3UcfWWqA+j1HkD/tOruoy47feJ vvFjAGJtZoj4xia0KUBnEsJciPsQ3HOS7N8UARJko2H11Bfai+XdW7X0FoETz957 hAdfgUxacadcivFyZQzwDHrVYPzP825QiNQD7nXco5Lr1b+1SQ5V05JgbD+kjQtJ DkjcOEvColEg3tYS1tXuVIAPHcAeIYLJD29SvwPK330bq+YbaGxUOqZnKWvUtr3t qEyXJutAD1HwfCcBgncSjHT9tV3nzKkAMEVdkTiQ7ALJTsyhkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZAWoxGozvivjphXKX67t1JURwhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvM2QyZmYwYzAtZjQ5Mi0z NjRhLTlkMWEtZGNkZDkxYzBjMzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJkz5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGX+VvTAt6ebfJKMjWanAxwzixfcdgLF3+A+mAkbNIjIgxUrOklx9kSf 4CnhL9T6d4joy/2udpj44+KlOOXw91NPB7bih5ntKMVCRyc2LlmkQCxnSn02+IP2 MUMJvj9iIDvI+DQnBM/M6NyX1qsKUKXkAgqpLvoxhmEvUCxFqMqRL9S1KLXOVHZp YutlxX9BopYY1NysacZ72KLqEEX0RaxBijzpbHYX0MnZPv3axDKTtck8EaMJiTuF N+Cg55WNhTpPswgRP+IW1ZmMJy1/9L0Dus7adYG550n+wcrKxMtTioUZ5EKbgwxV blGud6waerJyfyQPGzEK0YAeB6GktiY= -----END CERTIFICATE-----Generated at Tue Nov 4 22:07:16 2025 by rpki-client