$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/403a7ae1-88fa-34e8-ac84-359c16404b68.roa File: 403a7ae1-88fa-34e8-ac84-359c16404b68.roa (raw, json) Hash identifier: ZD0SnwjwvVhlF/D545hkiQ0MpDu9VNEyVTJ4/5usJko= Subject key identifier: F2:5F:A9:64:F4:7A:69:7D:39:28:3D:D2:E2:FD:66:99:D3:49:4A:EC Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B9B4AC4F7AA0B6E3ADAC00180 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/403a7ae1-88fa-34e8-ac84-359c16404b68.roa Signing time: Wed 22 Oct 2025 13:28:39 +0000 ROA not before: Wed 22 Oct 2025 13:28:39 +0000 ROA not after: Tue 20 Jan 2026 14:28:39 +0000 asID: 138915 IP address blocks: 38.54.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:4a:c4:f7:aa:0b:6e:3a:da:c0:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 22 13:28:39 2025 GMT Not After : Jan 20 14:28:39 2026 GMT Subject: CN=d4b1a2f7-641e-4d06-aac8-488bbda8056e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:98:63:c2:80:8e:21:8f:dc:58:b6:f7:eb:a3: c7:18:b5:30:da:3b:4b:ae:10:07:ce:76:87:ae:cd: 1e:62:19:f1:51:67:7d:fd:3f:3c:dd:98:a1:f4:7c: 5b:e9:d2:99:d3:3a:2d:94:68:76:a1:eb:85:d6:55: c2:9d:11:3a:a6:17:ad:af:61:51:36:9a:89:a0:78: 66:84:a0:b2:6e:7d:c0:92:6f:2d:e4:ec:86:a3:7b: cf:b3:2e:ef:bd:f4:20:e6:34:11:1a:bb:05:34:be: 11:67:c4:ec:41:c6:0b:17:db:46:98:13:8e:df:dc: 70:99:e7:95:f6:59:b0:26:34:df:cd:9a:e4:1c:4f: 67:e1:30:90:d2:e1:e2:a1:b4:40:60:2b:57:7f:46: 8c:87:f4:ea:43:0a:a7:bf:b1:06:bf:cc:57:09:ef: d6:ca:35:02:40:47:cd:46:6b:df:e9:93:ab:2f:a5: 8e:84:b0:a2:e8:f7:2c:96:e1:bc:a3:1b:e0:86:5d: f9:7c:84:d0:ac:de:95:b4:cb:7f:84:f2:a4:ec:61: 4a:86:22:3e:83:cc:28:71:cb:65:bf:41:17:ee:55: 72:79:5a:f9:63:4e:88:75:ca:da:ed:c1:e6:c5:6b: f9:3c:31:28:76:1d:70:48:79:40:a9:34:58:95:ea: e0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:5F:A9:64:F4:7A:69:7D:39:28:3D:D2:E2:FD:66:99:D3:49:4A:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/403a7ae1-88fa-34e8-ac84-359c16404b68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.54.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:e8:b5:37:4c:55:2b:06:ed:fc:d2:35:e2:46:cd:02:09:ab: 14:38:7e:c2:25:44:f4:24:72:ec:38:5f:99:30:84:09:15:b9: 13:12:3a:7d:08:fc:5e:d1:6d:56:3a:cd:8e:f8:d4:c1:1b:2c: 7f:d9:94:63:b2:d2:cd:30:35:8f:f6:c3:56:25:47:20:7a:cf: 4e:31:47:54:68:72:ef:c9:58:66:d6:5b:fb:4f:f8:dc:28:0f: a0:d4:a9:31:da:a5:82:b8:65:f0:4b:97:52:b4:5e:7d:96:54: 53:79:68:c4:f6:e0:32:7d:91:95:ef:18:43:6b:d6:81:46:5c: be:fb:8f:64:9b:a0:56:fd:90:15:0f:56:f4:b2:64:d8:5e:13: 8b:ec:d9:13:23:3e:29:e5:3c:4a:31:2d:3d:6f:ae:f0:dc:fa: 3a:ba:34:ef:76:3f:a1:79:a7:d1:70:cf:9b:b0:65:6b:13:50: 5d:38:14:4e:e9:80:9f:56:2b:e5:89:f2:96:ca:c2:4d:e7:99: 26:6c:53:df:8e:d1:4a:88:6b:14:92:0d:20:8d:e8:27:25:21: 99:24:09:0b:d2:16:8e:11:bb:d2:f4:e5:60:97:7f:e6:d4:ad: 68:64:61:0a:35:dc:2d:3f:e0:14:df:a0:85:df:20:06:94:2b: 6a:19:05:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubSsT3qgtuOtrAAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAyMjEzMjgzOVoXDTI2MDEyMDE0MjgzOVowLzEtMCsGA1UEAxMk ZDRiMWEyZjctNjQxZS00ZDA2LWFhYzgtNDg4YmJkYTgwNTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlphjwoCOIY/cWLb366PHGLUw2jtLrhAHznaH rs0eYhnxUWd9/T883Zih9Hxb6dKZ0zotlGh2oeuF1lXCnRE6phetr2FRNpqJoHhm hKCybn3Akm8t5OyGo3vPsy7vvfQg5jQRGrsFNL4RZ8TsQcYLF9tGmBOO39xwmeeV 9lmwJjTfzZrkHE9n4TCQ0uHiobRAYCtXf0aMh/TqQwqnv7EGv8xXCe/WyjUCQEfN Rmvf6ZOrL6WOhLCi6PcsluG8oxvghl35fITQrN6VtMt/hPKk7GFKhiI+g8wocctl v0EX7lVyeVr5Y06Idcra7cHmxWv5PDEodh1wSHlAqTRYlergowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJfqWT0eml9OSg90uL9ZpnTSUrsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNDAzYTdhZTEtODhmYS0z NGU4LWFjODQtMzU5YzE2NDA0YjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJjY1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALPotTdMVSsG7fzSNeJGzQIJqxQ4fsIlRPQkcuw4X5kwhAkVuRMSOn0I /F7RbVY6zY741MEbLH/ZlGOy0s0wNY/2w1YlRyB6z04xR1Rocu/JWGbWW/tP+Nwo D6DUqTHapYK4ZfBLl1K0Xn2WVFN5aMT24DJ9kZXvGENr1oFGXL77j2SboFb9kBUP VvSyZNheE4vs2RMjPinlPEoxLT1vrvDc+jq6NO92P6F5p9Fwz5uwZWsTUF04FE7p gJ9WK+WJ8pbKwk3nmSZsU9+O0UqIaxSSDSCN6CclIZkkCQvSFo4Ru9L05WCXf+bU rWhkYQo13C0/4BTfoIXfIAaUK2oZBc8= -----END CERTIFICATE-----Generated at Tue Nov 4 22:07:23 2025 by rpki-client