$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a3b0229-670e-3f6f-a899-75755de3e6aa.roa File: 4a3b0229-670e-3f6f-a899-75755de3e6aa.roa (raw, json) Hash identifier: Cte3tM2EdzOVucckT9X69t6RcNKjUaWlzBjtITxm/mY= Subject key identifier: F7:74:E8:10:00:E0:E2:FB:35:D9:28:01:8A:1C:7E:88:83:A6:AE:70 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B82FDC497EDA3E22913C20280 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a3b0229-670e-3f6f-a899-75755de3e6aa.roa Signing time: Mon 13 Oct 2025 20:34:06 +0000 ROA not before: Mon 13 Oct 2025 20:34:06 +0000 ROA not after: Sun 11 Jan 2026 21:34:06 +0000 asID: 13335 IP address blocks: 38.147.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:fd:c4:97:ed:a3:e2:29:13:c2:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 13 20:34:06 2025 GMT Not After : Jan 11 21:34:06 2026 GMT Subject: CN=f2dc7fb1-5fbf-4a1a-a62b-3d1efa3cb210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ba:1b:c3:4c:a8:7d:76:14:9c:12:7b:a5:fd: 20:44:19:29:fe:d9:d4:cf:20:9a:c0:2a:41:33:70: fe:79:61:e5:e4:98:34:05:68:67:63:7a:3f:93:a0: b0:02:24:3f:9f:ba:2c:5e:f1:24:9d:c6:11:99:91: 9a:5b:ae:37:09:90:38:6e:3b:b5:6b:47:95:4d:f1: aa:b5:33:07:3d:c7:fd:41:3c:d5:2a:20:d4:b8:a6: ad:66:eb:22:0d:ff:3a:55:0e:6e:b3:71:31:c1:c3: 2f:a1:20:9c:2a:70:75:2d:65:5d:ec:a7:08:1d:65: 6e:63:a1:7b:76:eb:a4:b7:e8:85:33:a8:e7:c8:a3: 99:df:36:5b:73:be:cb:80:8c:ef:95:2f:6e:d7:dd: 61:ba:4a:b5:3b:1d:87:4e:33:39:b1:21:3a:25:15: da:9e:3c:4d:f2:07:a7:c0:d7:49:e4:14:f3:95:a1: cf:ee:5f:a8:df:cb:dd:ba:48:a9:c5:75:39:d7:cf: 38:f2:6e:40:2c:c4:55:9d:01:2b:51:47:04:90:cd: 80:a4:4d:43:f3:e0:c3:e6:65:bf:bc:ac:68:cd:1f: ca:b8:a8:7b:38:9c:04:77:b4:5f:b4:f5:82:f1:f9: 28:31:9b:20:0a:8f:ea:50:7d:9d:1a:9a:b0:19:85: c6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:74:E8:10:00:E0:E2:FB:35:D9:28:01:8A:1C:7E:88:83:A6:AE:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a3b0229-670e-3f6f-a899-75755de3e6aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.147.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:e1:d9:b7:29:0d:a3:5a:9c:75:0c:62:97:b4:3b:4a:6b:cf: a2:f4:49:44:63:c5:df:dc:f6:b9:89:4d:67:7a:62:db:1d:0c: ec:42:dd:8b:a7:9f:6f:16:31:92:a9:b1:c9:bb:5a:5b:30:b8: 13:ff:ef:63:4b:fb:5d:e0:ae:60:ee:06:2f:f2:d6:31:4d:7f: d0:09:3b:84:6c:7e:a6:63:bf:f8:9e:77:a9:f3:24:c8:b3:60: c2:45:09:bf:d8:63:ab:eb:19:fe:49:c5:19:cf:58:2e:ce:86: 66:95:69:16:59:b8:64:b6:03:a5:7e:e8:5f:9f:5b:0b:8a:69: c7:77:52:ba:4f:2e:ff:be:55:52:6a:83:55:68:32:0f:8b:be: f8:eb:97:dc:30:c9:83:4b:2e:9f:18:aa:e6:fb:b4:88:20:c7: bc:2c:ce:1f:da:64:5e:3d:f3:bc:d2:f2:73:b5:2c:2a:16:2e: e0:eb:2d:99:58:be:0f:fa:b0:58:f5:c2:6c:75:58:67:65:b0: ee:31:1a:2e:75:0c:f0:c4:17:6c:e0:73:8e:b6:98:b3:c4:89: 43:26:b0:48:d2:85:51:3b:83:bf:a9:37:23:78:7a:be:ac:36: 33:b3:ee:ae:33:46:a8:c2:44:21:b5:cb:ec:ed:31:24:89:12: cd:30:fd:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuC/cSX7aPiKRPCAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAxMzIwMzQwNloXDTI2MDExMTIxMzQwNlowLzEtMCsGA1UEAxMk ZjJkYzdmYjEtNWZiZi00YTFhLWE2MmItM2QxZWZhM2NiMjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrobw0yofXYUnBJ7pf0gRBkp/tnUzyCawCpB M3D+eWHl5Jg0BWhnY3o/k6CwAiQ/n7osXvEkncYRmZGaW643CZA4bju1a0eVTfGq tTMHPcf9QTzVKiDUuKatZusiDf86VQ5us3ExwcMvoSCcKnB1LWVd7KcIHWVuY6F7 duukt+iFM6jnyKOZ3zZbc77LgIzvlS9u191hukq1Ox2HTjM5sSE6JRXanjxN8gen wNdJ5BTzlaHP7l+o38vdukipxXU518848m5ALMRVnQErUUcEkM2ApE1D8+DD5mW/ vKxozR/KuKh7OJwEd7RftPWC8fkoMZsgCo/qUH2dGpqwGYXG5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPd06BAA4OL7NdkoAYocfoiDpq5wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNGEzYjAyMjktNjcwZS0z ZjZmLWE4OTktNzU3NTVkZTNlNmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJpN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvh2bcpDaNanHUMYpe0O0prz6L0SURjxd/c9rmJTWd6YtsdDOxC3Yun n28WMZKpscm7WlswuBP/72NL+13grmDuBi/y1jFNf9AJO4RsfqZjv/ied6nzJMiz YMJFCb/YY6vrGf5JxRnPWC7OhmaVaRZZuGS2A6V+6F+fWwuKacd3UrpPLv++VVJq g1VoMg+Lvvjrl9wwyYNLLp8Yqub7tIggx7wszh/aZF4987zS8nO1LCoWLuDrLZlY vg/6sFj1wmx1WGdlsO4xGi51DPDEF2zgc462mLPEiUMmsEjShVE7g7+pNyN4er6s NjOz7q4zRqjCRCG1y+ztMSSJEs0w/WE= -----END CERTIFICATE-----Generated at Tue Nov 4 22:07:15 2025 by rpki-client