$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5741bc9e-66be-34de-a08e-a49c2de945f1.roa File: 5741bc9e-66be-34de-a08e-a49c2de945f1.roa (raw, json) Hash identifier: mJ1DICXh4L/HAkq7ySasQYqhwPfzw/WCjK9fCKjuTXQ= Subject key identifier: 6F:22:C6:1C:2F:70:59:91:0E:86:7A:A1:41:54:17:93:21:AE:E6:6F Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584BAF922AE7E6210AF154A17180 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5741bc9e-66be-34de-a08e-a49c2de945f1.roa Signing time: Wed 29 Oct 2025 19:48:40 +0000 ROA not before: Wed 29 Oct 2025 19:48:40 +0000 ROA not after: Tue 27 Jan 2026 20:48:40 +0000 asID: 272857 IP address blocks: 38.255.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:af:92:2a:e7:e6:21:0a:f1:54:a1:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 29 19:48:40 2025 GMT Not After : Jan 27 20:48:40 2026 GMT Subject: CN=5c1cbdf9-6641-4514-9b19-8b3d7888b67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:43:fd:68:01:d0:6f:d5:0d:70:82:1e:47:fa: 6a:b5:0b:f5:8f:f3:f2:73:b2:b4:b6:59:b5:ae:23: 01:4c:41:30:af:8e:e6:5e:f7:55:c4:37:71:10:ee: ee:1e:5f:d7:c4:21:14:40:23:8d:a6:d4:fa:cd:7a: 11:6a:3b:69:e0:a3:c5:8a:55:0c:e5:45:a5:90:97: 89:8e:a7:5f:35:ec:98:ad:93:9a:24:3e:ce:1b:d0: 0e:c8:d5:c6:46:d2:b6:03:3e:ff:97:e6:7d:d5:08: b9:07:66:64:41:4b:e2:86:e6:87:de:96:ec:b5:70: f8:ab:9a:f2:90:9d:da:2f:98:3d:e5:e2:89:85:70: 49:1c:27:7f:71:66:20:75:00:39:b1:cf:4e:06:f4: 6b:ea:85:3f:d0:37:46:93:74:88:3a:b5:59:3f:54: 7b:4c:0f:8e:7f:b7:ce:b0:1c:de:c8:2e:03:7e:53: 8b:03:68:f8:2d:96:8a:09:c7:99:bf:b4:7f:bb:5a: 91:11:51:5b:6a:05:b8:f0:62:44:97:b6:7f:1d:fe: 39:4d:e5:42:b1:53:a0:4c:0b:ac:62:22:5c:3d:9c: 0f:8b:69:04:b9:b3:87:74:43:62:a6:66:14:6b:2b: b3:95:5e:fd:9e:44:bf:20:f2:8d:96:bd:cd:27:b8: 65:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:22:C6:1C:2F:70:59:91:0E:86:7A:A1:41:54:17:93:21:AE:E6:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5741bc9e-66be-34de-a08e-a49c2de945f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.255.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:01:46:c9:b5:9f:3d:38:62:e0:d6:99:60:12:23:ba:23:85: d5:ff:f9:9b:3f:67:3b:32:58:64:21:b0:62:04:d3:5e:d1:bb: 9a:ad:4a:89:26:62:60:f8:c5:c3:e3:de:33:67:32:79:b6:6a: ef:42:13:60:0f:29:ba:b3:ad:d0:5d:7c:22:94:ca:a3:bd:3b: a2:26:d9:6c:47:b5:a5:57:30:1c:c0:b1:f4:0f:fc:01:da:83: 4a:27:b1:78:af:54:75:1d:4d:71:2e:7d:b7:b7:75:85:6b:ed: aa:20:6e:0f:80:77:7f:eb:63:bb:8c:6c:b3:ac:60:43:b8:41: c2:46:f9:aa:e5:c4:33:2b:74:cc:2d:f3:66:3a:fa:8b:0b:4e: a0:34:e5:1e:ae:5d:33:13:40:78:57:1d:ab:86:b0:40:d7:0d: de:de:1a:ad:9e:77:00:47:e6:75:95:ea:31:ca:98:9c:dd:4d: a5:09:5b:15:63:40:67:8f:19:8f:10:62:cd:4f:89:01:da:94: 36:f7:c0:cf:08:8e:4f:14:e3:c4:e4:1f:15:98:b4:f6:f7:d6: c9:bb:08:cc:aa:67:67:01:c8:cd:63:6c:92:ce:6e:f6:83:f5: ce:35:6d:0e:92:db:5f:46:56:b2:08:90:68:ba:fa:9f:95:d2: a9:62:e8:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuvkirn5iEK8VShcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAyOTE5NDg0MFoXDTI2MDEyNzIwNDg0MFowLzEtMCsGA1UEAxMk NWMxY2JkZjktNjY0MS00NTE0LTliMTktOGIzZDc4ODhiNjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUP9aAHQb9UNcIIeR/pqtQv1j/Pyc7K0tlm1 riMBTEEwr47mXvdVxDdxEO7uHl/XxCEUQCONptT6zXoRajtp4KPFilUM5UWlkJeJ jqdfNeyYrZOaJD7OG9AOyNXGRtK2Az7/l+Z91Qi5B2ZkQUvihuaH3pbstXD4q5ry kJ3aL5g95eKJhXBJHCd/cWYgdQA5sc9OBvRr6oU/0DdGk3SIOrVZP1R7TA+Of7fO sBzeyC4DflOLA2j4LZaKCceZv7R/u1qREVFbagW48GJEl7Z/Hf45TeVCsVOgTAus YiJcPZwPi2kEubOHdENipmYUayuzlV79nkS/IPKNlr3NJ7hl0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8ixhwvcFmRDoZ6oUFUF5MhruZvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNTc0MWJjOWUtNjZiZS0z NGRlLWEwOGUtYTQ5YzJkZTk0NWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJv9IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAABRsm1nz04YuDWmWASI7ojhdX/+Zs/ZzsyWGQhsGIE017Ru5qtSokm YmD4xcPj3jNnMnm2au9CE2APKbqzrdBdfCKUyqO9O6Im2WxHtaVXMBzAsfQP/AHa g0onsXivVHUdTXEufbe3dYVr7aogbg+Ad3/rY7uMbLOsYEO4QcJG+arlxDMrdMwt 82Y6+osLTqA05R6uXTMTQHhXHauGsEDXDd7eGq2edwBH5nWV6jHKmJzdTaUJWxVj QGePGY8QYs1PiQHalDb3wM8Ijk8U48TkHxWYtPb31sm7CMyqZ2cByM1jbJLObvaD 9c41bQ6S219GVrIIkGi6+p+V0qli6FE= -----END CERTIFICATE-----Generated at Wed Nov 5 01:07:16 2025 by rpki-client