$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/58a82f4e-abec-3b27-87f3-d66287b9d579.roa File: 58a82f4e-abec-3b27-87f3-d66287b9d579.roa (raw, json) Hash identifier: vgqEWj+9yjHufnWXokmWhM6drg9VWhKZ1Y4mbZgAz9g= Subject key identifier: 33:67:8E:43:1C:19:3A:0B:E0:3A:E0:59:32:41:47:B6:8F:FF:B7:CA Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584BBD0BFA484F7E2E70AD370500 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/58a82f4e-abec-3b27-87f3-d66287b9d579.roa Signing time: Mon 03 Nov 2025 15:39:37 +0000 ROA not before: Mon 03 Nov 2025 15:39:37 +0000 ROA not after: Sun 01 Feb 2026 15:39:37 +0000 asID: 46475 IP address blocks: 38.86.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bd:0b:fa:48:4f:7e:2e:70:ad:37:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Nov 3 15:39:37 2025 GMT Not After : Feb 1 15:39:37 2026 GMT Subject: CN=dedc0f5f-6f71-443a-bc59-27ed3bc73089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d3:c8:5f:4f:3d:70:33:65:91:27:9e:19:be: 9c:67:a8:29:85:61:13:81:85:7a:fd:10:49:84:36: 41:14:92:cd:f9:a8:c4:c8:e7:fa:0b:fb:7e:35:4f: fc:98:44:dc:13:ff:ee:4b:68:a1:4c:c1:aa:0b:cc: 1f:9f:c2:82:20:ee:33:a2:7b:78:92:e9:6f:b0:8e: 5b:99:6e:83:ff:35:a6:a5:ef:d6:bc:d9:5b:eb:8b: 55:b3:c7:5d:94:af:74:ac:cf:93:38:de:0a:e3:23: c1:20:d3:c0:c9:83:d4:04:10:2c:ea:51:f0:82:d4: f9:9c:79:fc:df:8f:4a:aa:18:d4:26:9d:e5:59:4d: 3d:73:db:e2:09:01:62:38:d9:cf:fb:e5:ab:9d:4a: 9d:4d:eb:54:a4:0f:61:b5:81:43:bf:23:d8:e6:fa: 8f:50:fd:bc:c9:bf:65:d0:3f:99:44:84:b1:53:e1: c4:10:86:ec:0b:18:cd:1a:6e:7b:2e:72:e1:25:7c: 8f:9b:8a:0d:9d:83:94:bf:07:81:36:b9:7f:ad:2f: e0:62:5b:5f:9c:14:59:63:d1:8e:69:ff:18:0c:64: eb:31:26:8c:64:53:e5:02:f1:c8:a1:20:c7:64:34: 08:5f:3a:9a:2d:1c:0f:95:55:a0:7b:a5:b1:a2:8c: 2a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:67:8E:43:1C:19:3A:0B:E0:3A:E0:59:32:41:47:B6:8F:FF:B7:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/58a82f4e-abec-3b27-87f3-d66287b9d579.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.86.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:73:05:e1:09:61:b1:af:e3:ef:3c:3f:bb:fc:f4:b4:72:74: ae:c4:bb:86:97:8d:53:48:12:47:ca:49:92:73:2d:bd:0b:02: 62:fc:ed:ec:34:f2:90:27:07:aa:fc:97:81:c1:98:79:b3:bf: ca:f4:a4:21:31:af:cc:0b:0a:8c:b5:fa:96:06:0b:86:cf:c7: 7b:66:bb:01:17:aa:6b:0e:dd:b5:b5:21:16:eb:81:43:fa:2a: 5a:11:2f:d2:eb:b5:dd:00:d4:da:f3:27:0b:66:a0:3b:c6:55: d4:07:ce:4a:01:56:22:49:da:ee:7e:99:93:72:38:f9:bf:ea: 73:3f:78:07:97:59:16:1c:06:a6:ba:aa:99:72:a5:88:28:44: 19:6a:4c:a6:33:49:34:da:2f:ff:d2:0c:bd:b7:73:d6:0a:48: 98:04:60:c8:63:80:11:96:e9:89:c7:ed:a7:19:0f:b2:a1:e5: e9:73:aa:8e:3a:40:82:33:1b:75:bf:18:da:32:80:52:1f:b5: ea:3b:66:58:64:d3:2f:d8:d9:10:4d:0d:a9:d9:bf:b0:bf:33: 1d:0b:08:ca:85:72:d6:23:95:db:73:d5:6b:55:58:90:68:4f: 44:85:e1:c6:cc:90:e3:a3:29:a3:c9:f8:7a:31:33:ce:ad:cf: 57:b4:85:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu9C/pIT34ucK03BQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTEwMzE1MzkzN1oXDTI2MDIwMTE1MzkzN1owLzEtMCsGA1UEAxMk ZGVkYzBmNWYtNmY3MS00NDNhLWJjNTktMjdlZDNiYzczMDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNPIX089cDNlkSeeGb6cZ6gphWETgYV6/RBJ hDZBFJLN+ajEyOf6C/t+NU/8mETcE//uS2ihTMGqC8wfn8KCIO4zont4kulvsI5b mW6D/zWmpe/WvNlb64tVs8ddlK90rM+TON4K4yPBINPAyYPUBBAs6lHwgtT5nHn8 349KqhjUJp3lWU09c9viCQFiONnP++WrnUqdTetUpA9htYFDvyPY5vqPUP28yb9l 0D+ZRISxU+HEEIbsCxjNGm57LnLhJXyPm4oNnYOUvweBNrl/rS/gYltfnBRZY9GO af8YDGTrMSaMZFPlAvHIoSDHZDQIXzqaLRwPlVWge6WxoowqGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNnjkMcGToL4DrgWTJBR7aP/7fKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNThhODJmNGUtYWJlYy0z YjI3LTg3ZjMtZDY2Mjg3YjlkNTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJlauMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALlzBeEJYbGv4+88P7v89LRydK7Eu4aXjVNIEkfKSZJzLb0LAmL87ew0 8pAnB6r8l4HBmHmzv8r0pCExr8wLCoy1+pYGC4bPx3tmuwEXqmsO3bW1IRbrgUP6 KloRL9Lrtd0A1NrzJwtmoDvGVdQHzkoBViJJ2u5+mZNyOPm/6nM/eAeXWRYcBqa6 qplypYgoRBlqTKYzSTTaL//SDL23c9YKSJgEYMhjgBGW6YnH7acZD7Kh5elzqo46 QIIzG3W/GNoygFIfteo7Zlhk0y/Y2RBNDanZv7C/Mx0LCMqFctYjldtz1WtVWJBo T0SF4cbMkOOjKaPJ+HoxM86tz1e0hf8= -----END CERTIFICATE-----Generated at Wed Nov 5 07:39:08 2025 by rpki-client