$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6001a1d2-14c1-3c2a-94fe-174b9f401efe.roa File: 6001a1d2-14c1-3c2a-94fe-174b9f401efe.roa (raw, json) Hash identifier: arMxF0kevXI1+zuru9p6HW4cwxHWvBxbkUsfXbZstDw= Subject key identifier: 19:59:48:73:51:CC:F1:26:26:1D:C5:3E:5B:56:DD:B5:FA:8C:C7:E2 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B9B6D470B6717AF328CB6C580 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6001a1d2-14c1-3c2a-94fe-174b9f401efe.roa Signing time: Wed 22 Oct 2025 14:38:10 +0000 ROA not before: Wed 22 Oct 2025 14:38:10 +0000 ROA not after: Tue 20 Jan 2026 15:38:10 +0000 asID: 135600 IP address blocks: 38.29.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:6d:47:0b:67:17:af:32:8c:b6:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 22 14:38:10 2025 GMT Not After : Jan 20 15:38:10 2026 GMT Subject: CN=ebcee9f4-51f4-4ade-b401-6bd0c564e299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:63:09:64:4c:a0:1e:b7:82:1f:1d:c0:a2:db: 3d:0b:b7:a8:bc:16:63:20:39:61:a6:bd:87:a3:ca: 2b:2d:49:ff:96:8b:21:f2:5a:03:20:11:36:19:4a: e2:d2:52:f1:78:18:b1:48:7e:c2:82:db:7a:dc:bb: 02:d5:47:f8:2d:6f:30:56:c1:1e:1e:a8:6b:fb:7a: 15:a9:78:5d:b0:41:41:62:f3:6a:7c:51:d1:2e:e8: 0d:1a:6f:7f:62:56:a0:fe:e1:72:d9:1b:c1:a1:ad: fa:5d:bf:d5:9a:05:48:c4:9b:36:4d:64:e8:3c:97: e9:5b:dc:2c:71:b6:4a:24:c1:88:74:fb:34:a4:cd: 9f:a6:94:a5:24:54:14:ae:af:cc:b4:0a:c1:5d:b8: 3d:52:7f:4e:01:85:4e:ea:db:c5:31:95:ef:23:9c: 89:69:96:a3:b5:8b:a7:31:37:c0:29:82:fe:28:70: 89:e4:3b:7c:cc:79:45:b6:4f:b1:60:e1:76:35:96: c1:a9:19:65:fd:02:37:a7:65:a5:8c:6d:5a:bd:16: 20:a4:68:08:42:5c:cb:20:cd:12:c4:12:0a:5a:30: 9e:d3:f7:fc:b3:5f:26:de:c9:57:73:e2:bf:81:4a: 84:b2:2a:00:7f:ee:3d:07:4b:33:88:29:01:5d:10: e2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:59:48:73:51:CC:F1:26:26:1D:C5:3E:5B:56:DD:B5:FA:8C:C7:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6001a1d2-14c1-3c2a-94fe-174b9f401efe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.29.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:13:a7:ce:38:17:44:a9:49:52:aa:12:7f:49:d3:89:45:f2: 6c:70:0c:68:cd:bd:53:ff:c8:e9:15:65:d4:4e:c8:a8:e7:0e: 05:91:0b:00:d8:56:d5:40:77:7a:58:e8:11:8d:ab:f4:d2:28: 77:7d:08:ca:9f:24:b3:2c:87:24:48:9e:21:11:3f:26:d5:84: 36:41:51:5e:93:73:4f:9b:d6:29:b2:aa:b5:23:a7:4c:6b:7d: ab:d1:7e:da:52:8e:1e:96:40:56:ae:28:0f:e3:78:d0:db:75: 3d:01:fc:d7:df:be:d5:e7:4a:77:8a:da:dc:8e:59:8b:e0:78: 7b:b8:23:0c:fb:13:26:b6:7e:a0:3f:98:9c:5f:90:22:a9:1a: 15:31:70:9d:b8:71:a3:ef:34:22:0b:c0:94:a7:b5:a1:a0:91: e3:65:07:27:0d:47:c1:5f:8e:c4:d0:06:49:a4:23:46:e5:9b: e5:ab:3f:2e:f6:9c:3b:46:89:ee:7d:da:a1:d9:1d:5e:87:0e: 70:e9:01:a7:89:6a:37:6a:54:b3:1a:b9:34:b4:27:08:6d:a7: 11:77:e8:6d:9e:9d:cf:04:3a:df:e5:d6:92:73:ac:79:dd:b8: 15:75:e6:af:ef:83:db:71:89:88:9e:60:bb:49:e5:50:58:96: ae:c1:57:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubbUcLZxevMoy2xYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAyMjE0MzgxMFoXDTI2MDEyMDE1MzgxMFowLzEtMCsGA1UEAxMk ZWJjZWU5ZjQtNTFmNC00YWRlLWI0MDEtNmJkMGM1NjRlMjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mMJZEygHreCHx3Aots9C7eovBZjIDlhpr2H o8orLUn/losh8loDIBE2GUri0lLxeBixSH7Cgtt63LsC1Uf4LW8wVsEeHqhr+3oV qXhdsEFBYvNqfFHRLugNGm9/Ylag/uFy2RvBoa36Xb/VmgVIxJs2TWToPJfpW9ws cbZKJMGIdPs0pM2fppSlJFQUrq/MtArBXbg9Un9OAYVO6tvFMZXvI5yJaZajtYun MTfAKYL+KHCJ5Dt8zHlFtk+xYOF2NZbBqRll/QI3p2WljG1avRYgpGgIQlzLIM0S xBIKWjCe0/f8s18m3slXc+K/gUqEsioAf+49B0sziCkBXRDiVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlZSHNRzPEmJh3FPltW3bX6jMfiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNjAwMWExZDItMTRjMS0z YzJhLTk0ZmUtMTc0YjlmNDAxZWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJh2YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgTp844F0SpSVKqEn9J04lF8mxwDGjNvVP/yOkVZdROyKjnDgWRCwDY VtVAd3pY6BGNq/TSKHd9CMqfJLMshyRIniERPybVhDZBUV6Tc0+b1imyqrUjp0xr favRftpSjh6WQFauKA/jeNDbdT0B/NffvtXnSneK2tyOWYvgeHu4Iwz7Eya2fqA/ mJxfkCKpGhUxcJ24caPvNCILwJSntaGgkeNlBycNR8FfjsTQBkmkI0blm+WrPy72 nDtGie592qHZHV6HDnDpAaeJajdqVLMauTS0JwhtpxF36G2enc8EOt/l1pJzrHnd uBV15q/vg9txiYieYLtJ5VBYlq7BVwY= -----END CERTIFICATE-----Generated at Wed Nov 5 08:14:32 2025 by rpki-client