$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/67a842af-3bab-34da-b7ef-88cc9de6c75a.roa File: 67a842af-3bab-34da-b7ef-88cc9de6c75a.roa (raw, json) Hash identifier: xR4QUu+xmQXgr0hJCCQX1Krhwn/8idoDhXNnd3eyWnA= Subject key identifier: 4F:A3:49:A3:8E:03:2C:5F:6F:A2:92:50:F4:5B:A1:9F:57:11:94:EE Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584BB529B116C50E8B0107C29680 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/67a842af-3bab-34da-b7ef-88cc9de6c75a.roa Signing time: Tue 28 Oct 2025 20:43:51 +0000 ROA not before: Tue 28 Oct 2025 20:43:51 +0000 ROA not after: Mon 26 Jan 2026 21:43:51 +0000 asID: 272403 IP address blocks: 38.158.88.0/22 maxlen: 22 38.158.88.0/24 maxlen: 24 38.158.89.0/24 maxlen: 24 38.158.90.0/24 maxlen: 24 38.158.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:29:b1:16:c5:0e:8b:01:07:c2:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 28 20:43:51 2025 GMT Not After : Jan 26 21:43:51 2026 GMT Subject: CN=9e96276e-09d6-465a-9cb8-d68b145293a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ae:20:44:5d:8f:df:d4:c9:0e:fe:2f:2b:86: f6:8a:37:fe:8c:36:c2:3e:5e:bb:22:21:c5:df:b3: d5:75:e6:4a:21:86:32:18:e3:f6:3b:d7:c2:fd:bf: df:38:c0:b6:f2:eb:dc:64:e0:13:57:32:02:55:e6: b7:b5:18:3e:3c:d4:6d:f6:db:75:42:73:db:aa:79: b9:3a:6e:4d:76:d2:2f:d3:6a:db:4e:18:72:14:51: 7b:11:b4:39:51:a0:8e:0d:ba:5d:e8:7a:d2:b3:fd: 70:9e:61:d0:ec:1a:18:84:37:d0:78:9f:48:e7:eb: 26:21:c5:65:ec:11:d5:8c:86:69:f7:dd:41:da:fa: 8f:fb:2e:5e:ba:8c:46:29:0f:d0:25:62:f7:c0:51: 0c:4c:71:8b:a8:ba:4a:67:42:e0:32:bf:9c:e3:7d: bd:31:d3:79:84:69:af:c4:1c:d9:17:b5:78:89:91: a5:62:a0:06:cf:17:e6:80:00:0d:c4:25:ad:a3:ff: 28:84:88:47:41:f2:e6:82:3e:4f:7d:c8:cb:4c:96: d1:e6:83:4c:fd:03:af:55:b2:3c:4a:fb:ac:0f:f6: 58:f1:92:5d:7c:86:1b:d9:33:b5:43:fb:5f:e0:ab: 41:5a:41:02:be:aa:fc:78:ef:09:bd:a6:b1:44:33: 76:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A3:49:A3:8E:03:2C:5F:6F:A2:92:50:F4:5B:A1:9F:57:11:94:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/67a842af-3bab-34da-b7ef-88cc9de6c75a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.158.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:5a:40:9d:c6:89:c4:df:b3:60:f4:6a:38:25:01:19:9a:cb: eb:96:c2:c1:70:dc:2a:5f:26:23:e2:67:02:c8:79:03:fb:95: 16:2a:13:1b:ae:69:c9:36:10:81:0e:8b:b3:55:f4:61:c0:65: 20:4a:d6:10:bc:78:ce:e0:ad:29:2f:49:7d:9a:4c:1e:9e:f0: f0:c4:61:1e:80:f0:48:10:f0:c7:1f:22:93:7d:f9:f6:5c:98: 6c:0f:d5:05:e6:ba:55:05:7d:c0:9e:a0:21:29:00:a2:ee:05: 9e:69:0d:61:5e:43:7d:e8:c5:28:ee:17:20:1c:06:89:cc:6d: f6:78:16:44:0e:a9:f6:59:72:17:a9:43:37:fc:3f:02:5b:cc: 53:f8:1e:6f:a2:4e:a5:68:2a:e3:6c:71:e4:73:79:58:a7:30: e8:61:90:53:ef:23:2f:2f:de:80:48:26:bf:59:fa:31:5a:4d: 3a:16:7b:6c:93:cb:a1:2e:89:22:92:c1:23:e8:b2:3d:dc:51: a0:e9:be:16:32:5b:2e:06:e4:37:fc:a7:97:c3:3c:21:eb:c2: 93:11:8b:51:b0:42:a0:bc:90:41:95:20:81:50:f2:50:68:0f: 2a:b1:e7:ab:ca:79:08:83:2d:d6:b8:53:ae:33:a8:35:6f:b8: 14:1e:61:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1KbEWxQ6LAQfCloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAyODIwNDM1MVoXDTI2MDEyNjIxNDM1MVowLzEtMCsGA1UEAxMk OWU5NjI3NmUtMDlkNi00NjVhLTljYjgtZDY4YjE0NTI5M2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi64gRF2P39TJDv4vK4b2ijf+jDbCPl67IiHF 37PVdeZKIYYyGOP2O9fC/b/fOMC28uvcZOATVzICVea3tRg+PNRt9tt1QnPbqnm5 Om5NdtIv02rbThhyFFF7EbQ5UaCODbpd6HrSs/1wnmHQ7BoYhDfQeJ9I5+smIcVl 7BHVjIZp991B2vqP+y5euoxGKQ/QJWL3wFEMTHGLqLpKZ0LgMr+c4329MdN5hGmv xBzZF7V4iZGlYqAGzxfmgAANxCWto/8ohIhHQfLmgj5PfcjLTJbR5oNM/QOvVbI8 SvusD/ZY8ZJdfIYb2TO1Q/tf4KtBWkECvqr8eO8JvaaxRDN2UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+jSaOOAyxfb6KSUPRboZ9XEZTuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNjdhODQyYWYtM2JhYi0z NGRhLWI3ZWYtODhjYzlkZTZjNzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJp5YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9aQJ3GicTfs2D0ajglARmay+uWwsFw3CpfJiPiZwLIeQP7lRYqExuu ack2EIEOi7NV9GHAZSBK1hC8eM7grSkvSX2aTB6e8PDEYR6A8EgQ8McfIpN9+fZc mGwP1QXmulUFfcCeoCEpAKLuBZ5pDWFeQ33oxSjuFyAcBonMbfZ4FkQOqfZZchep Qzf8PwJbzFP4Hm+iTqVoKuNsceRzeVinMOhhkFPvIy8v3oBIJr9Z+jFaTToWe2yT y6EuiSKSwSPosj3cUaDpvhYyWy4G5Df8p5fDPCHrwpMRi1GwQqC8kEGVIIFQ8lBo Dyqx56vKeQiDLda4U64zqDVvuBQeYf0= -----END CERTIFICATE-----Generated at Tue Nov 4 22:07:30 2025 by rpki-client