$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/69070604-9ddc-3ffa-8457-fb94b553b978.roa File: 69070604-9ddc-3ffa-8457-fb94b553b978.roa (raw, json) Hash identifier: 2f9STriSbexkvYNXPyfHkhOLfXwK9yNBavtcHHI81tI= Subject key identifier: 79:4E:A4:8F:5B:1B:BB:C5:2E:F9:1C:6C:A7:5E:4F:A8:5D:67:13:24 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B9B4C0A4F841C8DBD983EF100 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/69070604-9ddc-3ffa-8457-fb94b553b978.roa Signing time: Wed 22 Oct 2025 13:31:12 +0000 ROA not before: Wed 22 Oct 2025 13:31:12 +0000 ROA not after: Tue 20 Jan 2026 14:31:12 +0000 asID: 140224 IP address blocks: 38.54.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:4c:0a:4f:84:1c:8d:bd:98:3e:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 22 13:31:12 2025 GMT Not After : Jan 20 14:31:12 2026 GMT Subject: CN=1b3f5e4b-634a-43e8-a1aa-0300d6496abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a2:1b:8f:6c:54:87:5c:8b:2a:c2:a5:49:39: 00:73:d5:35:96:da:56:10:21:a9:aa:2f:08:43:61: d5:bf:4c:cf:e5:c0:d4:6b:c2:02:cf:5a:c8:c3:19: 6e:a8:00:be:7b:d4:7b:52:60:08:d0:95:89:21:c8: 82:dd:20:8d:b9:7b:fe:f5:a8:dc:dd:d2:c7:a1:f2: fc:5b:09:e6:a7:85:6c:41:de:d5:18:79:bc:5c:06: 98:04:d3:b3:da:ab:8c:b0:e2:c0:3b:8d:e5:99:de: e9:c6:b0:2a:0a:fe:59:48:46:3f:0a:fd:06:a4:3e: f4:ae:a0:1c:a7:01:d3:4b:24:59:83:e4:62:47:6d: 06:90:02:b9:db:21:f8:4e:2f:22:6d:62:7f:59:07: 26:bd:9d:71:15:ed:7c:45:69:a0:a4:87:b1:fa:03: 22:b0:f4:6f:5c:fe:7e:b2:8f:07:33:3d:2e:29:d8: ac:dd:69:53:30:d8:1b:57:cd:92:0b:3a:89:2f:55: ab:77:ce:8c:d0:60:15:54:28:34:e1:9e:06:2a:c8: 18:31:99:58:1d:df:ac:45:95:8b:b0:5f:b1:f8:21: 82:94:25:97:16:52:a2:71:3e:4b:4a:d3:8d:74:de: 76:3a:6c:50:65:f3:ef:1d:23:89:bb:ed:29:1e:7b: a5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:4E:A4:8F:5B:1B:BB:C5:2E:F9:1C:6C:A7:5E:4F:A8:5D:67:13:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/69070604-9ddc-3ffa-8457-fb94b553b978.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.54.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:88:73:64:81:13:48:bf:4d:4d:51:08:f6:c6:20:51:b3:76: 18:36:e8:a1:c7:61:b8:2c:1c:18:19:d8:17:9b:78:0f:c6:8a: f4:97:88:93:ae:0c:51:9e:c5:fe:48:d3:d1:e4:ce:ed:74:53: 0d:e6:bd:fd:d2:bb:e5:12:87:41:66:27:79:c8:30:1f:93:df: e9:83:e5:2e:bb:b8:9b:a1:5b:84:06:00:99:f6:84:07:70:cb: 96:ae:ec:63:b1:e4:12:6e:48:9a:0e:b8:95:65:b6:89:c6:a1: 4c:a2:b5:ec:c4:ea:d3:28:80:44:e9:e0:a3:92:bb:35:a4:23: 30:90:bf:23:a4:e7:4b:1c:7e:df:69:f8:cd:b9:6e:e2:6e:e9: f5:6c:be:2b:65:cf:f3:9f:26:3e:12:8c:26:57:b6:37:e9:55: 8c:4a:61:ff:7b:ad:e2:eb:a8:fc:e9:22:30:be:6b:15:c9:29: 16:14:6a:f1:60:6a:63:48:3f:09:b0:49:14:a5:6c:ec:9d:dd: 82:1a:22:31:f5:eb:73:5f:82:d6:e8:b5:15:6a:f1:63:f4:e3: 05:4b:3d:af:2c:6a:a6:1f:4b:b9:57:0f:08:33:55:d3:93:61: c3:0c:e5:73:ef:5d:11:74:3d:01:86:57:7e:bb:05:fa:5f:e1: dc:6b:77:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubTApPhByNvZg+8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAyMjEzMzExMloXDTI2MDEyMDE0MzExMlowLzEtMCsGA1UEAxMk MWIzZjVlNGItNjM0YS00M2U4LWExYWEtMDMwMGQ2NDk2YWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6Ibj2xUh1yLKsKlSTkAc9U1ltpWECGpqi8I Q2HVv0zP5cDUa8ICz1rIwxluqAC+e9R7UmAI0JWJIciC3SCNuXv+9ajc3dLHofL8 Wwnmp4VsQd7VGHm8XAaYBNOz2quMsOLAO43lmd7pxrAqCv5ZSEY/Cv0GpD70rqAc pwHTSyRZg+RiR20GkAK52yH4Ti8ibWJ/WQcmvZ1xFe18RWmgpIex+gMisPRvXP5+ so8HMz0uKdis3WlTMNgbV82SCzqJL1Wrd86M0GAVVCg04Z4GKsgYMZlYHd+sRZWL sF+x+CGClCWXFlKicT5LStONdN52OmxQZfPvHSOJu+0pHnuljwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlOpI9bG7vFLvkcbKdeT6hdZxMkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNjkwNzA2MDQtOWRkYy0z ZmZhLTg0NTctZmI5NGI1NTNiOTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJjZcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWIc2SBE0i/TU1RCPbGIFGzdhg26KHHYbgsHBgZ2BebeA/GivSXiJOu DFGexf5I09Hkzu10Uw3mvf3Su+USh0FmJ3nIMB+T3+mD5S67uJuhW4QGAJn2hAdw y5au7GOx5BJuSJoOuJVltonGoUyitezE6tMogETp4KOSuzWkIzCQvyOk50scft9p +M25buJu6fVsvitlz/OfJj4SjCZXtjfpVYxKYf97reLrqPzpIjC+axXJKRYUavFg amNIPwmwSRSlbOyd3YIaIjH163NfgtbotRVq8WP04wVLPa8saqYfS7lXDwgzVdOT YcMM5XPvXRF0PQGGV367Bfpf4dxrdyk= -----END CERTIFICATE-----Generated at Tue Nov 4 16:53:40 2025 by rpki-client