$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/703e4b0a-2abe-3a94-85a9-7c9acb1e71e0.roa File: 703e4b0a-2abe-3a94-85a9-7c9acb1e71e0.roa (raw, json) Hash identifier: KmOg4MtmQ0y3CHZHjU9sJQMyQJqgtrwiOuyUN/Cy928= Subject key identifier: 4D:11:7D:FE:EA:BE:E2:1B:84:42:75:55:50:52:B1:7F:CF:F0:49:30 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584BB1D1454768529D8EB60D1D40 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/703e4b0a-2abe-3a94-85a9-7c9acb1e71e0.roa Signing time: Thu 30 Oct 2025 15:07:26 +0000 ROA not before: Thu 30 Oct 2025 15:07:26 +0000 ROA not after: Wed 28 Jan 2026 16:07:26 +0000 asID: 56902 IP address blocks: 38.190.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:d1:45:47:68:52:9d:8e:b6:0d:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 30 15:07:26 2025 GMT Not After : Jan 28 16:07:26 2026 GMT Subject: CN=d86dec5b-7f4e-4199-bb2d-aea77ad9e2c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:74:c7:a2:32:95:4c:f7:cb:f0:88:71:1e:1e: 84:12:b0:5c:66:85:92:34:d5:cb:85:da:3b:4d:e0: da:52:36:10:f7:d7:04:6a:0c:b5:92:1e:73:ec:ce: e2:49:17:b0:be:52:ab:8e:da:e3:7e:dd:48:4f:2b: f8:5e:47:1c:5a:61:14:c9:f4:5c:45:b2:4f:8c:d6: 14:44:0e:8f:3c:f4:54:3c:d8:81:3c:59:84:63:0c: a4:6f:09:64:8c:88:16:0c:fe:21:8a:c2:b1:9c:91: 31:cb:0e:38:84:6e:f0:81:52:eb:25:96:78:d7:aa: 93:50:30:3f:0f:7b:5e:29:fc:ba:b4:b0:54:6e:55: b6:8d:cc:a0:8b:03:19:6a:c5:16:ef:4b:d9:30:b1: 1d:a8:d5:72:e5:ed:89:e8:f4:60:d1:b1:ed:63:ea: 47:8d:19:78:6e:27:83:36:d0:5a:7d:e6:d4:d5:b5: 7e:b5:13:7a:08:3b:c9:82:06:fa:bd:b8:cd:d9:b0: 9b:37:ad:4e:e4:95:03:19:8d:6d:b2:b2:a3:7f:c5: b5:4a:d9:89:ba:39:f3:70:4f:f4:ea:03:fe:1a:3b: e6:e1:10:e6:1e:43:c2:76:cd:71:2a:28:e2:e5:d5: f1:05:46:fe:ba:c7:b4:1b:0c:d7:2b:cb:74:4d:2d: 6c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:11:7D:FE:EA:BE:E2:1B:84:42:75:55:50:52:B1:7F:CF:F0:49:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/703e4b0a-2abe-3a94-85a9-7c9acb1e71e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.190.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:c9:e8:0e:af:7c:84:de:32:c9:17:32:04:ab:36:ef:3b:f9: 2c:f6:f9:43:70:8c:bf:65:c7:d2:dc:40:0a:59:5c:fc:b4:12: 3e:12:e2:37:e1:d2:25:95:ce:0a:16:8c:70:35:ec:0f:d8:2a: ec:7c:ba:9b:45:ec:85:20:4e:76:e2:24:1a:b7:06:48:64:3b: a1:95:f0:00:d4:e7:2a:a3:99:fd:e4:82:f2:8d:cd:1d:44:c1: ff:c7:99:b1:b1:00:20:10:d3:2d:2b:5d:a1:67:67:6d:5c:af: fb:07:1d:11:9e:f0:14:b9:9d:66:3f:06:05:8c:9e:3f:ea:3e: 4c:78:2d:20:65:cd:56:a1:e7:9d:d6:b6:02:12:0b:c5:58:0f: 30:ff:38:e1:a7:cc:16:e3:fc:f4:a3:57:4e:7e:0b:7a:b8:2f: f5:ce:30:24:d7:0a:ea:41:25:4a:db:2d:24:9d:6c:87:d0:18: c6:54:4b:65:59:8b:c0:81:e8:37:67:7a:8a:93:8f:49:42:f8: f8:3a:50:de:3b:a5:48:f1:18:61:6c:bf:88:07:da:bf:20:77: 34:89:17:45:c5:cb:76:60:33:10:b5:1d:d4:7e:4a:56:fd:37: bc:15:2c:88:c1:af:5f:3b:f1:ce:a2:df:03:38:09:88:17:95: 20:34:cd:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEux0UVHaFKdjrYNHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAzMDE1MDcyNloXDTI2MDEyODE2MDcyNlowLzEtMCsGA1UEAxMk ZDg2ZGVjNWItN2Y0ZS00MTk5LWJiMmQtYWVhNzdhZDllMmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXTHojKVTPfL8IhxHh6EErBcZoWSNNXLhdo7 TeDaUjYQ99cEagy1kh5z7M7iSRewvlKrjtrjft1ITyv4XkccWmEUyfRcRbJPjNYU RA6PPPRUPNiBPFmEYwykbwlkjIgWDP4hisKxnJExyw44hG7wgVLrJZZ416qTUDA/ D3teKfy6tLBUblW2jcygiwMZasUW70vZMLEdqNVy5e2J6PRg0bHtY+pHjRl4bieD NtBafebU1bV+tRN6CDvJggb6vbjN2bCbN61O5JUDGY1tsrKjf8W1StmJujnzcE/0 6gP+Gjvm4RDmHkPCds1xKiji5dXxBUb+use0GwzXK8t0TS1sdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0Rff7qvuIbhEJ1VVBSsX/P8EkwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNzAzZTRiMGEtMmFiZS0z YTk0LTg1YTktN2M5YWNiMWU3MWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJr5oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLJ6A6vfITeMskXMgSrNu87+Sz2+UNwjL9lx9LcQApZXPy0Ej4S4jfh 0iWVzgoWjHA17A/YKux8uptF7IUgTnbiJBq3BkhkO6GV8ADU5yqjmf3kgvKNzR1E wf/HmbGxACAQ0y0rXaFnZ21cr/sHHRGe8BS5nWY/BgWMnj/qPkx4LSBlzVah553W tgISC8VYDzD/OOGnzBbj/PSjV05+C3q4L/XOMCTXCupBJUrbLSSdbIfQGMZUS2VZ i8CB6DdneoqTj0lC+Pg6UN47pUjxGGFsv4gH2r8gdzSJF0XFy3ZgMxC1HdR+Slb9 N7wVLIjBr1878c6i3wM4CYgXlSA0zb8= -----END CERTIFICATE-----Generated at Wed Nov 5 01:07:14 2025 by rpki-client