$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8561c813-926e-38a5-8409-f94b415f5b41.roa File: 8561c813-926e-38a5-8409-f94b415f5b41.roa (raw, json) Hash identifier: Wsad5UgE5JT23om1oybc7uIBx+NCcvijQI1TNn7o+Sw= Subject key identifier: 5B:A8:85:7B:EC:99:18:65:BB:28:A1:8D:BF:A6:C9:B6:40:16:0B:9C Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B9C463DE2AB78F10EE30B2600 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8561c813-926e-38a5-8409-f94b415f5b41.roa Signing time: Wed 22 Oct 2025 21:55:20 +0000 ROA not before: Wed 22 Oct 2025 21:55:20 +0000 ROA not after: Tue 20 Jan 2026 22:55:20 +0000 asID: 204170 IP address blocks: 38.253.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:46:3d:e2:ab:78:f1:0e:e3:0b:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 22 21:55:20 2025 GMT Not After : Jan 20 22:55:20 2026 GMT Subject: CN=9cdd5af9-44fe-4c55-a752-464610682642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a5:e4:8a:27:e2:67:d7:62:1d:8e:b5:56:f4: 73:e1:c9:18:1e:7e:39:b6:70:4e:d3:80:c8:62:74: 32:c5:52:1a:0c:cb:6b:69:d7:61:8e:43:53:c6:93: e1:e9:fa:f1:17:16:4f:22:87:d7:03:65:09:2f:22: f6:41:1c:6a:75:af:c7:6b:97:eb:b1:7c:bc:3c:b8: 91:51:0c:f8:a6:df:df:59:56:b5:f0:4a:28:d0:18: 1d:8e:00:35:f8:43:a1:e7:a4:39:dc:31:28:f0:b2: 04:93:87:b1:05:3d:7a:1f:70:b3:21:19:8a:d7:28: 3e:a0:43:76:45:1c:d8:de:62:40:e7:c2:c5:0b:9e: 62:f4:e4:e6:73:65:6b:ea:5e:09:66:01:70:17:05: 14:6a:b1:d7:03:b0:d2:db:fd:86:cb:2a:45:43:f9: d8:0c:c5:ec:61:fa:2e:8b:42:95:4b:c0:1d:6e:a0: fd:13:b3:b4:a6:4d:5d:95:d9:25:54:ab:ee:84:ff: d6:69:4c:dd:63:da:04:0e:77:af:33:63:ca:05:72: f6:43:ce:a8:41:4f:16:8b:62:97:0f:51:30:80:fd: 3f:54:b6:8b:bc:56:d2:ae:70:91:b3:df:28:87:ed: d2:6c:03:68:7b:eb:19:94:72:47:cc:5f:09:14:5f: 57:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A8:85:7B:EC:99:18:65:BB:28:A1:8D:BF:A6:C9:B6:40:16:0B:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8561c813-926e-38a5-8409-f94b415f5b41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.253.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:d7:58:0a:09:bc:23:3f:3b:d4:3f:72:ff:f2:77:15:0f:a7: 0e:2d:6d:4e:8e:ff:a4:64:72:cd:92:26:68:a4:3b:f2:e0:9a: a3:6e:b8:f0:73:2a:11:51:f0:d3:20:20:3c:2e:7f:10:be:e3: 77:3b:93:d0:ef:80:52:20:59:43:53:e2:2e:60:73:7a:c1:6e: 93:1f:05:f8:04:a9:04:5b:13:d4:3e:85:15:96:e1:7f:3d:44: c5:9b:2b:0a:0d:d2:6b:32:a3:08:27:11:b3:be:84:8d:a5:4c: a4:23:c9:9c:f6:35:d6:df:72:d0:9f:52:6c:00:d7:12:33:dd: 95:49:19:90:cd:d9:6a:cd:e2:1e:98:2e:8d:6c:29:e0:48:e9: 08:cc:49:2c:5f:d4:ec:76:22:e9:5a:dd:ae:5d:78:c9:fe:b2: 3d:bb:6a:0b:c1:19:4d:f8:e7:0d:fa:50:40:f6:37:9c:f8:5c: 27:b3:2a:04:34:b7:7d:df:2f:69:91:21:7d:c9:e2:29:a6:69: f4:58:12:62:1b:f6:be:d6:bd:a1:d1:1e:1b:df:9e:db:fb:cc: 01:8a:e8:4a:b8:9b:41:7b:13:3e:c3:27:15:74:81:64:8a:57: bb:42:f2:12:9d:9d:7a:cb:71:d6:eb:91:f9:12:3d:72:88:e0: 2b:b2:af:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEucRj3iq3jxDuMLJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAyMjIxNTUyMFoXDTI2MDEyMDIyNTUyMFowLzEtMCsGA1UEAxMk OWNkZDVhZjktNDRmZS00YzU1LWE3NTItNDY0NjEwNjgyNjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6XkiifiZ9diHY61VvRz4ckYHn45tnBO04DI YnQyxVIaDMtraddhjkNTxpPh6frxFxZPIofXA2UJLyL2QRxqda/Ha5frsXy8PLiR UQz4pt/fWVa18Eoo0BgdjgA1+EOh56Q53DEo8LIEk4exBT16H3CzIRmK1yg+oEN2 RRzY3mJA58LFC55i9OTmc2Vr6l4JZgFwFwUUarHXA7DS2/2GyypFQ/nYDMXsYfou i0KVS8AdbqD9E7O0pk1dldklVKvuhP/WaUzdY9oEDnevM2PKBXL2Q86oQU8Wi2KX D1EwgP0/VLaLvFbSrnCRs98oh+3SbANoe+sZlHJHzF8JFF9XxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuohXvsmRhluyihjb+mybZAFgucMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODU2MWM4MTMtOTI2ZS0z OGE1LTg0MDktZjk0YjQxNWY1YjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFJv3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjXWAoJvCM/O9Q/cv/ydxUPpw4tbU6O/6Rkcs2SJmikO/LgmqNuuPBz KhFR8NMgIDwufxC+43c7k9DvgFIgWUNT4i5gc3rBbpMfBfgEqQRbE9Q+hRWW4X89 RMWbKwoN0msyowgnEbO+hI2lTKQjyZz2NdbfctCfUmwA1xIz3ZVJGZDN2WrN4h6Y Lo1sKeBI6QjMSSxf1Ox2Iula3a5deMn+sj27agvBGU345w36UED2N5z4XCezKgQ0 t33fL2mRIX3J4immafRYEmIb9r7WvaHRHhvfntv7zAGK6Eq4m0F7Ez7DJxV0gWSK V7tC8hKdnXrLcdbrkfkSPXKI4Cuyr0M= -----END CERTIFICATE-----Generated at Tue Nov 4 22:07:17 2025 by rpki-client