$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8eedbd05-4df6-3279-bee5-5f0163d56678.roa File: 8eedbd05-4df6-3279-bee5-5f0163d56678.roa (raw, json) Hash identifier: wrvtN5C5khBm2bClCuROVqyTar9Vy3EyLXXvJMA0tt4= Subject key identifier: D7:EA:A7:D2:7B:64:A1:21:E1:42:1F:6C:85:8B:D7:97:0C:E6:F5:5A Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B9C53B9F383AEF0DE68905720 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8eedbd05-4df6-3279-bee5-5f0163d56678.roa Signing time: Wed 22 Oct 2025 22:22:30 +0000 ROA not before: Wed 22 Oct 2025 22:22:30 +0000 ROA not after: Tue 20 Jan 2026 23:22:30 +0000 asID: 271023 IP address blocks: 38.226.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:53:b9:f3:83:ae:f0:de:68:90:57:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 22 22:22:30 2025 GMT Not After : Jan 20 23:22:30 2026 GMT Subject: CN=21222bb6-bd21-4f80-8f83-2faa2cc40389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e9:2a:14:b2:71:65:8e:e1:40:49:62:d0:9c: 46:16:01:1f:3a:64:ea:74:85:cf:73:87:de:e7:0d: e5:c4:66:f5:d3:c5:a7:9d:ca:30:d7:33:1a:e0:67: a5:47:79:9a:b6:83:eb:ed:83:9a:97:94:2f:cc:76: f9:ee:43:1f:23:08:5c:e1:91:9c:2c:33:17:fb:73: de:78:8f:4c:0f:de:83:58:b0:5c:84:43:9a:56:8a: 35:2c:2e:ea:b1:9c:3a:27:d1:72:5a:45:63:23:fe: 75:14:26:46:51:c8:5e:09:6c:14:79:a6:44:5a:4a: 89:47:10:40:7b:54:b5:bd:f4:ee:e5:40:80:b6:cd: d4:c4:7a:82:df:48:80:34:15:f8:92:be:1b:64:bc: 0d:52:89:bb:4b:e6:56:74:c9:05:2f:f2:ea:6d:16: e7:17:13:fc:97:b8:20:42:ac:e8:01:3b:15:de:89: d3:fb:08:a7:f6:bd:ee:f3:cc:4e:fb:bc:4e:b7:d5: 2a:a2:a9:c2:c2:c8:38:56:c8:4a:7a:aa:42:70:65: b4:03:8b:4f:31:a3:f1:8b:a8:32:5c:e9:c5:8e:4f: 51:0f:41:66:38:36:24:c9:ed:c9:fa:97:7a:20:ab: d7:65:df:0d:fa:c1:06:36:d2:8e:a9:de:26:be:2a: ba:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:EA:A7:D2:7B:64:A1:21:E1:42:1F:6C:85:8B:D7:97:0C:E6:F5:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8eedbd05-4df6-3279-bee5-5f0163d56678.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.226.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:fc:12:08:d3:32:87:f2:bd:13:7e:c3:4e:7e:3b:d7:a3:3e: 97:0d:c5:5c:95:12:64:e4:30:14:41:54:99:24:92:94:0a:89: 3e:9f:d2:69:54:66:e5:8f:d2:49:10:78:fe:d4:0c:65:68:eb: bf:a3:83:2c:27:18:4a:44:b8:1a:f0:db:ff:9d:23:13:51:47: 1a:cb:b8:4f:92:d4:ad:0a:b8:ca:8c:9c:72:41:6f:74:b0:cb: 69:09:1a:a4:4e:65:64:88:ae:98:2f:2e:4f:c7:86:68:6b:df: 11:0c:05:23:b6:11:d1:04:7d:fd:7b:c7:9a:10:5e:ae:2a:bc: 3f:fe:0f:ea:96:8b:65:7b:d8:47:ab:ea:30:d1:f5:5c:39:65: 6b:00:35:a8:5f:cd:f3:71:f6:23:8f:05:5c:2a:2f:89:ce:85: 7b:c7:a4:3a:db:b0:af:25:cd:ef:70:1b:3e:b0:7a:7f:5c:e2: a7:7e:37:7e:da:94:aa:8c:07:d2:69:cc:84:b1:38:b4:3a:49: 21:bb:2f:b8:1d:30:d8:23:40:d6:be:1c:5b:a4:97:76:98:e2: b0:c2:fd:43:88:73:b5:c7:e0:52:e8:a7:4e:58:a6:d8:85:66: 17:93:3f:d9:3b:e0:e0:ca:14:a9:66:ca:0e:25:65:23:c7:32: ce:eb:3d:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEucU7nzg67w3miQVyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAyMjIyMjIzMFoXDTI2MDEyMDIzMjIzMFowLzEtMCsGA1UEAxMk MjEyMjJiYjYtYmQyMS00ZjgwLThmODMtMmZhYTJjYzQwMzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOkqFLJxZY7hQEli0JxGFgEfOmTqdIXPc4fe 5w3lxGb108Wnncow1zMa4GelR3matoPr7YOal5QvzHb57kMfIwhc4ZGcLDMX+3Pe eI9MD96DWLBchEOaVoo1LC7qsZw6J9FyWkVjI/51FCZGUcheCWwUeaZEWkqJRxBA e1S1vfTu5UCAts3UxHqC30iANBX4kr4bZLwNUom7S+ZWdMkFL/LqbRbnFxP8l7gg QqzoATsV3onT+win9r3u88xO+7xOt9UqoqnCwsg4VshKeqpCcGW0A4tPMaPxi6gy XOnFjk9RD0FmODYkye3J+pd6IKvXZd8N+sEGNtKOqd4mviq6PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfqp9J7ZKEh4UIfbIWL15cM5vVaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOGVlZGJkMDUtNGRmNi0z Mjc5LWJlZTUtNWYwMTYzZDU2Njc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJuK4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL/8EgjTMofyvRN+w05+O9ejPpcNxVyVEmTkMBRBVJkkkpQKiT6f0mlU ZuWP0kkQeP7UDGVo67+jgywnGEpEuBrw2/+dIxNRRxrLuE+S1K0KuMqMnHJBb3Sw y2kJGqROZWSIrpgvLk/Hhmhr3xEMBSO2EdEEff17x5oQXq4qvD/+D+qWi2V72Eer 6jDR9Vw5ZWsANahfzfNx9iOPBVwqL4nOhXvHpDrbsK8lze9wGz6wen9c4qd+N37a lKqMB9JpzISxOLQ6SSG7L7gdMNgjQNa+HFukl3aY4rDC/UOIc7XH4FLop05YptiF ZheTP9k74ODKFKlmyg4lZSPHMs7rPdQ= -----END CERTIFICATE-----Generated at Tue Nov 4 22:07:14 2025 by rpki-client