$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/95a108b3-dd17-33d3-805c-a64f96e55b32.roa File: 95a108b3-dd17-33d3-805c-a64f96e55b32.roa (raw, json) Hash identifier: AeJZJdb9NoKkDUMdNxoNHAlX1m9ir1hPRCdFpa1S4Vk= Subject key identifier: 3B:9C:DB:78:F6:8B:09:0C:BA:72:A0:0F:C1:40:90:BA:C1:76:7B:C5 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B9C4D0073BF752B27B705BE00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/95a108b3-dd17-33d3-805c-a64f96e55b32.roa Signing time: Wed 22 Oct 2025 22:08:57 +0000 ROA not before: Wed 22 Oct 2025 22:08:57 +0000 ROA not after: Tue 20 Jan 2026 23:08:57 +0000 asID: 263793 IP address blocks: 38.156.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:4d:00:73:bf:75:2b:27:b7:05:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 22 22:08:57 2025 GMT Not After : Jan 20 23:08:57 2026 GMT Subject: CN=a54a01de-5576-4893-ac66-50e9ffd6bd23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e4:2a:9d:57:49:6d:e1:87:a2:02:d3:5c:91: c4:11:83:9f:51:4b:9f:78:40:47:26:b9:94:11:69: 7a:04:d9:e0:31:72:82:59:d1:94:88:fb:78:28:33: f1:b6:b9:f5:92:42:42:a8:cc:bf:0e:27:1b:f8:54: 74:e7:48:5e:f7:08:f0:b5:0b:30:35:2d:65:6f:c5: cd:7f:b5:8e:e7:d0:87:79:0c:47:75:ab:0f:92:8c: d5:34:ec:18:30:e5:63:88:5a:41:ed:70:c2:4c:44: 25:78:4b:9d:4c:bb:5c:e8:84:28:7e:de:87:b2:7b: 9c:7c:31:21:3f:34:65:a8:75:3a:dd:a7:5b:bb:0d: c5:32:4a:b5:c5:43:78:c9:54:c2:76:95:8d:87:e2: 4b:b6:7e:dc:cb:63:97:13:f4:7f:9c:1c:4e:41:30: d0:68:be:08:5d:25:dd:8b:41:77:72:e6:9b:05:e4: 2e:b7:f4:69:ef:a6:5a:fb:e2:4e:4a:93:11:e5:cf: c6:56:4b:24:4a:df:16:6a:4c:a9:6e:62:e1:65:4f: 0c:17:50:c7:e9:1e:13:53:13:e6:d2:62:63:cc:91: 83:2f:61:71:23:38:97:8a:56:d4:67:39:c7:f5:6d: 66:f0:37:82:5d:51:46:41:81:fc:a8:42:97:32:7a: b2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:9C:DB:78:F6:8B:09:0C:BA:72:A0:0F:C1:40:90:BA:C1:76:7B:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/95a108b3-dd17-33d3-805c-a64f96e55b32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.156.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:a0:be:bd:bd:2f:22:ff:0d:b9:20:2e:6e:56:24:27:84:1b: 2a:7f:27:f6:9a:66:46:57:fc:3f:71:a7:76:6c:14:07:5e:8e: b5:71:3d:23:58:65:5f:3a:5e:6e:2f:bc:91:ce:c0:3c:5b:38: ff:2a:4d:47:e8:b8:83:24:f2:3f:06:6b:29:23:54:86:c9:f4: 04:2d:bb:48:c3:fd:d0:f1:01:df:95:49:9a:53:b0:4c:df:c1: 11:02:f3:72:2f:71:21:18:3a:73:7d:cb:82:a2:6d:7a:50:0d: 7c:10:d6:47:72:81:15:9d:58:f2:58:2c:e6:ba:f0:52:22:f6: 0b:c4:c4:f7:16:81:99:a6:44:d5:b7:d3:d6:fd:69:69:e6:27: 00:e1:18:8d:66:27:f0:a5:14:38:b8:10:6f:4a:0d:8b:62:9b: 94:fc:2e:45:ea:a7:8f:44:15:66:6d:8c:8c:27:0c:49:be:e5: 8d:45:31:71:51:91:6d:e5:91:5f:57:38:21:60:b4:fd:c3:a3: 22:ae:3e:ae:a6:4e:72:a9:18:2a:86:34:9a:c2:73:2e:e7:a4: b6:04:63:48:c5:db:3d:22:a3:06:6f:05:8c:cd:96:5d:71:90: 9c:20:3e:ac:f4:b8:71:c6:12:17:16:45:16:99:43:cb:02:01: c5:f0:79:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEucTQBzv3UrJ7cFvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAyMjIyMDg1N1oXDTI2MDEyMDIzMDg1N1owLzEtMCsGA1UEAxMk YTU0YTAxZGUtNTU3Ni00ODkzLWFjNjYtNTBlOWZmZDZiZDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuQqnVdJbeGHogLTXJHEEYOfUUufeEBHJrmU EWl6BNngMXKCWdGUiPt4KDPxtrn1kkJCqMy/Dicb+FR050he9wjwtQswNS1lb8XN f7WO59CHeQxHdasPkozVNOwYMOVjiFpB7XDCTEQleEudTLtc6IQoft6HsnucfDEh PzRlqHU63adbuw3FMkq1xUN4yVTCdpWNh+JLtn7cy2OXE/R/nBxOQTDQaL4IXSXd i0F3cuabBeQut/Rp76Za++JOSpMR5c/GVkskSt8WakypbmLhZU8MF1DH6R4TUxPm 0mJjzJGDL2FxIziXilbUZznH9W1m8DeCXVFGQYH8qEKXMnqyGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuc23j2iwkMunKgD8FAkLrBdnvFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOTVhMTA4YjMtZGQxNy0z M2QzLTgwNWMtYTY0Zjk2ZTU1YjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFJpxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABugvr29LyL/DbkgLm5WJCeEGyp/J/aaZkZX/D9xp3ZsFAdejrVxPSNY ZV86Xm4vvJHOwDxbOP8qTUfouIMk8j8GaykjVIbJ9AQtu0jD/dDxAd+VSZpTsEzf wREC83IvcSEYOnN9y4KibXpQDXwQ1kdygRWdWPJYLOa68FIi9gvExPcWgZmmRNW3 09b9aWnmJwDhGI1mJ/ClFDi4EG9KDYtim5T8LkXqp49EFWZtjIwnDEm+5Y1FMXFR kW3lkV9XOCFgtP3DoyKuPq6mTnKpGCqGNJrCcy7npLYEY0jF2z0iowZvBYzNll1x kJwgPqz0uHHGEhcWRRaZQ8sCAcXweQQ= -----END CERTIFICATE-----Generated at Wed Nov 5 01:07:55 2025 by rpki-client