$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9f1f7e23-f070-37e4-949a-dec437732af0.roa File: 9f1f7e23-f070-37e4-949a-dec437732af0.roa (raw, json) Hash identifier: A43Mfjns1IoZtCP3yrIPgjIUQAk4e+4rtSGlyQzRORU= Subject key identifier: 97:27:A0:1B:C4:07:28:3E:28:4C:89:1C:76:62:D3:D1:18:FA:FC:80 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584BBFF79E876E32BF610AB89000 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9f1f7e23-f070-37e4-949a-dec437732af0.roa Signing time: Tue 04 Nov 2025 16:26:22 +0000 ROA not before: Tue 04 Nov 2025 16:26:22 +0000 ROA not after: Mon 02 Feb 2026 16:26:22 +0000 asID: 272156 IP address blocks: 38.156.13.0/24 maxlen: 24 209.14.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:f7:9e:87:6e:32:bf:61:0a:b8:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Nov 4 16:26:22 2025 GMT Not After : Feb 2 16:26:22 2026 GMT Subject: CN=ff51be85-da6f-460b-ad2f-63d1ec5764d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:bf:2e:5c:5a:77:b7:20:e4:de:90:4c:ac:bf: 2a:4e:73:d4:2e:f1:16:fa:03:c3:1e:c0:5f:f5:a2: 02:46:2b:ff:f1:d6:7f:fc:95:52:58:3f:5a:33:d7: d0:56:97:ba:8c:1e:5a:c0:19:2c:69:8c:25:50:2a: dd:a9:89:06:f5:39:26:f0:31:94:df:2a:9a:f3:80: 54:3c:ad:4e:df:04:11:75:cf:b9:75:bf:05:43:85: 77:2e:3a:54:5a:3d:37:0d:58:81:14:ef:62:f5:b5: 53:ad:60:54:79:31:3f:ac:89:4a:28:1c:4a:64:28: 89:35:91:46:7a:a4:3f:42:d4:b6:ba:48:e1:78:99: 1c:80:f1:d7:21:81:dc:6d:38:01:d0:8c:49:42:f0: b4:88:a0:7a:5e:dc:48:d0:9d:de:2c:e0:70:7e:b3: 6f:17:22:f4:3e:26:8a:ae:d8:30:c1:46:d9:fa:c5: f4:7c:7c:e8:23:ff:12:99:96:39:a1:30:ba:61:ea: a2:23:b6:a4:96:bb:33:f6:3b:1e:4f:9b:14:52:ad: ca:c5:36:40:4a:79:6e:cb:27:12:47:3d:5e:a9:1b: 75:c1:e2:d1:bb:9a:3b:6f:9f:03:e4:42:55:b4:5b: 06:87:57:98:1d:a1:56:57:0b:a3:fb:6e:3c:1a:04: e4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:27:A0:1B:C4:07:28:3E:28:4C:89:1C:76:62:D3:D1:18:FA:FC:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9f1f7e23-f070-37e4-949a-dec437732af0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.156.13.0/24 209.14.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:96:06:9c:0e:30:c4:c8:3b:78:f7:6d:5c:8b:02:d2:5a:9a: f0:51:df:c2:e2:d3:03:ad:54:a6:d1:5b:b8:a6:eb:41:db:80: 51:84:15:f9:bd:66:17:62:ce:db:4a:e0:00:5a:6a:4e:c7:5d: 44:38:54:6e:17:30:bc:4d:e1:ad:d4:f9:de:62:2a:ef:67:09: 8c:d7:6e:b1:f1:b6:3a:61:58:6f:51:e0:87:77:ad:9e:cd:18: a1:ba:59:c4:e2:ba:c1:27:95:7d:a8:d2:d0:b6:7f:4f:5d:ec: 1e:e4:4d:f7:50:c5:c3:ca:e4:4a:e7:9f:00:03:9a:24:72:f7: a6:71:59:18:5e:5d:02:a8:9a:a0:1f:f7:4d:3a:d7:38:46:59: e8:53:e8:77:98:1f:23:3e:91:c1:7c:76:36:d5:57:17:76:5c: 16:76:e1:f5:fe:be:41:b7:35:57:b7:e1:a6:3f:11:c2:04:12: 0d:cb:8c:8f:56:3c:25:41:5d:a6:06:21:11:2f:cf:69:1a:7a: 3f:77:14:3c:f2:14:2f:19:f0:37:27:79:d2:ed:d0:0c:8a:d9: 82:1e:6e:8d:43:68:24:f3:83:90:d5:c2:a8:76:b4:0b:3c:88: 23:cb:06:b1:95:21:58:8a:d9:91:d7:a1:17:4b:10:9b:60:f6: 8c:48:e3:4f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEu/956HbjK/YQq4kAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTEwNDE2MjYyMloXDTI2MDIwMjE2MjYyMlowLzEtMCsGA1UEAxMk ZmY1MWJlODUtZGE2Zi00NjBiLWFkMmYtNjNkMWVjNTc2NGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi78uXFp3tyDk3pBMrL8qTnPULvEW+gPDHsBf 9aICRiv/8dZ//JVSWD9aM9fQVpe6jB5awBksaYwlUCrdqYkG9Tkm8DGU3yqa84BU PK1O3wQRdc+5db8FQ4V3LjpUWj03DViBFO9i9bVTrWBUeTE/rIlKKBxKZCiJNZFG eqQ/QtS2ukjheJkcgPHXIYHcbTgB0IxJQvC0iKB6XtxI0J3eLOBwfrNvFyL0PiaK rtgwwUbZ+sX0fHzoI/8SmZY5oTC6YeqiI7aklrsz9jseT5sUUq3KxTZASnluyycS Rz1eqRt1weLRu5o7b58D5EJVtFsGh1eYHaFWVwuj+248GgTkNQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJcnoBvEByg+KEyJHHZi09EY+vyAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOWYxZjdlMjMtZjA3MC0z N2U0LTk0OWEtZGVjNDM3NzMyYWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJpwNAwQB 0Q5qMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAMqWBpwOMMTIO3j3bVyLAtJamvBR38Li0wOtVKbRW7im60Hb gFGEFfm9ZhdizttK4ABaak7HXUQ4VG4XMLxN4a3U+d5iKu9nCYzXbrHxtjphWG9R 4Id3rZ7NGKG6WcTiusEnlX2o0tC2f09d7B7kTfdQxcPK5ErnnwADmiRy96ZxWRhe XQKomqAf90061zhGWehT6HeYHyM+kcF8djbVVxd2XBZ24fX+vkG3NVe34aY/EcIE Eg3LjI9WPCVBXaYGIREvz2kaej93FDzyFC8Z8DcnedLt0AyK2YIebo1DaCTzg5DV wqh2tAs8iCPLBrGVIViK2ZHXoRdLEJtg9oxI408= -----END CERTIFICATE-----Generated at Tue Nov 4 22:07:20 2025 by rpki-client