$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a64d80e6-cc44-3e19-8d0c-403a8e468188.roa File: a64d80e6-cc44-3e19-8d0c-403a8e468188.roa (raw, json) Hash identifier: kkUtXHxBOUQ7DKDY/QvMls/Uek6qBlOzG9usCE8tisc= Subject key identifier: C3:DE:71:B0:02:AE:14:D8:A2:A5:93:A3:A3:48:27:19:98:19:3A:31 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B77668CA1A2091C4DDFF71E00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a64d80e6-cc44-3e19-8d0c-403a8e468188.roa Signing time: Thu 09 Oct 2025 16:55:31 +0000 ROA not before: Thu 09 Oct 2025 16:55:31 +0000 ROA not after: Wed 07 Jan 2026 17:55:31 +0000 asID: 208972 IP address blocks: 38.41.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:77:66:8c:a1:a2:09:1c:4d:df:f7:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 9 16:55:31 2025 GMT Not After : Jan 7 17:55:31 2026 GMT Subject: CN=c0b2fd28-d2fa-464b-92da-da9b75170147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:92:9d:5b:bc:a1:2a:4b:f1:fb:ac:9f:03:04: b8:67:10:68:58:8f:50:0d:2a:1f:59:c2:e6:99:e1: 3e:70:eb:09:5c:91:6a:95:20:07:c8:fe:0a:98:ec: c3:48:6a:40:fd:28:6f:99:08:47:9d:b4:05:32:61: 8c:ed:f7:c9:9e:18:43:81:e9:b4:85:75:50:2a:4c: 57:37:1d:8e:ae:f7:68:6a:5b:7c:b4:cc:82:44:0c: 11:76:dd:41:62:72:3c:a9:be:71:24:2f:1f:03:ba: 3e:3f:bf:30:71:0e:8d:68:a1:9e:c2:27:aa:98:5d: 3c:24:b1:59:fd:01:cd:06:71:f1:07:fa:4d:ac:5d: 50:1b:e5:ac:03:0e:78:29:a4:bf:7d:ce:15:7d:0d: 20:56:d0:54:75:5c:5e:cb:16:3d:8b:dc:96:e3:86: 55:6a:ef:4c:af:d6:2f:2f:fe:a0:f7:69:fd:18:5c: ad:5f:cb:f1:7f:27:a6:17:a3:c7:bd:3e:58:ac:4d: c0:1f:0e:6f:38:4d:e8:7a:47:e5:8e:5f:ea:b3:61: e0:eb:b3:80:29:4f:09:1a:6c:42:9a:b4:e7:ed:04: 69:e9:d3:3d:d8:cd:2b:51:7c:f6:7d:49:cf:27:28: 2b:6e:f7:a1:e0:05:80:ad:f7:99:9a:dc:b2:e5:f2: 4f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DE:71:B0:02:AE:14:D8:A2:A5:93:A3:A3:48:27:19:98:19:3A:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a64d80e6-cc44-3e19-8d0c-403a8e468188.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.41.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:4d:47:90:b2:35:5a:6d:49:48:df:8e:cd:cc:d1:2e:e8:7f: fc:4c:08:11:77:9f:40:d2:12:47:f0:7e:27:49:34:e0:ea:e1: 51:a3:53:86:ae:22:f2:38:44:da:37:68:76:43:14:ce:6b:2a: 51:b7:5f:88:62:a7:39:5d:b4:e0:82:48:c5:e3:3d:d5:64:8a: 6f:b8:94:11:d0:a1:3b:1d:65:4c:c7:cd:51:a0:36:07:82:71: 25:97:ff:4b:69:d7:d8:86:f0:02:3a:f2:d3:76:7a:30:ce:49: 66:85:43:2c:d1:15:eb:d0:38:38:a1:ef:7f:66:2f:d2:a4:ea: 35:b6:82:77:f3:60:9d:61:83:9b:f4:e4:d9:4c:a1:0e:1a:a7: 8b:4f:f0:18:34:12:7b:ca:ee:79:80:d1:75:2c:ae:0e:77:f1: 01:bd:9a:09:0c:31:52:54:68:3b:4d:0f:89:c2:f0:1f:e4:7d: b9:41:bf:45:c6:22:70:42:92:9d:0a:25:07:8a:6e:2c:ee:6f: 6b:cd:5b:41:47:7f:99:bd:8f:e0:18:17:7e:f5:29:d1:d3:b9: ec:f9:6b:98:23:8a:a9:42:7f:c1:b3:f4:84:17:84:2e:14:0c: 34:3f:c7:cd:91:4f:83:83:ba:ff:73:a2:c9:7b:b3:c8:5f:68: 94:d3:67:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt3ZoyhogkcTd/3HgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAwOTE2NTUzMVoXDTI2MDEwNzE3NTUzMVowLzEtMCsGA1UEAxMk YzBiMmZkMjgtZDJmYS00NjRiLTkyZGEtZGE5Yjc1MTcwMTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5KdW7yhKkvx+6yfAwS4ZxBoWI9QDSofWcLm meE+cOsJXJFqlSAHyP4KmOzDSGpA/ShvmQhHnbQFMmGM7ffJnhhDgem0hXVQKkxX Nx2Orvdoalt8tMyCRAwRdt1BYnI8qb5xJC8fA7o+P78wcQ6NaKGewieqmF08JLFZ /QHNBnHxB/pNrF1QG+WsAw54KaS/fc4VfQ0gVtBUdVxeyxY9i9yW44ZVau9Mr9Yv L/6g92n9GFytX8vxfyemF6PHvT5YrE3AHw5vOE3oekfljl/qs2Hg67OAKU8JGmxC mrTn7QRp6dM92M0rUXz2fUnPJygrbveh4AWArfeZmtyy5fJP5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPecbACrhTYoqWTo6NIJxmYGToxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTY0ZDgwZTYtY2M0NC0z ZTE5LThkMGMtNDAzYThlNDY4MTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJik0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFNR5CyNVptSUjfjs3M0S7of/xMCBF3n0DSEkfwfidJNODq4VGjU4au IvI4RNo3aHZDFM5rKlG3X4hipzldtOCCSMXjPdVkim+4lBHQoTsdZUzHzVGgNgeC cSWX/0tp19iG8AI68tN2ejDOSWaFQyzRFevQODih739mL9Kk6jW2gnfzYJ1hg5v0 5NlMoQ4ap4tP8Bg0EnvK7nmA0XUsrg538QG9mgkMMVJUaDtND4nC8B/kfblBv0XG InBCkp0KJQeKbizub2vNW0FHf5m9j+AYF371KdHTuez5a5gjiqlCf8Gz9IQXhC4U DDQ/x82RT4ODuv9zosl7s8hfaJTTZ5k= -----END CERTIFICATE-----Generated at Thu Nov 6 05:52:09 2025 by rpki-client