$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a8fde20b-59bc-3ee6-950c-bc3423b9427a.roa File: a8fde20b-59bc-3ee6-950c-bc3423b9427a.roa (raw, json) Hash identifier: VLcmVNbQt45x9oQOPn6oiz0yYJS8RSGsAkcR5j2y9f8= Subject key identifier: 88:2A:94:0D:1E:F5:B7:B3:2F:F9:6F:01:23:87:4F:A1:BA:35:72:E3 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584BAC773E5C8B28C362C7EF7D00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a8fde20b-59bc-3ee6-950c-bc3423b9427a.roa Signing time: Tue 28 Oct 2025 17:07:00 +0000 ROA not before: Tue 28 Oct 2025 17:07:00 +0000 ROA not after: Mon 26 Jan 2026 18:07:00 +0000 asID: 274004 IP address blocks: 38.224.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ac:77:3e:5c:8b:28:c3:62:c7:ef:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 28 17:07:00 2025 GMT Not After : Jan 26 18:07:00 2026 GMT Subject: CN=fcc1d45e-3bef-41dc-a439-0877e4f03e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:24:63:0b:b3:3a:6a:7b:8a:81:4e:cb:26:36: b5:e3:de:2b:02:19:e8:7f:99:8b:a3:fa:fa:ca:c7: 9d:3c:a6:57:30:44:09:ba:13:a7:4c:aa:8b:ed:78: 67:da:fb:15:93:89:64:dc:29:e5:a6:85:e9:c5:00: 73:a5:35:d9:4e:b6:8a:f2:51:ed:15:38:af:c1:29: 58:4e:f0:c9:5f:84:c4:11:f6:46:b7:78:d8:b7:4a: 54:36:8e:1e:b9:f4:24:c6:19:50:01:79:1b:3f:c6: 96:e9:3f:aa:2f:25:21:ec:4c:42:bc:81:95:cb:68: 7a:69:39:bc:f9:df:18:bf:2b:4d:23:01:88:dc:37: 9c:63:c8:42:59:ec:d6:4e:36:26:c9:96:c7:65:2d: d9:21:cc:04:d3:aa:67:c4:83:f8:52:bc:96:90:43: ea:34:3b:c0:57:0e:3e:1c:d6:45:7a:76:80:fd:d7: a1:a3:3f:3e:75:21:43:fc:c1:86:ab:19:5d:7b:0d: c7:c5:90:b6:7d:80:08:63:34:21:dd:d5:d0:f7:ae: 0d:61:10:82:2f:f1:a1:07:0d:40:e2:d6:29:b2:a8: 33:ff:01:d4:5e:49:fa:9f:b7:f8:96:34:7d:cb:74: 7c:3e:c7:bb:b6:8f:55:e2:d6:5c:29:45:04:31:96: a7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2A:94:0D:1E:F5:B7:B3:2F:F9:6F:01:23:87:4F:A1:BA:35:72:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a8fde20b-59bc-3ee6-950c-bc3423b9427a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.224.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:9d:6c:d3:86:3e:8c:ae:8c:92:99:f2:c0:2a:38:ed:f3:b6: 79:ad:ba:b2:fd:f5:09:ed:c1:fc:8b:44:1e:fe:11:7d:ec:34: 13:6f:3d:69:8a:7e:71:fb:a2:32:1c:39:19:e2:8a:b9:9e:db: c3:1b:db:e3:88:c9:89:63:94:6f:28:4b:ca:0c:be:70:59:5f: 16:9b:3e:fb:42:ce:47:a9:ad:75:f0:4d:d7:25:5b:21:f7:31: a9:b3:bb:d1:73:af:1f:75:7b:81:46:ea:ca:1c:50:40:30:9d: 03:3d:f2:5f:29:d4:22:9c:4f:8d:47:e9:59:a1:1e:f3:98:0f: c3:c8:6d:ea:b9:15:48:48:13:7d:65:26:04:3f:9d:9c:99:2c: 9d:64:68:9f:a5:68:09:ce:11:5e:9a:1e:cc:69:83:ce:8a:0c: 4b:14:f9:46:f0:a8:7e:c7:b1:22:2e:e7:0e:d6:1d:49:c1:61: 77:44:97:64:6e:d3:f1:c2:41:6c:ae:e5:3a:a6:6f:95:36:64: 0f:90:9a:42:34:ab:9d:30:b9:c5:2d:2d:8c:e9:40:ba:02:5e: a6:c1:0b:c8:a3:21:59:d0:c5:b1:42:d6:12:1d:74:05:f8:2c: c1:ca:8e:7a:de:94:06:3f:fd:a0:cc:a4:92:47:9e:01:48:1f: ed:19:26:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEusdz5ciyjDYsfvfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAyODE3MDcwMFoXDTI2MDEyNjE4MDcwMFowLzEtMCsGA1UEAxMk ZmNjMWQ0NWUtM2JlZi00MWRjLWE0MzktMDg3N2U0ZjAzZTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiRjC7M6anuKgU7LJja1494rAhnof5mLo/r6 ysedPKZXMEQJuhOnTKqL7Xhn2vsVk4lk3CnlpoXpxQBzpTXZTraK8lHtFTivwSlY TvDJX4TEEfZGt3jYt0pUNo4eufQkxhlQAXkbP8aW6T+qLyUh7ExCvIGVy2h6aTm8 +d8YvytNIwGI3DecY8hCWezWTjYmyZbHZS3ZIcwE06pnxIP4UryWkEPqNDvAVw4+ HNZFenaA/dehoz8+dSFD/MGGqxldew3HxZC2fYAIYzQh3dXQ964NYRCCL/GhBw1A 4tYpsqgz/wHUXkn6n7f4ljR9y3R8Pse7to9V4tZcKUUEMZanHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgqlA0e9bezL/lvASOHT6G6NXLjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYThmZGUyMGItNTliYy0z ZWU2LTk1MGMtYmMzNDIzYjk0MjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJuCKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEidbNOGPoyujJKZ8sAqOO3ztnmturL99QntwfyLRB7+EX3sNBNvPWmK fnH7ojIcORniirme28Mb2+OIyYljlG8oS8oMvnBZXxabPvtCzkeprXXwTdclWyH3 Mamzu9Fzrx91e4FG6socUEAwnQM98l8p1CKcT41H6VmhHvOYD8PIbeq5FUhIE31l JgQ/nZyZLJ1kaJ+laAnOEV6aHsxpg86KDEsU+UbwqH7HsSIu5w7WHUnBYXdEl2Ru 0/HCQWyu5Tqmb5U2ZA+QmkI0q50wucUtLYzpQLoCXqbBC8ijIVnQxbFC1hIddAX4 LMHKjnrelAY//aDMpJJHngFIH+0ZJjk= -----END CERTIFICATE-----Generated at Wed Nov 5 01:07:53 2025 by rpki-client