$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c1aa13f0-7551-36d3-bf51-5563f7c911fd.roa File: c1aa13f0-7551-36d3-bf51-5563f7c911fd.roa (raw, json) Hash identifier: 5kLvtf095if0tgGKkxrMgeACX+7JVYpjFdYnuKuHvJ8= Subject key identifier: 99:46:27:8C:EF:17:CA:B5:1E:DD:4B:AE:CE:A1:43:26:87:39:A4:2D Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584BBCE5A3FB90102CAD2E8E21C0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c1aa13f0-7551-36d3-bf51-5563f7c911fd.roa Signing time: Mon 03 Nov 2025 14:22:22 +0000 ROA not before: Mon 03 Nov 2025 14:22:22 +0000 ROA not after: Sun 01 Feb 2026 14:22:22 +0000 asID: 152644 IP address blocks: 38.99.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:e5:a3:fb:90:10:2c:ad:2e:8e:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Nov 3 14:22:22 2025 GMT Not After : Feb 1 14:22:22 2026 GMT Subject: CN=89c107c2-5e4d-4da1-9337-cd157e0f654c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:14:79:10:9f:d7:de:ce:82:a7:ba:bc:71:44: ef:17:ce:9e:d6:ce:65:e5:eb:99:57:ca:75:e6:60: 36:0b:dc:a5:eb:5b:26:09:80:63:80:60:e9:f5:6e: 39:9b:cd:df:fa:9a:d7:0d:4b:0b:f3:34:01:00:41: 7a:da:80:2b:41:84:9c:e8:7f:81:9d:a9:3a:5d:6a: ee:f1:4b:1f:8a:79:52:cf:d6:01:b8:2b:0d:5b:88: 55:a0:88:bc:d4:75:3d:a1:4c:8c:e4:46:08:50:fb: 82:0f:72:13:10:4f:16:12:60:10:5c:a3:0e:21:df: fb:f6:a6:77:1a:d9:e4:70:19:2b:6e:d1:38:50:ab: 75:95:d1:bc:8f:e8:fb:d2:0f:75:23:48:07:f9:e4: cb:59:57:7f:c8:2f:f6:94:bf:be:ca:54:92:c3:a4: 8e:84:7f:4b:6c:f1:7e:02:3a:46:10:76:88:d5:79: 70:75:91:24:fb:3c:bd:e3:f0:40:e4:58:a7:55:67: 52:57:c3:d0:4e:b4:3f:e4:f1:0f:29:96:3a:49:39: 6d:5b:37:47:52:73:c4:6b:c7:bb:8e:00:50:32:d9: 66:cb:47:31:f9:76:3b:b7:b8:75:09:2b:c1:44:7d: c8:68:fd:c3:82:ec:23:fc:4b:2b:5a:3a:c3:1d:dc: c6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:46:27:8C:EF:17:CA:B5:1E:DD:4B:AE:CE:A1:43:26:87:39:A4:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c1aa13f0-7551-36d3-bf51-5563f7c911fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.99.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:3c:11:94:4f:5f:8b:ab:f4:76:33:6c:c2:85:8c:cb:c1:7d: 6a:c7:3a:8f:eb:36:e6:f6:13:ca:a0:3d:e1:2c:d6:e7:21:1c: ef:1b:33:d9:f5:da:5a:05:f4:7c:d7:04:99:31:a9:6e:d8:9d: aa:0d:53:e3:8f:6f:c0:73:6d:2b:ec:b0:09:d8:d7:a6:9f:e6: 83:27:27:82:1f:8c:17:97:44:a7:e2:f9:ce:1e:4c:b0:cf:96: 7f:84:34:7d:c5:0f:7f:56:cb:e7:d4:d9:f0:c5:46:af:09:c7: ac:43:de:26:cd:59:47:12:79:1f:d4:03:51:a7:19:0b:97:3c: a5:03:54:dd:dc:3d:71:1b:59:5b:03:96:35:12:72:2f:5f:74: d9:d9:d7:2b:9d:52:45:de:7e:01:22:9f:c9:46:c3:52:7c:1a: 1f:d5:29:92:16:30:bd:df:2c:0c:eb:ed:e1:55:20:52:0b:bd: 1c:d9:63:c6:70:c0:6c:91:b7:4a:8e:87:e3:57:84:68:fc:ca: 11:5a:3d:9b:0f:84:39:4b:67:d0:e1:08:06:c2:6c:ba:9e:ad: 17:00:65:11:11:31:d6:c4:63:5a:7e:69:95:0c:d4:8c:2f:e1: 78:67:6c:35:a7:6f:72:39:be:88:3f:cf:eb:a4:58:27:47:90: 9a:a4:3b:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu85aP7kBAsrS6OIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTEwMzE0MjIyMloXDTI2MDIwMTE0MjIyMlowLzEtMCsGA1UEAxMk ODljMTA3YzItNWU0ZC00ZGExLTkzMzctY2QxNTdlMGY2NTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRR5EJ/X3s6Cp7q8cUTvF86e1s5l5euZV8p1 5mA2C9yl61smCYBjgGDp9W45m83f+prXDUsL8zQBAEF62oArQYSc6H+Bnak6XWru 8UsfinlSz9YBuCsNW4hVoIi81HU9oUyM5EYIUPuCD3ITEE8WEmAQXKMOId/79qZ3 GtnkcBkrbtE4UKt1ldG8j+j70g91I0gH+eTLWVd/yC/2lL++ylSSw6SOhH9LbPF+ AjpGEHaI1XlwdZEk+zy94/BA5FinVWdSV8PQTrQ/5PEPKZY6STltWzdHUnPEa8e7 jgBQMtlmy0cx+XY7t7h1CSvBRH3IaP3Dguwj/EsrWjrDHdzGOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlGJ4zvF8q1Ht1Lrs6hQyaHOaQtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYzFhYTEzZjAtNzU1MS0z NmQzLWJmNTEtNTU2M2Y3YzkxMWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJmPzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEY8EZRPX4ur9HYzbMKFjMvBfWrHOo/rNub2E8qgPeEs1uchHO8bM9n1 2loF9HzXBJkxqW7YnaoNU+OPb8BzbSvssAnY16af5oMnJ4IfjBeXRKfi+c4eTLDP ln+ENH3FD39Wy+fU2fDFRq8Jx6xD3ibNWUcSeR/UA1GnGQuXPKUDVN3cPXEbWVsD ljUSci9fdNnZ1yudUkXefgEin8lGw1J8Gh/VKZIWML3fLAzr7eFVIFILvRzZY8Zw wGyRt0qOh+NXhGj8yhFaPZsPhDlLZ9DhCAbCbLqerRcAZRERMdbEY1p+aZUM1Iwv 4XhnbDWnb3I5vog/z+ukWCdHkJqkO9Q= -----END CERTIFICATE-----Generated at Tue Nov 4 22:07:17 2025 by rpki-client