$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/da0b8394-6af0-38a7-af47-d07e83a962cc.roa File: da0b8394-6af0-38a7-af47-d07e83a962cc.roa (raw, json) Hash identifier: QAezruw058CcFFDrUPEBWfrh14Rz7Q1NF1hSvG5fE2Y= Subject key identifier: A3:66:8C:2D:BE:98:C7:B0:60:7F:3D:75:86:23:88:29:9C:45:D7:CC Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584BB2756D1F5EC0F29F5FC55400 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/da0b8394-6af0-38a7-af47-d07e83a962cc.roa Signing time: Thu 30 Oct 2025 20:38:11 +0000 ROA not before: Thu 30 Oct 2025 20:38:11 +0000 ROA not after: Wed 28 Jan 2026 21:38:11 +0000 asID: 272964 IP address blocks: 38.156.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:75:6d:1f:5e:c0:f2:9f:5f:c5:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 30 20:38:11 2025 GMT Not After : Jan 28 21:38:11 2026 GMT Subject: CN=bcff9d14-16d3-469e-b40c-6bdb8541482c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5c:19:e2:7c:b2:ee:38:4c:21:82:d4:79:b0: 64:17:c9:90:c0:e9:d0:af:51:6a:4d:11:31:71:73: d9:49:72:88:03:25:96:73:7b:23:75:9a:b8:fb:9e: 5e:90:c4:11:6c:cd:86:43:6b:41:f8:c2:21:be:78: f5:3c:7c:05:d4:33:76:09:6c:10:1b:57:a2:65:22: 2e:36:59:e6:c0:8d:5b:c8:d6:74:a7:94:6f:be:5d: c6:ef:bb:a7:bb:a0:38:85:33:9e:3c:54:11:06:cc: ac:e1:0b:b7:86:00:2a:40:25:43:9a:11:49:56:4a: 50:53:b5:38:e0:66:01:a8:21:64:41:fa:6b:c1:0c: 4c:cf:84:53:73:95:f9:40:03:57:7c:1d:cd:c2:c6: 57:10:25:e2:fb:34:44:8b:e1:84:6f:1f:66:6a:5c: 96:e7:99:d9:1a:3e:39:df:cf:6f:87:23:60:45:57: 1e:78:ea:a0:d6:b6:ae:db:e9:61:54:b2:e0:09:1c: 9b:7a:d9:ee:5e:d0:52:7b:e5:54:8d:e7:b2:61:b2: 98:74:a0:86:3a:f0:f5:b9:d4:7a:2a:12:b3:ad:be: 20:0d:14:50:5f:dd:0a:fb:0f:4f:e8:04:31:83:e0: 1d:1b:0d:9e:1d:8e:f7:39:09:6f:84:4c:9e:2f:b0: 97:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:66:8C:2D:BE:98:C7:B0:60:7F:3D:75:86:23:88:29:9C:45:D7:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/da0b8394-6af0-38a7-af47-d07e83a962cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.156.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:39:68:76:a7:83:dd:3a:6c:41:cd:ac:9f:43:b4:04:d2:e0: 24:10:57:c0:24:3a:e1:df:bf:2a:5d:5f:52:86:01:4c:f6:3d: 7d:e6:bf:0b:19:8f:ee:a3:f5:5a:f1:10:78:b3:2e:5f:b6:2e: e4:19:b8:28:c2:0f:3e:2a:86:2d:e3:7d:ce:61:db:fe:4b:85: 65:73:a8:09:a4:87:53:a2:7b:ac:36:12:f8:44:22:41:1b:ea: f7:e1:7a:40:88:25:1c:0c:07:70:0b:a0:8e:e3:e8:e0:4c:4a: ae:16:43:fb:bc:45:9a:cb:24:a3:bf:2c:dd:7b:85:64:16:7e: 5e:81:ce:ff:b8:c8:33:97:e4:77:61:e2:55:1f:22:bd:80:13: ef:f9:e8:19:d2:6e:a2:e2:6c:1d:90:eb:56:1a:ad:c2:cf:d3: d9:f2:53:f7:0f:ba:38:75:26:5b:a8:37:42:48:c4:97:76:bc: 8b:1d:6d:5b:f3:25:70:33:15:27:f5:9a:9c:43:aa:ee:4e:c9: 1a:70:a9:c6:d9:74:3e:a3:56:23:95:ec:4a:28:f2:6e:f1:0a: 51:33:bc:d1:6c:08:48:61:83:9d:83:6d:8e:d4:94:be:18:27: 48:03:11:74:d5:45:e4:9a:e0:83:a2:a9:53:86:f0:75:d9:95: 68:35:37:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuydW0fXsDyn1/FVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAzMDIwMzgxMVoXDTI2MDEyODIxMzgxMVowLzEtMCsGA1UEAxMk YmNmZjlkMTQtMTZkMy00NjllLWI0MGMtNmJkYjg1NDE0ODJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFwZ4nyy7jhMIYLUebBkF8mQwOnQr1FqTREx cXPZSXKIAyWWc3sjdZq4+55ekMQRbM2GQ2tB+MIhvnj1PHwF1DN2CWwQG1eiZSIu NlnmwI1byNZ0p5Rvvl3G77unu6A4hTOePFQRBsys4Qu3hgAqQCVDmhFJVkpQU7U4 4GYBqCFkQfprwQxMz4RTc5X5QANXfB3NwsZXECXi+zREi+GEbx9malyW55nZGj45 389vhyNgRVceeOqg1rau2+lhVLLgCRybetnuXtBSe+VUjeeyYbKYdKCGOvD1udR6 KhKzrb4gDRRQX90K+w9P6AQxg+AdGw2eHY73OQlvhEyeL7CXFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNmjC2+mMewYH89dYYjiCmcRdfMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGEwYjgzOTQtNmFmMC0z OGE3LWFmNDctZDA3ZTgzYTk2MmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJpxHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEg5aHang906bEHNrJ9DtATS4CQQV8AkOuHfvypdX1KGAUz2PX3mvwsZ j+6j9VrxEHizLl+2LuQZuCjCDz4qhi3jfc5h2/5LhWVzqAmkh1Oie6w2EvhEIkEb 6vfhekCIJRwMB3ALoI7j6OBMSq4WQ/u8RZrLJKO/LN17hWQWfl6Bzv+4yDOX5Hdh 4lUfIr2AE+/56BnSbqLibB2Q61YarcLP09nyU/cPujh1JluoN0JIxJd2vIsdbVvz JXAzFSf1mpxDqu5OyRpwqcbZdD6jViOV7Eoo8m7xClEzvNFsCEhhg52DbY7UlL4Y J0gDEXTVReSa4IOiqVOG8HXZlWg1N/M= -----END CERTIFICATE-----Generated at Tue Nov 4 22:07:18 2025 by rpki-client