$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ee8bc08b-8e51-3e21-9421-bd1be5e6e829.roa File: ee8bc08b-8e51-3e21-9421-bd1be5e6e829.roa (raw, json) Hash identifier: aBn2tOY5LK8zgaH7bFIDDjU3qSoKquQ6lb4d+zoMVDI= Subject key identifier: 5C:31:76:A6:D3:ED:DF:4D:02:FA:C8:A5:16:08:D7:9C:73:9A:D7:F4 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584BA18B5072AC393117B817FE20 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ee8bc08b-8e51-3e21-9421-bd1be5e6e829.roa Signing time: Fri 24 Oct 2025 19:13:33 +0000 ROA not before: Fri 24 Oct 2025 19:13:33 +0000 ROA not after: Thu 22 Jan 2026 20:13:33 +0000 asID: 273254 IP address blocks: 38.3.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a1:8b:50:72:ac:39:31:17:b8:17:fe:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 24 19:13:33 2025 GMT Not After : Jan 22 20:13:33 2026 GMT Subject: CN=663cafde-fab9-45c9-9b5f-09177fb82108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1a:0f:54:90:67:27:70:d6:7c:8f:4a:4e:5c: e5:6d:b0:ed:a4:0a:d6:92:42:3e:7c:11:82:cd:38: 3e:7d:77:86:b6:73:6a:ef:dc:d4:e4:35:69:2c:a3: 28:f3:b0:94:89:22:9b:58:9d:d2:98:5a:c9:20:3a: a1:d3:96:6c:34:f7:f9:b2:ed:c0:a3:4b:c8:2b:9a: 79:d8:81:67:a5:a2:4f:bd:52:9c:97:fe:c4:86:b5: 07:a7:5a:dc:7b:ae:ae:32:6f:b3:b8:ff:49:28:54: 2c:35:a4:77:7a:95:95:94:47:f8:a5:68:d2:80:09: 65:9d:bb:26:db:3c:83:d4:27:eb:7d:fc:39:af:0f: 7a:aa:bd:77:3e:de:ec:27:61:41:81:51:21:5a:ba: a1:f2:97:94:ab:20:f1:47:0b:26:d4:2a:a5:ed:56: 72:d9:50:4d:69:2a:72:14:11:da:02:97:68:2c:5c: 43:7b:f5:a6:7a:04:f9:10:b9:a4:0e:01:4f:99:94: 97:c3:76:24:77:c1:fe:c4:e2:09:5d:fc:3a:ee:56: ef:72:0b:ed:05:20:63:a0:b0:81:3c:86:b4:fc:03: 10:f5:fc:b1:90:8b:a5:5f:da:6e:65:93:bc:6b:5e: 3b:51:77:e8:b6:08:f5:34:f2:23:27:3f:69:ae:a9: 57:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:31:76:A6:D3:ED:DF:4D:02:FA:C8:A5:16:08:D7:9C:73:9A:D7:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ee8bc08b-8e51-3e21-9421-bd1be5e6e829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.3.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:f5:65:fa:be:23:0c:6d:0e:2b:0f:56:55:84:24:f0:a2:75: f5:37:b6:24:26:f0:81:9d:1e:44:9c:7b:7b:7a:68:ea:04:d6: c0:58:e9:68:a1:33:9d:11:22:d7:ae:d1:94:00:ea:c8:81:72: 07:b1:36:c4:5e:e4:04:1c:17:d9:46:36:17:c1:05:cb:2a:a8: 93:9f:11:37:1a:51:b3:80:43:79:23:b2:af:7f:7e:dd:a8:e3: d3:22:68:ed:9d:c4:c2:ab:41:00:e9:f9:6e:41:01:1d:6e:fb: 61:80:d7:b3:b3:c7:8b:5e:e5:1f:5d:a1:90:72:fe:11:4f:58: b8:90:dd:5b:9a:10:48:16:dc:4d:9e:24:0f:29:da:95:e8:11: f7:00:8e:30:cb:4f:c3:ef:c3:ad:84:94:d2:2f:78:29:88:4e: 9b:94:7a:06:60:d3:ad:f6:65:d9:5d:61:cf:19:b3:c1:f2:f7: 81:c1:b6:72:7a:83:bf:45:8a:bf:df:59:bd:aa:24:22:c7:e6: 3b:30:ff:39:93:ef:05:79:c6:5e:ac:02:f1:79:a5:24:c8:5f: 1b:52:0d:08:2a:da:4c:73:c1:87:a6:86:d7:c5:8a:27:05:43: 80:95:a8:26:f9:fd:d0:57:75:ba:9a:62:e5:96:4c:55:e4:6f: ed:34:0d:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuhi1ByrDkxF7gX/iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAyNDE5MTMzM1oXDTI2MDEyMjIwMTMzM1owLzEtMCsGA1UEAxMk NjYzY2FmZGUtZmFiOS00NWM5LTliNWYtMDkxNzdmYjgyMTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihoPVJBnJ3DWfI9KTlzlbbDtpArWkkI+fBGC zTg+fXeGtnNq79zU5DVpLKMo87CUiSKbWJ3SmFrJIDqh05ZsNPf5su3Ao0vIK5p5 2IFnpaJPvVKcl/7EhrUHp1rce66uMm+zuP9JKFQsNaR3epWVlEf4pWjSgAllnbsm 2zyD1Cfrffw5rw96qr13Pt7sJ2FBgVEhWrqh8peUqyDxRwsm1Cql7VZy2VBNaSpy FBHaApdoLFxDe/WmegT5ELmkDgFPmZSXw3Ykd8H+xOIJXfw67lbvcgvtBSBjoLCB PIa0/AMQ9fyxkIulX9puZZO8a147UXfotgj1NPIjJz9prqlX3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwxdqbT7d9NAvrIpRYI15xzmtf0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZWU4YmMwOGItOGU1MS0z ZTIxLTk0MjEtYmQxYmU1ZTZlODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJgPdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACP1Zfq+IwxtDisPVlWEJPCidfU3tiQm8IGdHkSce3t6aOoE1sBY6Wih M50RIteu0ZQA6siBcgexNsRe5AQcF9lGNhfBBcsqqJOfETcaUbOAQ3kjsq9/ft2o 49MiaO2dxMKrQQDp+W5BAR1u+2GA17Ozx4te5R9doZBy/hFPWLiQ3VuaEEgW3E2e JA8p2pXoEfcAjjDLT8Pvw62ElNIveCmITpuUegZg0632ZdldYc8Zs8Hy94HBtnJ6 g79Fir/fWb2qJCLH5jsw/zmT7wV5xl6sAvF5pSTIXxtSDQgq2kxzwYemhtfFiicF Q4CVqCb5/dBXdbqaYuWWTFXkb+00DbA= -----END CERTIFICATE-----Generated at Wed Nov 5 01:07:22 2025 by rpki-client