$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/38b13889-d80f-38c2-bade-6634f5978a7c.roa File: 38b13889-d80f-38c2-bade-6634f5978a7c.roa (raw, json) Hash identifier: rr1gccB0HQUS6jPMlHaKPtWrjM80FrjWM179XVxI7dg= Subject key identifier: 35:59:EC:7B:51:2E:2D:3D:9E:AB:23:4C:28:5B:01:07:F7:B9:48:64 Certificate issuer: /CN=1f4a5fa9-723d-410e-a75f-ffc7662c530a Certificate serial: 010D0C9F4328584B84E77D6298DFB872CD67A640 Authority key identifier: 81:34:75:FE:DC:F5:F0:A4:06:EA:39:8E:4F:60:97:68:60:C5:3D:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/38b13889-d80f-38c2-bade-6634f5978a7c.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16509 IP address blocks: 198.99.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:7d:62:98:df:b8:72:cd:67:a6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4a5fa9-723d-410e-a75f-ffc7662c530a Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=9442ce3c-8c21-4edd-8568-35af498514a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5d:63:1a:71:fd:98:9d:65:75:93:c2:09:07: f8:13:75:ce:f9:85:18:d2:71:7d:fd:fb:63:b1:11: a2:87:a0:60:f3:5b:c8:5e:8b:ec:70:08:27:c7:31: 66:57:64:2d:ab:34:7d:20:fe:3e:f7:f2:b4:73:a4: 23:bb:3a:bc:b8:8f:bb:e1:f8:55:0d:21:c2:5f:1a: 8b:b5:8c:a8:89:29:47:48:7a:b1:6d:f7:1c:29:11: 06:4f:5d:20:4b:12:fc:fc:2e:87:77:72:24:a0:73: 6e:6e:a8:7b:cf:d9:7f:a4:aa:79:8d:45:2f:6e:c1: 77:e4:21:2f:7d:06:4b:50:50:29:b5:c0:bb:90:61: 99:1f:d8:4e:8e:05:70:2f:f2:ec:c7:f3:1b:9e:ac: 9b:95:ea:4f:03:ab:0c:00:da:7a:7b:14:4a:68:59: e2:60:8b:33:4e:34:0d:3b:35:7b:4f:ce:52:1f:9c: 3a:0a:46:8f:be:2a:d3:34:db:6c:90:be:7e:d5:00: 2a:78:65:8e:72:40:99:9e:c2:eb:f9:58:11:ca:cb: 96:f6:20:95:7e:b1:18:5b:70:f0:e8:00:64:47:10: ac:c3:73:66:40:b0:10:b3:48:02:92:74:fd:3d:de: 99:d5:74:a8:03:3e:cb:3d:67:4c:8d:24:2b:2c:40: 3b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:59:EC:7B:51:2E:2D:3D:9E:AB:23:4C:28:5B:01:07:F7:B9:48:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/38b13889-d80f-38c2-bade-6634f5978a7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.crl X509v3 Authority Key Identifier: keyid:81:34:75:FE:DC:F5:F0:A4:06:EA:39:8E:4F:60:97:68:60:C5:3D:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer sbgp-ipAddrBlock: critical IPv4: 198.99.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:39:0d:cc:57:be:a9:41:06:47:0d:02:ac:c5:f9:88:10:42: 1d:3c:9f:df:6f:f1:a6:d6:9c:23:6c:88:7f:d0:bd:8f:ad:a9: 22:f1:a4:d6:47:6b:e7:d6:db:b3:bc:08:64:20:e8:72:e4:ea: 29:80:ec:0d:33:36:b4:c5:5c:06:59:04:ca:70:9e:50:67:4a: ed:2f:47:ee:5b:83:c7:c9:ad:58:90:86:a9:9a:0e:2b:b2:58: 04:51:4a:61:a7:1c:b5:a8:33:6d:7b:d5:ad:e9:75:a5:48:6b: fe:a9:89:c0:b1:fa:b0:5e:30:c5:e5:ff:93:a1:9a:4f:f1:f4: 31:40:d4:2b:d9:c7:c4:a2:a5:18:98:23:30:38:85:91:53:6b: 47:ab:59:df:1a:09:fe:8b:2f:3f:a4:42:06:14:ab:46:b2:47: 88:44:fb:22:dc:70:0a:dd:c1:07:ab:e4:49:52:97:70:33:55: 12:b4:b7:24:26:c0:38:a7:cc:78:04:32:20:34:d5:75:b9:57: 1f:e2:08:39:b9:c0:b0:64:c1:7a:0d:b2:d7:94:d6:0c:2c:ea: 78:30:e8:a1:e7:15:80:eb:ae:74:97:e3:9a:32:79:d2:a0:58: 6b:c5:04:07:f6:63:17:70:1a:54:10:76:48:7e:96:74:f8:bd: 94:2b:f7:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE531imN+4cs1npkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY0YTVmYTktNzIzZC00MTBlLWE3NWYtZmZjNzY2MmM1 MzBhMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk OTQ0MmNlM2MtOGMyMS00ZWRkLTg1NjgtMzVhZjQ5ODUxNGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0l1jGnH9mJ1ldZPCCQf4E3XO+YUY0nF9/ftj sRGih6Bg81vIXovscAgnxzFmV2QtqzR9IP4+9/K0c6Qjuzq8uI+74fhVDSHCXxqL tYyoiSlHSHqxbfccKREGT10gSxL8/C6Hd3IkoHNubqh7z9l/pKp5jUUvbsF35CEv fQZLUFAptcC7kGGZH9hOjgVwL/Lsx/MbnqyblepPA6sMANp6exRKaFniYIszTjQN OzV7T85SH5w6CkaPvirTNNtskL5+1QAqeGWOckCZnsLr+VgRysuW9iCVfrEYW3Dw 6ABkRxCsw3NmQLAQs0gCknT9Pd6Z1XSoAz7LPWdMjSQrLEA7gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVZ7HtRLi09nqsjTChbAQf3uUhkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZjRh NWZhOS03MjNkLTQxMGUtYTc1Zi1mZmM3NjYyYzUzMGEvMzhiMTM4ODktZDgwZi0z OGMyLWJhZGUtNjYzNGY1OTc4YTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWY0YTVmYTktNzIzZC00MTBlLWE3 NWYtZmZjNzY2MmM1MzBhLzFmNGE1ZmE5LTcyM2QtNDEwZS1hNzVmLWZmYzc2NjJj NTMwYS5jcmwwHwYDVR0jBBgwFoAUgTR1/tz18KQG6jmOT2CXaGDFPU8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZjRhNWZhOS03MjNkLTQxMGUtYTc1Zi1mZmM3 NjYyYzUzMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmOKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALI5DcxXvqlBBkcNAqzF+YgQQh08n99v8abWnCNsiH/QvY+tqSLxpNZH a+fW27O8CGQg6HLk6imA7A0zNrTFXAZZBMpwnlBnSu0vR+5bg8fJrViQhqmaDiuy WARRSmGnHLWoM2171a3pdaVIa/6picCx+rBeMMXl/5Ohmk/x9DFA1CvZx8SipRiY IzA4hZFTa0erWd8aCf6LLz+kQgYUq0ayR4hE+yLccArdwQer5ElSl3AzVRK0tyQm wDinzHgEMiA01XW5Vx/iCDm5wLBkwXoNsteU1gws6ngw6KHnFYDrrnSX45oyedKg WGvFBAf2YxdwGlQQdkh+lnT4vZQr97w= -----END CERTIFICATE-----Generated at Mon Oct 20 12:55:37 2025 by rpki-client