$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0d57d245-e469-39a4-9222-3d40eca77be7.roa File: 0d57d245-e469-39a4-9222-3d40eca77be7.roa (raw, json) Hash identifier: zK6266FiHMp3YVkJK1bp4yOjRZCdMMSVqNLNEuMczVo= Subject key identifier: 6F:4E:3B:1F:90:64:EE:A2:56:5C:B1:5F:6B:F9:F5:A3:63:E8:32:0F Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B8DABD6C99D6D2EDB356DF400 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0d57d245-e469-39a4-9222-3d40eca77be7.roa Signing time: Fri 17 Oct 2025 16:22:55 +0000 ROA not before: Fri 17 Oct 2025 16:22:55 +0000 ROA not after: Thu 15 Jan 2026 17:22:55 +0000 asID: 52419 IP address blocks: 38.3.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8d:ab:d6:c9:9d:6d:2e:db:35:6d:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 17 16:22:55 2025 GMT Not After : Jan 15 17:22:55 2026 GMT Subject: CN=b1389aa9-7ab2-4a61-8f91-e9b60dc5938f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:60:3f:d1:10:28:60:7c:ae:e1:11:b6:7c:69: f2:97:d2:62:f0:b2:c1:3a:e0:0c:4c:65:50:e2:62: cf:25:b0:b2:0e:85:b4:ed:6c:14:9a:0a:8a:ff:96: 16:b1:81:c3:8b:15:a4:b8:db:a4:de:2e:e8:69:0c: c6:9d:ba:11:11:18:2a:15:d3:8d:fe:4d:65:69:b9: 6a:fa:14:9e:59:55:e7:d3:4f:10:20:1d:15:13:53: ac:b8:65:35:5d:fd:09:a6:d7:aa:27:20:3d:6e:e9: 03:6a:0c:be:c7:58:98:62:a2:58:56:ce:2c:11:a4: 7a:61:2e:54:49:99:08:47:02:04:fc:c4:9f:f7:cb: 3c:22:b4:53:16:36:57:5f:6d:84:c5:e4:c0:d2:09: 8c:35:a2:37:93:24:c6:63:21:df:5b:2f:80:54:db: 50:5e:90:a0:31:fe:84:93:14:c7:e1:ef:ca:8b:20: 75:8c:0d:15:0f:bb:81:d6:f5:3b:94:07:d7:66:23: 97:08:e5:8a:5b:39:ce:d6:00:26:23:e9:80:66:08: b3:cb:4a:20:63:a0:c0:df:4a:76:47:7d:cd:98:14: c7:45:03:a7:7d:8f:a8:20:cb:3e:6e:f6:6f:ea:40: f0:5c:7d:91:89:80:21:44:8d:ea:0e:c1:da:30:60: 76:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:4E:3B:1F:90:64:EE:A2:56:5C:B1:5F:6B:F9:F5:A3:63:E8:32:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0d57d245-e469-39a4-9222-3d40eca77be7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.3.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:4a:2d:f8:0f:a4:fb:e6:84:06:90:ed:42:94:41:3c:a3:14: 7d:ea:ba:9f:5a:98:e2:0f:55:a4:41:d1:0c:73:4f:2f:56:9e: f2:7d:c0:b3:00:b9:ae:2c:b2:f0:05:ca:e6:1d:52:9f:4e:50: ff:48:76:91:ab:ef:be:fe:eb:b7:0d:f8:7a:fd:54:7e:d4:be: ca:de:9d:65:4a:66:a1:13:f0:d4:db:20:d0:54:b1:00:1e:85: 79:c8:2b:a8:15:bc:cd:81:d2:23:cc:64:eb:9d:bc:58:fe:e6: bc:ba:29:80:d9:32:4d:9e:0a:29:c1:fe:bc:5c:30:6c:0a:45: 53:fd:e9:4e:1b:e5:4f:01:9c:09:f9:8d:31:f0:40:21:80:f8: 84:7c:6f:41:7a:21:15:05:78:08:d6:8d:e7:83:75:fb:2d:81: ad:96:6a:91:d2:31:11:cc:98:90:53:21:ca:4f:b6:8c:8d:8e: aa:85:c3:23:aa:b4:67:a7:22:e0:29:8d:7d:40:fc:8a:7b:df: 39:72:98:df:44:23:05:b2:6a:ab:09:13:d7:95:16:e0:d8:6c: 31:2b:93:ae:d5:58:fa:3a:99:44:84:43:52:f3:a6:15:73:9c: 27:72:15:e3:36:5e:bf:5b:d9:df:d9:00:aa:ca:87:79:77:b7: 05:56:eb:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuNq9bJnW0u2zVt9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAxNzE2MjI1NVoXDTI2MDExNTE3MjI1NVowLzEtMCsGA1UEAxMk YjEzODlhYTktN2FiMi00YTYxLThmOTEtZTliNjBkYzU5MzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2A/0RAoYHyu4RG2fGnyl9Ji8LLBOuAMTGVQ 4mLPJbCyDoW07WwUmgqK/5YWsYHDixWkuNuk3i7oaQzGnboRERgqFdON/k1lablq +hSeWVXn008QIB0VE1OsuGU1Xf0JpteqJyA9bukDagy+x1iYYqJYVs4sEaR6YS5U SZkIRwIE/MSf98s8IrRTFjZXX22ExeTA0gmMNaI3kyTGYyHfWy+AVNtQXpCgMf6E kxTH4e/KiyB1jA0VD7uB1vU7lAfXZiOXCOWKWznO1gAmI+mAZgizy0ogY6DA30p2 R33NmBTHRQOnfY+oIMs+bvZv6kDwXH2RiYAhRI3qDsHaMGB2UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9OOx+QZO6iVlyxX2v59aNj6DIPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMGQ1N2QyNDUtZTQ2OS0z OWE0LTkyMjItM2Q0MGVjYTc3YmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJgOYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxKLfgPpPvmhAaQ7UKUQTyjFH3qup9amOIPVaRB0QxzTy9WnvJ9wLMA ua4ssvAFyuYdUp9OUP9IdpGr777+67cN+Hr9VH7UvsrenWVKZqET8NTbINBUsQAe hXnIK6gVvM2B0iPMZOudvFj+5ry6KYDZMk2eCinB/rxcMGwKRVP96U4b5U8BnAn5 jTHwQCGA+IR8b0F6IRUFeAjWjeeDdfstga2WapHSMRHMmJBTIcpPtoyNjqqFwyOq tGenIuApjX1A/Ip73zlymN9EIwWyaqsJE9eVFuDYbDErk67VWPo6mUSEQ1LzphVz nCdyFeM2Xr9b2d/ZAKrKh3l3twVW64s= -----END CERTIFICATE-----Generated at Mon Oct 20 04:27:18 2025 by rpki-client