$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/224e3101-4d56-3129-8450-e15d7b5ca44a.roa File: 224e3101-4d56-3129-8450-e15d7b5ca44a.roa (raw, json) Hash identifier: VwiS2IU/SgLKiDEVG8lTOXDZ+SsYrYSmxPCDd1tIBl8= Subject key identifier: 81:F9:2C:4C:A3:FD:E3:04:47:0A:71:AB:1B:0A:28:C1:F3:88:B2:CD Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B95B76F7A3619C87547792500 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/224e3101-4d56-3129-8450-e15d7b5ca44a.roa Signing time: Mon 20 Oct 2025 13:32:45 +0000 ROA not before: Mon 20 Oct 2025 13:32:45 +0000 ROA not after: Sun 18 Jan 2026 14:32:45 +0000 asID: 270128 IP address blocks: 38.224.164.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:b7:6f:7a:36:19:c8:75:47:79:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 20 13:32:45 2025 GMT Not After : Jan 18 14:32:45 2026 GMT Subject: CN=2ac7015d-fb4d-4318-a15c-5c70f9bc2e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:53:5b:e8:5e:48:4a:fa:f5:cd:1c:70:76:02: 4d:75:72:5e:12:ca:5b:86:db:d6:d6:21:44:47:99: 79:bd:c3:18:27:b9:d8:f5:18:d3:8f:5b:5b:12:47: c2:7b:20:ba:a8:97:ca:18:55:f7:0b:6e:ac:ed:5a: 80:ab:5e:22:23:85:34:2c:03:0b:c2:87:c9:0c:29: 10:c1:18:a2:13:41:a8:cd:61:fa:f5:51:03:6d:bc: c7:51:ad:3a:0a:1e:c6:21:1c:2f:21:79:bb:86:7b: cf:d7:93:0a:d4:b6:54:7d:5d:ef:01:cf:38:5e:46: 46:96:8f:a8:b8:55:af:35:cf:76:e4:1e:35:44:21: a7:22:b4:8c:4b:4b:d2:24:05:cd:bf:62:c7:6f:25: ba:52:01:2b:93:c5:b9:39:54:de:89:47:86:85:a8: a9:91:74:74:24:fa:df:ff:be:5e:2a:87:c4:56:8e: d3:96:d4:47:06:f0:ad:88:4e:56:97:e7:78:6e:73: 9e:b6:7c:4d:f1:64:10:0a:bc:e7:12:72:cb:58:e5: b2:bc:8a:e0:bb:56:73:17:a8:b3:d5:78:69:30:b5: ae:5d:bd:82:58:32:a2:18:58:26:b3:08:fa:ab:b0: 1a:d5:fe:f4:15:80:28:dc:6b:4f:04:24:ae:38:f6: b4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F9:2C:4C:A3:FD:E3:04:47:0A:71:AB:1B:0A:28:C1:F3:88:B2:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/224e3101-4d56-3129-8450-e15d7b5ca44a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.224.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:3c:21:72:eb:4f:14:b7:66:df:cd:b2:bc:42:04:53:2b:8c: 1b:b2:35:5a:45:0a:38:ec:c3:e6:4a:12:5c:22:40:8f:1d:9e: 71:48:68:9b:51:04:60:04:96:b7:25:f7:18:e7:22:69:c3:31: 93:75:bb:81:c8:27:de:4c:bb:5e:fe:66:dc:59:98:ea:2c:fe: 56:e9:52:d0:2d:66:c6:69:0e:6f:7a:dd:bd:c7:83:0c:7b:70: cd:34:ad:fb:a8:2a:5e:9f:fc:59:55:28:6c:01:48:61:88:c0: 19:8b:3e:8b:01:67:44:39:38:3e:5d:9d:56:09:c6:62:c6:38: 3e:25:da:a1:2e:27:89:63:6d:80:19:ea:36:2b:65:9a:93:64: 7a:f9:c0:05:0e:cb:01:a1:0d:44:56:0a:d9:de:d7:01:9c:98: ab:95:79:33:14:21:39:bc:2a:e6:cc:cd:32:7a:f7:d0:8f:29: b4:85:0a:94:79:82:85:8a:b0:a3:c7:1b:ba:73:4c:7e:6f:c1: 74:d1:54:67:28:e7:19:1c:c1:dd:b8:6c:1c:4a:42:98:41:6e: ce:3e:ba:5c:40:8b:20:01:fe:f5:ab:5a:fb:b3:7b:48:2d:e1: d2:3e:93:b7:c5:99:6b:5f:8e:0c:2f:3e:59:4f:ac:c6:6d:fc: 09:06:11:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVt296NhnIdUd5JQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAyMDEzMzI0NVoXDTI2MDExODE0MzI0NVowLzEtMCsGA1UEAxMk MmFjNzAxNWQtZmI0ZC00MzE4LWExNWMtNWM3MGY5YmMyZTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVNb6F5ISvr1zRxwdgJNdXJeEspbhtvW1iFE R5l5vcMYJ7nY9RjTj1tbEkfCeyC6qJfKGFX3C26s7VqAq14iI4U0LAMLwofJDCkQ wRiiE0GozWH69VEDbbzHUa06Ch7GIRwvIXm7hnvP15MK1LZUfV3vAc84XkZGlo+o uFWvNc925B41RCGnIrSMS0vSJAXNv2LHbyW6UgErk8W5OVTeiUeGhaipkXR0JPrf /75eKofEVo7TltRHBvCtiE5Wl+d4bnOetnxN8WQQCrznEnLLWOWyvIrgu1ZzF6iz 1XhpMLWuXb2CWDKiGFgmswj6q7Aa1f70FYAo3GtPBCSuOPa0oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIH5LEyj/eMERwpxqxsKKMHziLLNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMjI0ZTMxMDEtNGQ1Ni0z MTI5LTg0NTAtZTE1ZDdiNWNhNDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJuCkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQ8IXLrTxS3Zt/NsrxCBFMrjBuyNVpFCjjsw+ZKElwiQI8dnnFIaJtR BGAElrcl9xjnImnDMZN1u4HIJ95Mu17+ZtxZmOos/lbpUtAtZsZpDm963b3Hgwx7 cM00rfuoKl6f/FlVKGwBSGGIwBmLPosBZ0Q5OD5dnVYJxmLGOD4l2qEuJ4ljbYAZ 6jYrZZqTZHr5wAUOywGhDURWCtne1wGcmKuVeTMUITm8KubMzTJ699CPKbSFCpR5 goWKsKPHG7pzTH5vwXTRVGco5xkcwd24bBxKQphBbs4+ulxAiyAB/vWrWvuze0gt 4dI+k7fFmWtfjgwvPllPrMZt/AkGEbo= -----END CERTIFICATE-----Generated at Tue Oct 21 13:38:46 2025 by rpki-client