$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/28085ea0-be34-3dbc-ab22-7e81120e1594.roa File: 28085ea0-be34-3dbc-ab22-7e81120e1594.roa (raw, json) Hash identifier: TbIq915li6t+f44/MDe3Wl1vJOemoPjBRZ2njufgEKQ= Subject key identifier: 1F:27:98:8B:76:14:48:B2:E6:68:4A:D4:E5:B2:04:4A:EE:65:48:63 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B884B3899FA1E40D5E5172FC0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/28085ea0-be34-3dbc-ab22-7e81120e1594.roa Signing time: Wed 15 Oct 2025 18:09:12 +0000 ROA not before: Wed 15 Oct 2025 18:09:12 +0000 ROA not after: Tue 13 Jan 2026 19:09:12 +0000 asID: 273286 IP address blocks: 38.19.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:88:4b:38:99:fa:1e:40:d5:e5:17:2f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 15 18:09:12 2025 GMT Not After : Jan 13 19:09:12 2026 GMT Subject: CN=f4722124-8abc-4aa9-bed7-fe4b1e5c325d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9e:c4:de:94:15:be:d0:19:d6:73:a7:67:d4: 6d:91:22:64:77:d8:d3:2b:c9:6e:d2:65:4b:84:71: e8:e7:a4:e9:70:83:b8:3b:13:e7:ee:60:2e:6c:30: f2:c6:fe:4c:37:35:b5:d7:17:f3:e9:df:f4:d2:d8: 30:eb:35:0f:6e:4e:ec:a6:07:c1:97:d5:b8:58:9e: a5:c2:08:57:12:b9:20:62:64:bb:08:aa:ba:25:72: 9b:e5:4e:fc:62:de:e8:c6:db:8c:76:8f:70:dc:1e: 11:21:f4:56:f4:c3:4b:b0:00:28:a7:5c:9a:0d:bf: e9:67:8f:bd:73:d1:6e:d4:ba:11:a4:39:3a:29:f4: 94:11:19:5b:4a:e5:64:8c:be:82:be:6c:da:3a:43: 4a:f4:b1:b0:14:75:73:6f:c0:48:ec:4f:f6:bd:a8: 81:47:35:2b:92:4a:d1:6e:74:8e:72:54:d3:13:b7: 36:a7:36:0b:1a:36:16:05:c2:86:44:75:b2:c0:9f: 13:b6:e5:02:ec:51:e7:f8:ab:bf:a9:d1:13:10:3f: b4:f7:3b:de:33:08:1f:d9:66:76:bf:22:2a:cc:d4: 41:14:30:78:a3:12:ed:5d:c4:ae:48:f9:8c:fe:f1: 7a:5f:76:ca:1a:b2:f4:e0:28:be:63:5b:6f:f4:d7: eb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:27:98:8B:76:14:48:B2:E6:68:4A:D4:E5:B2:04:4A:EE:65:48:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/28085ea0-be34-3dbc-ab22-7e81120e1594.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.19.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:6b:9e:de:67:2a:3b:45:08:af:e0:24:2f:1c:20:8b:20:f1: d3:28:fa:f7:17:ff:f0:c5:f1:83:ee:57:e3:e4:f8:c3:e5:50: 81:82:31:49:e8:e1:bc:e4:a2:37:ff:e4:ff:a0:11:ff:62:91: ea:b1:0b:91:19:7d:73:c3:3f:b3:4b:86:7e:40:06:1b:56:e6: e8:26:94:9c:84:3a:4e:30:11:e9:5f:4d:a2:6d:d2:69:28:6b: 92:57:2d:e4:ce:4c:38:2f:84:33:88:6e:67:59:84:d4:5d:2b: e6:43:0f:ba:08:cc:e3:3f:21:27:1e:9c:56:a1:9e:88:2e:c3: 4d:88:74:86:c5:4c:28:3b:9e:75:8a:a2:8a:5d:be:b2:04:bc: a8:bb:58:32:f1:b5:db:bc:c9:2c:69:cc:da:a8:4a:58:dd:da: 30:40:47:95:c0:57:72:78:d0:36:53:24:8b:97:5c:fe:f2:f1: cc:1c:82:c4:56:a1:c5:0c:a2:06:bd:05:da:67:32:18:30:6b: 5b:76:17:9f:28:c9:30:66:67:c1:f8:e1:75:76:c5:7b:6d:85: 82:4a:bb:98:27:75:8b:3c:4c:24:b3:9f:e9:0b:67:1b:13:03: 29:83:ab:5a:c4:4c:6a:b4:2b:67:56:7c:5e:ff:8c:fa:a9:4d: 43:d8:e8:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuISziZ+h5A1eUXL8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAxNTE4MDkxMloXDTI2MDExMzE5MDkxMlowLzEtMCsGA1UEAxMk ZjQ3MjIxMjQtOGFiYy00YWE5LWJlZDctZmU0YjFlNWMzMjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhp7E3pQVvtAZ1nOnZ9RtkSJkd9jTK8lu0mVL hHHo56TpcIO4OxPn7mAubDDyxv5MNzW11xfz6d/00tgw6zUPbk7spgfBl9W4WJ6l wghXErkgYmS7CKq6JXKb5U78Yt7oxtuMdo9w3B4RIfRW9MNLsAAop1yaDb/pZ4+9 c9Fu1LoRpDk6KfSUERlbSuVkjL6CvmzaOkNK9LGwFHVzb8BI7E/2vaiBRzUrkkrR bnSOclTTE7c2pzYLGjYWBcKGRHWywJ8TtuUC7FHn+Ku/qdETED+09zveMwgf2WZ2 vyIqzNRBFDB4oxLtXcSuSPmM/vF6X3bKGrL04Ci+Y1tv9Nfr/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8nmIt2FEiy5mhK1OWyBEruZUhjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMjgwODVlYTAtYmUzNC0z ZGJjLWFiMjItN2U4MTEyMGUxNTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJhPHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRrnt5nKjtFCK/gJC8cIIsg8dMo+vcX//DF8YPuV+Pk+MPlUIGCMUno 4bzkojf/5P+gEf9ikeqxC5EZfXPDP7NLhn5ABhtW5ugmlJyEOk4wEelfTaJt0mko a5JXLeTOTDgvhDOIbmdZhNRdK+ZDD7oIzOM/IScenFahnoguw02IdIbFTCg7nnWK oopdvrIEvKi7WDLxtdu8ySxpzNqoSljd2jBAR5XAV3J40DZTJIuXXP7y8cwcgsRW ocUMoga9BdpnMhgwa1t2F58oyTBmZ8H44XV2xXtthYJKu5gndYs8TCSzn+kLZxsT AymDq1rETGq0K2dWfF7/jPqpTUPY6Gs= -----END CERTIFICATE-----Generated at Mon Oct 20 04:27:26 2025 by rpki-client