$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2b8e69f0-b314-36f5-b386-293e3802994a.roa File: 2b8e69f0-b314-36f5-b386-293e3802994a.roa (raw, json) Hash identifier: a9X/upiGr4eOybqRs+YzC+Bp1dFahsHSDisDPxiVsrU= Subject key identifier: 2C:2C:BB:0C:19:24:CA:22:68:36:86:14:20:D5:3A:71:7A:F8:3C:9E Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B8844A5225960665538103680 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2b8e69f0-b314-36f5-b386-293e3802994a.roa Signing time: Wed 15 Oct 2025 17:55:57 +0000 ROA not before: Wed 15 Oct 2025 17:55:57 +0000 ROA not after: Tue 13 Jan 2026 18:55:57 +0000 asID: 272106 IP address blocks: 38.224.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:88:44:a5:22:59:60:66:55:38:10:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 15 17:55:57 2025 GMT Not After : Jan 13 18:55:57 2026 GMT Subject: CN=badfdf37-0687-43f9-a23f-800b350ce317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:81:f3:91:ec:95:31:92:5e:12:ce:82:1f:c2: 23:b9:f7:2d:08:f7:92:f2:eb:cd:48:e3:11:00:46: 60:58:13:06:03:b1:82:6a:06:dd:e4:02:02:ea:11: 82:36:a9:7b:39:a5:89:02:ed:8c:7a:7b:7e:6f:43: 89:3a:c2:ef:a9:55:fc:40:91:fb:63:5d:c3:f0:aa: e2:e9:71:eb:2c:e8:d4:84:79:c6:58:6f:2f:0d:38: 42:53:1d:6f:24:f8:c9:4a:ac:b9:25:c9:71:48:ed: e5:30:6e:7c:1d:62:2a:9e:a0:df:33:c5:d8:3a:d6: 0a:96:37:3d:68:5f:f3:44:81:8b:e5:61:5f:0d:b2: f9:b3:7f:41:5a:d6:23:88:ac:61:26:80:b2:c3:95: 03:15:2f:15:60:fd:91:85:96:73:75:35:c5:6b:91: 24:b3:27:ae:2b:1b:7d:b8:92:90:69:64:d9:69:11: 09:44:25:43:52:32:7e:de:57:4d:b7:83:52:52:2e: 74:fd:46:35:a3:fb:df:c3:fe:9c:66:30:d1:15:23: 5f:b8:24:3f:b8:49:d6:56:c6:1f:2a:26:91:f3:1a: 5b:8c:43:bb:95:ad:1f:ff:9f:4f:b8:b1:2a:7a:ce: 8f:74:96:f2:52:ed:82:f1:26:7a:89:cf:ea:50:de: 1d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2C:BB:0C:19:24:CA:22:68:36:86:14:20:D5:3A:71:7A:F8:3C:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2b8e69f0-b314-36f5-b386-293e3802994a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.224.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:52:bd:18:52:82:0e:a2:1a:9d:e2:85:f1:ff:65:59:89:d6: e0:a5:da:55:3c:6b:d4:f6:58:cc:c6:b5:17:ce:3f:a6:cb:1c: 35:9a:12:47:b1:b8:2f:00:11:3b:62:b3:bc:72:93:4b:4e:a1: 3c:9a:84:97:6f:8f:55:92:c6:04:fe:5f:4a:00:50:70:98:46: 9c:80:18:f7:a0:a3:27:2a:b3:8b:7f:f2:10:bd:81:0e:5c:5c: 59:9e:f4:0f:15:ec:d3:1a:e8:40:22:12:62:e6:6f:59:9a:a0: 2f:51:16:b0:3c:34:2a:ba:f9:ad:72:f2:18:42:22:a6:42:10: 65:ae:b5:d6:05:dc:1c:fd:39:67:be:a9:bf:e7:1c:36:c8:39: 76:ca:d5:00:7b:d1:a3:e0:2e:f6:78:89:ee:28:5c:c5:35:08: 86:e2:3a:bd:b0:44:d1:f5:5f:3f:b0:15:0b:8a:4b:f2:35:80: 6a:12:0c:fc:47:5f:2a:e5:a7:74:dd:c8:f0:bf:89:ac:25:38: 12:67:ec:b1:5f:f3:34:a4:ee:32:3c:af:23:72:56:d0:e8:b8: db:13:54:dd:d9:d9:21:72:ff:61:5c:3d:ef:8f:45:48:14:bc: 71:5c:06:e8:2a:4b:ed:75:8d:11:ab:14:0b:b2:b4:ff:85:5a: 37:6b:67:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuIRKUiWWBmVTgQNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAxNTE3NTU1N1oXDTI2MDExMzE4NTU1N1owLzEtMCsGA1UEAxMk YmFkZmRmMzctMDY4Ny00M2Y5LWEyM2YtODAwYjM1MGNlMzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoHzkeyVMZJeEs6CH8IjufctCPeS8uvNSOMR AEZgWBMGA7GCagbd5AIC6hGCNql7OaWJAu2Ment+b0OJOsLvqVX8QJH7Y13D8Kri 6XHrLOjUhHnGWG8vDThCUx1vJPjJSqy5JclxSO3lMG58HWIqnqDfM8XYOtYKljc9 aF/zRIGL5WFfDbL5s39BWtYjiKxhJoCyw5UDFS8VYP2RhZZzdTXFa5EksyeuKxt9 uJKQaWTZaREJRCVDUjJ+3ldNt4NSUi50/UY1o/vfw/6cZjDRFSNfuCQ/uEnWVsYf KiaR8xpbjEO7la0f/59PuLEqes6PdJbyUu2C8SZ6ic/qUN4dVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwsuwwZJMoiaDaGFCDVOnF6+DyeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMmI4ZTY5ZjAtYjMxNC0z NmY1LWIzODYtMjkzZTM4MDI5OTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJuDkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxSvRhSgg6iGp3ihfH/ZVmJ1uCl2lU8a9T2WMzGtRfOP6bLHDWaEkex uC8AETtis7xyk0tOoTyahJdvj1WSxgT+X0oAUHCYRpyAGPegoycqs4t/8hC9gQ5c XFme9A8V7NMa6EAiEmLmb1maoC9RFrA8NCq6+a1y8hhCIqZCEGWutdYF3Bz9OWe+ qb/nHDbIOXbK1QB70aPgLvZ4ie4oXMU1CIbiOr2wRNH1Xz+wFQuKS/I1gGoSDPxH Xyrlp3TdyPC/iawlOBJn7LFf8zSk7jI8ryNyVtDouNsTVN3Z2SFy/2FcPe+PRUgU vHFcBugqS+11jRGrFAuytP+FWjdrZxc= -----END CERTIFICATE-----Generated at Mon Oct 20 04:27:05 2025 by rpki-client