$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/30c4feaa-e53e-3a16-9f50-dccbaaebaf80.roa File: 30c4feaa-e53e-3a16-9f50-dccbaaebaf80.roa (raw, json) Hash identifier: ALF2yhDF+knhunsUArIAXb1t32hZB6P+e1dWnrD+1Ow= Subject key identifier: F9:F9:52:F2:4A:CC:A6:E3:91:C7:81:C7:17:2E:7C:E8:25:01:75:6C Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B82D313263D5CA47B4D36C740 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/30c4feaa-e53e-3a16-9f50-dccbaaebaf80.roa Signing time: Mon 13 Oct 2025 19:08:04 +0000 ROA not before: Mon 13 Oct 2025 19:08:04 +0000 ROA not after: Sun 11 Jan 2026 20:08:04 +0000 asID: 16581 IP address blocks: 38.101.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:d3:13:26:3d:5c:a4:7b:4d:36:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 13 19:08:04 2025 GMT Not After : Jan 11 20:08:04 2026 GMT Subject: CN=89bf4515-ae6a-4331-83a4-375312fafd1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:db:6d:77:8b:71:4f:38:d7:f9:c1:fb:7b:f8: eb:50:c4:37:9c:49:8e:eb:1b:94:eb:ea:9f:9d:75: a2:66:62:c2:dc:22:db:20:b3:ed:14:ab:5c:03:a0: 2f:42:dd:fc:53:8a:bd:17:73:26:1b:83:e0:6f:f9: ca:64:34:dd:8c:4a:fa:f0:01:77:fb:aa:5a:43:1c: 00:3f:58:e0:55:f4:eb:41:a9:e8:0f:9e:64:ee:c2: cf:59:30:66:e2:66:f3:cb:22:f1:46:2d:46:7d:28: 29:e5:9c:58:40:cb:7a:a6:32:53:66:cd:70:5a:b1: c8:72:27:5e:95:ba:90:26:46:84:ab:cb:a8:bf:83: f5:ce:45:1c:33:c1:ee:ef:14:cf:c3:c9:32:21:89: b9:76:c1:8a:e2:6e:5c:67:27:d0:17:69:63:a7:a8: d2:13:91:b9:0e:49:78:49:6d:e5:80:c7:c0:cd:55: 28:ac:6f:b4:91:ba:52:ce:04:85:14:02:71:fe:3a: 48:d4:a1:29:94:68:80:6a:6f:76:dc:12:64:d2:d9: af:a0:d8:6b:27:ec:3a:f7:df:5a:8e:b2:89:72:04: 61:53:e7:c1:71:3d:0a:6f:96:c3:af:6f:3b:ca:37: 20:20:8f:f3:75:61:b6:7b:ce:55:60:70:04:8d:2f: ab:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F9:52:F2:4A:CC:A6:E3:91:C7:81:C7:17:2E:7C:E8:25:01:75:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/30c4feaa-e53e-3a16-9f50-dccbaaebaf80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.101.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:76:ba:31:93:83:97:fc:8a:d5:be:59:52:ea:af:da:3f:d2: 29:55:a3:e4:a1:e6:9f:a9:4e:18:4a:a0:67:ba:f4:39:7e:09: f5:fd:66:e1:ea:e0:81:7d:f2:b3:70:c9:75:ac:f2:70:9a:fa: 7b:8c:ed:12:35:57:b8:d0:bf:aa:7a:74:51:59:11:ce:b6:b4: 90:d3:b5:23:50:53:ff:18:23:86:d9:ed:d9:b3:5f:60:3e:ec: 20:51:64:5c:48:85:21:2d:00:ca:e4:65:17:f7:1a:f3:84:3c: 26:af:28:6b:15:f0:05:9b:84:e9:79:91:48:d6:47:ca:79:98: de:5a:58:8c:76:4b:5d:91:06:a1:98:cf:be:51:1a:dd:01:d3: 63:41:87:24:38:75:f9:58:d7:06:6c:85:fa:67:34:52:66:b2: 1d:56:cc:16:be:24:6b:e0:9b:8d:d8:37:40:dd:d6:96:eb:54: 62:53:da:4b:73:7b:0b:57:4f:59:e0:4e:b8:d0:1f:0f:02:5c: 1b:d7:20:b2:c6:48:5f:4f:e1:b0:f5:a7:f1:4d:8c:92:b4:1a: 8e:0d:1d:ed:53:8f:d2:86:9a:41:91:76:80:e2:65:42:d9:cb: 70:e4:04:40:25:4d:38:b4:0e:b9:b1:5b:ce:a0:69:0a:ac:b6: 4d:d5:ff:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuC0xMmPVyke002x0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAxMzE5MDgwNFoXDTI2MDExMTIwMDgwNFowLzEtMCsGA1UEAxMk ODliZjQ1MTUtYWU2YS00MzMxLTgzYTQtMzc1MzEyZmFmZDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNttd4txTzjX+cH7e/jrUMQ3nEmO6xuU6+qf nXWiZmLC3CLbILPtFKtcA6AvQt38U4q9F3MmG4Pgb/nKZDTdjEr68AF3+6paQxwA P1jgVfTrQanoD55k7sLPWTBm4mbzyyLxRi1GfSgp5ZxYQMt6pjJTZs1wWrHIcide lbqQJkaEq8uov4P1zkUcM8Hu7xTPw8kyIYm5dsGK4m5cZyfQF2ljp6jSE5G5Dkl4 SW3lgMfAzVUorG+0kbpSzgSFFAJx/jpI1KEplGiAam923BJk0tmvoNhrJ+w6999a jrKJcgRhU+fBcT0Kb5bDr287yjcgII/zdWG2e85VYHAEjS+rzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPn5UvJKzKbjkceBxxcufOglAXVsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMzBjNGZlYWEtZTUzZS0z YTE2LTlmNTAtZGNjYmFhZWJhZjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJmWXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKN2ujGTg5f8itW+WVLqr9o/0ilVo+Sh5p+pThhKoGe69Dl+CfX9ZuHq 4IF98rNwyXWs8nCa+nuM7RI1V7jQv6p6dFFZEc62tJDTtSNQU/8YI4bZ7dmzX2A+ 7CBRZFxIhSEtAMrkZRf3GvOEPCavKGsV8AWbhOl5kUjWR8p5mN5aWIx2S12RBqGY z75RGt0B02NBhyQ4dflY1wZshfpnNFJmsh1WzBa+JGvgm43YN0Dd1pbrVGJT2ktz ewtXT1ngTrjQHw8CXBvXILLGSF9P4bD1p/FNjJK0Go4NHe1Tj9KGmkGRdoDiZULZ y3DkBEAlTTi0DrmxW86gaQqstk3V/wg= -----END CERTIFICATE-----Generated at Mon Oct 20 10:01:15 2025 by rpki-client