$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/40fd236d-3bdc-3348-8667-257ffc06e7a5.roa File: 40fd236d-3bdc-3348-8667-257ffc06e7a5.roa (raw, json) Hash identifier: oRp3wc4VXR8zjySNYKnUjU0gicB/IKd0xqfcrYBZumE= Subject key identifier: 42:9C:89:3D:7D:4E:79:8C:07:EA:FB:59:94:9B:46:A1:A7:42:14:96 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B87C44047F0CFE6C05D35A9E0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/40fd236d-3bdc-3348-8667-257ffc06e7a5.roa Signing time: Wed 15 Oct 2025 13:37:15 +0000 ROA not before: Wed 15 Oct 2025 13:37:15 +0000 ROA not after: Tue 13 Jan 2026 14:37:15 +0000 asID: 273039 IP address blocks: 38.254.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:c4:40:47:f0:cf:e6:c0:5d:35:a9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 15 13:37:15 2025 GMT Not After : Jan 13 14:37:15 2026 GMT Subject: CN=6b52949a-a5ff-47e0-9002-ef7460938255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:dd:49:d6:07:e7:96:14:e3:d8:96:49:2c:a1: b2:64:63:13:3b:3d:b1:0e:b0:6d:58:7d:9e:58:29: 30:35:83:38:e0:f6:b3:4d:a9:30:b2:70:c6:de:84: 2a:ff:63:03:ec:30:ff:12:b2:9a:0f:ec:3f:7f:ea: 33:a2:1b:39:62:82:f1:84:9d:52:e5:5b:d4:49:fb: 95:04:87:84:99:17:fc:78:fa:b8:50:1f:5d:d8:f6: b5:0b:73:9a:4e:0a:f7:89:a7:77:16:57:7d:60:c3: a6:7b:6c:4d:11:2a:34:bc:d9:2d:30:68:ec:a9:f7: f3:bf:30:12:9e:a3:af:5e:42:53:ed:9a:3e:c1:c4: 41:8b:a3:43:d4:bd:1e:ef:f7:38:e1:ce:c7:36:de: 08:40:43:49:2e:d9:3b:d6:17:ca:6c:64:4a:9d:e4: f7:77:63:0c:9c:a0:76:14:93:d6:3e:df:8e:e4:f3: 09:ef:a6:90:16:91:64:0d:8c:5f:95:cf:22:43:aa: 6b:4a:f8:a1:67:57:c8:05:b2:04:a1:c1:8c:b9:75: f1:b6:c7:93:1d:ad:d4:fd:64:48:a3:37:5b:00:29: 0d:4f:69:5d:01:cb:53:0b:09:1b:fa:e8:b9:e6:04: dd:c9:f0:e0:81:72:52:fc:cf:06:0b:ea:04:96:f0: be:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:9C:89:3D:7D:4E:79:8C:07:EA:FB:59:94:9B:46:A1:A7:42:14:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/40fd236d-3bdc-3348-8667-257ffc06e7a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.254.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:ba:43:97:c6:25:36:ad:97:b0:b8:5b:7a:ef:cc:f7:9d:59: 13:72:6c:fb:4e:d4:9c:e2:99:f6:65:5f:50:67:50:69:86:22: 05:f1:f4:7f:49:f4:94:01:33:58:a5:0b:9e:81:72:8d:56:c3: 59:a6:66:12:d6:8f:12:89:31:d2:36:a4:d3:77:f4:94:c7:6f: b7:ea:6e:50:57:40:95:d2:20:9f:e5:0d:74:d9:a1:e2:b0:bc: 46:19:45:7d:bc:86:89:32:cf:45:5c:fc:cf:15:94:36:99:11: f6:6c:b7:0f:0c:c8:a1:db:b1:fb:39:65:6b:b5:71:3c:03:f8: de:0d:37:99:11:96:c7:da:eb:f2:ec:99:91:17:21:3b:89:a3: 18:52:5b:56:55:ec:3b:f6:2e:14:97:3e:be:97:f1:c6:fb:dd: b7:3c:96:fa:08:6d:8d:60:08:d9:45:85:1a:be:81:e7:b5:69: 7d:c9:7b:d0:78:ed:30:23:6f:9c:7a:e9:c1:ea:19:dc:9c:2c: 32:5e:02:c9:33:22:1e:5b:65:39:46:2f:04:27:f3:03:84:30: 7a:e0:b6:d0:48:86:53:92:3d:d7:1f:36:0e:36:31:c9:8d:d1: 6c:cb:31:68:5c:98:27:24:ca:e0:f2:18:b0:55:ed:b3:d3:5d: 68:4d:33:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHxEBH8M/mwF01qeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAxNTEzMzcxNVoXDTI2MDExMzE0MzcxNVowLzEtMCsGA1UEAxMk NmI1Mjk0OWEtYTVmZi00N2UwLTkwMDItZWY3NDYwOTM4MjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlt1J1gfnlhTj2JZJLKGyZGMTOz2xDrBtWH2e WCkwNYM44PazTakwsnDG3oQq/2MD7DD/ErKaD+w/f+ozohs5YoLxhJ1S5VvUSfuV BIeEmRf8ePq4UB9d2Pa1C3OaTgr3iad3Fld9YMOme2xNESo0vNktMGjsqffzvzAS nqOvXkJT7Zo+wcRBi6ND1L0e7/c44c7HNt4IQENJLtk71hfKbGRKneT3d2MMnKB2 FJPWPt+O5PMJ76aQFpFkDYxflc8iQ6prSvihZ1fIBbIEocGMuXXxtseTHa3U/WRI ozdbACkNT2ldActTCwkb+ui55gTdyfDggXJS/M8GC+oElvC+iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKciT19TnmMB+r7WZSbRqGnQhSWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNDBmZDIzNmQtM2JkYy0z MzQ4LTg2NjctMjU3ZmZjMDZlN2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJv5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALS6Q5fGJTatl7C4W3rvzPedWRNybPtO1JzimfZlX1BnUGmGIgXx9H9J 9JQBM1ilC56Bco1Ww1mmZhLWjxKJMdI2pNN39JTHb7fqblBXQJXSIJ/lDXTZoeKw vEYZRX28hokyz0Vc/M8VlDaZEfZstw8MyKHbsfs5ZWu1cTwD+N4NN5kRlsfa6/Ls mZEXITuJoxhSW1ZV7Dv2LhSXPr6X8cb73bc8lvoIbY1gCNlFhRq+gee1aX3Je9B4 7TAjb5x66cHqGdycLDJeAskzIh5bZTlGLwQn8wOEMHrgttBIhlOSPdcfNg42McmN 0WzLMWhcmCckyuDyGLBV7bPTXWhNM7s= -----END CERTIFICATE-----Generated at Mon Oct 20 10:00:32 2025 by rpki-client