$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/436dda0d-2194-3923-a73c-9c7ca72ec026.roa File: 436dda0d-2194-3923-a73c-9c7ca72ec026.roa (raw, json) Hash identifier: RuD+5KMN3N41U7OZLjqimlUP7Fr0rvhap4vt9Cs0Qf0= Subject key identifier: AB:A4:EE:A4:60:A0:41:E8:B2:1F:EA:56:F1:B6:24:95:0E:5F:C5:03 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B832B001DBA22F9DE20E3CC00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/436dda0d-2194-3923-a73c-9c7ca72ec026.roa Signing time: Mon 13 Oct 2025 22:05:14 +0000 ROA not before: Mon 13 Oct 2025 22:05:14 +0000 ROA not after: Sun 11 Jan 2026 23:05:14 +0000 asID: 61461 IP address blocks: 38.222.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:83:2b:00:1d:ba:22:f9:de:20:e3:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 13 22:05:14 2025 GMT Not After : Jan 11 23:05:14 2026 GMT Subject: CN=c4496c4c-2d38-43a3-8e7a-0035bbb0a145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:78:95:c7:d6:86:91:1a:a0:b0:1f:2b:b1:4c: 7d:2f:0d:7b:36:a6:78:dd:91:da:3d:6d:1f:13:86: 64:ba:63:9d:a9:fe:45:6f:74:5e:84:63:5f:95:a5: 30:12:86:67:89:7a:59:c3:d3:83:9d:f6:f7:2f:64: a9:51:e4:bf:0e:48:70:96:70:93:8f:a9:7a:7b:3f: 3a:ae:5c:00:13:da:10:d2:95:14:6c:8c:dc:cb:1b: d6:f8:5e:4b:f8:b3:27:74:8a:5e:cb:9e:5d:08:48: 7a:31:70:22:c9:40:67:cd:ec:9e:ec:67:4a:ff:0e: 3e:b0:af:80:fe:ee:28:13:2c:4f:f3:21:4d:14:12: 74:b1:2d:be:09:94:de:2f:66:be:c6:fd:20:49:9c: b2:ee:ba:e9:6e:c0:d9:8c:32:d2:43:e4:c7:7e:ea: 4d:0b:7e:0d:95:d6:88:06:ff:b7:03:17:bc:50:f0: 88:45:ad:6e:74:fa:96:97:97:2d:e5:5c:55:a1:a7: 6f:fe:e5:cd:7e:de:23:97:89:eb:22:a8:67:81:b7: 57:44:99:2f:b7:de:a2:63:71:5b:fd:90:3e:99:5b: 06:aa:8f:b9:42:65:d0:b0:59:80:97:e9:d3:2b:62: 74:e3:07:20:17:c2:f6:c4:4e:d0:9f:87:4e:a8:15: 52:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A4:EE:A4:60:A0:41:E8:B2:1F:EA:56:F1:B6:24:95:0E:5F:C5:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/436dda0d-2194-3923-a73c-9c7ca72ec026.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.222.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:ce:2a:7f:af:3e:09:92:f3:c7:2a:47:9c:2d:ad:f2:dc:89: ba:6f:a0:ca:1c:11:26:7a:58:5f:dd:87:e8:95:b3:9b:3f:b2: cf:9a:70:ac:dd:c9:ac:77:61:12:f2:2f:aa:69:a1:b7:ab:4b: 40:ed:d0:bf:d5:82:f4:7c:7f:e3:2c:fe:87:ec:63:07:2f:bf: a1:d5:75:7c:e7:ca:1b:8b:36:b9:a4:83:50:fc:7b:b6:25:96: 02:63:ff:1b:d1:11:32:a8:00:04:c0:1f:54:dc:57:5f:dd:06: 8b:0e:f8:9a:97:c8:9e:d6:cc:8e:c1:32:ae:35:34:0f:71:05: a1:d4:b8:00:55:46:5c:cf:1d:8d:cb:46:6e:b3:2f:5f:bd:86: 67:20:ac:62:31:83:b4:1d:c8:76:1f:16:cf:e0:19:9b:d2:01: 0c:b1:1c:f3:8a:79:fa:c4:a4:ef:87:d7:0b:50:66:78:1f:ab: be:be:35:48:b4:7f:aa:a5:11:62:e5:52:bf:e0:46:38:b9:d3: d8:0f:93:10:35:ae:f7:fa:b8:f3:96:c5:df:f9:9f:a7:45:c7: f3:73:e4:7f:07:da:01:ef:e5:a5:0f:ac:66:4c:bd:37:92:af: fd:57:f1:ac:9c:a6:b3:37:51:e8:5a:10:b7:49:91:e3:64:08: 19:ed:e1:eb -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuDKwAduiL53iDjzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAxMzIyMDUxNFoXDTI2MDExMTIzMDUxNFowLzEtMCsGA1UEAxMk YzQ0OTZjNGMtMmQzOC00M2EzLThlN2EtMDAzNWJiYjBhMTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3iVx9aGkRqgsB8rsUx9Lw17NqZ43ZHaPW0f E4ZkumOdqf5Fb3RehGNflaUwEoZniXpZw9ODnfb3L2SpUeS/DkhwlnCTj6l6ez86 rlwAE9oQ0pUUbIzcyxvW+F5L+LMndIpey55dCEh6MXAiyUBnzeye7GdK/w4+sK+A /u4oEyxP8yFNFBJ0sS2+CZTeL2a+xv0gSZyy7rrpbsDZjDLSQ+THfupNC34NldaI Bv+3Axe8UPCIRa1udPqWl5ct5VxVoadv/uXNft4jl4nrIqhngbdXRJkvt96iY3Fb /ZA+mVsGqo+5QmXQsFmAl+nTK2J04wcgF8L2xE7Qn4dOqBVSywIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKuk7qRgoEHosh/qVvG2JJUOX8UDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNDM2ZGRhMGQtMjE5NC0z OTIzLWE3M2MtOWM3Y2E3MmVjMDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAJt4wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAPM4qf68+CZLzxypHnC2t8tyJum+gyhwRJnpYX92H6JWzmz+yz5pwrN3J rHdhEvIvqmmht6tLQO3Qv9WC9Hx/4yz+h+xjBy+/odV1fOfKG4s2uaSDUPx7tiWW AmP/G9ERMqgABMAfVNxXX90Giw74mpfIntbMjsEyrjU0D3EFodS4AFVGXM8djctG brMvX72GZyCsYjGDtB3Idh8Wz+AZm9IBDLEc84p5+sSk74fXC1BmeB+rvr41SLR/ qqURYuVSv+BGOLnT2A+TEDWu9/q485bF3/mfp0XH83PkfwfaAe/lpQ+sZky9N5Kv /VfxrJymszdR6FoQt0mR42QIGe3h6w== -----END CERTIFICATE-----Generated at Mon Oct 20 14:51:41 2025 by rpki-client