$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7abb923a-5078-35d6-94f1-b06ea2120738.roa File: 7abb923a-5078-35d6-94f1-b06ea2120738.roa (raw, json) Hash identifier: keMl+R6EBhyMLKcEXyV5K5YPkhEhxOZH9u7+sigSuTw= Subject key identifier: B2:93:AD:05:C5:8C:63:CB:52:A8:D6:C3:09:24:CB:F0:6B:8E:A0:8A Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B888A421C34C05E63A771A100 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7abb923a-5078-35d6-94f1-b06ea2120738.roa Signing time: Wed 15 Oct 2025 20:16:13 +0000 ROA not before: Wed 15 Oct 2025 20:16:13 +0000 ROA not after: Tue 13 Jan 2026 21:16:13 +0000 asID: 208122 IP address blocks: 38.121.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:88:8a:42:1c:34:c0:5e:63:a7:71:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 15 20:16:13 2025 GMT Not After : Jan 13 21:16:13 2026 GMT Subject: CN=d5ee892f-e6be-487e-8195-f980096ef421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:97:5f:3b:dd:d2:6c:14:88:a7:9c:2b:3d:bb: af:d2:75:6d:6f:7b:64:0d:73:6a:c8:d4:6f:34:d6: bc:f4:55:23:49:88:0a:dd:a5:4a:f6:4c:8f:21:cd: 79:a4:aa:34:64:2f:0a:76:91:d7:83:61:cd:04:b3: 99:15:b8:af:f0:b2:fa:5a:d9:fa:87:b4:73:db:eb: e5:4c:b9:13:ba:2d:03:70:61:b4:a5:1f:1d:74:7b: be:9d:ce:11:e8:35:32:22:d3:04:f6:f6:6a:1e:69: 97:b6:4c:9f:8e:b0:3d:cd:79:1a:72:bb:e0:aa:82: 69:07:3c:1e:e9:0a:e9:f4:f3:af:62:19:12:d0:22: c8:bd:10:59:90:6c:c6:fe:86:03:17:af:b8:dd:86: 61:94:cf:3e:79:06:59:3a:66:b8:e8:f3:50:a5:a8: 61:e0:df:d4:ea:c0:91:90:ee:d7:c0:84:32:e7:f0: e0:11:2d:ab:c7:eb:cd:65:ee:9d:25:09:21:5b:0e: fc:54:2a:b1:18:6b:76:02:89:b6:f8:ff:92:0a:f7: 26:db:60:42:8f:8c:46:88:2d:02:55:14:78:b5:bb: 94:1f:d8:0a:70:20:89:fe:12:6e:bb:0f:f9:a9:68: 85:47:62:28:df:04:88:a7:6e:50:35:c7:b7:3c:70: 4b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:93:AD:05:C5:8C:63:CB:52:A8:D6:C3:09:24:CB:F0:6B:8E:A0:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7abb923a-5078-35d6-94f1-b06ea2120738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.121.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:ae:2b:79:83:49:16:80:9b:81:3a:b0:48:e6:99:ab:85:c5: fe:79:02:17:0a:db:4e:7f:43:70:b7:55:f1:60:df:70:43:01: 7c:1d:53:9b:31:95:fb:ee:e6:d1:d0:93:de:12:61:ba:bf:f6: aa:d7:82:18:1f:ba:60:e5:74:0c:34:82:c7:e3:07:74:77:d2: 51:ca:56:21:db:a0:58:22:2f:8d:70:f4:60:c2:a5:40:c4:8c: 86:0e:30:59:2f:35:d1:92:8a:49:7e:be:ce:2c:d3:49:c9:c5: 36:ac:b3:0c:2a:14:0a:36:df:1c:75:bf:10:14:3a:66:b6:80: 8d:f9:bc:9f:e1:02:16:af:14:2f:c3:82:c7:dc:49:74:47:6b: 36:d6:43:84:4c:81:9a:ff:6f:db:73:8e:28:bc:52:3c:f0:6f: ec:2c:92:90:a3:2a:26:18:1a:d6:3d:91:7b:44:b1:ab:8d:ce: 2b:56:ea:e5:ee:94:7e:4e:2e:df:1c:66:63:d3:e8:81:3f:9d: e5:a4:b0:c5:8f:af:e8:64:9f:46:87:33:d6:f6:6f:3d:bb:71: dc:b2:cc:92:f0:ab:e5:f3:34:26:cd:cc:55:9f:13:70:d2:b8: ec:33:bc:1c:f5:df:b7:86:56:d5:79:d4:b0:2a:f5:e9:ba:5b: 18:c7:80:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuIikIcNMBeY6dxoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAxNTIwMTYxM1oXDTI2MDExMzIxMTYxM1owLzEtMCsGA1UEAxMk ZDVlZTg5MmYtZTZiZS00ODdlLTgxOTUtZjk4MDA5NmVmNDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopdfO93SbBSIp5wrPbuv0nVtb3tkDXNqyNRv NNa89FUjSYgK3aVK9kyPIc15pKo0ZC8KdpHXg2HNBLOZFbiv8LL6Wtn6h7Rz2+vl TLkTui0DcGG0pR8ddHu+nc4R6DUyItME9vZqHmmXtkyfjrA9zXkacrvgqoJpBzwe 6Qrp9POvYhkS0CLIvRBZkGzG/oYDF6+43YZhlM8+eQZZOma46PNQpahh4N/U6sCR kO7XwIQy5/DgES2rx+vNZe6dJQkhWw78VCqxGGt2Aom2+P+SCvcm22BCj4xGiC0C VRR4tbuUH9gKcCCJ/hJuuw/5qWiFR2Io3wSIp25QNce3PHBLoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKTrQXFjGPLUqjWwwkky/BrjqCKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvN2FiYjkyM2EtNTA3OC0z NWQ2LTk0ZjEtYjA2ZWEyMTIwNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJnk0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeuK3mDSRaAm4E6sEjmmauFxf55AhcK205/Q3C3VfFg33BDAXwdU5sx lfvu5tHQk94SYbq/9qrXghgfumDldAw0gsfjB3R30lHKViHboFgiL41w9GDCpUDE jIYOMFkvNdGSikl+vs4s00nJxTasswwqFAo23xx1vxAUOma2gI35vJ/hAhavFC/D gsfcSXRHazbWQ4RMgZr/b9tzjii8Ujzwb+wskpCjKiYYGtY9kXtEsauNzitW6uXu lH5OLt8cZmPT6IE/neWksMWPr+hkn0aHM9b2bz27cdyyzJLwq+XzNCbNzFWfE3DS uOwzvBz137eGVtV51LAq9em6WxjHgGs= -----END CERTIFICATE-----Generated at Mon Oct 20 09:59:48 2025 by rpki-client