$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/835943df-65a4-3671-8771-9cdec06935fb.roa File: 835943df-65a4-3671-8771-9cdec06935fb.roa (raw, json) Hash identifier: pM5Qcm8PL0e2ktjmnJy/WicPFYfPKh50bb+8NRLbbng= Subject key identifier: 6B:C1:63:2F:69:01:75:0D:C9:84:DB:82:89:EA:3C:F5:8C:F6:83:D0 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B8847EF1760A1F70B9AF1C880 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/835943df-65a4-3671-8771-9cdec06935fb.roa Signing time: Wed 15 Oct 2025 18:02:34 +0000 ROA not before: Wed 15 Oct 2025 18:02:34 +0000 ROA not after: Tue 13 Jan 2026 19:02:34 +0000 asID: 400699 IP address blocks: 38.253.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:88:47:ef:17:60:a1:f7:0b:9a:f1:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 15 18:02:34 2025 GMT Not After : Jan 13 19:02:34 2026 GMT Subject: CN=98b74736-5bf7-440e-ae5b-0369d5cd5ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:05:45:4b:5e:ed:1c:74:5b:c7:cd:5e:c6:ef: cb:70:e9:6b:12:06:43:7d:a0:a9:9f:5e:96:23:b2: 21:98:31:92:d5:58:9f:6e:3f:d0:06:22:90:b3:cf: 81:b7:fc:c2:6e:24:b4:94:31:77:4a:4f:55:03:e8: ed:4c:a0:bc:39:45:f4:fe:bd:a5:ad:42:da:62:d0: 47:54:cb:25:93:8c:bc:f7:22:c1:32:94:8e:80:36: cc:1d:eb:bb:29:b2:aa:26:64:8b:62:57:fa:19:e5: 0a:37:10:da:7f:9b:20:40:6a:da:eb:57:b9:5d:ce: e4:d7:c7:ae:f6:d3:73:ed:9c:19:69:e1:6a:06:7b: e6:5a:b1:0d:51:bf:e6:fe:d0:94:03:fe:50:5d:9c: ff:a0:cc:cf:6c:37:cd:83:b3:01:36:1d:6f:0f:38: c4:db:78:0e:9e:ec:63:35:0f:65:51:ae:0d:ba:0b: ab:c1:45:47:67:f9:18:1c:ce:1c:92:dd:42:fb:8a: ba:79:3f:ef:92:a3:58:90:d9:9e:cd:bd:c3:32:22: 7f:9f:b1:43:f3:10:35:fa:1b:b5:d9:02:fb:17:b7: 6d:c8:3d:01:d3:f4:93:ef:3e:47:79:bb:4f:17:e4: f4:f2:15:5f:de:39:62:92:64:70:7e:08:85:fc:a5: 7a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C1:63:2F:69:01:75:0D:C9:84:DB:82:89:EA:3C:F5:8C:F6:83:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/835943df-65a4-3671-8771-9cdec06935fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.253.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:ed:d6:33:02:98:af:d5:2b:2c:90:64:f7:d7:3f:ca:a0:df: 67:25:58:40:bf:5b:6f:06:58:9c:b0:88:aa:67:0c:71:6b:e6: 5d:44:07:31:ec:9f:ea:dd:3a:06:b6:34:3c:df:5c:12:ed:ac: 0b:43:9d:13:37:81:10:81:93:da:35:b7:bf:da:14:b8:9e:d7: 9e:ff:dc:39:a7:8e:16:49:0e:57:d6:44:56:c5:5a:16:d5:fe: 79:32:52:c5:f7:76:46:f3:a8:57:9c:88:95:af:55:6e:3a:e5: f1:4a:71:ce:ab:e2:26:c0:64:f9:b1:1a:8c:62:01:f1:04:f9: 19:76:ee:f6:5b:8a:28:08:37:9f:85:5f:df:7d:1e:fd:38:9a: 43:89:55:80:4b:29:30:d9:0c:a9:7f:bb:bc:c0:24:9b:22:b0: 44:58:8c:91:98:e1:ff:15:f2:73:c6:17:73:1d:7c:60:49:af: e4:76:49:30:c4:75:12:44:9a:48:2a:32:23:0f:de:57:78:20: b0:71:39:f1:2f:43:f7:e4:43:92:4a:09:78:27:32:7c:13:f5: 6a:02:24:40:43:b1:fd:a3:84:78:c3:2d:03:22:08:dd:e0:14: 90:90:4a:5c:7a:2e:ff:16:32:4d:53:45:cd:cb:90:9c:00:29: f5:ab:fc:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuIR+8XYKH3C5rxyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAxNTE4MDIzNFoXDTI2MDExMzE5MDIzNFowLzEtMCsGA1UEAxMk OThiNzQ3MzYtNWJmNy00NDBlLWFlNWItMDM2OWQ1Y2Q1YWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAVFS17tHHRbx81exu/LcOlrEgZDfaCpn16W I7IhmDGS1Vifbj/QBiKQs8+Bt/zCbiS0lDF3Sk9VA+jtTKC8OUX0/r2lrULaYtBH VMslk4y89yLBMpSOgDbMHeu7KbKqJmSLYlf6GeUKNxDaf5sgQGra61e5Xc7k18eu 9tNz7ZwZaeFqBnvmWrENUb/m/tCUA/5QXZz/oMzPbDfNg7MBNh1vDzjE23gOnuxj NQ9lUa4NugurwUVHZ/kYHM4ckt1C+4q6eT/vkqNYkNmezb3DMiJ/n7FD8xA1+hu1 2QL7F7dtyD0B0/ST7z5HebtPF+T08hVf3jlikmRwfgiF/KV6fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvBYy9pAXUNyYTbgonqPPWM9oPQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODM1OTQzZGYtNjVhNC0z NjcxLTg3NzEtOWNkZWMwNjkzNWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJv1IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK3t1jMCmK/VKyyQZPfXP8qg32clWEC/W28GWJywiKpnDHFr5l1EBzHs n+rdOga2NDzfXBLtrAtDnRM3gRCBk9o1t7/aFLie157/3DmnjhZJDlfWRFbFWhbV /nkyUsX3dkbzqFeciJWvVW465fFKcc6r4ibAZPmxGoxiAfEE+Rl27vZbiigIN5+F X999Hv04mkOJVYBLKTDZDKl/u7zAJJsisERYjJGY4f8V8nPGF3MdfGBJr+R2STDE dRJEmkgqMiMP3ld4ILBxOfEvQ/fkQ5JKCXgnMnwT9WoCJEBDsf2jhHjDLQMiCN3g FJCQSlx6Lv8WMk1TRc3LkJwAKfWr/AA= -----END CERTIFICATE-----Generated at Mon Oct 20 10:00:18 2025 by rpki-client