$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8a4a6d73-86b2-374e-9586-7f1f094d9649.roa File: 8a4a6d73-86b2-374e-9586-7f1f094d9649.roa (raw, json) Hash identifier: qr1fpYs/S0P4rWUHPDRCioW9MDH8Fi5juKBJha8579s= Subject key identifier: 3F:87:AC:E5:DC:9D:E8:27:15:8C:61:87:01:E6:67:32:0D:43:D3:68 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B8501608CB51873CB41FF8B90 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8a4a6d73-86b2-374e-9586-7f1f094d9649.roa Signing time: Tue 14 Oct 2025 13:52:59 +0000 ROA not before: Tue 14 Oct 2025 13:52:59 +0000 ROA not after: Mon 12 Jan 2026 14:52:59 +0000 asID: 203217 IP address blocks: 38.3.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:01:60:8c:b5:18:73:cb:41:ff:8b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 14 13:52:59 2025 GMT Not After : Jan 12 14:52:59 2026 GMT Subject: CN=dc659d8c-4b6a-4888-a624-8a3afb4378a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1d:df:08:bb:9b:c3:7a:de:7a:7f:43:42:61: bd:d0:f5:45:c3:c1:6a:a7:48:61:2c:66:f2:32:57: ae:1f:9f:3d:36:b4:9f:15:b0:4b:e9:e4:93:5e:b9: e0:ad:7e:98:9f:2c:b6:33:ad:87:c9:02:67:62:bb: 9c:93:91:6c:1e:c1:87:00:d6:87:8e:90:e8:c9:a5: 71:82:bd:54:05:f7:ff:64:9c:00:4b:4c:f2:b0:a9: 4a:df:9b:54:6e:aa:52:ee:d4:36:fd:cd:46:47:a3: e9:af:5a:1d:c3:87:fb:6f:f3:7b:17:0b:83:36:ab: bd:14:55:5d:b2:08:4d:5c:2c:a1:ab:f5:b8:53:56: 97:aa:c8:40:24:f5:5a:1a:e1:30:f0:82:d4:b7:97: bf:69:71:ab:3b:4a:10:ce:95:ed:d8:d6:cb:68:74: 37:c2:f5:dd:db:57:60:62:1d:f0:39:21:85:c9:24: 52:bd:86:63:89:7e:75:9d:77:ec:db:d9:c6:05:ab: da:65:d2:8c:83:02:e2:8c:8c:de:4a:a1:44:59:8b: 9b:2e:e5:b3:02:5b:51:8b:15:88:4e:9b:b5:d5:f7: d4:2b:70:1c:9b:a1:81:58:86:30:a3:bc:b6:5c:e3: 5e:2d:a1:51:2a:dc:5b:4b:7d:59:1e:80:3f:fb:4f: 28:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:87:AC:E5:DC:9D:E8:27:15:8C:61:87:01:E6:67:32:0D:43:D3:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8a4a6d73-86b2-374e-9586-7f1f094d9649.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.3.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:34:13:5c:8a:24:d3:a6:54:9c:83:8a:c8:91:34:06:82:37: 27:c8:07:bb:f7:fd:f2:65:70:37:16:e3:2c:93:f9:f9:61:d2: af:6d:c9:2f:2c:b2:2c:d4:5e:3e:60:cf:e3:84:3f:c9:88:13: 8b:ed:87:ad:f1:2a:22:15:39:94:b1:08:61:5f:7f:5f:d3:2a: 66:84:bc:3e:47:ad:60:51:43:17:2f:f0:4d:ba:c7:67:fa:c4: 76:67:04:cc:64:23:2a:9f:ba:bf:23:8a:8e:18:24:04:71:bb: 11:5c:e2:9f:f6:1b:81:69:50:e3:89:fa:a4:d5:00:be:1a:a3: ca:b9:66:af:a5:78:27:ac:1d:47:df:3a:f1:b3:da:71:58:78: 04:bf:15:55:53:0b:99:b8:b2:02:40:9d:a4:3e:6a:af:c0:f3: 30:e8:1c:c7:a0:24:6d:17:b3:27:74:9d:51:5a:99:a3:ad:d5: 67:b5:90:41:87:b5:16:6b:c7:59:61:9a:27:1a:09:95:6f:8c: 6f:1f:f0:20:2c:c7:c9:47:7d:d2:20:58:a5:5e:49:b7:2e:88: 43:98:be:fe:41:2c:f7:ec:23:9c:a4:c7:ce:9c:df:8e:fc:2c: b8:2e:00:8e:a5:17:24:93:02:45:0f:32:b7:78:33:df:aa:4f: fe:14:87:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuFAWCMtRhzy0H/i5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAxNDEzNTI1OVoXDTI2MDExMjE0NTI1OVowLzEtMCsGA1UEAxMk ZGM2NTlkOGMtNGI2YS00ODg4LWE2MjQtOGEzYWZiNDM3OGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkx3fCLubw3reen9DQmG90PVFw8Fqp0hhLGby MleuH589NrSfFbBL6eSTXrngrX6Ynyy2M62HyQJnYruck5FsHsGHANaHjpDoyaVx gr1UBff/ZJwAS0zysKlK35tUbqpS7tQ2/c1GR6Ppr1odw4f7b/N7FwuDNqu9FFVd sghNXCyhq/W4U1aXqshAJPVaGuEw8ILUt5e/aXGrO0oQzpXt2NbLaHQ3wvXd21dg Yh3wOSGFySRSvYZjiX51nXfs29nGBavaZdKMgwLijIzeSqFEWYubLuWzAltRixWI Tpu11ffUK3Acm6GBWIYwo7y2XONeLaFRKtxbS31ZHoA/+08oDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+HrOXcnegnFYxhhwHmZzINQ9NoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOGE0YTZkNzMtODZiMi0z NzRlLTk1ODYtN2YxZjA5NGQ5NjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJgPkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACk0E1yKJNOmVJyDisiRNAaCNyfIB7v3/fJlcDcW4yyT+flh0q9tyS8s sizUXj5gz+OEP8mIE4vth63xKiIVOZSxCGFff1/TKmaEvD5HrWBRQxcv8E26x2f6 xHZnBMxkIyqfur8jio4YJARxuxFc4p/2G4FpUOOJ+qTVAL4ao8q5Zq+leCesHUff OvGz2nFYeAS/FVVTC5m4sgJAnaQ+aq/A8zDoHMegJG0Xsyd0nVFamaOt1We1kEGH tRZrx1lhmicaCZVvjG8f8CAsx8lHfdIgWKVeSbcuiEOYvv5BLPfsI5ykx86c3478 LLguAI6lFySTAkUPMrd4M9+qT/4Uhxg= -----END CERTIFICATE-----Generated at Mon Oct 20 09:59:48 2025 by rpki-client