$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/95c17175-b89f-38ad-937e-994cc9c2c4b3.roa File: 95c17175-b89f-38ad-937e-994cc9c2c4b3.roa (raw, json) Hash identifier: tJF/w9sN18ID3Vlbvp/2YZxHZYiqSxOhx1POg61zoaw= Subject key identifier: 41:4F:EF:E6:60:57:0F:7D:DC:30:48:8E:FF:D6:68:C8:DA:3E:3C:C9 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B8B6FD5B6AEC61DDDE1DAA7C0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/95c17175-b89f-38ad-937e-994cc9c2c4b3.roa Signing time: Thu 16 Oct 2025 21:10:24 +0000 ROA not before: Thu 16 Oct 2025 21:10:24 +0000 ROA not after: Wed 14 Jan 2026 22:10:24 +0000 asID: 11550 IP address blocks: 38.86.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:6f:d5:b6:ae:c6:1d:dd:e1:da:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 16 21:10:24 2025 GMT Not After : Jan 14 22:10:24 2026 GMT Subject: CN=5a198f89-03ab-4e2b-b0db-beb442586d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e0:31:d6:14:9d:63:32:13:75:93:d6:fa:31: fd:a9:2f:d4:e5:c8:3c:13:b0:9a:fd:e2:29:04:23: 6a:64:2c:a1:ea:c3:23:fd:2b:10:a8:67:c4:3f:ca: cb:89:82:bc:5e:c9:6e:1b:1f:cc:28:14:d3:26:11: da:07:f5:b4:13:42:58:05:95:08:5d:91:81:60:f7: c7:5c:27:83:22:10:71:15:e5:b0:62:33:01:fd:17: d8:d0:5b:99:52:59:f6:d3:5d:7c:8b:04:ef:a9:bf: a3:cc:68:cd:71:97:85:b2:c2:35:dd:3a:19:51:89: d1:96:e2:63:ed:f6:cc:81:85:ce:ef:72:35:12:e1: b9:23:4d:d5:3d:b4:7d:e8:e2:d9:6f:bc:93:38:1a: c4:ae:a2:ee:03:db:4f:77:24:cb:9a:da:7b:bb:c7: 10:a7:89:7c:83:ce:80:1a:aa:69:81:67:2d:b5:2a: 78:80:01:ed:39:96:dd:72:57:9a:d0:61:97:57:30: 06:d4:ae:73:49:0a:ee:0a:e7:8a:e5:a3:a4:31:58: 0a:cc:19:bd:30:da:69:30:d1:ed:e5:8c:75:d3:51: ed:f7:69:ab:ca:25:ad:9d:72:12:43:c3:36:59:36: 27:b4:f1:23:a5:15:df:4b:6f:ad:0d:b3:26:43:e8: 35:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4F:EF:E6:60:57:0F:7D:DC:30:48:8E:FF:D6:68:C8:DA:3E:3C:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/95c17175-b89f-38ad-937e-994cc9c2c4b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.86.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:0a:f8:72:82:ea:6e:aa:e7:29:12:31:f7:ef:8d:35:10:39: d1:a3:b6:d1:b1:cc:89:91:c6:1f:65:d7:4c:cc:9a:f5:02:7d: 94:af:90:27:27:49:63:eb:8f:54:23:e1:ce:7d:2e:48:3e:d1: b1:5b:6d:25:a9:94:50:b2:21:4c:01:c1:fc:d1:35:ac:5b:79: 4e:c8:4a:11:55:c7:6c:8f:2d:65:40:15:47:7f:d8:c9:95:77: a6:c5:bb:c0:71:2d:fb:18:72:19:b2:d4:7f:97:1e:6e:ee:06: c2:80:33:e3:2b:9a:ff:ca:f1:87:dc:f4:78:ee:68:f5:83:ec: 27:f9:86:5f:f9:ec:59:a4:28:58:79:ec:b2:3e:88:bc:4b:d7: 5b:38:af:c8:29:e5:0e:37:f4:d9:09:92:70:74:ae:90:63:f8: 8d:39:c6:51:23:61:d0:21:82:40:9c:c3:3f:03:07:54:02:6f: a0:c7:75:4f:b1:eb:35:5f:8a:dd:f0:e1:9f:2f:37:0a:2b:06: 97:ad:48:d4:aa:4f:76:7b:56:f3:c4:7f:cc:f8:2f:dd:24:5f: 5b:71:3c:8d:47:99:a3:67:0e:03:77:72:d1:29:68:41:2b:85: 72:75:26:d2:66:7f:f7:c6:13:82:b4:ee:78:de:d3:24:ca:9b: d0:29:47:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuLb9W2rsYd3eHap8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAxNjIxMTAyNFoXDTI2MDExNDIyMTAyNFowLzEtMCsGA1UEAxMk NWExOThmODktMDNhYi00ZTJiLWIwZGItYmViNDQyNTg2ZDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuAx1hSdYzITdZPW+jH9qS/U5cg8E7Ca/eIp BCNqZCyh6sMj/SsQqGfEP8rLiYK8XsluGx/MKBTTJhHaB/W0E0JYBZUIXZGBYPfH XCeDIhBxFeWwYjMB/RfY0FuZUln20118iwTvqb+jzGjNcZeFssI13ToZUYnRluJj 7fbMgYXO73I1EuG5I03VPbR96OLZb7yTOBrErqLuA9tPdyTLmtp7u8cQp4l8g86A GqppgWcttSp4gAHtOZbdclea0GGXVzAG1K5zSQruCueK5aOkMVgKzBm9MNppMNHt 5Yx101Ht92mryiWtnXISQ8M2WTYntPEjpRXfS2+tDbMmQ+g1NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFP7+ZgVw993DBIjv/WaMjaPjzJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOTVjMTcxNzUtYjg5Zi0z OGFkLTkzN2UtOTk0Y2M5YzJjNGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJlZcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIK+HKC6m6q5ykSMffvjTUQOdGjttGxzImRxh9l10zMmvUCfZSvkCcn SWPrj1Qj4c59Lkg+0bFbbSWplFCyIUwBwfzRNaxbeU7IShFVx2yPLWVAFUd/2MmV d6bFu8BxLfsYchmy1H+XHm7uBsKAM+Mrmv/K8Yfc9HjuaPWD7Cf5hl/57FmkKFh5 7LI+iLxL11s4r8gp5Q439NkJknB0rpBj+I05xlEjYdAhgkCcwz8DB1QCb6DHdU+x 6zVfit3w4Z8vNworBpetSNSqT3Z7VvPEf8z4L90kX1txPI1HmaNnDgN3ctEpaEEr hXJ1JtJmf/fGE4K07nje0yTKm9ApR/k= -----END CERTIFICATE-----Generated at Mon Oct 20 10:00:25 2025 by rpki-client