$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ddf260f8-0797-37de-9209-f0dc6868cbe3.roa File: ddf260f8-0797-37de-9209-f0dc6868cbe3.roa (raw, json) Hash identifier: aPO8JT+MBaFY/R5+ZWkRL2C0bLxHo49FGnewaUjf1wI= Subject key identifier: 00:D5:0E:CE:45:65:2B:46:46:1D:50:26:B3:C1:80:4F:95:04:0F:CA Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B88BA71152508BB7C4EBC6100 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ddf260f8-0797-37de-9209-f0dc6868cbe3.roa Signing time: Wed 15 Oct 2025 21:53:18 +0000 ROA not before: Wed 15 Oct 2025 21:53:18 +0000 ROA not after: Tue 13 Jan 2026 22:53:18 +0000 asID: 273013 IP address blocks: 38.43.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:88:ba:71:15:25:08:bb:7c:4e:bc:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 15 21:53:18 2025 GMT Not After : Jan 13 22:53:18 2026 GMT Subject: CN=ee51277c-76fb-487e-abb8-d9b3236721da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a3:99:4f:32:fa:de:57:ff:45:24:c8:12:96: 65:d2:e0:42:aa:e0:f5:2a:dc:e6:b8:ce:80:56:3b: 3d:77:c3:69:95:31:fd:a0:bd:58:94:2e:fa:ac:d6: 2e:c0:01:7a:13:53:f8:48:c7:ec:1f:59:0c:a5:2a: f2:7d:ec:66:76:33:cd:6d:11:04:53:40:c1:8a:33: eb:9e:d0:0b:f9:2b:09:c4:e0:12:7f:98:57:3c:f9: 7a:8b:84:b4:93:e4:f7:fa:f8:58:61:c1:67:8b:b4: 13:72:2c:fc:0c:6d:c8:6f:c6:e5:67:fa:69:dd:96: 09:74:24:6c:49:dc:03:0b:df:be:55:44:3c:c5:38: 57:3d:67:7b:d3:cf:15:ed:c0:a9:80:c1:7d:d9:e5: e1:d1:02:c7:f0:35:55:f6:1f:be:ec:74:04:29:94: db:93:af:16:3f:98:ff:98:fe:38:10:66:3f:4b:7c: 8c:b1:ea:fa:10:2e:bd:9c:9a:d6:74:60:5c:4d:e0: 67:08:f8:a1:7b:1c:9f:de:91:4b:b7:e0:2a:19:2d: 64:34:c2:7a:d1:a4:0c:ea:a5:c3:39:0a:df:1d:81: 1b:42:d0:39:ca:ae:60:6b:d0:6c:01:b2:15:98:21: 2c:93:c8:54:4e:fe:68:db:d2:c6:13:6c:ad:f6:91: 90:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D5:0E:CE:45:65:2B:46:46:1D:50:26:B3:C1:80:4F:95:04:0F:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ddf260f8-0797-37de-9209-f0dc6868cbe3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.43.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:39:42:c2:7a:57:f3:c8:5f:02:1a:df:fb:1d:2e:1a:ba:70: 56:c6:13:e8:90:c3:d8:ad:d6:ab:29:ed:df:d3:2a:c8:46:54: 6e:a2:f9:ed:a1:ab:10:99:8e:f4:44:1f:cb:a8:92:b0:d0:3f: 7e:b7:2b:04:ea:35:a6:e0:08:e6:8d:38:4a:62:40:61:6c:f5: e2:2b:ed:e8:c8:59:29:88:56:7b:41:45:09:13:db:29:de:4d: 62:bc:3c:0f:91:c2:38:7f:00:bb:4c:0e:d4:d2:2d:6b:ec:c4: 8e:76:ab:78:b6:f2:87:ce:bd:d1:7c:5d:4d:f5:a1:c0:d8:6f: 5a:e2:b3:53:95:22:0a:dc:77:68:90:62:47:96:ef:dd:52:88: 47:92:89:8d:30:db:4b:0b:07:00:21:2d:6b:1c:65:4e:ed:d7: 7e:9c:cf:c6:92:1a:6b:a8:81:89:53:da:a7:2c:f7:8d:51:1e: 85:fa:82:3c:f0:8f:e0:f4:f4:bb:7d:52:32:52:20:3f:cf:2f: 62:12:2e:60:bf:2e:6c:68:67:1c:eb:af:64:22:39:ed:92:c4: ba:ba:c4:05:5b:ad:05:19:9e:c4:9a:ac:67:67:b8:b8:08:60: f9:97:a1:c5:46:48:08:ab:92:87:57:8b:d8:a0:b4:7f:ae:06: 18:1e:d4:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuIunEVJQi7fE68YQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAxNTIxNTMxOFoXDTI2MDExMzIyNTMxOFowLzEtMCsGA1UEAxMk ZWU1MTI3N2MtNzZmYi00ODdlLWFiYjgtZDliMzIzNjcyMWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKOZTzL63lf/RSTIEpZl0uBCquD1KtzmuM6A Vjs9d8NplTH9oL1YlC76rNYuwAF6E1P4SMfsH1kMpSryfexmdjPNbREEU0DBijPr ntAL+SsJxOASf5hXPPl6i4S0k+T3+vhYYcFni7QTciz8DG3Ib8blZ/pp3ZYJdCRs SdwDC9++VUQ8xThXPWd7088V7cCpgMF92eXh0QLH8DVV9h++7HQEKZTbk68WP5j/ mP44EGY/S3yMser6EC69nJrWdGBcTeBnCPihexyf3pFLt+AqGS1kNMJ60aQM6qXD OQrfHYEbQtA5yq5ga9BsAbIVmCEsk8hUTv5o29LGE2yt9pGQQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADVDs5FZStGRh1QJrPBgE+VBA/KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGRmMjYwZjgtMDc5Ny0z N2RlLTkyMDktZjBkYzY4NjhjYmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJit8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACc5QsJ6V/PIXwIa3/sdLhq6cFbGE+iQw9it1qsp7d/TKshGVG6i+e2h qxCZjvREH8uokrDQP363KwTqNabgCOaNOEpiQGFs9eIr7ejIWSmIVntBRQkT2yne TWK8PA+Rwjh/ALtMDtTSLWvsxI52q3i28ofOvdF8XU31ocDYb1ris1OVIgrcd2iQ YkeW791SiEeSiY0w20sLBwAhLWscZU7t136cz8aSGmuogYlT2qcs941RHoX6gjzw j+D09Lt9UjJSID/PL2ISLmC/LmxoZxzrr2QiOe2SxLq6xAVbrQUZnsSarGdnuLgI YPmXocVGSAirkodXi9igtH+uBhge1Iw= -----END CERTIFICATE-----Generated at Mon Oct 20 02:06:15 2025 by rpki-client