$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1c61dbca-9697-3772-bedc-7110ec7888ea.roa File: 1c61dbca-9697-3772-bedc-7110ec7888ea.roa (raw, json) Hash identifier: YPLYLIkzsYX5k+vTf8hFUL2j4zzL9X764jvHmTmMPM4= Subject key identifier: CB:C8:5D:0E:96:D0:05:C2:6E:14:F5:F8:F3:7E:1C:98:8B:52:57:7B Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B66972D054F58B55946B19280 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1c61dbca-9697-3772-bedc-7110ec7888ea.roa Signing time: Fri 03 Oct 2025 16:24:45 +0000 ROA not before: Fri 03 Oct 2025 16:24:45 +0000 ROA not after: Thu 01 Jan 2026 17:24:45 +0000 asID: 265622 IP address blocks: 38.158.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:97:2d:05:4f:58:b5:59:46:b1:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 3 16:24:45 2025 GMT Not After : Jan 1 17:24:45 2026 GMT Subject: CN=1117ac2e-39f7-46a1-9a6b-8dc9302f7998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dc:94:17:2f:48:2a:e7:be:21:d2:f6:f0:09: b2:55:89:0f:dc:d3:c0:9b:a3:b3:04:2b:2d:70:36: eb:ea:e7:8c:98:3d:44:28:57:e1:5a:9c:4f:52:bd: 73:71:cb:61:1f:42:2d:67:7b:f7:e6:31:29:97:63: 61:1d:99:02:0d:f0:d0:cb:b1:7f:ac:9c:0b:d5:a2: 1f:0c:ac:ab:77:05:e3:97:7d:10:2a:de:02:db:28: 04:b4:35:ef:57:c1:71:30:18:70:ae:a9:0d:be:99: 31:30:98:e6:86:a7:c9:84:e6:f9:53:48:05:a8:b1: b1:97:27:69:ca:c6:17:6f:7f:81:bb:31:72:f0:b0: a3:a2:cc:eb:42:d4:83:37:1a:80:35:ca:dd:b3:46: 0f:ea:94:85:27:1d:7e:75:26:8c:5b:1f:8e:64:a6: 7f:5c:97:11:b4:ba:f8:7d:5f:49:98:ec:c0:38:a5: 6b:70:63:89:96:21:02:bc:37:60:f1:83:12:75:0a: 7f:b6:68:9f:8b:22:a0:d5:9f:80:f6:e8:b5:de:a4: 57:6b:50:6e:6b:3e:54:f2:ec:91:fa:20:b1:ed:6e: 26:09:31:0a:b5:9f:cb:ad:8f:a2:05:e2:89:a7:b7: 4f:8d:97:cf:23:26:5a:16:0a:de:2f:9e:ba:f7:5f: e8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C8:5D:0E:96:D0:05:C2:6E:14:F5:F8:F3:7E:1C:98:8B:52:57:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1c61dbca-9697-3772-bedc-7110ec7888ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.158.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:9a:11:ce:b0:df:1f:18:09:25:0a:c8:aa:19:0b:68:ca:6b: 7a:c6:ea:04:92:ee:05:d6:f7:bc:ee:56:b1:17:f5:8e:38:8a: c2:c8:9a:bb:65:51:7b:84:33:cb:34:f1:ba:e7:5d:11:31:5f: f0:33:54:0b:c6:3c:8a:e9:c2:42:40:99:3e:e4:8f:6c:a6:d1: 60:ab:8c:e2:eb:2a:aa:fd:75:99:cb:6f:7d:7a:6e:7f:d0:be: f5:b6:45:18:ef:9a:42:b0:bc:ea:8e:5e:81:75:9b:70:32:22: 08:42:87:d1:03:8a:f1:44:10:44:68:65:2e:26:9f:5d:46:20: 51:2a:24:9a:a3:4c:4a:11:41:5a:3c:a6:61:b4:64:e8:6a:48: 1e:3a:06:05:53:28:35:79:08:c0:ce:8e:b9:6c:8b:b6:ea:17: ff:7d:fa:75:0a:0b:dd:cd:05:89:1b:f1:3f:c1:8c:d9:f6:da: 6a:c5:e4:72:71:8b:b8:94:d3:93:5c:1a:36:6c:3c:0d:73:07: d2:61:52:43:1b:51:3c:e3:ce:cc:ce:c6:ac:40:24:b3:dc:a4: a9:a3:68:6c:f1:3d:95:48:bb:96:3c:c9:92:a8:ba:6f:44:f8: 7e:43:ae:2b:fc:9e:ee:b5:ae:77:a4:1f:f8:c5:46:4e:90:c7: 9a:36:5d:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmly0FT1i1WUaxkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAwMzE2MjQ0NVoXDTI2MDEwMTE3MjQ0NVowLzEtMCsGA1UEAxMk MTExN2FjMmUtMzlmNy00NmExLTlhNmItOGRjOTMwMmY3OTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtyUFy9IKue+IdL28AmyVYkP3NPAm6OzBCst cDbr6ueMmD1EKFfhWpxPUr1zccthH0ItZ3v35jEpl2NhHZkCDfDQy7F/rJwL1aIf DKyrdwXjl30QKt4C2ygEtDXvV8FxMBhwrqkNvpkxMJjmhqfJhOb5U0gFqLGxlydp ysYXb3+BuzFy8LCjoszrQtSDNxqANcrds0YP6pSFJx1+dSaMWx+OZKZ/XJcRtLr4 fV9JmOzAOKVrcGOJliECvDdg8YMSdQp/tmifiyKg1Z+A9ui13qRXa1Buaz5U8uyR +iCx7W4mCTEKtZ/LrY+iBeKJp7dPjZfPIyZaFgreL56691/oRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvIXQ6W0AXCbhT1+PN+HJiLUld7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMWM2MWRiY2EtOTY5Ny0z NzcyLWJlZGMtNzExMGVjNzg4OGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJp70MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyaEc6w3x8YCSUKyKoZC2jKa3rG6gSS7gXW97zuVrEX9Y44isLImrtl UXuEM8s08brnXRExX/AzVAvGPIrpwkJAmT7kj2ym0WCrjOLrKqr9dZnLb316bn/Q vvW2RRjvmkKwvOqOXoF1m3AyIghCh9EDivFEEERoZS4mn11GIFEqJJqjTEoRQVo8 pmG0ZOhqSB46BgVTKDV5CMDOjrlsi7bqF/99+nUKC93NBYkb8T/BjNn22mrF5HJx i7iU05NcGjZsPA1zB9JhUkMbUTzjzszOxqxAJLPcpKmjaGzxPZVIu5Y8yZKoum9E +H5Driv8nu61rnekH/jFRk6Qx5o2XcY= -----END CERTIFICATE-----Generated at Sat Oct 11 12:08:48 2025 by rpki-client