$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2f363cbd-03ad-377e-b713-886834f50a2c.roa File: 2f363cbd-03ad-377e-b713-886834f50a2c.roa (raw, json) Hash identifier: OD8xcuzwokIc2Y02FLor3QJASVCGJIiA5l0mvvS2+Og= Subject key identifier: AD:B1:D3:21:D1:8E:ED:02:BF:12:83:27:E4:B0:B8:C1:74:00:BD:8D Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B7762C5A29AE9BC36CD9FF932 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2f363cbd-03ad-377e-b713-886834f50a2c.roa Signing time: Thu 09 Oct 2025 16:47:54 +0000 ROA not before: Thu 09 Oct 2025 16:47:54 +0000 ROA not after: Wed 07 Jan 2026 17:47:54 +0000 asID: 208972 IP address blocks: 38.10.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:77:62:c5:a2:9a:e9:bc:36:cd:9f:f9:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 9 16:47:54 2025 GMT Not After : Jan 7 17:47:54 2026 GMT Subject: CN=9f69be2b-699a-44ff-b466-6ca8c072667d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1e:ce:42:94:f6:6b:29:0b:79:40:d3:97:37: c3:07:4b:62:5f:10:9a:6f:a9:e2:dd:2f:32:1a:d3: ef:9d:7a:1c:90:38:54:41:d9:be:81:2f:a5:b9:4d: 06:99:05:34:c7:37:1c:3f:24:b9:37:69:2e:cf:41: 6b:b5:4c:e0:48:4f:fc:1d:ea:7e:a4:f9:56:90:42: 48:c8:47:46:8c:17:63:fd:0a:aa:21:db:d7:b2:69: 75:43:a4:de:0c:70:12:98:8a:57:85:28:66:e0:fd: bc:d0:3d:96:4a:d5:ce:2a:cb:c3:c9:5e:70:7f:dd: 29:97:f0:c4:97:17:c2:38:de:b2:86:5b:bf:f6:2b: a4:5f:a8:58:aa:b6:37:b9:d6:90:81:0a:37:d2:f0: bf:f3:a3:63:ac:2d:90:1a:8c:ec:ce:f3:9d:3e:a2: 9f:7e:83:b8:0c:e8:d0:d4:a4:26:27:67:e1:b1:58: 54:55:15:98:e9:f7:dd:4c:f0:ff:3a:70:5c:13:e4: f1:61:fe:fb:df:76:e5:00:ee:5e:18:ee:72:12:2b: 8b:4b:f8:4b:de:92:75:7b:2e:a4:6f:a1:9e:3b:9e: e0:89:67:d5:22:e9:d4:dd:a5:cc:f6:8c:fc:d9:47: 3a:1e:45:e9:aa:81:37:e8:5a:f5:da:84:e5:7b:7b: b2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B1:D3:21:D1:8E:ED:02:BF:12:83:27:E4:B0:B8:C1:74:00:BD:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2f363cbd-03ad-377e-b713-886834f50a2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.10.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:0b:5f:3d:fa:6b:3e:cc:e6:ae:d8:ff:b3:a6:5a:24:47:0c: 35:5c:6b:cd:6e:61:71:fb:c4:c4:9b:1a:bf:de:61:9d:ee:3d: 52:1f:f1:a7:22:10:b2:ca:24:dd:c8:a3:46:7c:04:26:a6:25: c7:11:34:55:bc:68:85:99:ac:10:b0:bd:7f:4f:0e:8d:24:4b: f8:2d:5e:5f:99:46:3d:47:b5:7f:b8:c8:16:b2:a1:51:6a:aa: 5c:a1:b0:5b:66:fe:a3:29:ce:f9:80:83:e7:d9:9b:8a:d2:00: 90:7b:4d:b8:d6:5d:96:f4:30:bd:70:ef:50:41:ed:28:51:25: 48:8b:2d:10:27:46:d0:62:49:22:d8:e7:e4:47:27:9c:68:4f: eb:5b:98:c7:de:13:50:d3:7f:cc:72:ca:cd:21:36:e1:1a:72: fa:1a:37:0c:9f:ea:74:c1:bd:55:35:3c:c7:d0:11:64:2d:1f: 16:b1:c3:ef:82:ac:e7:04:13:0d:62:d4:0f:19:88:9d:17:13: 86:e9:5c:9c:c4:52:80:9d:60:e0:56:84:b2:1b:48:35:c4:c7: 52:8e:a3:b6:7e:58:cb:67:f4:93:1e:5c:53:9c:4f:f4:ea:fa: 44:61:95:b9:95:ef:d5:c5:68:0c:8c:dd:1d:b3:c9:b1:98:6a: bb:73:1b:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt3YsWimum8Ns2f+TIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAwOTE2NDc1NFoXDTI2MDEwNzE3NDc1NFowLzEtMCsGA1UEAxMk OWY2OWJlMmItNjk5YS00NGZmLWI0NjYtNmNhOGMwNzI2NjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux7OQpT2aykLeUDTlzfDB0tiXxCab6ni3S8y GtPvnXockDhUQdm+gS+luU0GmQU0xzccPyS5N2kuz0FrtUzgSE/8Hep+pPlWkEJI yEdGjBdj/QqqIdvXsml1Q6TeDHASmIpXhShm4P280D2WStXOKsvDyV5wf90pl/DE lxfCON6yhlu/9iukX6hYqrY3udaQgQo30vC/86NjrC2QGozszvOdPqKffoO4DOjQ 1KQmJ2fhsVhUVRWY6ffdTPD/OnBcE+TxYf7733blAO5eGO5yEiuLS/hL3pJ1ey6k b6GeO57giWfVIunU3aXM9oz82Uc6HkXpqoE36Fr12oTle3uy6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2x0yHRju0CvxKDJ+SwuMF0AL2NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMmYzNjNjYmQtMDNhZC0z NzdlLWI3MTMtODg2ODM0ZjUwYTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJgpEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALALXz36az7M5q7Y/7OmWiRHDDVca81uYXH7xMSbGr/eYZ3uPVIf8aci ELLKJN3Io0Z8BCamJccRNFW8aIWZrBCwvX9PDo0kS/gtXl+ZRj1HtX+4yBayoVFq qlyhsFtm/qMpzvmAg+fZm4rSAJB7TbjWXZb0ML1w71BB7ShRJUiLLRAnRtBiSSLY 5+RHJ5xoT+tbmMfeE1DTf8xyys0hNuEacvoaNwyf6nTBvVU1PMfQEWQtHxaxw++C rOcEEw1i1A8ZiJ0XE4bpXJzEUoCdYOBWhLIbSDXEx1KOo7Z+WMtn9JMeXFOcT/Tq +kRhlbmV79XFaAyM3R2zybGYartzG/c= -----END CERTIFICATE-----Generated at Sat Oct 11 12:08:47 2025 by rpki-client