$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3449e550-a44f-37a2-bd44-c7b1e5520f1f.roa File: 3449e550-a44f-37a2-bd44-c7b1e5520f1f.roa (raw, json) Hash identifier: CU4owCmHQ932eEeyi2VQ+6atekJbYZkbpPj/ltXgZvA= Subject key identifier: 31:B0:CA:43:5D:AC:47:34:19:3D:79:4B:96:A5:15:47:7A:60:AB:46 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B50BF81224BFBCC954A37A280 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3449e550-a44f-37a2-bd44-c7b1e5520f1f.roa Signing time: Thu 25 Sep 2025 20:38:14 +0000 ROA not before: Thu 25 Sep 2025 20:38:14 +0000 ROA not after: Wed 24 Dec 2025 21:38:14 +0000 asID: 274170 IP address blocks: 38.255.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:50:bf:81:22:4b:fb:cc:95:4a:37:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 25 20:38:14 2025 GMT Not After : Dec 24 21:38:14 2025 GMT Subject: CN=ffb80144-bc9e-4e05-9dd5-2f7ea7c7fb63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3e:28:8b:60:49:80:d9:2a:36:83:d7:11:51: 93:3a:2b:28:44:c7:ac:29:f4:1f:c2:df:b7:87:b1: 26:3a:27:f1:0b:16:b2:f0:eb:64:fd:af:61:25:49: b6:12:42:da:45:57:82:88:5a:88:ce:9b:a3:6c:6c: 77:3a:c0:82:4b:ec:0c:98:a5:9c:59:2e:ee:ce:6e: 1b:f7:8b:02:7c:53:91:63:bd:83:42:d5:74:91:5d: a7:08:2a:47:6e:aa:f2:01:5c:df:62:ef:b6:ed:a1: 69:a5:55:a0:88:30:46:c5:d8:02:e8:f6:6d:b4:02: bc:9b:e0:b0:28:4d:7b:df:88:e1:3a:9a:dc:cd:aa: d9:42:94:56:c2:5c:9a:d3:f2:81:1c:c2:86:9d:d3: c2:07:18:63:64:fc:63:74:02:7a:a9:bf:0a:06:ab: 47:31:10:b8:0a:82:a9:6a:40:30:26:0d:3c:10:c3: 4f:4b:0c:8e:14:c5:79:59:9d:e1:55:fd:26:b6:27: 6a:0e:5d:b2:89:c4:49:93:4e:64:ac:40:89:2f:79: 32:02:af:8a:ca:b7:75:41:e0:ac:0e:b6:7d:28:55: 41:75:66:4a:18:45:25:cf:41:e3:b6:08:9b:9d:01: 64:ca:04:5f:d2:9e:a7:4c:62:3e:1f:89:b4:70:b7: 46:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B0:CA:43:5D:AC:47:34:19:3D:79:4B:96:A5:15:47:7A:60:AB:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3449e550-a44f-37a2-bd44-c7b1e5520f1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.255.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:ba:62:31:56:73:68:08:60:c7:85:c8:86:d6:32:5c:d4:28: 4b:06:80:ca:bc:e3:f5:08:f7:c0:bd:9c:47:c5:4a:13:de:13: 51:de:83:bc:68:f8:31:4a:9e:2b:3e:d0:9e:63:1a:d9:bb:74: 46:e5:69:d5:12:0c:89:b5:5f:4e:44:d2:8e:e6:5c:23:2c:17: 00:2b:70:28:c8:58:14:3e:fc:cf:53:e1:73:11:8f:6e:e2:69: f3:d3:38:f7:1b:f9:c2:6e:58:1d:d8:81:f1:70:34:79:79:60: b4:f8:1a:17:4d:a4:56:87:6a:c2:51:fd:61:63:02:21:15:0d: b2:16:55:30:86:30:8c:13:27:3f:7e:7d:4c:26:ff:f4:82:50: 37:35:c0:8b:6d:82:04:74:f1:d2:6d:37:13:6b:c1:21:40:7b: da:30:0d:7e:3c:ff:31:45:8a:e2:ef:b6:b6:e5:d6:07:5c:59: 5d:03:c7:4d:07:a3:0f:25:f3:c3:10:17:6d:82:18:85:9e:7a: f8:95:1b:03:f3:2d:b4:9b:99:6d:8a:11:40:68:80:27:15:e7: 5e:7b:64:ed:26:f6:41:f5:fd:2a:f7:76:23:4c:f4:68:21:47: 90:29:c2:66:fc:67:dc:b6:e1:15:1a:57:0b:34:db:af:ce:52: 26:e5:f0:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtQv4EiS/vMlUo3ooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MDkyNTIwMzgxNFoXDTI1MTIyNDIxMzgxNFowLzEtMCsGA1UEAxMk ZmZiODAxNDQtYmM5ZS00ZTA1LTlkZDUtMmY3ZWE3YzdmYjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT4oi2BJgNkqNoPXEVGTOisoRMesKfQfwt+3 h7EmOifxCxay8Otk/a9hJUm2EkLaRVeCiFqIzpujbGx3OsCCS+wMmKWcWS7uzm4b 94sCfFORY72DQtV0kV2nCCpHbqryAVzfYu+27aFppVWgiDBGxdgC6PZttAK8m+Cw KE1734jhOprczarZQpRWwlya0/KBHMKGndPCBxhjZPxjdAJ6qb8KBqtHMRC4CoKp akAwJg08EMNPSwyOFMV5WZ3hVf0mtidqDl2yicRJk05krECJL3kyAq+Kyrd1QeCs DrZ9KFVBdWZKGEUlz0HjtgibnQFkygRf0p6nTGI+H4m0cLdGnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGwykNdrEc0GT15S5alFUd6YKtGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMzQ0OWU1NTAtYTQ0Zi0z N2EyLWJkNDQtYzdiMWU1NTIwZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJv95MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMu6YjFWc2gIYMeFyIbWMlzUKEsGgMq84/UI98C9nEfFShPeE1Heg7xo +DFKnis+0J5jGtm7dEbladUSDIm1X05E0o7mXCMsFwArcCjIWBQ+/M9T4XMRj27i afPTOPcb+cJuWB3YgfFwNHl5YLT4GhdNpFaHasJR/WFjAiEVDbIWVTCGMIwTJz9+ fUwm//SCUDc1wIttggR08dJtNxNrwSFAe9owDX48/zFFiuLvtrbl1gdcWV0Dx00H ow8l88MQF22CGIWeeviVGwPzLbSbmW2KEUBogCcV5157ZO0m9kH1/Sr3diNM9Ggh R5Apwmb8Z9y24RUaVws026/OUibl8IU= -----END CERTIFICATE-----Generated at Sat Oct 11 12:06:05 2025 by rpki-client