$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a8205c7-07b2-3d91-a6d9-f40c5592e1a5.roa File: 4a8205c7-07b2-3d91-a6d9-f40c5592e1a5.roa (raw, json) Hash identifier: FLIkuIrjgY+aQljA5pqo7ccfplm1sm8qQpMypejS3K8= Subject key identifier: 13:B3:32:64:41:E9:E9:62:3F:C5:14:58:45:BC:B1:EC:54:76:2A:99 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B79F6882ED34672804CFFD400 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a8205c7-07b2-3d91-a6d9-f40c5592e1a5.roa Signing time: Fri 10 Oct 2025 14:57:14 +0000 ROA not before: Fri 10 Oct 2025 14:57:14 +0000 ROA not after: Thu 08 Jan 2026 15:57:14 +0000 asID: 32212 IP address blocks: 38.70.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:f6:88:2e:d3:46:72:80:4c:ff:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 10 14:57:14 2025 GMT Not After : Jan 8 15:57:14 2026 GMT Subject: CN=3c927f0a-a116-4c60-ae01-5104f7822a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f9:37:cc:fa:4b:0e:89:ef:0e:78:a2:3b:36: de:7e:77:82:11:c0:ca:58:ec:cb:72:47:49:50:0a: 5c:b2:1d:95:0a:f3:bb:4c:bd:7d:df:1c:dd:86:79: 38:83:4e:ed:9a:d2:31:4b:6d:59:d7:66:42:fc:fa: e3:f3:0d:96:b5:22:42:37:ad:f3:5c:c4:87:7f:44: 22:c7:51:b6:95:39:3a:f4:6b:e1:99:c2:16:6f:fc: 54:e4:9d:99:ed:a2:6a:b6:58:9b:17:6f:45:6e:70: 32:98:50:8a:0f:fe:5f:fc:4f:0c:38:49:90:aa:dc: ed:c2:07:9e:68:be:9a:8d:27:ff:d8:12:6a:ca:c6: 42:ca:53:cf:ed:9c:ce:63:bf:d6:8f:60:a9:d6:06: d9:6b:15:a1:df:65:dc:10:12:9a:49:36:2e:31:c3: b2:dc:d5:91:10:f0:11:06:3e:b2:24:6d:a4:9d:da: 5e:77:e2:2d:d4:6a:05:19:e6:4d:c2:20:e8:d4:0a: c8:bc:f1:ea:39:71:ae:a5:30:f8:af:29:3f:54:32: 28:b0:49:fa:37:a7:7e:d1:18:76:e7:13:e0:e2:bd: 35:2a:1a:cc:28:3c:e4:11:20:6e:b3:ed:8a:68:13: 25:44:55:e6:74:54:45:43:69:e2:f0:1c:ae:16:ea: 9b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B3:32:64:41:E9:E9:62:3F:C5:14:58:45:BC:B1:EC:54:76:2A:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a8205c7-07b2-3d91-a6d9-f40c5592e1a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.70.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:be:ef:64:ce:ae:19:b8:0a:73:2f:13:6e:ce:f6:21:e5:b5: 25:08:a7:a3:7b:74:8b:83:b8:de:3a:c8:74:f4:4e:3e:ae:0a: 99:51:5c:af:1d:da:7e:c8:cc:45:72:6b:a0:2b:00:20:c5:9a: 6a:e2:bb:a5:a7:b8:22:61:06:2f:9c:43:c1:cb:bc:5e:16:d8: 13:f9:0a:3d:76:bc:ec:6b:a3:a4:ee:09:74:bb:6c:f5:04:bf: 48:08:85:28:c9:a9:ac:76:a7:c7:af:61:d7:29:70:01:b9:2c: 9c:23:7b:4b:33:67:e6:53:cd:d6:28:6f:2b:0b:f3:99:28:34: f1:48:10:bf:fb:d1:cb:05:f9:77:94:0f:70:68:0e:a5:9f:17: e8:3c:8e:55:b8:dc:f8:89:8d:7d:ee:7d:8d:e9:21:d2:be:35: f4:cb:5e:66:17:37:d3:bc:73:03:b1:6e:f1:d2:d0:65:58:ab: 89:5d:f8:e5:de:d1:c9:82:ef:42:a9:f7:dc:78:78:d2:93:18: eb:93:7f:ed:f2:28:f9:af:e0:df:c8:ee:ea:73:17:3f:1a:3a: fc:ba:7f:8e:fa:c5:ee:0c:75:04:e8:d3:9d:ee:eb:10:23:de: cf:53:16:2d:bd:c3:03:13:06:6c:d9:fc:b1:6c:5f:35:a4:a5: e7:f7:96:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt59ogu00ZygEz/1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAxMDE0NTcxNFoXDTI2MDEwODE1NTcxNFowLzEtMCsGA1UEAxMk M2M5MjdmMGEtYTExNi00YzYwLWFlMDEtNTEwNGY3ODIyYTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPk3zPpLDonvDniiOzbefneCEcDKWOzLckdJ UApcsh2VCvO7TL193xzdhnk4g07tmtIxS21Z12ZC/Prj8w2WtSJCN63zXMSHf0Qi x1G2lTk69GvhmcIWb/xU5J2Z7aJqtlibF29FbnAymFCKD/5f/E8MOEmQqtztwgee aL6ajSf/2BJqysZCylPP7ZzOY7/Wj2Cp1gbZaxWh32XcEBKaSTYuMcOy3NWREPAR Bj6yJG2kndped+It1GoFGeZNwiDo1ArIvPHqOXGupTD4ryk/VDIosEn6N6d+0Rh2 5xPg4r01KhrMKDzkESBus+2KaBMlRFXmdFRFQ2ni8ByuFuqbxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOzMmRB6eliP8UUWEW8sexUdiqZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNGE4MjA1YzctMDdiMi0z ZDkxLWE2ZDktZjQwYzU1OTJlMWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJkbIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK2+72TOrhm4CnMvE27O9iHltSUIp6N7dIuDuN46yHT0Tj6uCplRXK8d 2n7IzEVya6ArACDFmmriu6WnuCJhBi+cQ8HLvF4W2BP5Cj12vOxro6TuCXS7bPUE v0gIhSjJqax2p8evYdcpcAG5LJwje0szZ+ZTzdYobysL85koNPFIEL/70csF+XeU D3BoDqWfF+g8jlW43PiJjX3ufY3pIdK+NfTLXmYXN9O8cwOxbvHS0GVYq4ld+OXe 0cmC70Kp99x4eNKTGOuTf+3yKPmv4N/I7upzFz8aOvy6f476xe4MdQTo053u6xAj 3s9TFi29wwMTBmzZ/LFsXzWkpef3li4= -----END CERTIFICATE-----Generated at Sat Oct 11 04:18:20 2025 by rpki-client