$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5af8d37e-23a9-36a7-a0ba-555b9f91704a.roa File: 5af8d37e-23a9-36a7-a0ba-555b9f91704a.roa (raw, json) Hash identifier: RFKIGYgEO7gPm3/wk6r6S/+KHENMdFAHXo065LeG5EE= Subject key identifier: 73:E8:E2:FE:AC:62:C4:2F:2B:67:B2:E9:DB:19:1A:E6:C4:DE:93:6A Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B717368093B04257A035AFB00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5af8d37e-23a9-36a7-a0ba-555b9f91704a.roa Signing time: Tue 07 Oct 2025 13:46:34 +0000 ROA not before: Tue 07 Oct 2025 13:46:34 +0000 ROA not after: Mon 05 Jan 2026 14:46:34 +0000 asID: 274181 IP address blocks: 38.3.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:73:68:09:3b:04:25:7a:03:5a:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 7 13:46:34 2025 GMT Not After : Jan 5 14:46:34 2026 GMT Subject: CN=a367bbb0-8e72-4994-93ca-a8ed30ea81a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0d:86:6b:19:b9:18:ad:b2:b9:2e:2e:60:22: b4:94:3f:99:f4:cb:be:4b:59:36:04:03:40:93:e4: c3:42:f9:a7:87:44:8c:f9:04:d6:fd:df:ad:ee:c3: cb:19:ef:65:b4:2d:0e:93:85:af:d3:d6:96:a8:8f: 7b:80:ca:ca:ca:6a:c7:06:6c:24:89:f4:f5:c7:10: b1:0a:de:60:41:ce:2c:99:30:b1:ac:79:37:c3:b0: 38:d6:1a:44:a2:a8:8b:d8:a7:5e:ed:0d:a3:41:96: ff:f0:96:02:de:b5:d9:6c:36:ef:85:4e:32:09:4b: 4d:e4:f2:09:13:b6:34:d3:de:4f:47:36:17:87:44: f3:c4:d1:fb:c6:06:2a:a2:52:d3:01:2f:f9:08:b9: ab:41:28:37:8a:bd:2c:9d:7f:04:e7:4b:b6:18:ad: c5:0f:40:12:6f:9f:03:ef:50:f9:ef:f0:d5:bc:fe: 94:d8:b4:55:3d:20:0e:1b:7d:e3:44:13:ba:3d:cb: e3:7f:30:b4:e7:47:ae:ab:26:d3:dd:97:e2:da:ca: 83:45:53:29:b8:82:f3:03:25:5a:31:45:f5:95:e1: 51:02:1b:ba:7a:6a:7e:db:b4:54:e3:c1:60:9f:a1: 84:c5:92:f3:36:1b:da:87:de:0b:cf:16:a2:41:c2: 7a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E8:E2:FE:AC:62:C4:2F:2B:67:B2:E9:DB:19:1A:E6:C4:DE:93:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5af8d37e-23a9-36a7-a0ba-555b9f91704a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.3.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:cf:51:6d:1c:77:93:0e:7d:93:2e:df:1c:64:13:dd:06:ab: 35:4a:1f:38:24:23:fa:5c:36:43:69:5e:2c:ea:34:41:37:3b: 43:20:ec:32:ec:88:b2:65:48:1c:54:61:98:71:c7:a2:d2:c1: b8:0f:07:0d:c3:a8:60:34:db:19:c2:cf:75:b3:13:2b:7c:70: 85:b8:d8:78:2d:31:43:ba:1e:8d:31:40:2f:cc:48:48:4c:b4: 08:26:31:a0:bd:fa:57:26:c7:e2:2f:b3:a9:2f:99:a9:02:4c: 9e:f2:bb:1e:f1:65:03:93:40:3d:2c:b2:05:e4:67:16:85:78: d0:75:47:34:7d:98:73:b6:2e:f4:db:2a:91:74:2f:d6:4e:bb: 1a:ff:99:24:01:e5:06:a5:30:af:0c:31:ab:40:8b:05:9f:33: da:8b:44:91:fb:ec:84:14:a1:68:f8:ce:6d:0f:56:55:39:85: 64:04:7d:67:aa:dd:ee:84:c7:c0:04:ea:e3:72:19:38:4e:2a: 83:60:a0:90:48:5f:1d:7c:bf:8f:87:b5:a8:89:99:9e:a4:7c: 17:f0:de:29:c7:f1:4c:a8:6e:10:4a:e5:3a:60:da:d1:70:e6: 4e:97:cc:8e:a2:31:3f:44:43:54:ce:d3:23:54:d0:81:1d:21: f7:49:d9:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxc2gJOwQlegNa+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAwNzEzNDYzNFoXDTI2MDEwNTE0NDYzNFowLzEtMCsGA1UEAxMk YTM2N2JiYjAtOGU3Mi00OTk0LTkzY2EtYThlZDMwZWE4MWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwA2Gaxm5GK2yuS4uYCK0lD+Z9Mu+S1k2BANA k+TDQvmnh0SM+QTW/d+t7sPLGe9ltC0Ok4Wv09aWqI97gMrKymrHBmwkifT1xxCx Ct5gQc4smTCxrHk3w7A41hpEoqiL2Kde7Q2jQZb/8JYC3rXZbDbvhU4yCUtN5PIJ E7Y0095PRzYXh0TzxNH7xgYqolLTAS/5CLmrQSg3ir0snX8E50u2GK3FD0ASb58D 71D57/DVvP6U2LRVPSAOG33jRBO6PcvjfzC050euqybT3Zfi2sqDRVMpuILzAyVa MUX1leFRAhu6emp+27RU48Fgn6GExZLzNhvah94LzxaiQcJ6XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPo4v6sYsQvK2ey6dsZGubE3pNqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNWFmOGQzN2UtMjNhOS0z NmE3LWEwYmEtNTU1YjlmOTE3MDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEJgPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM/PUW0cd5MOfZMu3xxkE90GqzVKHzgkI/pcNkNpXizqNEE3O0Mg7DLs iLJlSBxUYZhxx6LSwbgPBw3DqGA02xnCz3WzEyt8cIW42HgtMUO6Ho0xQC/MSEhM tAgmMaC9+lcmx+Ivs6kvmakCTJ7yux7xZQOTQD0ssgXkZxaFeNB1RzR9mHO2LvTb KpF0L9ZOuxr/mSQB5QalMK8MMatAiwWfM9qLRJH77IQUoWj4zm0PVlU5hWQEfWeq 3e6Ex8AE6uNyGThOKoNgoJBIXx18v4+HtaiJmZ6kfBfw3inH8UyobhBK5Tpg2tFw 5k6XzI6iMT9EQ1TO0yNU0IEdIfdJ2Yo= -----END CERTIFICATE-----Generated at Sat Oct 11 12:17:37 2025 by rpki-client