$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/62e45cd1-bfbc-3289-9b6a-435e5664dca0.roa File: 62e45cd1-bfbc-3289-9b6a-435e5664dca0.roa (raw, json) Hash identifier: cqyNkZwCiFWo3VUf6hXZ1dxScv+J2rDi5bai7br679w= Subject key identifier: 7D:24:6F:85:D0:4D:79:02:60:2B:BA:18:E9:1C:3B:3C:66:6A:56:5D Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B6F149BC712F7C35DD93E2480 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/62e45cd1-bfbc-3289-9b6a-435e5664dca0.roa Signing time: Mon 06 Oct 2025 17:23:57 +0000 ROA not before: Mon 06 Oct 2025 17:23:57 +0000 ROA not after: Sun 04 Jan 2026 18:23:57 +0000 asID: 33570 IP address blocks: 38.96.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:14:9b:c7:12:f7:c3:5d:d9:3e:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 6 17:23:57 2025 GMT Not After : Jan 4 18:23:57 2026 GMT Subject: CN=f401eafd-793a-4033-afaf-9a76b397106a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:22:20:b3:84:5d:8f:60:d8:bf:c6:3a:90:bd: 29:5c:a0:ed:c2:1e:4c:44:72:de:dc:64:3a:57:98: d9:c7:73:75:6a:8c:3a:d3:65:cf:e4:93:d3:db:d7: 37:99:48:ee:29:62:fd:0c:e0:35:bc:66:7b:2a:f2: 23:a9:c6:a7:9c:95:5a:52:a9:57:71:2b:39:89:f1: 25:64:65:fe:28:aa:00:2a:be:54:e3:e7:18:e7:85: 5f:c1:71:2a:44:17:a0:da:52:8d:08:68:62:8b:73: eb:38:e9:20:85:06:95:59:94:88:1a:41:0c:eb:c0: 14:35:62:e6:b3:fe:aa:e8:95:fc:74:a3:d7:06:ca: 71:fd:7a:0e:91:26:c0:0a:96:65:88:7b:ca:e9:7e: 0c:26:f1:76:47:3e:97:43:9f:a2:e9:b0:f8:6b:29: 67:55:6c:32:be:20:c9:4a:e9:c7:03:c1:33:6d:e7: 6b:fe:95:b8:b9:f9:63:41:63:c9:ed:e7:89:fb:7a: 19:82:23:6e:3d:ed:11:30:be:cb:e2:4c:82:55:25: 69:cc:75:31:5d:3e:c5:ef:b7:a1:8f:45:da:45:ae: 6c:08:e3:0a:06:5d:b5:d8:86:2b:2f:72:59:7d:b7: bb:40:66:3c:bf:3f:56:98:b3:15:74:a1:72:58:0c: 40:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:24:6F:85:D0:4D:79:02:60:2B:BA:18:E9:1C:3B:3C:66:6A:56:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/62e45cd1-bfbc-3289-9b6a-435e5664dca0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.96.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:b6:a2:35:15:95:15:1b:f0:c4:0c:eb:d1:04:70:c9:98:c5: 55:4f:52:24:64:2f:45:f4:36:f2:8c:fb:be:8f:cc:7d:5b:17: 62:77:99:21:be:9d:f3:e2:35:29:4c:ca:a4:27:c2:b5:4d:d3: aa:27:8d:9d:df:b6:f3:7f:c0:87:3a:6a:3b:0c:45:ba:77:01: 2c:b1:31:b8:3b:e2:05:d5:09:51:85:da:c4:7e:f5:1e:b9:98: de:86:00:6e:84:ba:af:6f:73:d5:39:e2:1e:60:64:3f:ee:1e: 1b:dd:54:f4:65:14:0f:5b:b4:a0:4b:8c:d5:b6:07:cf:74:a1: d2:40:09:f9:1f:4b:88:f9:c8:09:98:46:9b:f4:9b:35:60:e3: 81:44:52:0e:47:a4:e8:a5:11:81:27:76:05:9e:36:7a:5a:b5: e3:cd:16:9c:ef:7c:8f:49:01:4b:5d:f8:74:60:f5:49:9c:ca: 05:13:49:8a:0c:97:2b:ea:18:0e:03:e7:1c:a0:8f:6e:d6:8a: d8:60:d0:e9:b5:3f:6e:bf:67:78:b8:ff:c8:ef:f4:09:a8:60: 37:57:33:05:43:e1:5b:eb:50:83:5b:4c:eb:08:d4:28:8b:ea: 37:d3:b7:1f:88:5e:0e:5e:aa:b4:85:43:39:8b:37:08:84:4f: 70:dc:b1:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtvFJvHEvfDXdk+JIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAwNjE3MjM1N1oXDTI2MDEwNDE4MjM1N1owLzEtMCsGA1UEAxMk ZjQwMWVhZmQtNzkzYS00MDMzLWFmYWYtOWE3NmIzOTcxMDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiIgs4Rdj2DYv8Y6kL0pXKDtwh5MRHLe3GQ6 V5jZx3N1aow602XP5JPT29c3mUjuKWL9DOA1vGZ7KvIjqcannJVaUqlXcSs5ifEl ZGX+KKoAKr5U4+cY54VfwXEqRBeg2lKNCGhii3PrOOkghQaVWZSIGkEM68AUNWLm s/6q6JX8dKPXBspx/XoOkSbACpZliHvK6X4MJvF2Rz6XQ5+i6bD4aylnVWwyviDJ SunHA8Ezbedr/pW4ufljQWPJ7eeJ+3oZgiNuPe0RML7L4kyCVSVpzHUxXT7F77eh j0XaRa5sCOMKBl212IYrL3JZfbe7QGY8vz9WmLMVdKFyWAxAcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH0kb4XQTXkCYCu6GOkcOzxmalZdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNjJlNDVjZDEtYmZiYy0z Mjg5LTliNmEtNDM1ZTU2NjRkY2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJmDGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACG2ojUVlRUb8MQM69EEcMmYxVVPUiRkL0X0NvKM+76PzH1bF2J3mSG+ nfPiNSlMyqQnwrVN06onjZ3ftvN/wIc6ajsMRbp3ASyxMbg74gXVCVGF2sR+9R65 mN6GAG6Euq9vc9U54h5gZD/uHhvdVPRlFA9btKBLjNW2B890odJACfkfS4j5yAmY Rpv0mzVg44FEUg5HpOilEYEndgWeNnpatePNFpzvfI9JAUtd+HRg9UmcygUTSYoM lyvqGA4D5xygj27Withg0Om1P26/Z3i4/8jv9AmoYDdXMwVD4VvrUINbTOsI1CiL 6jfTtx+IXg5eqrSFQzmLNwiET3DcsUQ= -----END CERTIFICATE-----Generated at Thu Oct 9 03:30:08 2025 by rpki-client