$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/656db2ee-b0d1-3101-ac68-cf0c37398dc1.roa File: 656db2ee-b0d1-3101-ac68-cf0c37398dc1.roa (raw, json) Hash identifier: dU+gWEUUr9pVdaQJYli1VwPdy5PGfobvLOJjREUlxC0= Subject key identifier: 68:BB:F8:E2:5E:40:6A:58:45:15:0E:11:6E:E8:2E:17:E2:A8:12:C0 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B77C19D23DDB6752C2A6F5C00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/656db2ee-b0d1-3101-ac68-cf0c37398dc1.roa Signing time: Thu 09 Oct 2025 19:59:00 +0000 ROA not before: Thu 09 Oct 2025 19:59:00 +0000 ROA not after: Wed 07 Jan 2026 20:59:00 +0000 asID: 150447 IP address blocks: 38.72.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:77:c1:9d:23:dd:b6:75:2c:2a:6f:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 9 19:59:00 2025 GMT Not After : Jan 7 20:59:00 2026 GMT Subject: CN=d398e8a6-dc74-4b66-a02b-6e0f9d4b0a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e6:ae:b2:a7:97:92:bd:5f:3a:3f:e7:6d:94: de:45:88:d2:b7:df:4c:b4:58:57:e8:2b:65:12:20: eb:03:17:ad:9d:2a:64:3c:28:d4:53:2c:3c:1c:55: 50:0e:04:ef:09:94:b5:ed:95:a5:8d:70:21:58:ba: 69:30:3e:b5:ca:62:3d:95:5d:bb:6d:09:d8:db:03: db:8c:27:7d:e8:ed:47:a0:36:0b:c1:ef:d5:2c:bb: d5:c2:1d:93:e8:ef:d6:80:1c:6e:08:ce:f4:cc:69: 71:7f:18:bb:5d:91:86:d6:1d:96:45:3d:25:47:cf: 15:ed:89:52:47:a8:93:cb:42:92:05:85:95:2b:a2: d2:e6:8f:fb:43:98:25:5c:1d:bd:f2:62:e5:37:8e: 55:e3:05:cb:a2:0f:4d:11:e4:24:6c:23:0d:2b:93: bc:ce:d3:6b:fa:db:39:f4:16:a4:18:f0:07:0a:d2: 43:a6:ed:f1:6f:ac:1f:16:f4:a3:81:82:eb:67:32: e1:86:0f:c5:37:0a:46:b6:71:ce:4d:28:9a:7e:ce: 4f:df:74:77:b9:3b:15:c3:fb:96:48:90:3f:e9:02: ad:67:ec:67:50:ef:1c:24:28:bc:c2:59:62:55:d6: 3a:fc:d2:75:cd:e7:b3:71:f3:dc:c8:1c:59:57:d8: 2b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BB:F8:E2:5E:40:6A:58:45:15:0E:11:6E:E8:2E:17:E2:A8:12:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/656db2ee-b0d1-3101-ac68-cf0c37398dc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.72.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:bb:01:cf:7d:17:eb:86:1e:36:81:c6:2d:8e:1f:dc:31:06: c4:83:5b:01:93:d2:0e:76:14:64:05:a1:76:d0:27:ce:73:49: 13:73:01:5f:fa:fc:72:6b:d2:c0:f9:7e:44:40:a9:fc:14:35: 4e:c8:40:94:0e:e7:28:b5:a9:51:fe:53:e0:2f:d7:c8:af:55: bd:55:6a:80:5f:2a:ae:cf:3f:ae:b0:11:52:4c:38:00:5d:a4: 3a:b3:7e:ab:ca:ff:d1:35:e6:eb:eb:c1:0e:9a:9d:c7:4b:38: 2c:42:fd:5c:bf:12:3a:56:04:94:78:95:9c:c0:05:75:1e:09: 61:6e:e9:15:3e:37:e7:00:c6:a9:ec:3a:0c:b4:d5:e7:74:a6: fc:d5:98:fd:8d:9b:be:2d:87:a6:aa:7f:50:d9:27:84:a1:f7: 31:99:80:26:49:0c:f0:65:c1:84:01:eb:ed:97:5f:9c:e9:b6: ba:29:4e:2c:ea:0b:ab:f5:57:38:14:8b:56:df:bf:fd:da:e2: 9b:f8:f9:06:d3:5d:f9:e3:f8:32:dd:65:50:9d:35:fc:4c:d9: c9:28:e7:8f:89:88:45:45:6c:0e:cf:df:21:d3:51:ad:5e:8b: 86:6f:a0:44:92:f2:ad:61:0d:a0:1b:d9:bc:96:0b:05:b5:f7: 0a:fb:02:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt3wZ0j3bZ1LCpvXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAwOTE5NTkwMFoXDTI2MDEwNzIwNTkwMFowLzEtMCsGA1UEAxMk ZDM5OGU4YTYtZGM3NC00YjY2LWEwMmItNmUwZjlkNGIwYTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluausqeXkr1fOj/nbZTeRYjSt99MtFhX6Ctl EiDrAxetnSpkPCjUUyw8HFVQDgTvCZS17ZWljXAhWLppMD61ymI9lV27bQnY2wPb jCd96O1HoDYLwe/VLLvVwh2T6O/WgBxuCM70zGlxfxi7XZGG1h2WRT0lR88V7YlS R6iTy0KSBYWVK6LS5o/7Q5glXB298mLlN45V4wXLog9NEeQkbCMNK5O8ztNr+ts5 9BakGPAHCtJDpu3xb6wfFvSjgYLrZzLhhg/FNwpGtnHOTSiafs5P33R3uTsVw/uW SJA/6QKtZ+xnUO8cJCi8wlliVdY6/NJ1zeezcfPcyBxZV9grtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGi7+OJeQGpYRRUOEW7oLhfiqBLAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNjU2ZGIyZWUtYjBkMS0z MTAxLWFjNjgtY2YwYzM3Mzk4ZGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJkhYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJW7Ac99F+uGHjaBxi2OH9wxBsSDWwGT0g52FGQFoXbQJ85zSRNzAV/6 /HJr0sD5fkRAqfwUNU7IQJQO5yi1qVH+U+Av18ivVb1VaoBfKq7PP66wEVJMOABd pDqzfqvK/9E15uvrwQ6ancdLOCxC/Vy/EjpWBJR4lZzABXUeCWFu6RU+N+cAxqns Ogy01ed0pvzVmP2Nm74th6aqf1DZJ4Sh9zGZgCZJDPBlwYQB6+2XX5zptropTizq C6v1VzgUi1bfv/3a4pv4+QbTXfnj+DLdZVCdNfxM2cko54+JiEVFbA7P3yHTUa1e i4ZvoESS8q1hDaAb2byWCwW19wr7ArY= -----END CERTIFICATE-----Generated at Sat Oct 11 12:08:18 2025 by rpki-client