$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/75108319-4e2d-3449-9ce8-d738ce2043f9.roa File: 75108319-4e2d-3449-9ce8-d738ce2043f9.roa (raw, json) Hash identifier: IaEK6SruRnD/lBsMFYL4qvVsVcFN7a7gCoBD/d1iGWs= Subject key identifier: DD:05:84:1E:9E:6B:4F:C9:A9:E5:BA:0B:1A:80:17:EC:0A:EB:FE:47 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B95D5EF368EFF87A8A5CC49E0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/75108319-4e2d-3449-9ce8-d738ce2043f9.roa Signing time: Mon 20 Oct 2025 14:34:12 +0000 ROA not before: Mon 20 Oct 2025 14:34:12 +0000 ROA not after: Sun 18 Jan 2026 15:34:12 +0000 asID: 266853 IP address blocks: 38.172.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:d5:ef:36:8e:ff:87:a8:a5:cc:49:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 20 14:34:12 2025 GMT Not After : Jan 18 15:34:12 2026 GMT Subject: CN=ff98a0b6-3fa1-4f91-b2a4-699045fb675f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b0:72:fe:a4:fb:48:fd:18:72:d2:dc:08:e6: 6a:85:e8:09:1d:71:d7:d3:16:6c:b5:f9:99:17:eb: cb:1b:ab:98:21:0a:18:e5:20:18:5f:d8:8b:d1:90: 8c:93:3b:d9:96:c4:d8:1f:ca:53:f5:f6:27:da:34: a9:97:97:d1:10:8d:2c:cb:e9:3c:65:ff:91:b8:cc: 0c:20:df:27:ee:c8:fe:ae:75:27:1b:e0:f2:ba:08: 1b:6a:ea:6f:fa:42:b8:d9:13:9f:12:61:18:7e:3b: 87:f1:e6:cb:6a:45:68:ea:06:a3:6e:97:ad:cb:bb: 10:6d:3f:4d:38:9b:80:40:26:b3:51:5d:68:9f:63: f6:46:a1:27:d7:b6:99:c6:03:1d:b8:59:53:aa:3f: f4:57:1e:09:d6:7d:08:bf:41:cf:0c:28:73:3e:da: d2:53:aa:ee:68:f1:ce:f8:75:97:8e:c1:46:b5:e4: 49:34:cf:a9:5f:8b:55:e7:9b:1f:d7:21:5c:ab:8d: d8:5d:97:62:a0:08:2a:6b:fd:a4:41:d1:dc:65:f6: 97:c4:12:e0:0b:0a:51:37:8f:3f:af:e5:d9:c9:0f: df:73:8b:b3:c0:03:24:db:3f:9a:f6:a9:0c:d8:6c: 0b:46:2e:bd:82:91:42:1a:f8:e1:0e:32:44:35:01: 39:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:05:84:1E:9E:6B:4F:C9:A9:E5:BA:0B:1A:80:17:EC:0A:EB:FE:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/75108319-4e2d-3449-9ce8-d738ce2043f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.172.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:c2:88:25:bc:1b:a7:b8:2f:fb:a8:cc:00:55:c5:ca:95:a4: aa:18:5e:00:c9:8a:d2:da:5a:9d:32:d8:7d:ea:cf:5b:cb:f3: 19:97:be:25:1c:ae:09:88:8a:2e:5a:de:ff:f4:16:52:c3:6c: 16:ba:81:24:65:c9:2b:10:62:e9:22:ed:52:a1:f0:d1:25:4e: f0:38:81:8e:72:51:36:78:bd:9d:b8:68:32:77:d9:66:11:cd: c9:31:8a:47:39:3c:87:e7:6a:67:fc:4c:46:5d:a8:4d:ae:24: 61:0d:86:74:a8:26:89:d6:ae:9a:61:c0:b1:da:67:e7:90:f4: e9:14:94:8b:ac:8b:b4:01:c0:ce:ed:f4:c7:45:5b:90:ed:e1: 19:80:53:8f:a9:cf:93:99:86:40:0c:75:06:7f:15:a2:9d:06: 56:b5:a9:d0:89:75:40:ff:8e:06:43:1b:86:6c:82:2f:a0:99: 8f:60:49:1c:69:8b:68:c2:14:70:aa:df:05:76:7a:d0:ad:a7: 2b:66:ca:a9:e3:9e:42:70:8e:d1:6c:43:aa:58:ef:d1:6d:38: 97:61:f8:04:59:db:17:ab:ec:f7:0f:aa:e7:29:5f:ee:68:ec: 00:52:09:f2:e9:e3:b7:72:2b:2d:11:04:8b:b9:96:73:b3:8d: d7:bd:b8:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuV1e82jv+HqKXMSeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAyMDE0MzQxMloXDTI2MDExODE1MzQxMlowLzEtMCsGA1UEAxMk ZmY5OGEwYjYtM2ZhMS00ZjkxLWIyYTQtNjk5MDQ1ZmI2NzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7By/qT7SP0YctLcCOZqhegJHXHX0xZstfmZ F+vLG6uYIQoY5SAYX9iL0ZCMkzvZlsTYH8pT9fYn2jSpl5fREI0sy+k8Zf+RuMwM IN8n7sj+rnUnG+Dyuggbaupv+kK42ROfEmEYfjuH8ebLakVo6gajbpety7sQbT9N OJuAQCazUV1on2P2RqEn17aZxgMduFlTqj/0Vx4J1n0Iv0HPDChzPtrSU6ruaPHO +HWXjsFGteRJNM+pX4tV55sf1yFcq43YXZdioAgqa/2kQdHcZfaXxBLgCwpRN48/ r+XZyQ/fc4uzwAMk2z+a9qkM2GwLRi69gpFCGvjhDjJENQE5PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0FhB6ea0/JqeW6CxqAF+wK6/5HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNzUxMDgzMTktNGUyZC0z NDQ5LTljZTgtZDczOGNlMjA0M2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJqwoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALvCiCW8G6e4L/uozABVxcqVpKoYXgDJitLaWp0y2H3qz1vL8xmXviUc rgmIii5a3v/0FlLDbBa6gSRlySsQYuki7VKh8NElTvA4gY5yUTZ4vZ24aDJ32WYR zckxikc5PIfnamf8TEZdqE2uJGENhnSoJonWrpphwLHaZ+eQ9OkUlIusi7QBwM7t 9MdFW5Dt4RmAU4+pz5OZhkAMdQZ/FaKdBla1qdCJdUD/jgZDG4Zsgi+gmY9gSRxp i2jCFHCq3wV2etCtpytmyqnjnkJwjtFsQ6pY79FtOJdh+ARZ2xer7PcPqucpX+5o 7ABSCfLp47dyKy0RBIu5lnOzjde9uG0= -----END CERTIFICATE-----Generated at Sat Nov 1 21:43:06 2025 by rpki-client