$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/905a573f-6c30-372d-81cb-a3a3ee46cb41.roa File: 905a573f-6c30-372d-81cb-a3a3ee46cb41.roa (raw, json) Hash identifier: dei2ZB8fXCmLUUpT0Gmmb9ia7UfA2xNJ9oBnDCiijcc= Subject key identifier: 85:D9:E7:10:42:3B:25:6A:26:6F:59:50:7E:2A:24:5E:5A:A3:81:30 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B6F075A15C7E0ACC460183780 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/905a573f-6c30-372d-81cb-a3a3ee46cb41.roa Signing time: Mon 06 Oct 2025 16:57:14 +0000 ROA not before: Mon 06 Oct 2025 16:57:14 +0000 ROA not after: Sun 04 Jan 2026 17:57:14 +0000 asID: 270158 IP address blocks: 38.65.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:07:5a:15:c7:e0:ac:c4:60:18:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 6 16:57:14 2025 GMT Not After : Jan 4 17:57:14 2026 GMT Subject: CN=f1fce6ad-032b-4f9b-82ec-8662f68a5da4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:de:ca:b2:ab:0c:34:72:a9:99:9a:71:07:88: 66:79:58:35:19:17:b3:b9:64:15:19:a2:4a:b3:e6: 7a:9f:81:72:bd:73:c9:c5:d7:4d:86:1a:cb:41:10: 44:24:cd:a1:56:8e:e1:f2:83:6f:f6:1d:00:4f:38: 25:8a:99:cf:54:a4:d9:a1:b8:c1:8d:a3:d8:2c:83: 4f:a3:9a:72:45:ac:9a:3a:06:ae:fc:87:6f:4e:90: 2c:6f:99:22:9e:57:3c:30:06:07:b7:ab:4c:ac:66: 9b:d5:f7:1f:2e:58:f7:c7:21:8a:85:6c:18:fc:78: 06:7d:4b:93:6a:d7:93:5c:f2:aa:54:c2:ee:bb:ef: 14:60:de:b3:ef:8e:47:f3:25:07:4a:bc:10:4b:38: 68:36:15:8a:67:d9:78:51:41:b6:cb:3c:e4:19:54: cd:42:3c:c0:af:29:92:a2:4a:21:bb:59:e1:8d:64: 6b:09:a1:6e:7c:c1:b6:59:4b:c3:fe:eb:f2:66:73: eb:1e:e4:e7:bb:a1:eb:6e:c0:d1:c7:6c:f2:50:c1: cb:9d:f0:95:a1:e8:e7:5d:33:7c:4e:12:06:d8:b3: f4:41:d6:b3:26:c5:77:05:63:d7:08:4e:1e:30:5c: 31:13:48:6f:08:40:2f:9d:23:3b:6f:4e:2c:bf:3a: 96:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D9:E7:10:42:3B:25:6A:26:6F:59:50:7E:2A:24:5E:5A:A3:81:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/905a573f-6c30-372d-81cb-a3a3ee46cb41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.65.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:24:20:d2:7c:52:bb:a8:1b:13:fb:9e:44:52:9b:d6:9d:20: d5:d1:3f:80:9c:4e:25:a6:2d:b8:5b:86:f4:ae:ad:f4:b5:1d: 97:2a:bd:9d:2f:57:a3:ef:ed:f1:ab:3c:41:68:62:55:94:b3: 11:cc:c8:56:9e:07:2d:8c:1c:12:92:47:40:40:14:85:31:1f: 89:0c:d1:1e:66:a7:8b:88:6e:5a:8e:a2:9d:fd:0d:06:df:ad: 3a:15:50:7b:c2:15:c2:35:b8:c3:08:da:66:84:c8:22:08:dc: 2c:ae:11:57:68:de:2c:33:29:6d:cc:b6:ef:98:93:d4:4d:26: 20:0b:e9:73:66:58:fb:4c:6f:21:a9:19:9e:a0:69:1e:6a:e2: a8:b6:5f:5b:95:62:1f:02:bc:05:31:6d:7a:b5:c0:31:75:f4: 1d:99:11:7b:be:f3:fe:86:e0:8d:9c:ac:81:85:c3:37:44:50: b7:63:a3:74:36:60:9a:46:8b:49:ae:ec:e0:00:fd:3b:1e:0e: e6:1b:98:09:45:b9:55:5b:71:22:2f:09:2c:91:2d:62:13:44: 9b:0e:1a:ee:4a:a2:9b:5e:88:76:49:b4:8d:3c:cf:51:fc:e5: 7e:77:e9:10:6d:ae:b5:f5:12:3b:25:82:44:20:ef:be:0d:f5: 90:9c:51:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtvB1oVx+CsxGAYN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAwNjE2NTcxNFoXDTI2MDEwNDE3NTcxNFowLzEtMCsGA1UEAxMk ZjFmY2U2YWQtMDMyYi00ZjliLTgyZWMtODY2MmY2OGE1ZGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj97KsqsMNHKpmZpxB4hmeVg1GRezuWQVGaJK s+Z6n4FyvXPJxddNhhrLQRBEJM2hVo7h8oNv9h0ATzglipnPVKTZobjBjaPYLINP o5pyRayaOgau/IdvTpAsb5kinlc8MAYHt6tMrGab1fcfLlj3xyGKhWwY/HgGfUuT ateTXPKqVMLuu+8UYN6z745H8yUHSrwQSzhoNhWKZ9l4UUG2yzzkGVTNQjzArymS okohu1nhjWRrCaFufMG2WUvD/uvyZnPrHuTnu6HrbsDRx2zyUMHLnfCVoejnXTN8 ThIG2LP0QdazJsV3BWPXCE4eMFwxE0hvCEAvnSM7b04svzqWfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXZ5xBCOyVqJm9ZUH4qJF5ao4EwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOTA1YTU3M2YtNmMzMC0z NzJkLTgxY2ItYTNhM2VlNDZjYjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJkGuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKokINJ8UruoGxP7nkRSm9adINXRP4CcTiWmLbhbhvSurfS1HZcqvZ0v V6Pv7fGrPEFoYlWUsxHMyFaeBy2MHBKSR0BAFIUxH4kM0R5mp4uIblqOop39DQbf rToVUHvCFcI1uMMI2maEyCII3CyuEVdo3iwzKW3Mtu+Yk9RNJiAL6XNmWPtMbyGp GZ6gaR5q4qi2X1uVYh8CvAUxbXq1wDF19B2ZEXu+8/6G4I2crIGFwzdEULdjo3Q2 YJpGi0mu7OAA/TseDuYbmAlFuVVbcSIvCSyRLWITRJsOGu5KopteiHZJtI08z1H8 5X536RBtrrX1EjslgkQg774N9ZCcUZU= -----END CERTIFICATE-----Generated at Sat Oct 11 12:06:02 2025 by rpki-client