$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/954af7a6-17f4-38dc-afe0-e1022d94cfca.roa File: 954af7a6-17f4-38dc-afe0-e1022d94cfca.roa (raw, json) Hash identifier: m6ApTW2ZaV6DzfSrf/cG63vWgZeUTv6IF/8SgO6/HsY= Subject key identifier: 14:45:76:5D:37:E4:82:32:D6:32:18:E2:99:A3:32:EA:6C:B3:75:25 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B719C28B0E5C369C7B270B800 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/954af7a6-17f4-38dc-afe0-e1022d94cfca.roa Signing time: Tue 07 Oct 2025 15:08:41 +0000 ROA not before: Tue 07 Oct 2025 15:08:41 +0000 ROA not after: Mon 05 Jan 2026 16:08:41 +0000 asID: 52468 IP address blocks: 38.250.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:9c:28:b0:e5:c3:69:c7:b2:70:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 7 15:08:41 2025 GMT Not After : Jan 5 16:08:41 2026 GMT Subject: CN=70670c44-0fbc-4769-9e5f-d24e3122e3f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:98:db:09:67:39:52:cb:2d:ab:45:58:c4:95: 6d:0e:01:07:74:f7:36:37:e4:64:48:55:5e:38:fc: 23:d5:4d:2b:ff:39:84:e6:8c:ae:fb:2b:7f:96:7f: e4:66:9d:8d:1f:1c:da:db:3a:63:0c:e0:e9:a1:62: 34:ce:5e:ef:1d:4e:1f:a9:ef:26:c1:b9:4d:78:6b: e7:f9:23:91:19:e7:de:6f:b6:07:05:bd:c7:af:41: a6:d3:6f:11:0b:a6:ea:4d:a6:0e:fb:56:db:7d:2a: 85:38:9f:bc:73:95:0f:8f:85:0d:28:21:bb:63:a4: e7:29:42:48:0b:c2:ac:4b:3a:bd:0d:5e:ef:0d:2a: b6:bf:e2:74:4c:a9:94:a7:e1:a7:98:de:1f:f5:95: 94:79:9a:86:8d:b2:49:01:6f:65:0d:dd:28:28:60: 25:3f:ca:85:6f:d6:67:37:56:44:08:28:23:1f:67: 9a:c0:5f:68:bf:07:95:0c:83:3d:a7:19:28:33:15: e8:e4:bb:b3:80:a4:48:cd:42:a2:28:21:d9:c4:1b: 65:d9:2d:e7:2b:a0:75:97:a4:78:34:19:28:e5:b5: 6b:0f:c9:ff:b1:3d:91:cc:a2:e4:fc:2e:a8:4b:70: 81:a0:88:b9:00:66:ff:8f:75:6b:fe:cd:f2:fd:ae: 20:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:45:76:5D:37:E4:82:32:D6:32:18:E2:99:A3:32:EA:6C:B3:75:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/954af7a6-17f4-38dc-afe0-e1022d94cfca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.250.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:36:9e:be:a1:8e:99:69:36:86:79:e0:40:cf:36:a1:6f:fc: 2e:bc:35:d3:59:87:72:1e:5c:18:ad:cd:cb:0f:f3:78:54:02: 35:f4:31:bc:15:9c:06:9a:26:03:b3:e1:ae:f4:40:2e:19:ba: 31:d9:b2:3c:b3:22:f0:88:34:4f:0c:80:f0:98:7c:21:d9:df: 74:33:63:89:b7:24:c6:37:6d:65:73:d8:66:4b:ef:ac:a3:53: 62:a9:72:7a:60:be:18:d7:6c:b4:8d:c4:23:e3:54:57:84:7d: 1c:c7:72:75:24:1f:2b:ab:6e:ea:4e:dc:13:ae:ec:ee:85:1c: f9:33:aa:1c:a9:c5:7d:46:a2:7e:6f:c5:b8:36:7c:c2:9d:b6: 44:74:52:62:3b:0b:53:28:e4:7a:17:36:ce:50:70:c1:2a:02: c4:92:52:a7:29:44:a9:68:23:2a:99:08:19:c5:18:c9:dc:6a: 7e:fd:2b:62:69:d4:3c:05:a1:1e:8e:43:db:8c:cb:06:35:30: af:f5:af:ab:d2:0a:0e:eb:bc:65:db:f5:49:57:22:d1:1e:2b: 10:85:a2:74:a7:72:94:16:c0:fb:b3:7f:18:eb:71:6f:f4:d0: db:df:b4:97:62:a4:a5:57:21:a4:8d:48:13:40:37:c6:a3:7f: 97:7d:5c:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxnCiw5cNpx7JwuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAwNzE1MDg0MVoXDTI2MDEwNTE2MDg0MVowLzEtMCsGA1UEAxMk NzA2NzBjNDQtMGZiYy00NzY5LTllNWYtZDI0ZTMxMjJlM2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5jbCWc5Usstq0VYxJVtDgEHdPc2N+RkSFVe OPwj1U0r/zmE5oyu+yt/ln/kZp2NHxza2zpjDODpoWI0zl7vHU4fqe8mwblNeGvn +SORGefeb7YHBb3Hr0Gm028RC6bqTaYO+1bbfSqFOJ+8c5UPj4UNKCG7Y6TnKUJI C8KsSzq9DV7vDSq2v+J0TKmUp+GnmN4f9ZWUeZqGjbJJAW9lDd0oKGAlP8qFb9Zn N1ZECCgjH2eawF9ovweVDIM9pxkoMxXo5LuzgKRIzUKiKCHZxBtl2S3nK6B1l6R4 NBko5bVrD8n/sT2RzKLk/C6oS3CBoIi5AGb/j3Vr/s3y/a4gNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRFdl035IIy1jIY4pmjMupss3UlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOTU0YWY3YTYtMTdmNC0z OGRjLWFmZTAtZTEwMjJkOTRjZmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJvpeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALo2nr6hjplpNoZ54EDPNqFv/C68NdNZh3IeXBitzcsP83hUAjX0MbwV nAaaJgOz4a70QC4ZujHZsjyzIvCINE8MgPCYfCHZ33QzY4m3JMY3bWVz2GZL76yj U2KpcnpgvhjXbLSNxCPjVFeEfRzHcnUkHyurbupO3BOu7O6FHPkzqhypxX1Gon5v xbg2fMKdtkR0UmI7C1Mo5HoXNs5QcMEqAsSSUqcpRKloIyqZCBnFGMncan79K2Jp 1DwFoR6OQ9uMywY1MK/1r6vSCg7rvGXb9UlXItEeKxCFonSncpQWwPuzfxjrcW/0 0NvftJdipKVXIaSNSBNAN8ajf5d9XAA= -----END CERTIFICATE-----Generated at Sat Oct 11 12:08:48 2025 by rpki-client