$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9916c0ee-1e34-3f57-8b14-e49c3b02c8a8.roa File: 9916c0ee-1e34-3f57-8b14-e49c3b02c8a8.roa (raw, json) Hash identifier: EYqvUZAsp0RjabqnUqGwArUhuYRqwzEtLfKA9xF9/nM= Subject key identifier: E6:B6:AB:8E:B5:1A:9D:6F:9C:F8:3F:CF:2F:C2:D6:92:28:22:14:44 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B79F7641ABB9DFD6814EEA500 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9916c0ee-1e34-3f57-8b14-e49c3b02c8a8.roa Signing time: Fri 10 Oct 2025 14:58:58 +0000 ROA not before: Fri 10 Oct 2025 14:58:58 +0000 ROA not after: Thu 08 Jan 2026 15:58:58 +0000 asID: 32212 IP address blocks: 38.70.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:f7:64:1a:bb:9d:fd:68:14:ee:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 10 14:58:58 2025 GMT Not After : Jan 8 15:58:58 2026 GMT Subject: CN=1c6daf4e-7395-495e-9c6d-f0548d324790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:cb:5b:0a:fa:4b:c4:d0:09:56:a0:24:e1:d8: a7:0e:9a:e2:ed:92:8e:a0:4a:2e:36:57:0b:19:68: 88:b6:77:8f:25:db:e8:79:f8:f7:e9:de:d7:21:a6: aa:36:db:56:b5:28:ea:ca:9e:70:14:6c:4b:1e:fd: c1:9d:a7:0a:f2:9a:1c:f6:1f:88:00:c8:1e:b9:ba: 34:26:0c:00:d1:33:96:bd:f6:25:8d:f9:55:6e:b2: 03:dd:fc:e3:0f:79:ac:7e:e8:d1:de:3d:e0:b8:19: f5:da:8b:b9:60:7f:11:9b:c1:7a:eb:44:5b:81:ca: 47:fc:f4:35:d4:92:5e:da:52:b5:d6:8c:45:7b:87: 1f:b5:cd:2c:77:51:f6:6b:5b:8d:9c:78:de:00:6e: 61:a4:69:f5:e7:91:af:f2:ee:b7:e1:36:5a:9d:cb: de:b5:22:5c:66:47:81:a7:74:8c:f2:48:c0:64:c0: e6:57:2c:cf:e4:7a:1c:35:73:44:a4:44:87:e6:4a: b8:1c:20:89:5e:62:72:22:93:45:cb:28:2e:fb:7d: 43:8c:2c:50:52:89:9a:58:fc:70:1d:ca:11:05:9c: b9:e1:6a:98:9d:d8:80:aa:9c:40:3e:52:03:60:3f: bc:a8:ee:b4:f9:ec:59:9e:05:52:2c:f0:7d:a7:fb: 9f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B6:AB:8E:B5:1A:9D:6F:9C:F8:3F:CF:2F:C2:D6:92:28:22:14:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9916c0ee-1e34-3f57-8b14-e49c3b02c8a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.70.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:45:94:a2:3c:f7:79:f4:77:05:a0:91:f8:0b:7c:e1:28:43: e0:ab:c6:0f:10:ca:8f:cb:b7:2e:ef:63:36:57:f3:f0:e9:04: f6:be:93:be:33:47:68:54:cf:1f:58:dd:2c:fc:04:86:c9:fc: 89:a4:23:c7:73:d8:a8:c4:9b:89:60:76:63:90:a9:e1:38:67: db:fe:ab:78:be:41:77:82:42:12:bc:8b:a4:68:e3:6b:aa:a6: 87:4c:d8:48:7a:7f:f6:30:6b:55:c6:27:ec:3f:ba:8d:ed:cd: 1b:ab:be:53:0e:1f:ab:3a:51:3b:27:84:71:76:60:e4:47:61: 2f:9f:f9:3b:de:bd:7a:73:03:11:49:98:2f:8a:2a:2e:2a:6d: 63:d2:8d:f5:36:82:1e:35:b4:ec:c9:07:b5:22:86:cc:4a:33: 2d:2a:61:2c:52:49:ed:29:89:02:fa:eb:4b:31:69:a5:9f:2d: a5:ac:1a:c3:0b:57:4d:03:65:84:71:16:90:fb:9b:3e:ed:57: 5e:c6:0e:8b:be:ae:cb:1a:2b:f6:bf:62:62:ba:44:4e:00:e5: b4:36:da:46:88:3c:25:08:9a:f9:cc:9e:94:55:e5:d8:e6:41: 5d:c9:eb:dd:80:8f:cf:ef:ee:bd:ff:ca:44:39:04:3a:5c:8b: 2d:27:1b:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt592Qau539aBTupQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAxMDE0NTg1OFoXDTI2MDEwODE1NTg1OFowLzEtMCsGA1UEAxMk MWM2ZGFmNGUtNzM5NS00OTVlLTljNmQtZjA1NDhkMzI0NzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhctbCvpLxNAJVqAk4dinDpri7ZKOoEouNlcL GWiItnePJdvoefj36d7XIaaqNttWtSjqyp5wFGxLHv3BnacK8poc9h+IAMgeubo0 JgwA0TOWvfYljflVbrID3fzjD3msfujR3j3guBn12ou5YH8Rm8F660RbgcpH/PQ1 1JJe2lK11oxFe4cftc0sd1H2a1uNnHjeAG5hpGn155Gv8u634TZancvetSJcZkeB p3SM8kjAZMDmVyzP5HocNXNEpESH5kq4HCCJXmJyIpNFyygu+31DjCxQUomaWPxw HcoRBZy54WqYndiAqpxAPlIDYD+8qO60+exZngVSLPB9p/ufhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOa2q461Gp1vnPg/zy/C1pIoIhREMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOTkxNmMwZWUtMWUzNC0z ZjU3LThiMTQtZTQ5YzNiMDJjOGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJkbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5FlKI893n0dwWgkfgLfOEoQ+Crxg8Qyo/Lty7vYzZX8/DpBPa+k74z R2hUzx9Y3Sz8BIbJ/ImkI8dz2KjEm4lgdmOQqeE4Z9v+q3i+QXeCQhK8i6Ro42uq podM2Eh6f/Ywa1XGJ+w/uo3tzRurvlMOH6s6UTsnhHF2YORHYS+f+TvevXpzAxFJ mC+KKi4qbWPSjfU2gh41tOzJB7UihsxKMy0qYSxSSe0piQL660sxaaWfLaWsGsML V00DZYRxFpD7mz7tV17GDou+rssaK/a/YmK6RE4A5bQ22kaIPCUImvnMnpRV5djm QV3J692Aj8/v7r3/ykQ5BDpciy0nG8U= -----END CERTIFICATE-----Generated at Sat Oct 11 04:18:14 2025 by rpki-client