$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9dcb9aef-2296-395c-9c08-6170d4216801.roa File: 9dcb9aef-2296-395c-9c08-6170d4216801.roa (raw, json) Hash identifier: 8ATKyccuyXOxtOA5znMZpzx26t5qCd52bmED3mSiAhg= Subject key identifier: 4F:3C:55:E3:51:07:80:0A:B8:7F:AF:32:CD:1D:A0:17:8D:C5:FC:27 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B72451E4361B497F80D7C4DC0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9dcb9aef-2296-395c-9c08-6170d4216801.roa Signing time: Tue 07 Oct 2025 20:49:07 +0000 ROA not before: Tue 07 Oct 2025 20:49:07 +0000 ROA not after: Mon 05 Jan 2026 21:49:07 +0000 asID: 265525 IP address blocks: 38.19.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:45:1e:43:61:b4:97:f8:0d:7c:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 7 20:49:07 2025 GMT Not After : Jan 5 21:49:07 2026 GMT Subject: CN=f54f3174-94da-4a32-a8ef-46a4e4f4e8ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:66:f6:42:01:7b:54:b7:74:89:f5:f2:ae:36: 36:01:83:35:3b:11:6c:53:a4:22:9f:5a:16:97:c3: 01:a2:07:1a:a5:2b:5b:ae:57:bc:b3:df:30:bb:c4: 38:f2:b3:8c:be:d2:fb:b9:6c:3f:0a:40:da:c3:8e: fc:48:5a:72:6b:3b:b7:a7:c8:5a:c0:e6:26:f6:cf: 8d:52:5b:f0:83:5a:df:55:57:9f:00:79:25:df:96: d4:60:ae:b1:24:fb:19:9c:ea:1f:4c:d8:89:15:18: 0e:47:fa:1e:35:18:68:38:88:95:85:b4:e7:f6:d4: 6b:e5:47:23:2e:a3:a5:60:2a:f3:03:ee:6b:42:09: 49:6c:ac:a1:06:59:16:65:69:88:42:7e:3a:31:b9: a6:6c:b8:cb:fd:4f:ea:3e:6e:6f:00:e2:da:e0:75: b1:27:73:dd:10:ba:7d:f9:60:7f:bd:2b:1b:a4:e7: 48:c3:b2:91:8c:8d:94:24:f3:68:c3:fa:81:e0:4a: 5b:7b:ba:2e:90:da:be:ca:4a:a0:ed:11:cf:70:37: dd:8e:96:be:5a:94:97:64:2f:59:52:52:57:95:6f: ae:55:52:5f:ec:b9:cb:f2:16:db:c2:d3:29:4d:55: e5:47:e7:bc:a6:aa:f7:0d:53:7d:08:b2:b3:8a:f6: 8d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:3C:55:E3:51:07:80:0A:B8:7F:AF:32:CD:1D:A0:17:8D:C5:FC:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9dcb9aef-2296-395c-9c08-6170d4216801.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.19.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:4b:be:d4:3e:3d:ad:93:45:25:b7:fe:4d:9b:de:3f:5e:47: b4:03:04:3c:ad:03:1c:f2:55:6f:c0:9a:f5:4b:7a:89:a0:ae: ef:9f:e1:d9:10:84:1f:4f:9b:e1:48:b2:80:b9:de:70:c2:20: ec:73:35:9b:bd:ce:db:cc:2b:ac:71:7e:20:26:f9:29:3a:ce: ab:c0:f9:da:85:60:96:70:9a:b1:02:e6:1d:8c:d0:5b:dc:4f: 11:3a:3a:5f:d5:cd:00:25:87:16:57:4e:bc:6c:af:ee:1d:68: 52:3a:16:0d:1c:13:2f:56:5b:ae:5f:c2:aa:39:38:a0:9f:d0: d8:1d:20:28:6f:eb:6c:0a:dd:ad:de:53:5a:bd:04:08:37:e9: 54:e2:51:cc:2b:49:0f:5d:b9:74:b8:7d:e2:80:94:78:65:77: c3:64:30:2a:74:c1:e4:f2:62:71:23:04:23:0d:c5:c1:e8:6d: d3:ae:c5:89:4e:dd:6d:94:ea:b0:14:48:05:c3:f9:5b:4a:7e: 65:f1:ad:d8:79:8f:ed:ce:62:bd:8b:20:03:3e:cf:1b:45:a0: 07:7a:1f:19:b0:85:33:8f:21:68:55:1c:ba:76:00:78:87:ce: f5:5f:b5:97:0d:95:5d:8e:d7:5a:98:d9:63:57:0c:60:f6:e1: 1a:91:8f:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtyRR5DYbSX+A18TcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAwNzIwNDkwN1oXDTI2MDEwNTIxNDkwN1owLzEtMCsGA1UEAxMk ZjU0ZjMxNzQtOTRkYS00YTMyLWE4ZWYtNDZhNGU0ZjRlOGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2b2QgF7VLd0ifXyrjY2AYM1OxFsU6Qin1oW l8MBogcapStbrle8s98wu8Q48rOMvtL7uWw/CkDaw478SFpyazu3p8hawOYm9s+N Ulvwg1rfVVefAHkl35bUYK6xJPsZnOofTNiJFRgOR/oeNRhoOIiVhbTn9tRr5Ucj LqOlYCrzA+5rQglJbKyhBlkWZWmIQn46MbmmbLjL/U/qPm5vAOLa4HWxJ3PdELp9 +WB/vSsbpOdIw7KRjI2UJPNow/qB4Epbe7oukNq+ykqg7RHPcDfdjpa+WpSXZC9Z UlJXlW+uVVJf7LnL8hbbwtMpTVXlR+e8pqr3DVN9CLKzivaNawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE88VeNRB4AKuH+vMs0doBeNxfwnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOWRjYjlhZWYtMjI5Ni0z OTVjLTljMDgtNjE3MGQ0MjE2ODAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJhMiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpLvtQ+Pa2TRSW3/k2b3j9eR7QDBDytAxzyVW/AmvVLeomgru+f4dkQ hB9Pm+FIsoC53nDCIOxzNZu9ztvMK6xxfiAm+Sk6zqvA+dqFYJZwmrEC5h2M0Fvc TxE6Ol/VzQAlhxZXTrxsr+4daFI6Fg0cEy9WW65fwqo5OKCf0NgdIChv62wK3a3e U1q9BAg36VTiUcwrSQ9duXS4feKAlHhld8NkMCp0weTyYnEjBCMNxcHobdOuxYlO 3W2U6rAUSAXD+VtKfmXxrdh5j+3OYr2LIAM+zxtFoAd6HxmwhTOPIWhVHLp2AHiH zvVftZcNlV2O11qY2WNXDGD24RqRjxk= -----END CERTIFICATE-----Generated at Sat Oct 11 12:08:46 2025 by rpki-client