$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a62dab88-34ee-38ef-a202-27e5c6b97999.roa File: a62dab88-34ee-38ef-a202-27e5c6b97999.roa (raw, json) Hash identifier: qFd7E8r61lTo2TZe2nohXu+ExlSnMXrrrA07kOQEHis= Subject key identifier: 8B:2D:50:DF:2B:B3:F8:D4:39:AD:F4:4B:17:6C:F5:3A:9B:8D:D9:33 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B63D4B4D3100B39EC6C65A300 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a62dab88-34ee-38ef-a202-27e5c6b97999.roa Signing time: Thu 02 Oct 2025 16:41:18 +0000 ROA not before: Thu 02 Oct 2025 16:41:18 +0000 ROA not after: Wed 31 Dec 2025 17:41:18 +0000 asID: 21859 IP address blocks: 38.131.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:d4:b4:d3:10:0b:39:ec:6c:65:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 2 16:41:18 2025 GMT Not After : Dec 31 17:41:18 2025 GMT Subject: CN=db8b33d8-07c9-4f77-96f3-f41813c2ea1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3e:e4:e1:f9:13:aa:47:9a:8d:54:10:24:70: 85:be:dd:4a:3c:f5:b9:8c:bc:39:f0:b2:1f:f4:55: 20:a8:bf:aa:63:4c:4b:47:e7:91:95:44:47:3b:9c: 41:78:1d:4b:26:68:f6:c1:ad:da:a7:19:62:5d:3f: ed:33:2d:d2:bd:5e:78:c1:1d:b9:08:7a:25:1f:6f: 78:f5:3a:15:18:0f:dc:82:72:1b:0c:c9:c4:a4:5e: a8:50:eb:f0:3e:97:17:42:94:3a:04:fa:22:8e:07: d0:81:de:1a:f6:87:f9:0f:33:08:48:2b:43:b2:8d: 10:e3:e8:00:25:68:d3:f3:a0:a0:e4:a5:86:a5:88: 05:aa:49:4a:7d:23:78:f4:c6:7c:71:cc:2b:2e:7c: 15:9b:06:69:65:15:67:c7:41:bc:0d:a1:cc:62:32: 8a:8f:89:62:dd:b9:e1:73:b3:61:44:a8:0c:13:0f: 23:12:e3:eb:05:ac:97:c8:9f:ee:6b:73:5c:48:a5: 67:67:35:ff:1c:c7:d0:da:7e:13:ca:d7:3d:ae:15: 81:46:8b:a9:04:68:9e:c7:bc:55:42:84:a2:e9:87: 78:5d:79:c5:55:c5:78:03:21:77:9a:ef:4d:4d:b6: 6d:f4:2c:1d:8f:f7:6e:2a:7a:12:95:80:83:05:4b: 41:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:2D:50:DF:2B:B3:F8:D4:39:AD:F4:4B:17:6C:F5:3A:9B:8D:D9:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a62dab88-34ee-38ef-a202-27e5c6b97999.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.131.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:04:64:cd:32:fd:50:67:68:51:92:d8:a5:c4:87:03:8c:36: a0:6c:b9:03:d9:40:38:ce:32:b1:6e:b5:24:da:57:ad:08:29: 26:89:65:3b:f9:86:91:19:5b:bc:67:a9:58:9e:a5:ce:cf:1b: aa:bc:5d:5d:be:fe:12:4a:2d:82:a2:1c:64:72:18:2c:78:12: 28:40:78:e4:8b:74:28:73:7d:eb:b4:af:d0:f6:f8:54:b7:8b: f4:0a:15:72:3b:66:cc:43:31:de:95:d9:7b:d0:0b:e6:a1:8b: 54:c5:d6:5c:e5:10:31:5d:7c:15:fa:6d:7a:32:a1:0b:29:17: be:db:20:c8:9b:2c:3b:86:0c:ec:a5:75:11:b1:db:e6:76:19: 44:9a:20:ba:7c:4f:e4:50:12:e3:50:ba:66:59:f7:6f:bb:59: 9a:c7:93:8f:4c:dc:17:a2:f6:6c:af:0b:47:a2:b4:9c:9a:1b: ad:63:39:fc:d4:9a:bc:18:5e:78:ca:cb:32:18:02:d1:59:6f: d4:99:a6:d1:1b:51:0b:58:8c:92:59:a8:01:92:f6:b4:93:89: cc:ca:c1:3f:8c:5a:9b:64:89:63:49:cb:e8:49:f6:90:75:ed: f9:4b:aa:fe:b9:f3:f4:04:24:fd:ee:66:83:59:11:06:a0:94: 24:f7:15:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtj1LTTEAs57GxlowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAwMjE2NDExOFoXDTI1MTIzMTE3NDExOFowLzEtMCsGA1UEAxMk ZGI4YjMzZDgtMDdjOS00Zjc3LTk2ZjMtZjQxODEzYzJlYTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhT7k4fkTqkeajVQQJHCFvt1KPPW5jLw58LIf 9FUgqL+qY0xLR+eRlURHO5xBeB1LJmj2wa3apxliXT/tMy3SvV54wR25CHolH294 9ToVGA/cgnIbDMnEpF6oUOvwPpcXQpQ6BPoijgfQgd4a9of5DzMISCtDso0Q4+gA JWjT86Cg5KWGpYgFqklKfSN49MZ8ccwrLnwVmwZpZRVnx0G8DaHMYjKKj4li3bnh c7NhRKgMEw8jEuPrBayXyJ/ua3NcSKVnZzX/HMfQ2n4Tytc9rhWBRoupBGiex7xV QoSi6Yd4XXnFVcV4AyF3mu9NTbZt9Cwdj/duKnoSlYCDBUtBRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIstUN8rs/jUOa30Sxds9TqbjdkzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTYyZGFiODgtMzRlZS0z OGVmLWEyMDItMjdlNWM2Yjk3OTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJoOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoEZM0y/VBnaFGS2KXEhwOMNqBsuQPZQDjOMrFutSTaV60IKSaJZTv5 hpEZW7xnqViepc7PG6q8XV2+/hJKLYKiHGRyGCx4EihAeOSLdChzfeu0r9D2+FS3 i/QKFXI7ZsxDMd6V2XvQC+ahi1TF1lzlEDFdfBX6bXoyoQspF77bIMibLDuGDOyl dRGx2+Z2GUSaILp8T+RQEuNQumZZ92+7WZrHk49M3Bei9myvC0eitJyaG61jOfzU mrwYXnjKyzIYAtFZb9SZptEbUQtYjJJZqAGS9rSTiczKwT+MWptkiWNJy+hJ9pB1 7flLqv658/QEJP3uZoNZEQaglCT3Fbw= -----END CERTIFICATE-----Generated at Sat Oct 11 12:06:04 2025 by rpki-client