$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/aeb01ad0-7467-376d-b5e9-c0001602e030.roa File: aeb01ad0-7467-376d-b5e9-c0001602e030.roa (raw, json) Hash identifier: 5X9DB4zK/MWxhc6UnTTHdRm5VILlnCqTrorBE6DJUeI= Subject key identifier: 6D:C8:C2:22:4F:16:BE:A0:8B:1F:51:8C:78:88:C5:E1:83:21:2F:50 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B5DFD181CDCAB76C8FF84ECE0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/aeb01ad0-7467-376d-b5e9-c0001602e030.roa Signing time: Tue 30 Sep 2025 14:27:50 +0000 ROA not before: Tue 30 Sep 2025 14:27:50 +0000 ROA not after: Mon 29 Dec 2025 15:27:50 +0000 asID: 273120 IP address blocks: 38.188.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:fd:18:1c:dc:ab:76:c8:ff:84:ec:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 30 14:27:50 2025 GMT Not After : Dec 29 15:27:50 2025 GMT Subject: CN=575bf442-bf5b-4b97-95a7-53eab11bedcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f3:06:8a:30:14:bd:9f:73:ce:24:ac:bc:7c: 89:17:e4:f0:80:78:8e:b9:94:cf:a6:1d:b3:3f:5f: 28:e2:e0:53:42:09:d8:03:8c:22:d1:b6:60:a6:97: 1f:10:e1:de:73:7c:98:5e:63:ab:2c:94:9a:83:b1: 3b:44:41:67:5d:0a:e9:e0:c4:d9:ad:cd:6f:b1:fb: f1:76:17:8d:8a:9e:24:c4:e0:1c:c1:8f:f8:34:6b: 51:5c:30:be:19:a4:7c:ae:cf:ce:52:dd:90:61:59: 56:1e:70:3d:1d:f2:c9:ae:ad:99:7e:e9:08:0b:19: fc:3d:5f:c9:e7:18:de:50:37:7f:85:6c:4a:d5:4e: 5d:1d:ce:80:13:df:6b:94:6d:74:e1:1a:df:70:29: 95:cd:57:ad:e1:85:10:07:78:3f:7d:1d:81:ca:17: be:6d:64:04:b5:27:34:af:54:d5:c5:01:46:63:dd: a0:6d:55:88:7e:b8:95:f4:b8:54:48:da:12:1f:b0: 03:fb:81:41:c7:b9:c5:a6:10:6d:e1:60:68:b6:13: 79:f0:87:f0:36:db:a7:ed:97:93:81:dd:bc:10:6e: 1a:35:52:0d:a2:95:fa:e7:82:3a:a7:40:3e:51:70: 89:a7:42:da:90:02:89:88:d5:a2:83:88:55:11:27: 2a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C8:C2:22:4F:16:BE:A0:8B:1F:51:8C:78:88:C5:E1:83:21:2F:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/aeb01ad0-7467-376d-b5e9-c0001602e030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.188.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:2f:32:02:04:82:a7:e7:56:09:c9:5c:b5:2c:27:52:51:af: bb:74:d0:40:d8:97:8d:61:87:62:fa:1e:53:97:74:23:0d:e5: bc:7a:d7:ff:f7:42:d2:9b:75:db:4e:b1:81:b8:eb:9d:45:0f: 87:8f:37:6b:40:85:f2:d2:25:0b:69:19:f5:03:16:d3:f0:e3: 11:b4:66:57:7b:8a:0f:c9:6b:78:a9:39:4a:a9:1c:da:1a:07: 66:4d:61:76:59:2d:34:19:e0:e2:fd:35:10:5c:e7:df:69:0a: ed:1d:da:e0:7c:cc:90:54:50:4a:7d:f7:d6:80:0c:b1:3d:70: e3:bb:49:b4:8c:e7:24:81:d8:5a:06:b8:5c:f8:cf:76:c1:ca: aa:82:70:2a:c9:50:ca:98:1b:59:b4:de:55:f7:45:04:40:4e: 5c:83:2d:2a:01:59:9b:ef:f2:cc:1d:56:d1:30:90:a2:a0:7f: fd:7a:a7:39:62:2f:50:5d:cd:92:20:fe:6b:7c:64:22:b1:4c: cb:4f:6a:5c:a6:aa:00:9f:e4:73:9d:f2:14:f9:a1:4e:6c:e6: 79:23:fa:1e:88:c7:e3:9e:de:9f:bc:06:f6:9a:af:22:5f:57: 6e:9c:3b:50:46:d4:d5:17:a6:68:0f:4c:f3:da:ef:59:c3:2e: 5f:9c:67:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd/Rgc3Kt2yP+E7OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MDkzMDE0Mjc1MFoXDTI1MTIyOTE1Mjc1MFowLzEtMCsGA1UEAxMk NTc1YmY0NDItYmY1Yi00Yjk3LTk1YTctNTNlYWIxMWJlZGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/MGijAUvZ9zziSsvHyJF+TwgHiOuZTPph2z P18o4uBTQgnYA4wi0bZgppcfEOHec3yYXmOrLJSag7E7REFnXQrp4MTZrc1vsfvx dheNip4kxOAcwY/4NGtRXDC+GaR8rs/OUt2QYVlWHnA9HfLJrq2ZfukICxn8PV/J 5xjeUDd/hWxK1U5dHc6AE99rlG104RrfcCmVzVet4YUQB3g/fR2Byhe+bWQEtSc0 r1TVxQFGY92gbVWIfriV9LhUSNoSH7AD+4FBx7nFphBt4WBothN58IfwNtun7ZeT gd28EG4aNVINopX654I6p0A+UXCJp0LakAKJiNWig4hVEScqiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3IwiJPFr6gix9RjHiIxeGDIS9QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYWViMDFhZDAtNzQ2Ny0z NzZkLWI1ZTktYzAwMDE2MDJlMDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJryyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQvMgIEgqfnVgnJXLUsJ1JRr7t00EDYl41hh2L6HlOXdCMN5bx61//3 QtKbddtOsYG4651FD4ePN2tAhfLSJQtpGfUDFtPw4xG0Zld7ig/Ja3ipOUqpHNoa B2ZNYXZZLTQZ4OL9NRBc599pCu0d2uB8zJBUUEp999aADLE9cOO7SbSM5ySB2FoG uFz4z3bByqqCcCrJUMqYG1m03lX3RQRATlyDLSoBWZvv8swdVtEwkKKgf/16pzli L1BdzZIg/mt8ZCKxTMtPalymqgCf5HOd8hT5oU5s5nkj+h6Ix+Oe3p+8BvaaryJf V26cO1BG1NUXpmgPTPPa71nDLl+cZ/4= -----END CERTIFICATE-----Generated at Sat Oct 11 12:05:58 2025 by rpki-client