$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b4f3fddd-89eb-3aa3-a38a-265de2dd4143.roa File: b4f3fddd-89eb-3aa3-a38a-265de2dd4143.roa (raw, json) Hash identifier: vRPtK6nMuWFSEv9sMysXydGNfoOZ5oxDCpO22/DMEGE= Subject key identifier: A3:DD:F3:8C:4C:74:61:46:8F:0C:EF:DE:99:6C:BF:4A:AF:E7:05:EA Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B9E4ED3F50929611AE8F46F00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b4f3fddd-89eb-3aa3-a38a-265de2dd4143.roa Signing time: Thu 23 Oct 2025 15:24:15 +0000 ROA not before: Thu 23 Oct 2025 15:24:15 +0000 ROA not after: Wed 21 Jan 2026 16:24:15 +0000 asID: 269832 IP address blocks: 38.156.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:4e:d3:f5:09:29:61:1a:e8:f4:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 23 15:24:15 2025 GMT Not After : Jan 21 16:24:15 2026 GMT Subject: CN=4d44df4c-9259-48ff-8fb3-d8e0f6988000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e0:01:de:ca:e5:8a:dd:a2:46:46:4a:e9:48: 9b:4a:71:0a:4a:7b:0f:19:cf:c9:a0:d5:42:86:f5: 6d:2c:3e:70:9a:c7:4d:49:5a:41:2d:8b:07:56:ad: 3c:d8:90:7a:f0:62:2f:ee:4c:ea:53:a8:98:68:12: d0:b3:e2:78:98:2e:df:2a:b0:45:2c:87:d3:a3:30: 56:47:db:66:b3:85:f6:23:9f:84:4c:4d:b8:9a:69: 4c:4f:c2:c4:8e:55:57:b0:c2:ef:7f:cb:43:fc:88: b3:2c:c2:93:40:69:9b:72:e7:c2:8b:83:11:74:89: 73:e3:3c:1c:d9:91:af:b0:06:64:a2:79:42:c2:7d: 4f:dc:84:6d:50:62:f8:37:b5:60:9f:2d:cb:8a:a4: e6:8b:e8:ce:d9:d9:5c:dc:2b:62:09:6e:b7:75:b5: 89:de:2f:28:4b:a8:b0:30:9f:4f:b2:e3:54:9e:1f: fe:e9:f8:33:f4:75:d0:08:4a:54:a4:52:ca:83:c0: f1:b5:25:bc:b6:52:d9:ce:c4:6e:d9:44:cf:69:e9: 6c:5f:7a:c0:22:a0:3b:bf:02:be:f2:3b:b2:28:13: 75:af:0f:5d:eb:19:5c:82:eb:c2:d6:4d:d6:07:63: 7d:8b:9a:87:41:61:50:c6:cb:88:65:1f:0d:09:66: 28:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:DD:F3:8C:4C:74:61:46:8F:0C:EF:DE:99:6C:BF:4A:AF:E7:05:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b4f3fddd-89eb-3aa3-a38a-265de2dd4143.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.156.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:c8:bb:97:a4:ef:12:ec:cf:53:48:17:ba:f1:5a:dc:c1:59: 00:05:2c:f7:f5:19:99:a8:5e:1a:ae:8b:46:98:85:8d:d6:e8: d4:d4:f5:90:01:45:d6:76:13:ac:98:03:c4:53:b7:b7:01:4c: a9:5a:59:1e:f4:e0:e0:43:52:89:a2:06:a9:3b:77:56:6a:af: d5:cb:35:1d:5f:c9:88:e7:f8:35:88:f8:42:4f:84:5e:43:f5: a5:1f:ad:f7:15:df:22:68:97:de:1a:35:42:42:6f:c0:19:b5: 90:e9:a8:e6:b9:0a:98:95:0f:8a:79:6c:30:ee:e2:99:01:a5: 92:16:fb:50:c5:99:f1:82:3d:42:94:ff:89:27:ac:78:f7:21: 46:57:c0:9b:de:b1:9a:7d:c4:9c:38:83:a7:32:49:51:ca:74: 3d:4c:3f:55:df:6e:f5:0a:cf:48:22:a8:6b:2c:bc:b5:ce:bb: db:d6:b0:60:76:b0:bf:24:d4:b7:29:b9:b4:39:2d:cc:86:f2: 91:de:69:47:31:bf:57:01:8d:97:91:fd:17:0d:fa:d0:c4:05: a4:b0:b7:23:10:a4:c6:8b:51:a6:65:46:27:40:fa:f7:90:93: ef:9e:32:df:89:73:25:da:6a:4c:fb:bb:4b:a4:5b:11:54:10: f3:74:d4:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueTtP1CSlhGuj0bwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAyMzE1MjQxNVoXDTI2MDEyMTE2MjQxNVowLzEtMCsGA1UEAxMk NGQ0NGRmNGMtOTI1OS00OGZmLThmYjMtZDhlMGY2OTg4MDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+AB3srlit2iRkZK6UibSnEKSnsPGc/JoNVC hvVtLD5wmsdNSVpBLYsHVq082JB68GIv7kzqU6iYaBLQs+J4mC7fKrBFLIfTozBW R9tms4X2I5+ETE24mmlMT8LEjlVXsMLvf8tD/IizLMKTQGmbcufCi4MRdIlz4zwc 2ZGvsAZkonlCwn1P3IRtUGL4N7Vgny3LiqTmi+jO2dlc3CtiCW63dbWJ3i8oS6iw MJ9PsuNUnh/+6fgz9HXQCEpUpFLKg8DxtSW8tlLZzsRu2UTPaelsX3rAIqA7vwK+ 8juyKBN1rw9d6xlcguvC1k3WB2N9i5qHQWFQxsuIZR8NCWYoBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPd84xMdGFGjwzv3plsv0qv5wXqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYjRmM2ZkZGQtODllYi0z YWEzLWEzOGEtMjY1ZGUyZGQ0MTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJpwTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMHIu5ek7xLsz1NIF7rxWtzBWQAFLPf1GZmoXhqui0aYhY3W6NTU9ZAB RdZ2E6yYA8RTt7cBTKlaWR704OBDUomiBqk7d1Zqr9XLNR1fyYjn+DWI+EJPhF5D 9aUfrfcV3yJol94aNUJCb8AZtZDpqOa5CpiVD4p5bDDu4pkBpZIW+1DFmfGCPUKU /4knrHj3IUZXwJvesZp9xJw4g6cySVHKdD1MP1XfbvUKz0giqGssvLXOu9vWsGB2 sL8k1LcpubQ5LcyG8pHeaUcxv1cBjZeR/RcN+tDEBaSwtyMQpMaLUaZlRidA+veQ k++eMt+JcyXaakz7u0ukWxFUEPN01CI= -----END CERTIFICATE-----Generated at Sat Nov 1 20:00:01 2025 by rpki-client