$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f2acb605-3e4a-30bc-84be-7946d9a66a0a.roa File: f2acb605-3e4a-30bc-84be-7946d9a66a0a.roa (raw, json) Hash identifier: 0PK4m9aIdF25CRh9Nn+IKSgap2h2Dj5+l0necXH3Rf8= Subject key identifier: 8D:49:14:C7:2F:8B:92:BF:49:97:1F:0B:AF:09:08:A0:55:7A:D8:FD Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B71968825F8AEAFBC4CE690C0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f2acb605-3e4a-30bc-84be-7946d9a66a0a.roa Signing time: Tue 07 Oct 2025 14:57:21 +0000 ROA not before: Tue 07 Oct 2025 14:57:21 +0000 ROA not after: Mon 05 Jan 2026 15:57:21 +0000 asID: 28459 IP address blocks: 38.226.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:96:88:25:f8:ae:af:bc:4c:e6:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 7 14:57:21 2025 GMT Not After : Jan 5 15:57:21 2026 GMT Subject: CN=3507015f-da5c-4990-929b-138fa1b56d5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:af:e5:1d:ef:77:a0:b7:9a:3e:ae:c8:bb:46: e6:04:c5:ff:1d:e2:02:50:87:52:a6:33:77:31:27: 14:47:27:45:47:3a:8c:81:77:04:fe:6e:29:8e:74: 9e:e5:1b:19:3a:b6:5b:10:f8:c9:4d:f5:9a:2d:21: 03:65:00:3a:3a:77:81:81:29:ea:85:3b:f4:76:b9: cb:76:24:dd:2a:b6:3c:29:07:e5:ad:64:46:17:8f: fe:87:f1:ab:9f:42:2f:b3:47:de:ef:fd:1f:95:ed: f9:ee:bf:18:f2:76:39:e1:af:91:c6:ef:d8:9e:b1: 91:d7:9d:bb:30:b2:f8:8d:ff:0d:37:1e:9f:45:1c: 0a:45:9a:63:cf:ab:fd:94:93:9a:ba:ce:6d:46:3a: 53:fc:55:f6:0d:6f:d4:5b:59:50:e7:df:8a:ce:68: 86:f0:34:91:db:3b:91:8b:eb:11:63:47:93:40:6d: 09:fa:be:4b:26:e1:b6:4e:ab:07:cf:cf:83:0f:12: 79:78:47:39:57:8e:15:2c:3c:f6:05:1b:dc:00:e6: 39:c4:56:a2:e8:48:ea:d1:83:2d:36:00:21:19:74: 8c:48:94:33:b8:84:00:20:60:06:d9:a6:d0:11:05: 9d:f4:ff:a3:98:ad:8f:57:99:4f:2c:b3:a9:15:c6: 45:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:49:14:C7:2F:8B:92:BF:49:97:1F:0B:AF:09:08:A0:55:7A:D8:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f2acb605-3e4a-30bc-84be-7946d9a66a0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.226.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:96:e7:f2:a0:36:76:50:c9:58:3d:dc:1f:77:ed:ce:fb:64: 61:b0:9b:67:0f:7f:3f:ea:39:b4:4a:d1:96:26:74:ba:f6:55: 96:9d:55:48:ad:1f:37:55:fa:3e:32:9c:db:2a:e9:fb:93:a0: 31:c7:94:8f:d1:06:7e:0e:70:9f:3b:00:fb:38:47:11:6d:fb: e6:57:21:82:6d:3a:63:e3:00:f3:e8:df:4c:c0:61:d9:ed:da: 15:6e:dc:b0:84:67:2e:ef:e6:6a:89:8e:43:d8:de:d4:1f:65: fd:fa:81:45:44:a9:d3:b5:34:1b:a5:ff:da:ea:96:cb:29:ff: 14:66:33:01:4e:6e:fc:82:11:00:63:83:e6:61:f0:1e:36:3e: 40:44:ce:cd:f6:11:c8:d7:87:7b:16:d7:25:e8:62:c4:23:d7: af:a4:f2:d6:1a:90:39:8e:46:30:b7:7d:a8:7d:06:59:8f:2c: 61:86:17:ae:68:cb:25:11:02:36:45:63:94:e8:f9:10:95:ea: 27:bc:91:35:79:87:14:0c:17:7d:d4:f8:2f:af:5c:41:44:fe: b3:fe:ba:05:08:dd:c3:6e:5d:93:81:ba:44:5b:63:bb:50:82: 45:f4:02:3d:b2:a1:c4:b7:c4:e6:ab:6d:02:7f:7c:a0:f9:25: c0:79:e1:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxlogl+K6vvEzmkMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAwNzE0NTcyMVoXDTI2MDEwNTE1NTcyMVowLzEtMCsGA1UEAxMk MzUwNzAxNWYtZGE1Yy00OTkwLTkyOWItMTM4ZmExYjU2ZDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6/lHe93oLeaPq7Iu0bmBMX/HeICUIdSpjN3 MScURydFRzqMgXcE/m4pjnSe5RsZOrZbEPjJTfWaLSEDZQA6OneBgSnqhTv0drnL diTdKrY8KQflrWRGF4/+h/Grn0Ivs0fe7/0fle357r8Y8nY54a+Rxu/YnrGR1527 MLL4jf8NNx6fRRwKRZpjz6v9lJOaus5tRjpT/FX2DW/UW1lQ59+KzmiG8DSR2zuR i+sRY0eTQG0J+r5LJuG2TqsHz8+DDxJ5eEc5V44VLDz2BRvcAOY5xFai6Ejq0YMt NgAhGXSMSJQzuIQAIGAG2abQEQWd9P+jmK2PV5lPLLOpFcZFNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1JFMcvi5K/SZcfC68JCKBVetj9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZjJhY2I2MDUtM2U0YS0z MGJjLTg0YmUtNzk0NmQ5YTY2YTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJuIVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWW5/KgNnZQyVg93B937c77ZGGwm2cPfz/qObRK0ZYmdLr2VZadVUit HzdV+j4ynNsq6fuToDHHlI/RBn4OcJ87APs4RxFt++ZXIYJtOmPjAPPo30zAYdnt 2hVu3LCEZy7v5mqJjkPY3tQfZf36gUVEqdO1NBul/9rqlssp/xRmMwFObvyCEQBj g+Zh8B42PkBEzs32EcjXh3sW1yXoYsQj16+k8tYakDmORjC3fah9BlmPLGGGF65o yyURAjZFY5To+RCV6ie8kTV5hxQMF33U+C+vXEFE/rP+ugUI3cNuXZOBukRbY7tQ gkX0Aj2yocS3xOarbQJ/fKD5JcB54W8= -----END CERTIFICATE-----Generated at Sat Oct 11 12:08:19 2025 by rpki-client