$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f46654c2-fe1b-3e75-b56f-b777180bc583.roa File: f46654c2-fe1b-3e75-b56f-b777180bc583.roa (raw, json) Hash identifier: v27Qhrq4DxEuBBxt803MuhM8abpl/OqPeI+xySf2uY4= Subject key identifier: 98:15:E8:1F:55:D6:53:59:E4:54:6E:32:9F:3B:9F:54:22:E9:C2:47 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B7242BC346AEDF8A949FFF980 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f46654c2-fe1b-3e75-b56f-b777180bc583.roa Signing time: Tue 07 Oct 2025 20:44:19 +0000 ROA not before: Tue 07 Oct 2025 20:44:19 +0000 ROA not after: Mon 05 Jan 2026 21:44:19 +0000 asID: 265525 IP address blocks: 38.19.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:42:bc:34:6a:ed:f8:a9:49:ff:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 7 20:44:19 2025 GMT Not After : Jan 5 21:44:19 2026 GMT Subject: CN=38a0e4c7-df44-4dab-a881-de81b044c4f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:dc:b1:ff:02:1c:57:a7:5f:20:88:df:84:5b: 1f:58:e3:3d:d2:35:0d:bf:1d:5b:2e:47:76:91:5a: ae:db:2d:b0:3d:8a:7d:7b:65:6b:1c:4f:9e:b9:6d: 25:50:29:6d:30:b5:67:15:2a:c4:22:0c:80:5b:a8: 6f:5f:72:49:f9:7f:af:7b:d3:f7:44:b9:8e:39:0d: 97:21:77:4c:f2:e1:36:f2:09:cf:e3:ec:7d:80:17: 03:ad:a3:a5:e9:03:d4:e5:3e:ec:3b:d2:df:25:78: 27:76:0e:9c:f1:44:84:6b:75:eb:7d:07:4a:65:94: ff:f4:96:44:b9:05:4e:65:da:6a:f9:69:7b:6c:0d: 61:e3:df:e8:b5:6c:f0:07:90:ba:3b:44:f3:06:5e: f4:25:23:f2:41:a0:01:96:3d:29:74:e0:81:c7:a0: 5e:fc:a6:bc:ca:3b:72:7e:42:d9:cc:df:ea:28:6c: c9:fd:e1:bc:cb:2c:3a:19:98:a8:3c:aa:90:4c:4f: 19:53:43:bd:24:a4:af:55:9b:08:09:ab:64:8a:0f: 3b:e7:a2:51:96:d8:de:19:af:52:ac:fc:8a:49:da: f8:4f:5b:1e:67:e6:f9:d2:bc:b7:6f:04:c2:9e:e2: a7:e3:9e:48:bf:97:1c:8f:01:d9:78:5c:69:01:35: 36:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:15:E8:1F:55:D6:53:59:E4:54:6E:32:9F:3B:9F:54:22:E9:C2:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f46654c2-fe1b-3e75-b56f-b777180bc583.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.19.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:73:d0:cc:e0:11:68:f3:f3:da:99:f5:2d:71:fc:6d:c7:f6: 51:07:36:a5:63:55:43:56:6e:7a:b2:83:6e:58:f5:28:74:9c: 2b:23:94:f0:de:0e:0a:1d:a2:3a:21:49:21:ac:40:f7:5d:6b: 89:ae:d8:ea:92:aa:26:65:a0:ad:64:e6:af:0c:df:22:54:59: 4b:0b:c4:4f:82:fd:a7:59:ea:4b:6d:9c:74:f5:21:5b:0f:8d: 19:9e:e4:7e:4d:9b:f9:bf:69:6d:06:9c:0c:53:4e:9e:34:05: a1:17:5c:e9:df:84:3a:28:2e:b5:cd:b7:22:e6:e1:48:60:a2: 95:06:80:94:e3:99:d3:67:bb:79:5a:8e:ef:6f:38:90:6e:32: 16:87:43:38:79:9e:d2:db:78:d1:d3:73:61:ce:2b:8f:5c:7a: ae:84:ba:a4:be:c9:10:af:30:5b:df:59:85:d9:87:ab:4e:21: bb:48:94:64:22:52:83:75:65:36:76:49:bf:6f:a0:72:5a:0d: dd:20:56:77:1b:09:4e:90:53:a5:99:a3:87:14:c8:b1:9b:ea: 32:be:87:39:6c:07:cb:b1:e4:e3:65:73:14:32:57:41:6c:90: 88:3f:6b:37:90:21:50:3b:d9:bf:2b:0a:24:6b:81:10:13:ce: c0:90:ee:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtyQrw0au34qUn/+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAwNzIwNDQxOVoXDTI2MDEwNTIxNDQxOVowLzEtMCsGA1UEAxMk MzhhMGU0YzctZGY0NC00ZGFiLWE4ODEtZGU4MWIwNDRjNGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztyx/wIcV6dfIIjfhFsfWOM90jUNvx1bLkd2 kVqu2y2wPYp9e2VrHE+euW0lUCltMLVnFSrEIgyAW6hvX3JJ+X+ve9P3RLmOOQ2X IXdM8uE28gnP4+x9gBcDraOl6QPU5T7sO9LfJXgndg6c8USEa3XrfQdKZZT/9JZE uQVOZdpq+Wl7bA1h49/otWzwB5C6O0TzBl70JSPyQaABlj0pdOCBx6Be/Ka8yjty fkLZzN/qKGzJ/eG8yyw6GZioPKqQTE8ZU0O9JKSvVZsICatkig8756JRltjeGa9S rPyKSdr4T1seZ+b50ry3bwTCnuKn455Iv5ccjwHZeFxpATU2ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgV6B9V1lNZ5FRuMp87n1Qi6cJHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZjQ2NjU0YzItZmUxYi0z ZTc1LWI1NmYtYjc3NzE4MGJjNTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJhMjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtz0MzgEWjz89qZ9S1x/G3H9lEHNqVjVUNWbnqyg25Y9Sh0nCsjlPDe DgodojohSSGsQPdda4mu2OqSqiZloK1k5q8M3yJUWUsLxE+C/adZ6kttnHT1IVsP jRme5H5Nm/m/aW0GnAxTTp40BaEXXOnfhDooLrXNtyLm4UhgopUGgJTjmdNnu3la ju9vOJBuMhaHQzh5ntLbeNHTc2HOK49ceq6EuqS+yRCvMFvfWYXZh6tOIbtIlGQi UoN1ZTZ2Sb9voHJaDd0gVncbCU6QU6WZo4cUyLGb6jK+hzlsB8ux5ONlcxQyV0Fs kIg/azeQIVA72b8rCiRrgRATzsCQ7ms= -----END CERTIFICATE-----Generated at Sat Oct 11 12:08:47 2025 by rpki-client