$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/feec88dc-b30d-3bab-8b1a-9442dbe233cb.roa File: feec88dc-b30d-3bab-8b1a-9442dbe233cb.roa (raw, json) Hash identifier: sgQEW7o463LBvEXydEXkleLwbsRre/KNfRsQSm8TB7o= Subject key identifier: A7:FC:09:E7:0D:BF:FA:72:EF:52:4C:1D:48:93:96:3D:23:4D:D1:EE Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B7A0D22DD352840DC2B6F2B90 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/feec88dc-b30d-3bab-8b1a-9442dbe233cb.roa Signing time: Fri 10 Oct 2025 15:42:47 +0000 ROA not before: Fri 10 Oct 2025 15:42:47 +0000 ROA not after: Thu 08 Jan 2026 16:42:47 +0000 asID: 270217 IP address blocks: 38.137.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0d:22:dd:35:28:40:dc:2b:6f:2b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 10 15:42:47 2025 GMT Not After : Jan 8 16:42:47 2026 GMT Subject: CN=667eb5a7-719d-45af-832e-2ca0344b6eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3e:37:d2:50:41:ad:62:a6:d4:5e:78:22:1e: f4:93:3b:de:c3:c8:0f:e3:fd:7f:14:5d:e1:a9:4f: 2c:43:d7:46:23:83:98:3d:d5:f5:85:b2:65:c7:d0: 2c:b9:36:b7:8c:54:60:6c:8a:45:21:ef:69:cd:73: 31:69:c7:ef:6d:2e:75:1a:74:e1:38:80:cb:d5:58: 4f:87:7a:6a:98:34:f3:29:4f:6c:7c:14:67:37:1a: d3:0a:62:41:00:0e:8a:b3:82:61:f5:19:34:40:dd: e1:e6:59:90:cd:07:a7:bf:39:f7:ef:f4:0c:e1:48: eb:96:1f:50:dd:3f:de:05:b3:52:75:a6:1b:2e:11: f6:bf:48:3f:fb:44:95:f0:d1:d6:fd:18:8a:53:63: da:28:2a:a8:99:2c:94:e3:75:cc:0f:4c:5c:2a:22: 7c:56:57:df:0e:75:c4:57:9f:2d:2f:1e:eb:d5:38: 2d:94:77:6a:a1:67:d1:db:18:12:be:1a:09:8a:7f: 4b:48:f2:71:8f:1b:b3:60:43:eb:64:9f:b3:23:14: b4:7e:b7:a4:51:0e:d0:6f:ab:55:11:82:1f:21:32: 1c:14:5f:f7:29:f2:51:47:23:20:be:2e:7b:23:5a: 70:2a:46:c7:08:ad:0e:d5:8f:85:bc:c1:9e:3e:71: ce:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FC:09:E7:0D:BF:FA:72:EF:52:4C:1D:48:93:96:3D:23:4D:D1:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/feec88dc-b30d-3bab-8b1a-9442dbe233cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.137.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:ac:9b:d0:08:d5:0a:9d:06:82:0a:bb:26:fd:3e:5f:7f:d0: a4:8a:44:96:0f:1b:50:03:fc:57:66:9f:3f:ae:76:84:c6:7e: 4b:76:52:32:e9:7c:5b:34:3c:5c:cd:33:fb:dd:67:cc:34:ed: df:42:0d:3e:a2:be:3c:9d:43:f7:4b:c8:27:21:9e:3b:42:eb: 53:e7:b8:92:25:e6:89:6b:c9:f7:6b:39:e9:5a:4b:bd:91:54: 26:86:b4:e5:f3:15:94:7d:3d:9a:0e:57:5e:a8:f8:d5:ed:a5: 67:1a:be:19:c6:84:8d:6d:de:b3:20:c0:9e:be:16:8b:55:b3: 19:4d:3c:93:e5:22:8a:cc:ef:ce:e6:ab:fa:23:bb:2d:57:67: f3:c1:5a:67:25:3d:9d:01:db:18:f2:bc:38:6e:28:e2:2f:8d: cb:6f:45:a2:87:3d:f0:42:46:6e:9f:69:0b:ee:e3:f9:7e:e9: b3:82:c7:30:9a:85:7d:83:ed:18:cf:63:07:86:2e:2c:68:5e: dd:b9:c3:71:e8:f2:f6:05:4d:96:91:5c:f1:82:cd:90:be:8b: ad:5a:1f:1d:d8:9c:c6:9b:ee:d1:b0:84:31:a1:f5:33:96:75: 3a:bf:5f:19:1e:02:97:b8:f3:e4:a6:79:90:22:ee:5f:c8:c7: 7d:1a:67:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DSLdNShA3CtvK5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAxMDE1NDI0N1oXDTI2MDEwODE2NDI0N1owLzEtMCsGA1UEAxMk NjY3ZWI1YTctNzE5ZC00NWFmLTgzMmUtMmNhMDM0NGI2ZWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz430lBBrWKm1F54Ih70kzvew8gP4/1/FF3h qU8sQ9dGI4OYPdX1hbJlx9AsuTa3jFRgbIpFIe9pzXMxacfvbS51GnThOIDL1VhP h3pqmDTzKU9sfBRnNxrTCmJBAA6Ks4Jh9Rk0QN3h5lmQzQenvzn37/QM4Ujrlh9Q 3T/eBbNSdaYbLhH2v0g/+0SV8NHW/RiKU2PaKCqomSyU43XMD0xcKiJ8VlffDnXE V58tLx7r1TgtlHdqoWfR2xgSvhoJin9LSPJxjxuzYEPrZJ+zIxS0frekUQ7Qb6tV EYIfITIcFF/3KfJRRyMgvi57I1pwKkbHCK0O1Y+FvMGePnHO0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKf8CecNv/py71JMHUiTlj0jTdHuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZmVlYzg4ZGMtYjMwZC0z YmFiLThiMWEtOTQ0MmRiZTIzM2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJon8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWsm9AI1QqdBoIKuyb9Pl9/0KSKRJYPG1AD/Fdmnz+udoTGfkt2UjLp fFs0PFzNM/vdZ8w07d9CDT6ivjydQ/dLyCchnjtC61PnuJIl5olryfdrOelaS72R VCaGtOXzFZR9PZoOV16o+NXtpWcavhnGhI1t3rMgwJ6+FotVsxlNPJPlIorM787m q/ojuy1XZ/PBWmclPZ0B2xjyvDhuKOIvjctvRaKHPfBCRm6faQvu4/l+6bOCxzCa hX2D7RjPYweGLixoXt25w3Ho8vYFTZaRXPGCzZC+i61aHx3YnMab7tGwhDGh9TOW dTq/XxkeApe48+SmeZAi7l/Ix30aZ9g= -----END CERTIFICATE-----Generated at Sat Oct 11 12:08:16 2025 by rpki-client