$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0e1a9a73-2147-3419-a8ec-cce84633d8a1.roa File: 0e1a9a73-2147-3419-a8ec-cce84633d8a1.roa (raw, json) Hash identifier: G/tz0mFTaCKzT7dxYiir46OVSOABxURiqSVbEYHXxcs= Subject key identifier: 90:A6:D5:47:1C:E8:69:38:1E:53:EF:40:E2:6D:C3:2C:7C:82:CB:64 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B5E774FABF9DA64222492E6C0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0e1a9a73-2147-3419-a8ec-cce84633d8a1.roa Signing time: Tue 30 Sep 2025 18:34:05 +0000 ROA not before: Tue 30 Sep 2025 18:34:05 +0000 ROA not after: Mon 29 Dec 2025 19:34:05 +0000 asID: 0 IP address blocks: 38.110.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5e:77:4f:ab:f9:da:64:22:24:92:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 30 18:34:05 2025 GMT Not After : Dec 29 19:34:05 2025 GMT Subject: CN=4308ce83-3d4a-483a-b8db-8d6d5f7012c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3f:40:ac:f2:72:7f:04:27:78:2b:a4:e8:b7: b5:d4:a1:8d:93:3e:cd:d4:bc:18:0e:a5:1f:0b:77: 1f:5f:f1:98:60:f6:70:8d:4c:0a:c1:26:0b:55:ef: a0:69:67:17:d2:c3:95:c7:ba:24:54:0b:ce:6d:6d: b8:88:a6:90:50:4a:e6:78:79:f1:f8:70:2b:3e:af: 60:3c:c9:41:08:d3:09:c2:2a:78:78:34:52:7e:d9: 2e:84:2d:62:38:4e:9d:0c:d6:63:67:67:06:dc:85: 73:7e:10:38:70:b0:d6:95:31:c3:15:1a:71:87:a8: 86:5e:2e:25:63:ee:f0:f8:17:a3:a2:0b:63:2a:c1: 82:5d:f8:b3:ef:e3:17:1d:63:20:bb:eb:06:ac:75: 99:0f:8f:cf:2c:1e:f6:af:69:40:87:4d:85:b5:42: 35:1d:66:6d:71:c7:51:23:02:fe:1f:aa:36:bf:f6: db:f4:af:f6:bf:0f:c9:52:db:27:45:9d:ac:57:56: 4f:4a:ae:ab:8a:82:b1:a8:40:1a:5e:f3:05:a2:b1: bf:1a:28:42:3b:56:60:b2:c5:a4:cc:de:fc:79:4b: f0:2a:42:c8:3d:c6:0b:d2:aa:35:54:18:31:f2:f0: e9:72:2c:69:06:a9:1d:30:9c:29:af:bf:18:49:76: 27:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A6:D5:47:1C:E8:69:38:1E:53:EF:40:E2:6D:C3:2C:7C:82:CB:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0e1a9a73-2147-3419-a8ec-cce84633d8a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.110.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:28:7b:e0:e4:94:ba:04:06:e3:c1:0e:81:0c:09:d5:0c:6d: 5f:3a:cb:a1:09:d4:cb:cd:ed:88:6b:f1:4d:43:79:29:f0:02: 6c:50:f1:a7:da:75:2a:43:84:e7:3e:d1:66:da:43:0d:f8:5f: 00:fa:98:04:20:eb:cd:f4:cc:a8:48:b7:d1:83:69:6a:ad:0e: 9b:3a:9a:e7:6e:f5:43:be:27:ed:08:eb:e9:51:3e:2c:dc:4f: 9d:3f:98:7d:d8:db:3d:cb:ed:4b:82:44:e0:b0:8a:14:18:39: 0c:33:79:d3:43:07:f8:ed:ba:12:9c:8d:8b:52:5c:d7:42:69: e8:eb:d9:a0:ff:4e:1a:e6:b5:59:a2:89:20:0b:0f:30:fd:eb: 35:55:15:52:3a:3c:15:2c:77:ea:30:ed:45:56:43:c7:82:5e: a9:05:98:36:40:17:a0:1a:98:c7:97:74:e9:5b:b2:e6:91:96: 9a:87:81:70:76:eb:d2:e6:83:3a:e9:cc:15:39:14:8c:19:13: e9:b7:bc:b1:72:53:15:c6:36:a9:ef:11:2a:77:27:49:cf:51: 34:b5:ea:d5:f1:fd:31:79:9e:85:9a:f0:e2:25:5b:4a:61:9b: 3e:6c:13:b5:e9:c3:ae:91:3b:42:1a:58:b0:2b:ed:b8:24:7a: a7:db:0a:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEted0+r+dpkIiSS5sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MDkzMDE4MzQwNVoXDTI1MTIyOTE5MzQwNVowLzEtMCsGA1UEAxMk NDMwOGNlODMtM2Q0YS00ODNhLWI4ZGItOGQ2ZDVmNzAxMmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlz9ArPJyfwQneCuk6Le11KGNkz7N1LwYDqUf C3cfX/GYYPZwjUwKwSYLVe+gaWcX0sOVx7okVAvObW24iKaQUErmeHnx+HArPq9g PMlBCNMJwip4eDRSftkuhC1iOE6dDNZjZ2cG3IVzfhA4cLDWlTHDFRpxh6iGXi4l Y+7w+BejogtjKsGCXfiz7+MXHWMgu+sGrHWZD4/PLB72r2lAh02FtUI1HWZtccdR IwL+H6o2v/bb9K/2vw/JUtsnRZ2sV1ZPSq6rioKxqEAaXvMForG/GihCO1ZgssWk zN78eUvwKkLIPcYL0qo1VBgx8vDpcixpBqkdMJwpr78YSXYnUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCm1Ucc6Gk4HlPvQOJtwyx8gstkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMGUxYTlhNzMtMjE0Ny0z NDE5LWE4ZWMtY2NlODQ2MzNkOGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJm5kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcoe+DklLoEBuPBDoEMCdUMbV86y6EJ1MvN7Yhr8U1DeSnwAmxQ8afa dSpDhOc+0WbaQw34XwD6mAQg6830zKhIt9GDaWqtDps6mudu9UO+J+0I6+lRPizc T50/mH3Y2z3L7UuCROCwihQYOQwzedNDB/jtuhKcjYtSXNdCaejr2aD/ThrmtVmi iSALDzD96zVVFVI6PBUsd+ow7UVWQ8eCXqkFmDZAF6AamMeXdOlbsuaRlpqHgXB2 69LmgzrpzBU5FIwZE+m3vLFyUxXGNqnvESp3J0nPUTS16tXx/TF5noWa8OIlW0ph mz5sE7Xpw66RO0IaWLAr7bgkeqfbCmE= -----END CERTIFICATE-----Generated at Wed Oct 8 13:57:45 2025 by rpki-client