$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/28dbfec1-5bae-39c8-89eb-a0441ff98f32.roa File: 28dbfec1-5bae-39c8-89eb-a0441ff98f32.roa (raw, json) Hash identifier: jXvFJU3i918J+1QmNhfN40YnH5EhUESA5q+Lz3+2OmM= Subject key identifier: CA:EA:1C:A3:1F:F0:7F:5B:E7:D0:A7:83:01:94:A2:93:92:A6:77:1B Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B9ED19BED7A97B299B51E2800 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/28dbfec1-5bae-39c8-89eb-a0441ff98f32.roa Signing time: Thu 23 Oct 2025 19:47:45 +0000 ROA not before: Thu 23 Oct 2025 19:47:45 +0000 ROA not after: Wed 21 Jan 2026 20:47:45 +0000 asID: 35197 IP address blocks: 38.51.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:d1:9b:ed:7a:97:b2:99:b5:1e:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 23 19:47:45 2025 GMT Not After : Jan 21 20:47:45 2026 GMT Subject: CN=728a1e92-de48-4e5c-921a-9e7dd7320ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:86:5e:36:aa:05:07:2b:fe:41:38:b0:3d:2e: b7:ea:f3:78:79:8a:c5:d0:ed:a3:8e:14:d9:db:c5: 70:af:6a:93:6e:f9:4a:8d:91:f6:56:8d:d2:d5:d0: 37:eb:32:c8:15:65:07:ee:6d:e9:00:1f:60:0b:4b: 3e:d3:4d:5e:d2:0e:db:37:89:93:8c:72:ab:72:e0: 05:08:5d:08:7d:41:44:b7:09:fd:59:56:0b:a2:08: 87:f2:05:fb:22:13:5f:2f:b3:f7:07:8b:cf:2c:8d: c8:4e:49:20:8d:cc:67:c4:6c:62:ee:e0:39:a1:8a: ee:c7:60:0c:37:5f:e5:fe:38:bd:c6:bf:cb:b8:5d: 13:28:3d:3e:ed:dc:a8:9d:c9:e3:8c:3c:2c:c1:e7: e9:c0:f7:02:5e:8d:1b:e8:3c:bd:c8:07:e8:64:7e: 21:9e:e4:8b:ba:c8:5c:5a:ba:ae:36:9f:09:8c:aa: 80:31:34:45:ac:88:bb:58:26:a4:c9:ea:85:dc:24: c7:a9:99:c5:c5:19:6d:0e:c8:f3:c6:92:e6:a4:f4: 3c:2a:97:5c:0a:1d:22:6f:51:68:48:44:a9:de:2a: dc:9a:74:54:4c:af:8e:97:be:8a:b8:1e:77:cc:cb: 25:97:f6:e1:2a:e8:16:7d:89:b0:e4:6e:ee:42:fb: a7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EA:1C:A3:1F:F0:7F:5B:E7:D0:A7:83:01:94:A2:93:92:A6:77:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/28dbfec1-5bae-39c8-89eb-a0441ff98f32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.51.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:22:46:13:fa:8b:00:e5:1d:a8:17:25:a5:28:ac:00:8d:22: 49:f0:3f:09:2e:69:73:88:05:29:48:35:2c:16:71:8a:06:d9: 9e:fc:f7:72:2f:a1:2b:ee:5e:82:74:15:93:24:03:fb:99:b3: cb:82:28:ae:1d:a9:1e:19:24:7e:d7:4d:c1:8b:8e:06:4d:16: e9:42:e2:65:14:8a:6b:dd:93:13:13:5c:41:f6:39:47:2c:47: c9:a2:c2:b9:69:92:14:29:3f:13:fc:61:a1:4a:36:ca:ab:29: 7c:ef:6e:3a:cb:6d:e8:3b:fb:c2:fb:47:76:7a:bd:5c:5c:64: 2d:e2:5b:04:1a:99:35:71:1b:f4:03:59:aa:83:e3:7d:b7:4e: e3:d0:d1:1c:d3:e0:2e:4b:73:bf:78:f7:de:16:f8:b9:09:a3: cb:1c:d5:34:52:7f:29:a5:46:79:6d:4b:45:c6:88:a0:5b:3f: 19:b9:02:40:85:33:e6:86:08:1f:06:9d:28:96:38:fc:8b:21: a2:bb:53:a8:09:23:95:08:5d:bd:7c:45:c3:45:e7:4d:e3:6e: 15:b5:b3:4d:10:d2:dc:96:2a:b5:90:c5:ac:d5:5b:b9:b5:93: a3:21:86:a3:f6:32:ad:24:35:0f:3c:63:5b:3a:e9:2e:01:28: 1b:71:4d:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEue0ZvtepeymbUeKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAyMzE5NDc0NVoXDTI2MDEyMTIwNDc0NVowLzEtMCsGA1UEAxMk NzI4YTFlOTItZGU0OC00ZTVjLTkyMWEtOWU3ZGQ3MzIwYWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYZeNqoFByv+QTiwPS636vN4eYrF0O2jjhTZ 28Vwr2qTbvlKjZH2Vo3S1dA36zLIFWUH7m3pAB9gC0s+001e0g7bN4mTjHKrcuAF CF0IfUFEtwn9WVYLogiH8gX7IhNfL7P3B4vPLI3ITkkgjcxnxGxi7uA5oYrux2AM N1/l/ji9xr/LuF0TKD0+7dyoncnjjDwswefpwPcCXo0b6Dy9yAfoZH4hnuSLushc WrquNp8JjKqAMTRFrIi7WCakyeqF3CTHqZnFxRltDsjzxpLmpPQ8KpdcCh0ib1Fo SESp3ircmnRUTK+Ol76KuB53zMsll/bhKugWfYmw5G7uQvunAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrqHKMf8H9b59CngwGUopOSpncbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMjhkYmZlYzEtNWJhZS0z OWM4LTg5ZWItYTA0NDFmZjk4ZjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJjMzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM0iRhP6iwDlHagXJaUorACNIknwPwkuaXOIBSlINSwWcYoG2Z7893Iv oSvuXoJ0FZMkA/uZs8uCKK4dqR4ZJH7XTcGLjgZNFulC4mUUimvdkxMTXEH2OUcs R8miwrlpkhQpPxP8YaFKNsqrKXzvbjrLbeg7+8L7R3Z6vVxcZC3iWwQamTVxG/QD WaqD4323TuPQ0RzT4C5Lc794994W+LkJo8sc1TRSfymlRnltS0XGiKBbPxm5AkCF M+aGCB8GnSiWOPyLIaK7U6gJI5UIXb18RcNF503jbhW1s00Q0tyWKrWQxazVW7m1 k6MhhqP2Mq0kNQ88Y1s66S4BKBtxTUo= -----END CERTIFICATE-----Generated at Mon Oct 27 14:39:15 2025 by rpki-client