$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3ba769d8-da2e-3f9d-9338-c5230bf9f571.roa File: 3ba769d8-da2e-3f9d-9338-c5230bf9f571.roa (raw, json) Hash identifier: 2TOyd4tdcb1kVlMlo3q5SMr1bXisg3V2AiMzPv/nf2g= Subject key identifier: FB:3B:83:E2:03:F1:C3:27:78:FC:65:AD:B5:9A:FF:45:EB:48:C9:8E Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B85013023C26C00657E944740 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3ba769d8-da2e-3f9d-9338-c5230bf9f571.roa Signing time: Tue 14 Oct 2025 13:52:36 +0000 ROA not before: Tue 14 Oct 2025 13:52:36 +0000 ROA not after: Mon 12 Jan 2026 14:52:36 +0000 asID: 211908 IP address blocks: 38.3.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:01:30:23:c2:6c:00:65:7e:94:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 14 13:52:36 2025 GMT Not After : Jan 12 14:52:36 2026 GMT Subject: CN=d5694d31-ce00-4708-99a2-de513d5d535f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f1:26:20:8b:0f:a6:69:09:f4:2d:b0:17:b6: f6:c7:e8:c8:c0:c9:fa:21:71:00:48:c2:d0:4a:de: b2:d7:98:66:fa:9c:2d:20:57:a2:2e:f3:aa:22:a3: 7e:dc:cf:f3:08:a2:00:a4:0b:26:59:c1:83:cc:e9: ae:22:53:5b:13:5a:82:73:9d:7d:2e:f4:dd:9d:2d: d4:20:69:36:97:c1:20:92:a3:04:b3:f9:07:e8:24: 56:5c:b3:d8:1a:fe:cc:aa:7c:a4:05:e3:34:0d:d5: 15:9b:e4:5c:81:c9:b6:5a:57:92:dc:1d:d7:ec:36: 7a:6e:18:ad:5f:75:d7:f9:d5:fa:18:1a:49:cf:8f: c9:3f:02:fb:39:77:99:0d:c0:54:48:02:ef:51:f1: 29:fe:7e:b6:09:2e:14:fb:9b:e9:06:15:de:7d:ec: 26:4e:ef:1a:a2:46:10:ac:ca:cf:6b:7f:27:21:74: 98:5d:f0:6b:fd:b6:82:27:aa:b1:8d:bf:59:3e:ea: 53:37:17:c0:a3:17:64:01:00:0f:41:27:85:0b:57: a0:01:bf:0b:51:3d:5b:9d:42:4f:f3:35:d9:71:2c: e7:01:41:f3:e8:03:a0:00:d6:26:8f:9c:84:22:2f: b2:4b:7a:e1:cb:42:c6:20:fc:60:88:97:d3:fa:8a: 06:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3B:83:E2:03:F1:C3:27:78:FC:65:AD:B5:9A:FF:45:EB:48:C9:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3ba769d8-da2e-3f9d-9338-c5230bf9f571.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.3.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:69:17:63:db:1e:54:e2:0e:29:8f:6f:1c:65:a7:f3:cb:7e: 1f:42:38:1f:a9:fd:44:6c:c7:eb:a9:77:52:5e:7d:f5:16:0c: f6:3a:dc:fa:26:04:79:fc:da:7d:f4:f6:85:25:6a:4a:62:87: 32:9f:32:d3:12:83:fd:9d:dd:ba:1a:ef:dd:ab:01:2d:af:b7: 40:16:85:2a:35:d8:72:80:d7:9c:8e:aa:90:b1:b4:df:d3:a9: d8:47:db:63:38:88:06:37:ec:fc:10:bb:76:3f:17:1d:80:95: 7a:ab:e9:ce:b9:58:1a:cc:cc:c2:d6:47:bb:02:e4:32:14:22: ce:42:1d:c0:b3:64:a2:ad:95:50:ca:e2:40:d2:08:42:74:0a: 3b:ec:eb:b1:17:0f:3b:19:62:7d:44:50:5d:82:5e:ed:48:9d: b2:4a:07:ff:3b:55:12:3e:59:a2:c1:94:01:59:24:f8:86:b4: 90:26:a8:7f:80:0b:6c:f9:0d:3e:2f:49:ce:b2:4d:0c:f9:3e: f6:9b:7c:51:6a:0d:d6:c8:c7:e1:3b:28:88:58:7a:3e:e1:d3: 5b:a6:85:55:51:f9:df:97:2d:ad:fc:4f:95:93:6a:f0:9c:ef: 88:7e:cd:1a:12:1c:9e:1b:fa:5d:01:a3:a2:61:40:d6:6b:67: 98:4c:72:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuFATAjwmwAZX6UR0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAxNDEzNTIzNloXDTI2MDExMjE0NTIzNlowLzEtMCsGA1UEAxMk ZDU2OTRkMzEtY2UwMC00NzA4LTk5YTItZGU1MTNkNWQ1MzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvEmIIsPpmkJ9C2wF7b2x+jIwMn6IXEASMLQ St6y15hm+pwtIFeiLvOqIqN+3M/zCKIApAsmWcGDzOmuIlNbE1qCc519LvTdnS3U IGk2l8EgkqMEs/kH6CRWXLPYGv7MqnykBeM0DdUVm+Rcgcm2WleS3B3X7DZ6bhit X3XX+dX6GBpJz4/JPwL7OXeZDcBUSALvUfEp/n62CS4U+5vpBhXefewmTu8aokYQ rMrPa38nIXSYXfBr/baCJ6qxjb9ZPupTNxfAoxdkAQAPQSeFC1egAb8LUT1bnUJP 8zXZcSznAUHz6AOgANYmj5yEIi+yS3rhy0LGIPxgiJfT+ooGawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPs7g+ID8cMnePxlrbWa/0XrSMmOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvM2JhNzY5ZDgtZGEyZS0z ZjlkLTkzMzgtYzUyMzBiZjlmNTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJgPkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxpF2PbHlTiDimPbxxlp/PLfh9COB+p/URsx+upd1JeffUWDPY63Pom BHn82n309oUlakpihzKfMtMSg/2d3boa792rAS2vt0AWhSo12HKA15yOqpCxtN/T qdhH22M4iAY37PwQu3Y/Fx2AlXqr6c65WBrMzMLWR7sC5DIUIs5CHcCzZKKtlVDK 4kDSCEJ0Cjvs67EXDzsZYn1EUF2CXu1InbJKB/87VRI+WaLBlAFZJPiGtJAmqH+A C2z5DT4vSc6yTQz5PvabfFFqDdbIx+E7KIhYej7h01umhVVR+d+XLa38T5WTavCc 74h+zRoSHJ4b+l0Bo6JhQNZrZ5hMck0= -----END CERTIFICATE-----Generated at Mon Oct 27 19:01:17 2025 by rpki-client