$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8ac24166-0dcf-3a23-b1be-6db8512c0788.roa File: 8ac24166-0dcf-3a23-b1be-6db8512c0788.roa (raw, json) Hash identifier: vM2bKyKhdTBFNI3dxR2cGSxDErogqYRdzyjQ5P6OiJM= Subject key identifier: 67:82:7A:98:30:41:0E:C5:48:B0:2F:28:0F:28:4D:44:B4:AC:C2:B0 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B9E831C06C0C9BEBA2D259380 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8ac24166-0dcf-3a23-b1be-6db8512c0788.roa Signing time: Thu 23 Oct 2025 17:09:35 +0000 ROA not before: Thu 23 Oct 2025 17:09:35 +0000 ROA not after: Wed 21 Jan 2026 18:09:35 +0000 asID: 273874 IP address blocks: 38.70.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:83:1c:06:c0:c9:be:ba:2d:25:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 23 17:09:35 2025 GMT Not After : Jan 21 18:09:35 2026 GMT Subject: CN=2bfd127a-6de4-4db0-9db0-907c3a77d2fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8e:6a:6e:19:ee:60:24:af:4b:ea:35:07:30: d5:91:52:4b:32:ce:65:f9:d9:60:90:13:d8:fd:7a: a1:91:f6:c8:ed:69:e5:fe:78:23:f1:a2:72:6e:db: 36:85:c7:5b:7a:05:ef:3f:8f:ab:80:81:5c:cf:b3: 34:4a:58:7f:b8:f7:d6:31:7f:bc:c2:cb:48:42:f0: b8:ed:f8:8a:99:93:27:b4:54:56:67:49:7d:b8:e6: a8:1c:03:47:a7:ef:0e:25:21:7d:06:36:7c:6a:86: e7:a9:96:c0:fa:1a:2b:e8:cb:67:53:3b:94:04:3c: 03:45:1b:cf:53:f4:36:b6:df:39:3a:19:ca:43:55: c6:90:92:cc:ad:bb:72:45:e9:dc:e2:71:a0:ea:00: 31:ca:a6:c2:5b:d1:bb:82:98:2b:71:75:14:6c:f3: 09:45:5d:10:89:7a:ba:d9:ea:b2:9b:5e:11:29:a3: 97:b6:fd:48:4c:2e:40:68:1e:96:1c:d6:67:87:48: ad:b8:96:c6:58:eb:72:0b:dd:b0:43:42:72:8e:b5: 27:65:d1:63:60:a5:89:e6:31:25:c5:1a:f0:d8:a4: 0d:b4:b8:cb:23:01:17:04:46:82:c7:c9:b7:24:72: ed:9b:4a:ac:75:24:6b:10:18:54:f0:69:6b:4a:64: 84:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:82:7A:98:30:41:0E:C5:48:B0:2F:28:0F:28:4D:44:B4:AC:C2:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8ac24166-0dcf-3a23-b1be-6db8512c0788.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.70.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:86:62:7a:20:32:1d:66:af:98:b9:ea:f2:82:0c:53:9d:47: a7:c9:ef:da:59:d6:42:02:69:c1:df:6c:a5:21:7d:92:1b:bf: 25:e0:d0:33:a4:d4:a7:c1:cf:4a:02:80:75:48:96:6f:5a:98: 2f:e5:cb:d5:b0:c6:56:08:4a:07:69:9b:da:dc:6b:62:4c:f7: 53:22:3d:63:55:47:78:79:84:ca:ea:5d:f8:a1:6c:33:02:03: 89:61:8b:6c:bb:a2:00:8a:dc:d2:ea:79:a9:5e:64:07:c8:bb: de:e0:ac:8f:22:53:09:c3:ef:a8:86:38:f3:f0:2e:ba:86:b3: 1f:ae:bf:a7:68:f9:70:5c:f2:a3:08:b4:4b:9d:f5:38:30:f1: ad:49:ef:a5:9f:24:ee:f9:46:af:13:15:a6:40:59:74:0b:0e: c3:5c:ba:e5:00:46:20:c4:fb:c1:27:21:1d:f5:26:ec:c9:f0: 0c:84:e7:ac:8d:5e:4a:4d:57:7c:64:bb:7b:a0:de:80:07:a7: 12:90:bf:b3:e2:09:34:aa:b8:bc:86:ee:8d:67:cb:22:6a:2a: 30:b8:da:f1:c2:19:21:18:dc:96:ce:68:3d:53:62:cd:a5:cc: ce:cc:a6:3c:fd:45:b2:59:7e:93:c4:b1:22:d1:96:f1:02:e7: 7f:d8:96:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuegxwGwMm+ui0lk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAyMzE3MDkzNVoXDTI2MDEyMTE4MDkzNVowLzEtMCsGA1UEAxMk MmJmZDEyN2EtNmRlNC00ZGIwLTlkYjAtOTA3YzNhNzdkMmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI5qbhnuYCSvS+o1BzDVkVJLMs5l+dlgkBPY /XqhkfbI7Wnl/ngj8aJybts2hcdbegXvP4+rgIFcz7M0Slh/uPfWMX+8wstIQvC4 7fiKmZMntFRWZ0l9uOaoHANHp+8OJSF9BjZ8aobnqZbA+hor6MtnUzuUBDwDRRvP U/Q2tt85OhnKQ1XGkJLMrbtyRenc4nGg6gAxyqbCW9G7gpgrcXUUbPMJRV0QiXq6 2eqym14RKaOXtv1ITC5AaB6WHNZnh0ituJbGWOtyC92wQ0JyjrUnZdFjYKWJ5jEl xRrw2KQNtLjLIwEXBEaCx8m3JHLtm0qsdSRrEBhU8GlrSmSEYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeCepgwQQ7FSLAvKA8oTUS0rMKwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOGFjMjQxNjYtMGRjZi0z YTIzLWIxYmUtNmRiODUxMmMwNzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJkYcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKGYnogMh1mr5i56vKCDFOdR6fJ79pZ1kICacHfbKUhfZIbvyXg0DOk 1KfBz0oCgHVIlm9amC/ly9WwxlYISgdpm9rca2JM91MiPWNVR3h5hMrqXfihbDMC A4lhi2y7ogCK3NLqealeZAfIu97grI8iUwnD76iGOPPwLrqGsx+uv6do+XBc8qMI tEud9Tgw8a1J76WfJO75Rq8TFaZAWXQLDsNcuuUARiDE+8EnIR31JuzJ8AyE56yN XkpNV3xku3ug3oAHpxKQv7PiCTSquLyG7o1nyyJqKjC42vHCGSEY3JbOaD1TYs2l zM7Mpjz9RbJZfpPEsSLRlvEC53/YlgE= -----END CERTIFICATE-----Generated at Sun Oct 26 20:32:23 2025 by rpki-client