$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b8f74b7d-4198-317f-a91c-316aaf61dbac.roa File: b8f74b7d-4198-317f-a91c-316aaf61dbac.roa (raw, json) Hash identifier: xygzADa3l1bdqjm0YmGlWe+pVtKv+xlnDaUK2PXkzbo= Subject key identifier: 40:AB:14:66:FE:66:F6:88:1C:C9:FA:4D:4C:ED:55:5C:CA:85:8C:A7 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B88883E2608F03BF548D43080 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b8f74b7d-4198-317f-a91c-316aaf61dbac.roa Signing time: Wed 15 Oct 2025 20:12:09 +0000 ROA not before: Wed 15 Oct 2025 20:12:09 +0000 ROA not after: Tue 13 Jan 2026 21:12:09 +0000 asID: 27884 IP address blocks: 38.255.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:88:88:3e:26:08:f0:3b:f5:48:d4:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 15 20:12:09 2025 GMT Not After : Jan 13 21:12:09 2026 GMT Subject: CN=bc516c65-b6bb-4720-acad-b4821c98bbdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:af:23:fd:05:dc:7a:bf:b8:2b:13:54:52:0a: 8a:67:71:83:cc:01:b4:b9:3d:c7:eb:5e:16:3d:86: 18:f4:89:6c:49:97:c1:7e:29:1b:53:a4:73:5a:78: f2:2e:f8:38:a9:7b:01:d7:1e:90:d6:a1:13:99:82: 65:24:85:ba:94:49:87:ef:5b:32:8f:4e:a3:97:c3: 11:66:69:8a:d8:53:de:9f:7c:42:a3:d2:24:5e:f8: 19:ef:7f:18:f1:cd:69:a3:4f:9c:f9:36:f6:73:d0: 51:ef:be:78:d2:ac:09:a5:2e:76:73:1d:e0:9c:46: a8:70:7b:92:8f:2e:f6:0f:dc:88:ba:88:a3:bf:fc: 23:56:87:b7:26:fe:98:d3:df:63:4e:6d:d3:1a:1b: fb:a9:32:4f:fc:f6:2e:d0:b3:5d:df:2a:31:36:5d: 07:c0:d4:74:a3:35:02:9f:2a:e0:dd:2d:08:58:7c: 3c:1e:0d:cc:2f:d3:d0:0f:de:d8:16:dd:5e:06:be: 7d:00:37:27:42:d5:d0:17:fe:86:1d:29:5f:5d:a0: d5:5f:3f:de:a7:9f:52:a8:bf:82:a1:88:7c:d9:c2: 08:0a:44:ac:dd:29:3c:f7:12:8c:17:9b:b3:33:a5: 14:ad:aa:2f:30:0b:03:3f:8f:30:3f:64:13:b9:0c: 59:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:AB:14:66:FE:66:F6:88:1C:C9:FA:4D:4C:ED:55:5C:CA:85:8C:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b8f74b7d-4198-317f-a91c-316aaf61dbac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.255.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:bd:e8:22:1c:e8:5b:ce:31:0b:fd:d2:f6:bd:d1:ab:f6:ea: e0:9b:eb:61:13:31:b1:24:05:38:e7:85:85:cc:8e:58:6f:1b: c0:8f:82:42:27:72:77:d7:fa:2f:28:13:f1:25:5d:cf:98:08: 3e:2c:b8:55:56:0b:26:2f:67:31:d5:f8:f0:1e:7d:73:97:09: 1a:75:63:8a:16:dc:67:5b:c5:60:8a:61:85:e2:2e:c4:62:48: 65:84:6f:38:a7:4c:2b:9a:64:cf:35:ca:96:99:c2:ef:b5:61: 05:48:e6:3f:68:f6:88:82:72:15:1a:58:39:3e:36:9f:54:a6: 08:9e:76:ed:33:e3:04:4b:b1:09:20:96:7b:13:9e:3a:03:2c: 9e:8b:7e:f1:1a:a3:8a:e0:cd:01:6c:7b:80:72:d5:de:2a:aa: 1f:1f:5f:6e:d8:d3:2e:bc:a6:4b:7f:c0:59:e3:18:05:a9:6b: 34:51:ff:6f:c5:c7:f1:1d:50:8a:bf:62:3a:bf:a6:fe:00:14: 80:76:12:18:3f:dd:e4:89:03:e6:d9:47:7c:76:07:1a:c7:cf: d0:9d:78:23:3d:0f:0b:f8:7f:55:6c:2a:a5:c3:8d:88:da:ad: 18:3d:0b:7d:ae:ae:d3:70:24:c5:92:f7:53:ee:0e:e7:e5:af: 8a:cd:0a:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuIiD4mCPA79UjUMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAxNTIwMTIwOVoXDTI2MDExMzIxMTIwOVowLzEtMCsGA1UEAxMk YmM1MTZjNjUtYjZiYi00NzIwLWFjYWQtYjQ4MjFjOThiYmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq8j/QXcer+4KxNUUgqKZ3GDzAG0uT3H614W PYYY9IlsSZfBfikbU6RzWnjyLvg4qXsB1x6Q1qETmYJlJIW6lEmH71syj06jl8MR ZmmK2FPen3xCo9IkXvgZ738Y8c1po0+c+Tb2c9BR77540qwJpS52cx3gnEaocHuS jy72D9yIuoijv/wjVoe3Jv6Y099jTm3TGhv7qTJP/PYu0LNd3yoxNl0HwNR0ozUC nyrg3S0IWHw8Hg3ML9PQD97YFt1eBr59ADcnQtXQF/6GHSlfXaDVXz/ep59SqL+C oYh82cIICkSs3Sk89xKMF5uzM6UUraovMAsDP48wP2QTuQxZKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECrFGb+ZvaIHMn6TUztVVzKhYynMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYjhmNzRiN2QtNDE5OC0z MTdmLWE5MWMtMzE2YWFmNjFkYmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJv9wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJO96CIc6FvOMQv90va90av26uCb62ETMbEkBTjnhYXMjlhvG8CPgkIn cnfX+i8oE/ElXc+YCD4suFVWCyYvZzHV+PAefXOXCRp1Y4oW3GdbxWCKYYXiLsRi SGWEbzinTCuaZM81ypaZwu+1YQVI5j9o9oiCchUaWDk+Np9Upgiedu0z4wRLsQkg lnsTnjoDLJ6LfvEao4rgzQFse4By1d4qqh8fX27Y0y68pkt/wFnjGAWpazRR/2/F x/EdUIq/Yjq/pv4AFIB2Ehg/3eSJA+bZR3x2BxrHz9CdeCM9Dwv4f1VsKqXDjYja rRg9C32urtNwJMWS91PuDuflr4rNCus= -----END CERTIFICATE-----Generated at Tue Oct 28 17:21:29 2025 by rpki-client