$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dacdbf30-72e0-341b-a715-0e077e64738a.roa File: dacdbf30-72e0-341b-a715-0e077e64738a.roa (raw, json) Hash identifier: vnsup0h2rTD5x9tTe9+hLaULlrhGE8zhY5Oshhgp9oI= Subject key identifier: F1:88:EA:BF:D1:88:4B:23:AA:63:65:81:6D:F3:1C:78:50:49:42:8B Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584BD67112FE67144E0C6C6F8010 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dacdbf30-72e0-341b-a715-0e077e64738a.roa Signing time: Wed 12 Nov 2025 17:58:31 +0000 ROA not before: Wed 12 Nov 2025 17:58:31 +0000 ROA not after: Tue 10 Feb 2026 17:58:31 +0000 asID: 393796 IP address blocks: 38.58.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d6:71:12:fe:67:14:4e:0c:6c:6f:80:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Nov 12 17:58:31 2025 GMT Not After : Feb 10 17:58:31 2026 GMT Subject: CN=727f3582-9712-4bc8-8272-0813a3a79b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:eb:5a:64:12:44:30:65:6f:8d:b0:c8:16:00: 60:10:09:4b:d2:76:04:ca:56:5f:fb:f6:45:8d:df: d7:a4:fd:3d:5b:c4:5e:11:70:35:47:64:0d:24:56: 33:45:1e:df:bd:3b:28:4b:64:89:8d:75:79:87:b1: 0e:01:62:1f:15:91:e9:0b:a4:2e:ad:2f:75:11:06: 3d:a2:97:4b:27:27:36:37:4e:47:3b:cb:77:1c:07: 1c:41:42:1c:0f:de:36:b9:5e:45:45:79:35:0e:b9: aa:ba:ca:10:e3:48:a0:97:07:f6:c4:7c:35:fa:ad: c7:aa:63:40:4b:29:80:4c:e4:6d:88:cb:1b:98:87: 0f:38:f8:b9:44:5a:1c:f5:02:e7:e5:87:d5:cd:e6: 0a:4a:3c:fd:2d:22:2a:f9:cf:a7:6c:d5:7c:b3:8f: 26:f0:94:23:ba:d7:aa:c9:31:b0:2f:b1:37:14:a3: 72:e3:b0:c5:9c:2d:22:b1:74:97:ad:5e:5c:56:82: af:4f:b3:0c:02:cc:0b:32:45:e2:70:8d:35:82:0b: 85:68:09:87:ff:ec:b7:c1:27:4c:22:c0:b4:d3:4f: b6:54:90:05:fb:a1:15:7a:22:cf:85:2a:78:6b:68: 25:26:35:8f:16:06:e3:c2:a9:6d:31:77:57:38:3a: 43:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:88:EA:BF:D1:88:4B:23:AA:63:65:81:6D:F3:1C:78:50:49:42:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dacdbf30-72e0-341b-a715-0e077e64738a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.58.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:34:2e:dd:a8:ce:29:0f:fc:c8:f6:74:22:fe:42:af:af:d0: cd:fb:b0:b8:dd:bb:66:8c:65:a9:35:18:6f:38:93:2f:9b:e3: d3:cb:6b:f2:6d:37:76:fe:ef:d9:9f:ab:b4:de:5d:d8:52:76: 1e:85:2c:3e:09:d9:1e:a6:37:ac:82:ce:95:f3:1a:d0:48:f2: a3:dd:93:11:5b:f0:5d:00:13:79:c9:67:69:83:39:d1:d6:43: 27:07:d2:e9:4f:bb:c7:dd:4d:a9:35:a7:ee:1a:1d:1e:18:e7: 67:ed:7b:88:fd:69:31:bb:56:1e:c0:50:1f:35:20:2a:e9:09: ee:57:b4:d2:3d:98:10:4a:33:1e:87:04:0a:95:03:49:5d:37: c9:c6:70:fe:44:37:9c:0c:ea:8a:7b:95:88:11:95:e3:b4:aa: 6f:ef:0c:50:9a:cd:b4:23:3b:4a:3e:f0:85:66:3d:2d:2f:bc: d7:bf:7f:40:9f:58:67:3e:01:32:05:a2:be:65:a8:bb:3b:6a: f7:95:5e:c5:e7:f8:ab:7e:97:b0:ee:d5:ab:22:80:ce:12:f3: e4:d5:9a:f5:67:6d:5e:4e:84:af:81:3b:c7:e8:33:af:d6:8a: 82:12:51:33:5c:8d:bb:90:0d:6a:1d:a7:3b:e8:95:3c:36:08: f3:d4:2a:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvWcRL+ZxRODGxvgBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTExMjE3NTgzMVoXDTI2MDIxMDE3NTgzMVowLzEtMCsGA1UEAxMk NzI3ZjM1ODItOTcxMi00YmM4LTgyNzItMDgxM2EzYTc5YjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwetaZBJEMGVvjbDIFgBgEAlL0nYEylZf+/ZF jd/XpP09W8ReEXA1R2QNJFYzRR7fvTsoS2SJjXV5h7EOAWIfFZHpC6QurS91EQY9 opdLJyc2N05HO8t3HAccQUIcD942uV5FRXk1DrmqusoQ40iglwf2xHw1+q3HqmNA SymATORtiMsbmIcPOPi5RFoc9QLn5YfVzeYKSjz9LSIq+c+nbNV8s48m8JQjuteq yTGwL7E3FKNy47DFnC0isXSXrV5cVoKvT7MMAswLMkXicI01gguFaAmH/+y3wSdM IsC000+2VJAF+6EVeiLPhSp4a2glJjWPFgbjwqltMXdXODpDFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGI6r/RiEsjqmNlgW3zHHhQSUKLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGFjZGJmMzAtNzJlMC0z NDFiLWE3MTUtMGUwNzdlNjQ3MzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEJjrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD00Lt2ozikP/Mj2dCL+Qq+v0M37sLjdu2aMZak1GG84ky+b49PLa/Jt N3b+79mfq7TeXdhSdh6FLD4J2R6mN6yCzpXzGtBI8qPdkxFb8F0AE3nJZ2mDOdHW QycH0ulPu8fdTak1p+4aHR4Y52fte4j9aTG7Vh7AUB81ICrpCe5XtNI9mBBKMx6H BAqVA0ldN8nGcP5EN5wM6op7lYgRleO0qm/vDFCazbQjO0o+8IVmPS0vvNe/f0Cf WGc+ATIFor5lqLs7aveVXsXn+Kt+l7Du1asigM4S8+TVmvVnbV5OhK+BO8foM6/W ioISUTNcjbuQDWodpzvolTw2CPPUKvY= -----END CERTIFICATE-----Generated at Mon Nov 17 02:45:00 2025 by rpki-client