$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/db1a0fea-1357-3f45-a4f7-2de8888f289a.roa File: db1a0fea-1357-3f45-a4f7-2de8888f289a.roa (raw, json) Hash identifier: TQNMdLCqYyj1hGMpzRIgZnPrrbU6DxiUsUHFccQVf+w= Subject key identifier: E6:43:4B:48:BD:DA:E5:BA:2A:48:F3:7C:F8:7A:F0:C3:4F:B0:38:42 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B9ED10FB049263F610B84D180 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/db1a0fea-1357-3f45-a4f7-2de8888f289a.roa Signing time: Thu 23 Oct 2025 19:46:39 +0000 ROA not before: Thu 23 Oct 2025 19:46:39 +0000 ROA not after: Wed 21 Jan 2026 20:46:39 +0000 asID: 49020 IP address blocks: 38.51.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:d1:0f:b0:49:26:3f:61:0b:84:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 23 19:46:39 2025 GMT Not After : Jan 21 20:46:39 2026 GMT Subject: CN=4330caef-d54e-4089-a6ef-786ca785b56f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3c:1d:38:4d:b1:ca:6d:76:0b:6f:c5:1b:14: 2f:1c:79:ae:73:2f:75:a6:d0:7e:27:78:84:f7:6f: d4:20:7e:4e:6d:ad:88:ba:e0:f5:df:2e:a0:23:b6: c8:17:97:2f:68:14:c5:08:47:26:77:03:51:7b:cb: 2e:86:79:6d:eb:21:83:2b:ee:3a:94:29:0a:15:21: 50:63:98:c2:b3:cd:58:ee:25:c1:22:d6:56:e2:52: 5f:0b:15:eb:58:aa:0e:59:c7:69:62:bb:b8:27:23: 8c:b6:ec:c4:65:9f:62:4e:34:df:51:3a:b3:7c:60: 09:49:be:f6:4d:e6:b7:97:0c:9c:f1:ba:4f:00:0f: 4a:48:22:b4:d5:a3:b9:57:0a:9b:46:5d:4c:88:06: f3:4d:8c:c7:43:ca:dd:9e:71:13:87:9d:85:9d:d7: 29:9f:01:09:59:2b:b5:62:eb:80:30:30:a9:99:32: 5d:5f:11:a4:46:13:d8:b8:a0:a3:87:eb:6f:fb:cf: 1e:6e:48:6a:4f:d7:54:e7:1d:19:b0:b5:c7:33:5d: 80:af:d0:d3:21:04:9e:7a:e5:5a:4f:03:e9:94:e0: 8f:30:39:4c:f7:61:cc:89:7c:2b:8e:11:8f:c1:6c: e3:48:c2:02:1f:3f:3f:c5:a2:98:e0:cf:c0:79:5f: 09:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:43:4B:48:BD:DA:E5:BA:2A:48:F3:7C:F8:7A:F0:C3:4F:B0:38:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/db1a0fea-1357-3f45-a4f7-2de8888f289a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.51.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:e3:2b:d4:5f:4e:c0:a2:a4:32:be:95:5d:35:97:20:1f:e6: cb:03:74:50:89:85:e7:93:44:28:a2:7e:87:d9:04:c2:66:c1: 50:69:17:91:69:55:69:de:c6:1a:2b:06:7a:a7:2a:e4:c1:59: ad:66:fa:e6:26:4a:f3:ca:9c:82:f4:ba:0b:e0:08:7e:16:10: c4:8a:d4:db:8d:f8:74:23:73:41:34:54:08:d8:d9:57:7e:43: 8d:fa:4f:f6:aa:9b:33:b5:0e:6b:a6:46:7f:1e:02:1c:4e:d2: cd:4a:f7:e8:b0:f4:f1:f0:4b:06:1f:78:c0:b1:93:c6:82:02: 19:52:c6:a7:9b:24:a4:cf:64:79:59:41:ca:0a:28:38:82:d5: 37:50:3f:55:70:a2:ea:c7:0a:46:50:67:a7:af:db:46:c9:6a: e0:c9:22:51:bc:2d:c3:ff:05:c2:aa:9f:96:d9:9e:1a:b4:12: 6a:9c:fa:f9:bb:6c:21:83:bf:b5:2c:33:4a:68:cd:8a:7d:64: 41:18:89:02:4d:18:78:bb:35:01:93:85:79:f5:07:aa:f4:e1: d6:d7:0d:94:59:20:11:5d:55:c6:b5:25:b0:00:e6:2a:ed:29: b6:4b:9b:f4:5b:e3:14:9f:c7:43:90:8b:e6:c5:da:00:fd:a8: 9d:d1:a6:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEue0Q+wSSY/YQuE0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAyMzE5NDYzOVoXDTI2MDEyMTIwNDYzOVowLzEtMCsGA1UEAxMk NDMzMGNhZWYtZDU0ZS00MDg5LWE2ZWYtNzg2Y2E3ODViNTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TwdOE2xym12C2/FGxQvHHmucy91ptB+J3iE 92/UIH5Oba2IuuD13y6gI7bIF5cvaBTFCEcmdwNRe8suhnlt6yGDK+46lCkKFSFQ Y5jCs81Y7iXBItZW4lJfCxXrWKoOWcdpYru4JyOMtuzEZZ9iTjTfUTqzfGAJSb72 Tea3lwyc8bpPAA9KSCK01aO5VwqbRl1MiAbzTYzHQ8rdnnETh52FndcpnwEJWSu1 YuuAMDCpmTJdXxGkRhPYuKCjh+tv+88ebkhqT9dU5x0ZsLXHM12Ar9DTIQSeeuVa TwPplOCPMDlM92HMiXwrjhGPwWzjSMICHz8/xaKY4M/AeV8JHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZDS0i92uW6KkjzfPh68MNPsDhCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGIxYTBmZWEtMTM1Ny0z ZjQ1LWE0ZjctMmRlODg4OGYyODlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJjMzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjjK9RfTsCipDK+lV01lyAf5ssDdFCJheeTRCiifofZBMJmwVBpF5Fp VWnexhorBnqnKuTBWa1m+uYmSvPKnIL0ugvgCH4WEMSK1NuN+HQjc0E0VAjY2Vd+ Q436T/aqmzO1DmumRn8eAhxO0s1K9+iw9PHwSwYfeMCxk8aCAhlSxqebJKTPZHlZ QcoKKDiC1TdQP1VwourHCkZQZ6ev20bJauDJIlG8LcP/BcKqn5bZnhq0Emqc+vm7 bCGDv7UsM0pozYp9ZEEYiQJNGHi7NQGThXn1B6r04dbXDZRZIBFdVca1JbAA5irt KbZLm/Rb4xSfx0OQi+bF2gD9qJ3Rpjc= -----END CERTIFICATE-----Generated at Mon Oct 27 21:38:47 2025 by rpki-client