$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e9f5a67a-7e2d-32d3-80a1-c1258330d02c.roa File: e9f5a67a-7e2d-32d3-80a1-c1258330d02c.roa (raw, json) Hash identifier: fZD59xW2EJLhAWyLQoh+Rn6XKDiizC9cLG5lZFARFZU= Subject key identifier: BB:C0:AC:60:49:40:BD:12:E7:B6:58:22:CE:42:49:02:6F:71:3A:E6 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B95DEBEDE4586B86A3F6D76C0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e9f5a67a-7e2d-32d3-80a1-c1258330d02c.roa Signing time: Mon 20 Oct 2025 14:51:57 +0000 ROA not before: Mon 20 Oct 2025 14:51:57 +0000 ROA not after: Sun 18 Jan 2026 15:51:57 +0000 asID: 138064 IP address blocks: 38.3.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:de:be:de:45:86:b8:6a:3f:6d:76:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 20 14:51:57 2025 GMT Not After : Jan 18 15:51:57 2026 GMT Subject: CN=94eb8a8f-4b33-44aa-9107-afe8e77b5539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3d:32:b6:fe:76:25:e1:e5:74:b4:e1:f7:31: bb:61:32:0b:b1:ee:71:c2:8e:a8:73:43:c0:49:f3: 9a:ab:c1:ae:7f:3b:6b:0b:45:96:57:20:73:9b:35: 0c:d8:6e:53:bc:50:e9:4e:93:a7:7d:7f:f4:fe:17: d4:29:90:5d:93:9a:e1:8e:f6:e5:f0:6f:45:05:6b: 78:cc:95:d8:43:47:e3:66:6d:1a:b6:81:54:08:a9: b7:df:85:01:16:56:0b:3e:c5:81:b9:df:f0:f2:d6: 29:5a:7f:ce:8b:95:ba:15:47:e5:72:fa:e5:7d:6b: 1f:d5:b3:23:67:f7:e1:8b:71:d6:7f:af:a8:aa:2a: 40:ac:a8:c5:77:88:2e:5f:b6:0e:ab:61:11:98:2b: 4e:cc:c2:61:a5:71:1a:c0:00:47:45:a6:62:9e:9f: 27:bd:f2:a6:08:cd:c3:71:ff:e8:92:fd:f4:c5:f6: 6d:ef:c8:bf:3c:de:db:8b:4e:6e:80:2e:91:10:d6: 47:8b:be:e8:08:72:d5:88:d0:19:26:76:fa:29:19: 38:c3:5a:b7:29:27:3e:f2:29:a0:db:f3:7a:92:47: d2:ac:8d:36:f8:08:40:8a:b6:7d:fe:44:fb:84:0a: 3a:a6:0a:59:2b:09:70:63:c4:35:60:14:8c:2c:f6: 25:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C0:AC:60:49:40:BD:12:E7:B6:58:22:CE:42:49:02:6F:71:3A:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e9f5a67a-7e2d-32d3-80a1-c1258330d02c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.3.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:68:2e:3c:7e:95:d5:7b:78:be:2c:d4:b2:3d:dc:06:67:39: d0:2f:1f:13:1c:31:eb:42:8e:aa:a1:0b:b2:1c:f7:31:54:a6: 2d:08:7b:36:f9:1b:8b:02:a5:f3:64:74:23:b7:ea:40:ed:a8: a1:fe:70:8e:16:44:b3:6f:7b:a3:cf:1a:88:65:e4:19:7c:7f: 57:9b:a4:b8:46:6a:86:de:81:d1:c1:41:ce:f7:6d:92:c7:ea: 84:0d:74:d3:a2:7d:30:e0:42:5b:d6:87:de:65:0a:de:9f:c2: c0:f9:16:28:37:7d:44:da:c2:82:73:a9:20:a9:14:9d:0f:0a: 34:98:ed:f2:1d:ca:c1:04:ab:39:72:b6:61:95:ab:08:d3:c5: 02:52:9d:2a:02:3e:e4:0a:ce:8e:54:93:7a:34:22:ed:71:f9: 93:fa:37:c0:e7:a2:84:ed:e7:5d:f0:20:c6:ae:10:53:0b:c8: 5a:98:c3:70:06:da:6b:c5:cf:b9:15:47:dc:67:bb:3e:71:97: 6d:11:ce:fe:2d:63:3a:8b:30:28:2b:87:75:ba:43:d9:8a:b3: be:fa:d5:0c:73:f9:75:bd:f1:f4:dd:81:b7:10:03:4c:8d:b2: e8:39:58:c4:21:05:e4:59:db:57:a5:29:10:c4:9e:67:f6:6c: ec:43:fb:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuV3r7eRYa4aj9tdsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAyMDE0NTE1N1oXDTI2MDExODE1NTE1N1owLzEtMCsGA1UEAxMk OTRlYjhhOGYtNGIzMy00NGFhLTkxMDctYWZlOGU3N2I1NTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD0ytv52JeHldLTh9zG7YTILse5xwo6oc0PA SfOaq8GufztrC0WWVyBzmzUM2G5TvFDpTpOnfX/0/hfUKZBdk5rhjvbl8G9FBWt4 zJXYQ0fjZm0atoFUCKm334UBFlYLPsWBud/w8tYpWn/Oi5W6FUflcvrlfWsf1bMj Z/fhi3HWf6+oqipArKjFd4guX7YOq2ERmCtOzMJhpXEawABHRaZinp8nvfKmCM3D cf/okv30xfZt78i/PN7bi05ugC6RENZHi77oCHLViNAZJnb6KRk4w1q3KSc+8img 2/N6kkfSrI02+AhAirZ9/kT7hAo6pgpZKwlwY8Q1YBSMLPYllwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvArGBJQL0S57ZYIs5CSQJvcTrmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZTlmNWE2N2EtN2UyZC0z MmQzLTgwYTEtYzEyNTgzMzBkMDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJgOgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFoLjx+ldV7eL4s1LI93AZnOdAvHxMcMetCjqqhC7Ic9zFUpi0Iezb5 G4sCpfNkdCO36kDtqKH+cI4WRLNve6PPGohl5Bl8f1ebpLhGaobegdHBQc73bZLH 6oQNdNOifTDgQlvWh95lCt6fwsD5Fig3fUTawoJzqSCpFJ0PCjSY7fIdysEEqzly tmGVqwjTxQJSnSoCPuQKzo5Uk3o0Iu1x+ZP6N8DnooTt513wIMauEFMLyFqYw3AG 2mvFz7kVR9xnuz5xl20Rzv4tYzqLMCgrh3W6Q9mKs7761Qxz+XW98fTdgbcQA0yN sug5WMQhBeRZ21elKRDEnmf2bOxD+zs= -----END CERTIFICATE-----Generated at Sat Oct 25 06:04:49 2025 by rpki-client