$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/38e1a956-d5b9-36fb-a6f7-458e18c2a641.roa File: 38e1a956-d5b9-36fb-a6f7-458e18c2a641.roa (raw, json) Hash identifier: QInySEm8btQWnxETeZmRGM5/XDpeJEyxCY03H1nAuRQ= Subject key identifier: 99:F9:33:18:B3:5D:B5:A0:57:BF:35:22:E3:B0:00:EB:8F:F3:A6:34 Certificate issuer: /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a Certificate serial: 010D0C9F4328584BA7CCECA802B6D62E34B4C1C0 Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/38e1a956-d5b9-36fb-a6f7-458e18c2a641.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 18914 IP address blocks: 107.161.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:ec:a8:02:b6:d6:2e:34:b4:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=431f8b8a-40a3-4e4b-b557-35cfec0a5f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:12:82:30:6f:51:f3:6a:a7:74:aa:41:b4:0e: 60:66:e4:3b:72:0e:55:22:dd:9e:dd:57:1b:86:a1: 77:07:d2:08:ae:98:15:92:da:36:12:d0:ea:a4:1e: d4:f9:30:f6:cc:32:34:27:67:21:c9:f2:38:44:e3: f5:d9:7c:bf:1c:bc:74:3c:ec:26:3d:53:85:80:ff: ce:9a:4f:44:55:8b:ff:25:c1:16:67:29:e5:78:68: 4d:a6:51:b5:3e:26:ca:d6:a9:03:91:8c:8a:67:9b: 70:db:4c:28:31:c6:d2:41:0f:7f:58:d7:ab:ab:62: 25:2f:7d:0d:0a:19:bf:d9:cc:9a:2d:17:f8:0b:13: fa:21:5e:65:ef:ae:0a:f4:69:92:54:41:11:d1:61: 4f:f0:00:5f:19:96:2d:63:7b:ea:83:a0:3d:f2:f7: 13:65:b4:15:34:54:91:5e:55:5b:1f:8f:a8:86:3f: 20:32:93:dc:e1:a8:61:8b:46:95:cd:24:02:8f:6e: ed:48:55:db:3e:23:a2:6a:32:72:d3:56:91:84:2d: 02:b0:9c:75:83:c0:4a:d4:0d:87:4c:77:a7:72:03: ea:37:7d:c0:03:f5:57:50:64:4e:08:12:e2:33:27: 26:49:96:8e:67:8c:1f:c4:0b:54:cb:a9:2b:0c:34: 95:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F9:33:18:B3:5D:B5:A0:57:BF:35:22:E3:B0:00:EB:8F:F3:A6:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/38e1a956-d5b9-36fb-a6f7-458e18c2a641.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl X509v3 Authority Key Identifier: keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer sbgp-ipAddrBlock: critical IPv4: 107.161.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:ef:62:5d:f2:90:91:f1:ec:aa:de:aa:54:43:66:e5:2d:75: 9b:99:88:3f:cd:36:12:89:2b:eb:ca:e7:a1:c4:cd:2f:5d:61: 81:d5:49:81:d9:50:b1:ec:e1:7d:31:72:cf:6a:31:5a:fd:6a: 71:5c:16:02:3a:22:1a:f6:89:62:a2:d3:ad:c4:95:70:09:93: fe:77:c7:40:dd:fe:8c:9d:2f:87:77:db:73:31:06:9d:98:01: f8:ba:c5:a6:87:60:94:fa:f3:82:3e:43:08:a0:a8:20:9c:8c: 1f:af:26:64:de:11:c3:75:6d:9b:29:98:78:49:14:c8:f1:bd: 00:cd:83:a6:81:f1:61:a5:1b:39:df:ae:9d:13:2e:0c:3b:7d: 09:67:a6:e9:e5:7b:9a:42:f6:fb:63:61:ee:39:ee:02:8f:df: 27:29:dd:9f:a2:fb:e1:b5:d9:89:53:7d:c5:7b:20:a9:47:ea: a3:06:f3:b1:ba:b2:51:af:7a:ce:3f:06:53:bd:39:54:9d:67: 3e:f7:21:e3:c5:c3:1e:67:39:9b:12:56:ce:14:96:05:47:be: ea:ff:31:cf:f8:c5:3d:c0:7c:82:26:93:45:f9:ba:e3:20:4e: cc:e8:58:15:da:35:bb:f4:c7:3f:3e:59:af:b1:3f:6d:fa:90: 17:a2:f0:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzOyoArbWLjS0wcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM5Y2I5NjAtMjM5NC00YjIyLWI5ZjEtM2FjNTU2NmJj NzJhMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk NDMxZjhiOGEtNDBhMy00ZTRiLWI1NTctMzVjZmVjMGE1ZjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hKCMG9R82qndKpBtA5gZuQ7cg5VIt2e3Vcb hqF3B9IIrpgVkto2EtDqpB7U+TD2zDI0J2chyfI4ROP12Xy/HLx0POwmPVOFgP/O mk9EVYv/JcEWZynleGhNplG1PibK1qkDkYyKZ5tw20woMcbSQQ9/WNerq2IlL30N Chm/2cyaLRf4CxP6IV5l764K9GmSVEER0WFP8ABfGZYtY3vqg6A98vcTZbQVNFSR XlVbH4+ohj8gMpPc4ahhi0aVzSQCj27tSFXbPiOiajJy01aRhC0CsJx1g8BK1A2H THencgPqN33AA/VXUGROCBLiMycmSZaOZ4wfxAtUy6krDDSVxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJn5MxizXbWgV781IuOwAOuP86Y0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzlj Yjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1NTY2YmM3MmEvMzhlMWE5NTYtZDViOS0z NmZiLWE2ZjctNDU4ZTE4YzJhNjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTM5Y2I5NjAtMjM5NC00YjIyLWI5 ZjEtM2FjNTU2NmJjNzJhL2UzOWNiOTYwLTIzOTQtNGIyMi1iOWYxLTNhYzU1NjZi YzcyYS5jcmwwHwYDVR0jBBgwFoAUx5iuk+5ta+2iXZtwBvHdRTnXH4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMzljYjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1 NTY2YmM3MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCa6E0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/vYl3ykJHx7KreqlRDZuUtdZuZiD/NNhKJK+vK56HEzS9dYYHVSYHZ ULHs4X0xcs9qMVr9anFcFgI6Ihr2iWKi063ElXAJk/53x0Dd/oydL4d323MxBp2Y Afi6xaaHYJT684I+QwigqCCcjB+vJmTeEcN1bZspmHhJFMjxvQDNg6aB8WGlGznf rp0TLgw7fQlnpunle5pC9vtjYe457gKP3ycp3Z+i++G12YlTfcV7IKlH6qMG87G6 slGves4/BlO9OVSdZz73IePFwx5nOZsSVs4UlgVHvur/Mc/4xT3AfIImk0X5uuMg TszoWBXaNbv0xz8+Wa+xP236kBei8Oc= -----END CERTIFICATE-----Generated at Tue Nov 4 09:25:41 2025 by rpki-client