$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6533e530-c42b-3fa0-b7a6-71378362f308.roa File: 6533e530-c42b-3fa0-b7a6-71378362f308.roa (raw, json) Hash identifier: cTBLsByRm4UFwmkQQwYP/5XGMBle8rx2QSz9bcDKXjs= Subject key identifier: 41:24:24:D0:A6:A8:ED:A2:7C:24:44:7E:56:3E:C2:52:52:F9:5B:DC Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F6C5824E9AD949A2746BE9600 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6533e530-c42b-3fa0-b7a6-71378362f308.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 273231 IP address blocks: 38.196.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:24:e9:ad:94:9a:27:46:be:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=73c2c598-6f8a-40fb-a37c-1dc55fa79887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fc:f3:71:38:31:a1:d8:90:be:3c:e8:fe:f9: 0c:1e:24:c6:40:d1:19:21:ab:23:8a:d1:2e:01:dc: f5:81:c7:c0:9c:9f:84:38:2b:a6:4a:03:41:4f:42: cc:34:48:90:3a:b2:2b:35:69:8d:5a:c1:cf:56:27: ee:cc:de:38:dd:42:fa:c5:65:ad:67:97:53:f4:67: b0:47:95:73:de:b6:8c:0f:c8:e2:5c:d5:e9:ab:ac: 91:18:f6:bd:76:7f:de:e8:0a:c3:61:47:3a:ae:8e: 5f:d7:1f:b5:f4:3b:26:03:61:f6:da:6e:87:bf:59: 62:41:ba:43:7b:9e:7d:e1:85:80:5d:6f:00:7b:a2: f9:44:c9:cc:12:76:2d:ac:63:54:7c:48:36:f8:59: 4f:72:64:91:90:d7:6d:d3:68:08:b1:b6:3e:19:c1: 9a:cb:0f:db:b8:7b:08:47:2f:29:95:a1:87:94:da: 0e:d1:87:df:52:25:36:b7:b1:15:ff:35:e8:59:9b: 59:b7:63:25:88:36:f2:00:be:d9:fa:1f:13:e9:d7: da:e2:66:0d:b0:fa:f7:a5:b6:b6:fb:30:16:3f:7c: bf:08:ff:14:b2:b2:39:ba:60:4f:49:b6:6f:e6:ec: 31:b5:99:f2:5e:bd:9b:71:35:f3:cd:37:88:a2:4f: 8f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:24:24:D0:A6:A8:ED:A2:7C:24:44:7E:56:3E:C2:52:52:F9:5B:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6533e530-c42b-3fa0-b7a6-71378362f308.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.196.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:24:b6:f0:2d:8d:50:01:37:38:fe:2a:d0:ef:46:36:1e:35: bf:96:4c:ce:1d:2e:70:a3:14:80:6a:a1:9a:ce:d5:56:5e:d3: dd:a0:4c:33:22:a5:58:86:fa:45:29:53:c2:08:b2:51:42:76: 52:5e:65:4f:e0:b1:83:40:a4:4a:be:2a:4b:8e:b0:9f:50:f9: 90:49:78:30:49:5d:b3:fa:ef:b5:34:98:f1:9c:0a:4c:99:e5: ef:49:f4:e4:e0:df:51:ff:c8:5f:06:fb:c3:74:00:87:c1:95: ab:0f:0e:45:87:e3:31:84:92:75:c8:33:63:e5:38:71:68:30: 17:cb:3e:1f:d3:14:7c:58:31:0c:14:61:6f:97:da:fc:ff:dd: d6:33:c6:78:5c:ca:dd:89:49:d3:ae:64:db:85:72:c9:7e:47: 82:63:d4:0e:1d:cb:80:4b:97:74:5d:5b:2a:dd:78:11:72:22: bf:72:d4:46:dd:87:4a:da:20:76:4a:a5:ca:1c:79:26:01:23: fa:e0:e8:fc:12:95:2d:50:10:05:a1:fe:63:db:17:12:8b:d2: 83:b9:64:03:b0:75:e8:89:42:c0:95:40:f4:00:c7:3d:55:52: 03:96:41:d9:df:73:c7:bb:eb:64:24:9d:f1:39:06:d5:93:14: 4a:ce:4b:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWCTprZSaJ0a+lgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk NzNjMmM1OTgtNmY4YS00MGZiLWEzN2MtMWRjNTVmYTc5ODg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfzzcTgxodiQvjzo/vkMHiTGQNEZIasjitEu Adz1gcfAnJ+EOCumSgNBT0LMNEiQOrIrNWmNWsHPVifuzN443UL6xWWtZ5dT9Gew R5Vz3raMD8jiXNXpq6yRGPa9dn/e6ArDYUc6ro5f1x+19DsmA2H22m6Hv1liQbpD e5594YWAXW8Ae6L5RMnMEnYtrGNUfEg2+FlPcmSRkNdt02gIsbY+GcGayw/buHsI Ry8plaGHlNoO0YffUiU2t7EV/zXoWZtZt2MliDbyAL7Z+h8T6dfa4mYNsPr3pba2 +zAWP3y/CP8UsrI5umBPSbZv5uwxtZnyXr2bcTXzzTeIok+PqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEkJNCmqO2ifCREflY+wlJS+VvcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNjUzM2U1MzAtYzQyYi0z ZmEwLWI3YTYtNzEzNzgzNjJmMzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJsTsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcktvAtjVABNzj+KtDvRjYeNb+WTM4dLnCjFIBqoZrO1VZe092gTDMi pViG+kUpU8IIslFCdlJeZU/gsYNApEq+KkuOsJ9Q+ZBJeDBJXbP677U0mPGcCkyZ 5e9J9OTg31H/yF8G+8N0AIfBlasPDkWH4zGEknXIM2PlOHFoMBfLPh/TFHxYMQwU YW+X2vz/3dYzxnhcyt2JSdOuZNuFcsl+R4Jj1A4dy4BLl3RdWyrdeBFyIr9y1Ebd h0raIHZKpcoceSYBI/rg6PwSlS1QEAWh/mPbFxKL0oO5ZAOwdeiJQsCVQPQAxz1V UgOWQdnfc8e762QknfE5BtWTFErOS5g= -----END CERTIFICATE-----Generated at Thu Oct 8 01:57:33 2026 by rpki-client