$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/70aa37f5-859a-3e2d-9487-ced3c6fd2d24.roa File: 70aa37f5-859a-3e2d-9487-ced3c6fd2d24.roa (raw, json) Hash identifier: buK+/tq8S3azTEc8J5JL9nkMI3zmyg1hyTigKzBgr7w= Subject key identifier: F0:0F:78:6A:29:76:4A:FA:2E:E4:C3:37:0B:CE:EE:14:76:A3:50:1F Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F4F07F69F58F359716DC58C00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/70aa37f5-859a-3e2d-9487-ced3c6fd2d24.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 400704 IP address blocks: 38.70.1.0/24 maxlen: 24 38.70.2.0/23 maxlen: 24 38.70.19.0/24 maxlen: 24 38.87.88.0/23 maxlen: 24 38.100.10.0/24 maxlen: 24 38.100.26.0/23 maxlen: 24 38.100.63.0/24 maxlen: 24 38.105.86.0/23 maxlen: 24 38.105.106.0/23 maxlen: 24 38.124.242.0/24 maxlen: 24 38.247.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:07:f6:9f:58:f3:59:71:6d:c5:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=95d738b0-4bf1-4961-b763-ef5dbb9e5eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3e:76:43:5d:9d:d1:2d:70:a9:36:0b:fb:44: f3:b2:29:43:13:e2:af:fd:3f:a9:74:04:8d:80:28: 49:57:9b:a0:15:7f:31:06:17:63:67:79:b5:f2:4e: cc:9a:81:97:5e:5d:9f:59:ee:37:ef:b1:11:9a:f9: 4c:3d:23:7f:9a:90:5d:68:78:0d:ff:16:2e:2b:a0: bc:d4:5b:a4:32:dc:07:2a:07:6d:61:fa:0e:76:ba: 9f:5f:17:16:11:e3:54:bf:57:aa:d2:2a:38:72:46: ca:23:a3:2d:9b:1c:a4:80:8e:22:9e:45:94:38:6a: e8:8f:94:52:76:cf:36:76:bc:eb:e0:3f:9b:03:dc: e4:43:4f:c6:0d:f0:ee:04:a3:d1:21:9e:11:3d:4f: 39:40:aa:00:aa:8e:5f:80:86:63:d7:54:3c:a4:f0: ea:9e:1b:34:54:2b:5e:18:13:4a:9d:3a:5b:90:fd: a2:c1:66:ca:90:52:77:75:2d:d8:23:8b:4a:a0:b9: c5:c9:f3:67:cd:4b:5e:e8:4c:2c:58:a5:ea:06:b3: cc:18:b4:c4:64:33:aa:bb:9e:95:d5:85:2a:4b:23: c4:ea:80:0b:b5:fc:64:36:d6:8e:ac:bc:ae:05:f9: b9:5c:55:86:b4:22:da:e6:4d:7e:ed:bb:08:72:9a: 94:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:0F:78:6A:29:76:4A:FA:2E:E4:C3:37:0B:CE:EE:14:76:A3:50:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/70aa37f5-859a-3e2d-9487-ced3c6fd2d24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.70.1.0-38.70.3.255 38.70.19.0/24 38.87.88.0/23 38.100.10.0/24 38.100.26.0/23 38.100.63.0/24 38.105.86.0/23 38.105.106.0/23 38.124.242.0/24 38.247.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:e3:cc:93:64:f1:ef:93:38:77:f1:e8:4c:68:a6:5b:08:7c: d1:0e:f5:47:24:de:44:cd:26:2d:f1:f7:4e:0d:11:3c:da:fe: 5b:ab:c0:9e:9f:4b:b7:f7:63:a1:f7:c5:67:ed:64:ff:db:83: 13:77:79:c5:ef:c4:e9:11:0b:54:28:43:40:e8:57:f7:2c:55: 1c:86:e0:0d:1c:12:ea:bf:e8:63:76:d4:68:46:c2:2a:40:93: 9d:57:e9:01:e5:73:93:47:27:b3:bc:6f:fa:7a:3d:ec:70:5a: 31:8d:fc:40:73:f8:a4:1c:84:4e:d9:a6:e0:29:18:90:21:7f: 7e:34:e9:f2:11:8c:90:3f:7c:01:fa:93:fe:c1:df:01:6c:20: 46:2f:70:a3:91:04:98:55:e9:28:d0:cb:e3:a7:f7:50:e8:86: 28:b8:50:15:42:a2:89:64:7c:fc:08:cd:21:4a:6a:17:7f:bc: 4f:f7:0d:3a:1b:59:31:83:08:c2:24:09:09:59:73:85:cc:a5: f4:29:92:08:28:a7:ad:c8:b0:41:bc:17:7c:00:65:83:2f:a3: 2a:4b:00:2c:17:f4:a7:34:fd:34:71:e9:77:59:40:df:19:ac: 61:fd:8a:aa:c1:a3:32:4b:d1:1c:59:3c:3d:1a:05:3c:63:89: 85:f8:65:ef -----BEGIN CERTIFICATE----- MIIGgTCCBWmgAwIBAgIUAQ0Mn0MoWE9PB/afWPNZcW3FjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk OTVkNzM4YjAtNGJmMS00OTYxLWI3NjMtZWY1ZGJiOWU1ZWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz52Q12d0S1wqTYL+0TzsilDE+Kv/T+pdASN gChJV5ugFX8xBhdjZ3m18k7MmoGXXl2fWe4377ERmvlMPSN/mpBdaHgN/xYuK6C8 1FukMtwHKgdtYfoOdrqfXxcWEeNUv1eq0io4ckbKI6MtmxykgI4inkWUOGroj5RS ds82drzr4D+bA9zkQ0/GDfDuBKPRIZ4RPU85QKoAqo5fgIZj11Q8pPDqnhs0VCte GBNKnTpbkP2iwWbKkFJ3dS3YI4tKoLnFyfNnzUte6EwsWKXqBrPMGLTEZDOqu56V 1YUqSyPE6oALtfxkNtaOrLyuBfm5XFWGtCLa5k1+7bsIcpqUtQIDAQABo4IDkzCC A48wHQYDVR0OBBYEFPAPeGopdkr6LuTDNwvO7hR2o1AfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNzBhYTM3ZjUtODU5YS0z ZTJkLTk0ODctY2VkM2M2ZmQyZDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEMAwDBAAmRgED BAImRgADBAAmRhMDBAEmV1gDBAAmZAoDBAEmZBoDBAAmZD8DBAEmaVYDBAEmaWoD BAAmfPIDBAEm9xIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAG+PMk2Tx75M4d/HoTGimWwh80Q71RyTeRM0m LfH3Tg0RPNr+W6vAnp9Lt/djoffFZ+1k/9uDE3d5xe/E6RELVChDQOhX9yxVHIbg DRwS6r/oY3bUaEbCKkCTnVfpAeVzk0cns7xv+no97HBaMY38QHP4pByETtmm4CkY kCF/fjTp8hGMkD98AfqT/sHfAWwgRi9wo5EEmFXpKNDL46f3UOiGKLhQFUKiiWR8 /AjNIUpqF3+8T/cNOhtZMYMIwiQJCVlzhcyl9CmSCCinrciwQbwXfABlgy+jKksA LBf0pzT9NHHpd1lA3xmsYf2KqsGjMkvRHFk8PRoFPGOJhfhl7w== -----END CERTIFICATE-----Generated at Tue Sep 29 15:20:06 2026 by rpki-client