$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d0b3dba9-594b-3711-8c87-6d4437267913.roa File: d0b3dba9-594b-3711-8c87-6d4437267913.roa (raw, json) Hash identifier: cHvlY2nK9OSZCtFcG+ER32RrINpz7uOFyEMpUFm/hVU= Subject key identifier: FA:EF:E3:CC:20:F0:D4:97:FB:51:13:C8:1A:F6:25:CF:13:56:55:3F Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F69B97D94436BC2C92205D280 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d0b3dba9-594b-3711-8c87-6d4437267913.roa Signing time: Tue 06 Oct 2026 14:29:04 +0000 ROA not before: Tue 06 Oct 2026 14:29:04 +0000 ROA not after: Mon 04 Jan 2027 15:29:04 +0000 asID: 266498 IP address blocks: 38.224.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:b9:7d:94:43:6b:c2:c9:22:05:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 6 14:29:04 2026 GMT Not After : Jan 4 15:29:04 2027 GMT Subject: CN=08ded798-2c15-4e38-bc6a-b5660d2bdfc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d2:d4:84:e1:2a:05:5b:a4:5f:23:fa:ee:60: c8:f1:a4:26:15:19:30:f9:33:33:dc:8b:1a:25:6d: 82:c1:90:21:0f:7d:a4:17:4e:65:fd:ab:ef:79:c4: 80:f1:83:0c:7e:fe:04:ca:cf:e6:8f:79:27:cb:80: c5:2e:50:fc:30:59:cc:91:f6:b4:a7:1e:f1:41:89: de:57:f6:ad:53:5c:34:46:fd:65:7d:49:0b:96:58: 8e:40:2a:82:0c:82:98:f7:5f:78:02:4a:3b:1e:98: d4:b8:63:58:38:b4:0f:66:8b:4f:96:28:74:4c:95: 29:9d:8b:d7:1e:4e:58:ff:bb:17:f9:bf:68:0a:7d: 74:81:11:27:7b:ad:f6:b5:42:04:ff:8a:6c:d4:e1: 83:74:dd:c9:b6:d9:7c:8c:53:0d:82:cc:65:d4:04: dd:01:ff:20:f8:fe:a6:b1:5a:19:8d:27:d1:dd:9b: b6:4d:c5:72:cf:87:43:2a:5e:54:f0:8a:ab:dc:53: 65:0f:9b:35:df:8f:2a:f0:9f:a1:ee:f1:70:d8:10: ec:53:89:5c:9c:e1:89:98:0e:53:f0:83:8a:28:21: 37:50:cf:0d:d5:65:05:e5:f5:f4:06:9d:f5:9e:63: a0:3a:d4:f9:f9:d8:43:e9:8f:01:c8:1d:b3:a5:fd: 28:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:EF:E3:CC:20:F0:D4:97:FB:51:13:C8:1A:F6:25:CF:13:56:55:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d0b3dba9-594b-3711-8c87-6d4437267913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.224.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:86:9b:74:23:c6:54:24:63:4c:48:c3:29:6b:02:e6:4a:cf: f7:d2:30:f3:22:b4:08:9f:4e:c8:61:fc:36:2d:f1:49:27:60: 66:be:ba:91:18:66:54:84:b7:1e:09:c4:4f:54:e7:8b:5f:f6: 2b:27:62:84:62:55:46:82:a5:9c:3e:de:32:bc:ba:37:3e:0c: e4:3c:5b:d6:af:5e:b8:b5:47:3a:2a:8f:f5:16:4c:a5:2e:27: c0:81:c8:2f:1f:68:7b:b8:5a:f9:b6:87:11:8f:83:f7:2b:d1: f5:19:82:65:0c:de:67:24:7f:8a:e4:7b:ea:de:2a:43:9c:b6: e7:a3:5d:0c:61:17:28:9c:54:36:7c:b1:10:ac:06:2e:5f:66: fa:a1:75:c5:97:f9:f8:6c:c8:bb:26:b5:e0:d5:e2:9b:7c:bf: 89:c9:c4:5a:7d:3e:d6:09:7e:bb:95:55:7f:68:bf:f4:d6:0d: 49:24:9a:63:bd:5d:3f:a1:b1:9d:58:e2:02:78:26:b4:34:da: 17:cc:16:82:75:d5:c7:3f:f6:ca:a3:78:0a:b6:a4:59:d6:a7: b4:2c:99:3b:2e:7b:2a:31:f2:dd:b4:3a:af:d9:da:20:e1:c2: 19:dd:c9:d4:01:90:4f:36:e6:97:7d:a4:62:c0:71:d2:1f:f0: 84:93:d5:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9puX2UQ2vCySIF0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwNjE0MjkwNFoXDTI3MDEwNDE1MjkwNFowLzEtMCsGA1UEAxMk MDhkZWQ3OTgtMmMxNS00ZTM4LWJjNmEtYjU2NjBkMmJkZmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9LUhOEqBVukXyP67mDI8aQmFRkw+TMz3Isa JW2CwZAhD32kF05l/avvecSA8YMMfv4Eys/mj3kny4DFLlD8MFnMkfa0px7xQYne V/atU1w0Rv1lfUkLlliOQCqCDIKY9194Ako7HpjUuGNYOLQPZotPlih0TJUpnYvX Hk5Y/7sX+b9oCn10gREne632tUIE/4ps1OGDdN3Jttl8jFMNgsxl1ATdAf8g+P6m sVoZjSfR3Zu2TcVyz4dDKl5U8Iqr3FNlD5s1348q8J+h7vFw2BDsU4lcnOGJmA5T 8IOKKCE3UM8N1WUF5fX0Bp31nmOgOtT5+dhD6Y8ByB2zpf0oowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrv48wg8NSX+1ETyBr2Jc8TVlU/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDBiM2RiYTktNTk0Yi0z NzExLThjODctNmQ0NDM3MjY3OTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJuCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOGm3QjxlQkY0xIwylrAuZKz/fSMPMitAifTshh/DYt8UknYGa+upEY ZlSEtx4JxE9U54tf9isnYoRiVUaCpZw+3jK8ujc+DOQ8W9avXri1Rzoqj/UWTKUu J8CByC8faHu4Wvm2hxGPg/cr0fUZgmUM3mckf4rke+reKkOctuejXQxhFyicVDZ8 sRCsBi5fZvqhdcWX+fhsyLsmteDV4pt8v4nJxFp9PtYJfruVVX9ov/TWDUkkmmO9 XT+hsZ1Y4gJ4JrQ02hfMFoJ11cc/9sqjeAq2pFnWp7QsmTsueyox8t20Oq/Z2iDh whndydQBkE825pd9pGLAcdIf8IST1V0= -----END CERTIFICATE-----Generated at Thu Oct 15 04:41:52 2026 by rpki-client