$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/475962fc-933f-3275-8752-37695b55aaa3.roa File: 475962fc-933f-3275-8752-37695b55aaa3.roa (raw, json) Hash identifier: bUeblSbL9Sx78QKG5NDR3QwsDNrUuFSegGNKWHREUIg= Subject key identifier: CF:C7:33:72:75:B0:68:32:33:15:EF:21:90:AC:8A:3F:84:BF:4A:44 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584FB5427E8D5ED1B042A65D505C Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/475962fc-933f-3275-8752-37695b55aaa3.roa Signing time: Mon 02 Nov 2026 15:50:44 +0000 ROA not before: Mon 02 Nov 2026 15:50:44 +0000 ROA not after: Sun 31 Jan 2027 15:50:44 +0000 asID: 152396 IP address blocks: 38.45.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b5:42:7e:8d:5e:d1:b0:42:a6:5d:50:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Nov 2 15:50:44 2026 GMT Not After : Jan 31 15:50:44 2027 GMT Subject: CN=e47bcc31-51cf-474e-b7c4-900b2e474549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a0:1e:a0:be:52:15:26:2e:2d:1a:1c:b8:df: 1f:1a:3f:ed:2b:67:cf:50:c1:a8:df:66:09:ad:b4: 5b:1c:7d:40:33:a2:e4:8b:32:4a:ca:3e:6d:98:59: ab:bc:75:54:61:86:47:04:de:31:db:f8:3f:a7:14: fe:9e:4a:ad:07:67:93:13:50:41:73:64:35:d3:45: 74:87:01:ca:3a:5c:22:5b:48:ea:f6:42:55:c5:3b: cc:7e:e1:35:36:54:ea:f5:c1:0e:61:8a:85:7f:ba: 93:7d:9d:89:a8:4d:4e:ca:d9:d6:ea:1d:e7:78:cd: c5:46:01:87:52:8e:4e:ae:d3:1e:9e:97:96:14:33: 66:18:43:fa:3f:43:3a:f3:24:4e:ae:48:e9:ba:07: 3a:98:a3:7d:72:f1:fb:eb:80:52:d6:a6:e0:bf:85: e9:cc:05:61:4e:1f:a8:96:41:8c:40:70:1d:b0:ec: 7e:90:68:b0:e3:8f:a8:8e:5f:e1:d8:0c:b2:d3:e5: 03:fa:4c:3b:d6:09:64:8a:35:e7:01:04:a5:54:9d: 79:40:1c:4c:36:20:42:03:7c:0a:42:67:7d:07:4a: c1:44:b3:c0:ea:7c:ca:fe:c6:57:26:ee:d1:a1:e3: eb:9f:c0:71:e8:51:22:e7:ce:35:f0:d8:72:02:ec: d9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C7:33:72:75:B0:68:32:33:15:EF:21:90:AC:8A:3F:84:BF:4A:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/475962fc-933f-3275-8752-37695b55aaa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.45.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:27:25:72:51:f5:69:ec:db:04:f7:b0:c3:e7:fe:3c:fe:4d: a3:16:16:e3:29:cb:3d:16:76:e0:7e:28:c9:4b:61:cf:d8:f0: 26:c8:58:a1:03:9e:e6:f6:50:d7:dd:30:e7:a8:15:02:51:02: 6f:f3:9e:c5:0b:0e:32:bd:f2:44:cb:7e:ba:6d:85:87:a7:6b: 15:20:2f:57:40:ea:79:6e:01:4f:61:49:61:52:14:5f:01:54: c0:c8:99:1f:48:5e:45:b1:84:85:5f:a5:ab:43:c6:1c:32:c3: c1:6b:3b:96:fb:e3:49:99:60:a9:cd:bc:0f:ac:20:55:d6:86: f6:0f:1e:bb:4e:b7:2f:8f:71:cb:80:87:e8:d8:10:36:78:e7: 5c:de:b4:2e:dc:cb:e0:83:80:01:ab:94:ec:64:b5:d7:6b:cd: 72:aa:23:e7:56:96:8d:70:58:37:e7:78:3b:24:2e:e7:0e:b1: 49:4f:54:6f:e2:a0:0c:58:1f:37:bb:94:0a:18:2d:7b:f5:f1: d7:1a:c2:58:57:28:65:db:37:b2:17:12:6d:a7:c9:02:5b:3a: ae:c5:0a:ae:d9:54:2e:77:ae:24:b8:43:cf:c4:7e:6f:23:3a: 8c:fc:99:b5:10:1f:13:39:72:b8:53:de:8a:c9:11:2f:1a:c5: 30:73:22:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+1Qn6NXtGwQqZdUFwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTEwMjE1NTA0NFoXDTI3MDEzMTE1NTA0NFowLzEtMCsGA1UEAxMk ZTQ3YmNjMzEtNTFjZi00NzRlLWI3YzQtOTAwYjJlNDc0NTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6AeoL5SFSYuLRocuN8fGj/tK2fPUMGo32YJ rbRbHH1AM6LkizJKyj5tmFmrvHVUYYZHBN4x2/g/pxT+nkqtB2eTE1BBc2Q100V0 hwHKOlwiW0jq9kJVxTvMfuE1NlTq9cEOYYqFf7qTfZ2JqE1OytnW6h3neM3FRgGH Uo5OrtMenpeWFDNmGEP6P0M68yROrkjpugc6mKN9cvH764BS1qbgv4XpzAVhTh+o lkGMQHAdsOx+kGiw44+ojl/h2Ayy0+UD+kw71glkijXnAQSlVJ15QBxMNiBCA3wK Qmd9B0rBRLPA6nzK/sZXJu7RoePrn8Bx6FEi58418NhyAuzZUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/HM3J1sGgyMxXvIZCsij+Ev0pEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNDc1OTYyZmMtOTMzZi0z Mjc1LTg3NTItMzc2OTViNTVhYWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJi3kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALInJXJR9Wns2wT3sMPn/jz+TaMWFuMpyz0WduB+KMlLYc/Y8CbIWKED nub2UNfdMOeoFQJRAm/znsULDjK98kTLfrpthYenaxUgL1dA6nluAU9hSWFSFF8B VMDImR9IXkWxhIVfpatDxhwyw8FrO5b740mZYKnNvA+sIFXWhvYPHrtOty+PccuA h+jYEDZ451zetC7cy+CDgAGrlOxktddrzXKqI+dWlo1wWDfneDskLucOsUlPVG/i oAxYHze7lAoYLXv18dcawlhXKGXbN7IXEm2nyQJbOq7FCq7ZVC53riS4Q8/Efm8j Ooz8mbUQHxM5crhT3orJES8axTBzIoc= -----END CERTIFICATE-----Generated at Thu Nov 5 03:09:38 2026 by rpki-client