$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6a39bbca-c17c-3945-a15e-2b9d4b43737a.roa File: 6a39bbca-c17c-3945-a15e-2b9d4b43737a.roa (raw, json) Hash identifier: /nQ7t7jDgtP+6akOOPhXLj1sOmwWOV1teiYcgseGzaw= Subject key identifier: 8E:95:19:5F:33:FB:EA:01:9B:39:B5:60:BE:D4:6B:C2:32:9E:07:10 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F721891E372706E7344A64D80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6a39bbca-c17c-3945-a15e-2b9d4b43737a.roa Signing time: Fri 09 Oct 2026 14:27:06 +0000 ROA not before: Fri 09 Oct 2026 14:27:06 +0000 ROA not after: Thu 07 Jan 2027 15:27:06 +0000 asID: 270172 IP address blocks: 38.94.72.0/23 maxlen: 24 38.94.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:72:18:91:e3:72:70:6e:73:44:a6:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 9 14:27:06 2026 GMT Not After : Jan 7 15:27:06 2027 GMT Subject: CN=28b3e76f-4cac-4d0b-976b-e69ecbeb86e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1e:ae:57:8d:2d:32:fe:47:d4:d2:36:43:97: dc:d0:a8:cd:ae:33:91:12:d1:bb:65:95:64:68:bf: d6:8d:e3:5a:c6:19:53:0c:e8:15:25:52:48:b0:ab: 16:3a:90:7a:f7:72:a9:70:08:92:56:9b:d6:e8:73: 27:70:29:d3:27:5d:d3:ad:35:6a:f5:e0:8f:50:47: eb:35:a5:f8:69:56:a6:12:f2:9a:7a:87:2a:ef:ad: e7:12:b0:e8:c3:24:62:a2:a0:65:57:96:76:11:87: 98:b5:42:77:dc:a7:bb:1a:3d:c7:2d:16:87:a5:81: a5:59:bf:45:9e:fa:17:32:f0:c1:97:1e:59:84:23: ec:f0:07:d7:13:2a:ac:a8:62:47:d9:87:9e:53:05: 63:45:fc:bf:76:83:9b:1a:94:0e:9b:74:a7:61:ff: 22:d3:7f:a9:ea:c3:4c:78:fd:a0:e6:03:1f:7f:f4: cf:96:a6:9b:a9:1f:f4:d6:46:3b:16:07:29:04:e5: bf:71:63:51:a1:d0:e0:59:93:80:0e:53:e5:d7:5d: 45:2b:55:a7:6d:21:ef:54:c7:25:55:12:85:a7:08: e9:88:fa:b6:ef:37:e7:82:7f:88:a8:d2:98:11:da: 75:ac:c4:21:d2:4c:2e:e3:7c:b1:59:76:d7:25:5b: 0e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:95:19:5F:33:FB:EA:01:9B:39:B5:60:BE:D4:6B:C2:32:9E:07:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6a39bbca-c17c-3945-a15e-2b9d4b43737a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.94.72.0/23 38.94.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:f1:51:37:2c:c7:38:59:53:62:cb:51:73:0d:78:38:06:55: 51:01:5e:e9:60:85:8a:50:a2:d1:6e:da:05:83:d4:b0:71:65: cf:73:a1:1d:36:fa:ad:e4:4f:2f:1d:90:bb:2d:ef:39:b2:ec: 93:5e:a3:51:cc:f7:90:45:89:3e:9b:34:47:54:2d:19:dc:c5: 50:a0:a5:fe:ce:af:3b:5a:c7:cc:3c:d0:6e:f3:f2:b0:32:40: eb:01:84:ef:64:05:08:bd:b1:13:48:c5:5b:f3:8a:23:3c:74: c3:4c:aa:79:87:35:78:89:49:16:2f:9b:a3:b2:c6:3e:60:da: 35:ac:f3:16:c0:f4:73:52:7f:cf:45:7f:3d:76:32:56:b3:89: 63:64:95:95:3a:a9:c9:c4:65:e1:af:df:cf:f1:a8:e1:3a:e3: b1:37:ee:05:79:34:a2:60:ee:ea:57:40:59:60:06:c7:52:c4: fc:5b:7b:6d:86:f1:64:5d:dc:46:76:f1:d0:21:30:45:c1:96: 3f:30:a3:d0:88:05:ca:4a:10:52:f4:43:3e:fa:4f:9f:72:76: e6:64:23:d0:72:de:98:b2:5a:ca:5b:36:da:62:39:8d:1b:c9: 9e:5f:45:d8:90:ce:0f:58:59:f1:f7:67:e1:41:b4:9b:86:e9: 45:55:df:f6 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9yGJHjcnBuc0SmTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwOTE0MjcwNloXDTI3MDEwNzE1MjcwNlowLzEtMCsGA1UEAxMk MjhiM2U3NmYtNGNhYy00ZDBiLTk3NmItZTY5ZWNiZWI4NmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh6uV40tMv5H1NI2Q5fc0KjNrjOREtG7ZZVk aL/WjeNaxhlTDOgVJVJIsKsWOpB693KpcAiSVpvW6HMncCnTJ13TrTVq9eCPUEfr NaX4aVamEvKaeocq763nErDowyRioqBlV5Z2EYeYtUJ33Ke7Gj3HLRaHpYGlWb9F nvoXMvDBlx5ZhCPs8AfXEyqsqGJH2YeeUwVjRfy/doObGpQOm3SnYf8i03+p6sNM eP2g5gMff/TPlqabqR/01kY7FgcpBOW/cWNRodDgWZOADlPl111FK1WnbSHvVMcl VRKFpwjpiPq27zfngn+IqNKYEdp1rMQh0kwu43yxWXbXJVsObwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFI6VGV8z++oBmzm1YL7Ua8IyngcQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNmEzOWJiY2EtYzE3Yy0z OTQ1LWExNWUtMmI5ZDRiNDM3MzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBJl5IAwQA Jl5LMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAD7xUTcsxzhZU2LLUXMNeDgGVVEBXulghYpQotFu2gWD1LBx Zc9zoR02+q3kTy8dkLst7zmy7JNeo1HM95BFiT6bNEdULRncxVCgpf7Orztax8w8 0G7z8rAyQOsBhO9kBQi9sRNIxVvziiM8dMNMqnmHNXiJSRYvm6Oyxj5g2jWs8xbA 9HNSf89Ffz12MlaziWNklZU6qcnEZeGv38/xqOE647E37gV5NKJg7upXQFlgBsdS xPxbe22G8WRd3EZ28dAhMEXBlj8wo9CIBcpKEFL0Qz76T59yduZkI9By3piyWspb NtpiOY0byZ5fRdiQzg9YWfH3Z+FBtJuG6UVV3/Y= -----END CERTIFICATE-----Generated at Fri Oct 23 07:07:15 2026 by rpki-client