$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0117bd25-3c8f-3f6d-8e4b-ec4074dbb4f1.roa File: 0117bd25-3c8f-3f6d-8e4b-ec4074dbb4f1.roa (raw, json) Hash identifier: mMXgdDR//uWp3zG6hmtrAW/VS6DvAkVMnx9GnlygZ4k= Subject key identifier: E8:07:18:3F:81:3A:FB:BD:BD:06:3E:EB:E4:CD:59:95:29:11:3D:24 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584FA1E149E58FE9A6CC22337B00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0117bd25-3c8f-3f6d-8e4b-ec4074dbb4f1.roa Signing time: Mon 26 Oct 2026 17:14:31 +0000 ROA not before: Mon 26 Oct 2026 17:14:31 +0000 ROA not after: Sun 10 Jan 2027 15:35:59 +0000 asID: 275065 IP address blocks: 38.4.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a1:e1:49:e5:8f:e9:a6:cc:22:33:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 26 17:14:31 2026 GMT Not After : Jan 10 15:35:59 2027 GMT Subject: CN=0590f588-bebb-4768-ae3b-25cff4dd2f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d6:5b:76:92:30:46:e1:9b:ac:2e:7b:56:0d: 40:6e:7d:5b:5c:0f:4f:b7:13:63:d6:0d:1f:4f:a0: ca:87:b4:90:be:96:fd:d3:b7:72:b3:98:be:4e:41: 5b:93:63:d0:96:00:a4:6b:8a:48:f3:58:bf:ed:fc: 6f:bd:33:1f:7b:d7:e3:61:06:13:26:2a:bb:af:15: 2c:32:ab:e7:4b:f4:2a:03:63:cd:3e:96:97:b3:6a: e2:3e:a9:17:7c:08:8a:c8:24:af:81:83:59:2d:82: e4:63:b6:62:09:7a:de:f5:01:4a:f6:88:75:2a:58: 41:87:a9:ad:4e:9c:e1:48:66:33:6c:51:88:a6:93: cc:f5:33:9c:44:af:96:5c:de:8e:51:eb:b5:1f:5e: e3:c1:6b:05:ce:69:db:e5:e7:8a:ca:ff:d4:bf:e5: 1b:8e:57:f1:db:0d:2e:a1:5c:71:a1:24:15:d4:43: 9f:33:67:b1:24:15:52:e8:29:8a:bf:f7:fa:ac:d2: ca:4a:a6:c5:af:e9:3f:8f:57:3b:38:6c:4f:72:e5: 27:68:a1:f3:0e:14:3a:8a:08:35:c1:ac:14:67:b5: 13:c6:00:37:14:92:39:43:9e:a7:61:08:77:0a:83: f7:de:f0:42:f3:d6:6c:30:ce:46:56:c8:93:c1:43: 89:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:07:18:3F:81:3A:FB:BD:BD:06:3E:EB:E4:CD:59:95:29:11:3D:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0117bd25-3c8f-3f6d-8e4b-ec4074dbb4f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.4.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:8a:7d:3b:70:cf:7b:51:ea:83:cc:2b:f4:cb:b3:32:3e:5d: fc:14:9b:bf:2c:72:37:be:86:39:02:38:7c:f9:3d:e6:6e:69: 70:11:f7:19:18:e4:27:4c:5c:8c:68:74:52:25:e5:00:72:68: 8a:53:b2:bc:4b:e5:ae:ae:32:4a:de:af:81:81:f4:ac:67:c4: e2:dc:4c:a1:7d:73:e7:e4:de:9d:d6:7f:dd:a3:14:37:0d:39: 8b:bb:50:c1:ad:f8:74:0b:2d:97:b4:62:2f:3a:c7:b4:f0:f0: 4f:6f:24:da:7f:ba:aa:a8:2a:e8:f6:58:a5:da:cf:f5:1a:72: 09:c3:59:31:53:ef:30:53:ce:9b:c5:67:bf:ee:35:a1:d0:7d: cf:4d:33:fb:6b:1e:1b:e5:38:42:2a:0a:0f:af:21:59:06:86: f8:29:dd:aa:cd:0a:5c:45:42:5c:2c:6d:d2:f6:49:de:47:ee: e3:57:06:ba:1b:8a:ed:0a:95:dd:c9:5f:d1:a6:52:7d:22:8a: 85:d5:f6:e9:a5:cf:65:83:8f:ab:2f:18:32:e0:86:33:93:3f: 47:fc:f4:29:86:5d:95:93:fa:cf:49:9b:17:90:db:b1:9b:b1: d7:27:f6:39:65:e8:88:ae:23:f2:ca:0d:cd:44:75:76:db:75: d1:e8:34:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+h4Unlj+mmzCIzewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyNjE3MTQzMVoXDTI3MDExMDE1MzU1OVowLzEtMCsGA1UEAxMk MDU5MGY1ODgtYmViYi00NzY4LWFlM2ItMjVjZmY0ZGQyZjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9ZbdpIwRuGbrC57Vg1Abn1bXA9PtxNj1g0f T6DKh7SQvpb907dys5i+TkFbk2PQlgCka4pI81i/7fxvvTMfe9fjYQYTJiq7rxUs MqvnS/QqA2PNPpaXs2riPqkXfAiKyCSvgYNZLYLkY7ZiCXre9QFK9oh1KlhBh6mt TpzhSGYzbFGIppPM9TOcRK+WXN6OUeu1H17jwWsFzmnb5eeKyv/Uv+Ubjlfx2w0u oVxxoSQV1EOfM2exJBVS6CmKv/f6rNLKSqbFr+k/j1c7OGxPcuUnaKHzDhQ6igg1 wawUZ7UTxgA3FJI5Q56nYQh3CoP33vBC89ZsMM5GVsiTwUOJVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgHGD+BOvu9vQY+6+TNWZUpET0kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMDExN2JkMjUtM2M4Zi0z ZjZkLThlNGItZWM0MDc0ZGJiNGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJgR8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALiKfTtwz3tR6oPMK/TLszI+XfwUm78scje+hjkCOHz5PeZuaXAR9xkY 5CdMXIxodFIl5QByaIpTsrxL5a6uMkrer4GB9KxnxOLcTKF9c+fk3p3Wf92jFDcN OYu7UMGt+HQLLZe0Yi86x7Tw8E9vJNp/uqqoKuj2WKXaz/UacgnDWTFT7zBTzpvF Z7/uNaHQfc9NM/trHhvlOEIqCg+vIVkGhvgp3arNClxFQlwsbdL2Sd5H7uNXBrob iu0Kld3JX9GmUn0iioXV9umlz2WDj6svGDLghjOTP0f89CmGXZWT+s9JmxeQ27Gb sdcn9jll6IiuI/LKDc1EdXbbddHoNKI= -----END CERTIFICATE-----Generated at Tue Oct 27 15:34:14 2026 by rpki-client