$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0217a71e-b9fc-3be2-9664-37d526bf314a.roa File: 0217a71e-b9fc-3be2-9664-37d526bf314a.roa (raw, json) Hash identifier: KGGxfq9PRsQCD1MblhPV91jAS5hf6UtZfYKgXcYabUo= Subject key identifier: 1F:30:9B:AB:0F:FC:A6:6A:D1:F8:64:9E:70:B1:FA:3C:4B:CC:F0:61 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F5767FD944F28134AC18FE980 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0217a71e-b9fc-3be2-9664-37d526bf314a.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 28459 IP address blocks: 38.58.172.0/24 maxlen: 24 38.141.66.0/23 maxlen: 24 38.226.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:67:fd:94:4f:28:13:4a:c1:8f:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=1312832a-b093-4390-9dc8-6f38a4df0d61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:18:0b:5b:ff:f1:44:cc:b9:5e:72:0d:c0:84: 62:58:73:8e:17:a5:61:3d:0e:59:4b:12:6b:26:8d: a6:10:69:61:10:e2:cd:d4:97:4e:1f:ad:0e:f4:78: 32:ec:23:3a:fd:f6:93:7b:e7:c7:0a:18:ad:0b:7b: 39:b3:7e:32:1a:78:56:32:f2:e8:df:0c:5e:b0:a7: bd:0c:ff:b4:f9:a5:31:75:fa:ae:6c:6a:7f:59:d8: 00:b2:a6:62:cd:52:dd:0c:3e:6f:58:41:da:75:89: b7:7c:2a:52:51:76:70:00:b0:f0:78:63:88:f8:26: 16:ed:9a:30:12:97:41:be:f9:70:0b:00:d0:17:7d: 0a:b9:91:8e:f5:39:04:7c:86:65:7a:bf:6b:0a:57: cd:bc:9a:d8:00:3b:1e:41:d1:98:1d:7b:d5:71:17: ca:9f:9f:dd:e9:35:7f:51:03:bd:8d:49:2c:bd:a2: b4:c5:12:9c:5a:d7:07:1c:bd:54:ea:b5:86:f4:f8: af:dc:85:c6:b8:07:bc:f0:e7:2f:5f:44:28:3f:0c: d7:e6:56:66:06:18:4e:af:f7:47:04:4f:4d:c0:18: eb:e1:48:b2:2b:6d:a5:4f:7b:82:1f:be:af:f9:79: c1:ae:e7:61:97:67:38:ba:e9:5f:16:b8:6b:47:e6: 9b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:30:9B:AB:0F:FC:A6:6A:D1:F8:64:9E:70:B1:FA:3C:4B:CC:F0:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0217a71e-b9fc-3be2-9664-37d526bf314a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.58.172.0/24 38.141.66.0/23 38.226.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:4d:12:17:17:b2:a3:9f:7b:ad:09:3d:7d:fb:98:da:32:9d: f5:00:ca:40:4c:a8:3d:96:e5:f5:82:1c:27:84:1e:96:15:65: dd:ef:01:0f:35:33:cd:1c:21:4a:ce:39:0d:3d:38:96:c0:5a: 72:92:de:b0:35:94:4d:7a:6e:4b:ce:99:85:09:54:06:9c:dc: 45:f4:e2:c4:b6:12:f9:52:17:81:07:c4:c9:ac:0d:b1:25:ba: c4:5c:cf:ba:52:df:6f:5e:7c:76:fc:de:fe:9f:6a:fb:9d:c5: 9a:68:64:0e:2b:0c:9f:14:de:00:8e:02:39:2b:58:e7:da:37: 43:09:87:0b:b7:2c:ef:f2:2c:76:bd:d0:00:21:ee:9f:46:16: e6:fd:66:df:0e:e1:1c:5a:5a:91:b3:53:f0:c3:00:b9:39:7a: 97:0b:86:54:d3:4e:4c:5a:ad:34:03:cd:81:e3:57:a1:e2:9b: b2:6f:69:d6:c1:7e:3c:e3:d0:eb:7e:26:d3:b4:e8:bd:52:68: 08:69:eb:3d:f1:30:d3:64:5a:f9:87:e8:0c:ee:d6:89:35:71: f0:c6:49:80:9c:44:e9:34:37:5b:f0:ad:c7:2d:f9:54:c6:81: d4:0e:e5:f5:52:e8:30:f1:63:8f:c9:12:b6:70:06:21:7c:15: ea:0f:e5:71 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE9XZ/2UTygTSsGP6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk MTMxMjgzMmEtYjA5My00MzkwLTlkYzgtNmYzOGE0ZGYwZDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxgLW//xRMy5XnINwIRiWHOOF6VhPQ5ZSxJr Jo2mEGlhEOLN1JdOH60O9Hgy7CM6/faTe+fHChitC3s5s34yGnhWMvLo3wxesKe9 DP+0+aUxdfqubGp/WdgAsqZizVLdDD5vWEHadYm3fCpSUXZwALDweGOI+CYW7Zow EpdBvvlwCwDQF30KuZGO9TkEfIZler9rClfNvJrYADseQdGYHXvVcRfKn5/d6TV/ UQO9jUksvaK0xRKcWtcHHL1U6rWG9Piv3IXGuAe88OcvX0QoPwzX5lZmBhhOr/dH BE9NwBjr4UiyK22lT3uCH76v+XnBrudhl2c4uulfFrhrR+abWwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFB8wm6sP/KZq0fhknnCx+jxLzPBhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMDIxN2E3MWUtYjlmYy0z YmUyLTk2NjQtMzdkNTI2YmYzMTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJjqsAwQB Jo1CAwQAJuIVMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBACNNEhcXsqOfe60JPX37mNoynfUAykBMqD2W5fWC HCeEHpYVZd3vAQ81M80cIUrOOQ09OJbAWnKS3rA1lE16bkvOmYUJVAac3EX04sS2 EvlSF4EHxMmsDbElusRcz7pS329efHb83v6favudxZpoZA4rDJ8U3gCOAjkrWOfa N0MJhwu3LO/yLHa90AAh7p9GFub9Zt8O4RxaWpGzU/DDALk5epcLhlTTTkxarTQD zYHjV6Him7JvadbBfjzj0Ot+JtO06L1SaAhp6z3xMNNkWvmH6Azu1ok1cfDGSYCc ROk0N1vwrcct+VTGgdQO5fVS6DDxY4/JErZwBiF8FeoP5XE= -----END CERTIFICATE-----Generated at Wed Oct 28 13:14:27 2026 by rpki-client