$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/023bfb4e-64ac-3c7d-a8aa-e338cab87491.roa File: 023bfb4e-64ac-3c7d-a8aa-e338cab87491.roa (raw, json) Hash identifier: YXsiN2peIhP3TsyAfrUH6h7odidmwXII69NTjJLbtUg= Subject key identifier: FC:26:1A:6D:87:D9:D7:17:A9:10:DA:29:F6:E0:19:5C:45:A4:9F:C2 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F9E986DB3A7AEDA06D537D900 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/023bfb4e-64ac-3c7d-a8aa-e338cab87491.roa Signing time: Sun 25 Oct 2026 13:00:13 +0000 ROA not before: Sun 25 Oct 2026 13:00:13 +0000 ROA not after: Sat 23 Jan 2027 14:00:13 +0000 asID: 22598 IP address blocks: 38.147.144.0/22 maxlen: 24 154.7.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9e:98:6d:b3:a7:ae:da:06:d5:37:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 25 13:00:13 2026 GMT Not After : Jan 23 14:00:13 2027 GMT Subject: CN=fa1168cb-f2f1-4a26-a5d2-8a103655ff35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3a:b6:6b:38:36:4a:d1:98:e5:2b:85:ac:45: a3:9e:d9:af:55:f8:4c:ab:07:85:d0:3c:0c:12:10: 86:c2:00:f4:cc:ab:a7:97:c7:d9:33:e1:ea:af:c5: f2:fb:97:ac:93:8a:9a:d1:3e:1d:28:01:aa:55:2d: 8b:fc:92:ec:03:0c:2a:53:f0:30:5e:7e:83:ab:21: b4:88:a7:eb:fa:5c:4c:17:16:1b:69:70:e3:93:d2: a6:b9:42:18:84:d4:55:fc:7c:56:dc:95:5c:2a:e8: 25:b9:7b:7e:89:66:80:71:c1:8b:e8:91:f8:87:f1: a8:88:fb:0f:a1:62:de:13:a1:96:9f:10:81:de:c3: 72:a1:88:11:12:e2:79:05:c9:dd:e8:f3:7f:7d:f1: 1a:5d:10:52:3f:44:ed:47:ac:a1:e7:d3:44:e5:81: db:8d:d2:d9:9d:88:2c:85:4b:75:66:70:82:89:d0: f8:cc:e5:ca:56:b0:59:ff:d0:33:48:14:06:cc:56: 59:3c:9a:92:47:c0:3f:56:f0:b5:a4:dc:3a:80:85: 92:aa:a6:56:56:11:4e:d8:d3:c8:29:e5:7c:a0:fd: 7c:c7:2b:6e:f7:90:b9:b4:16:8f:70:8c:61:0a:53: 4d:0f:f9:cb:23:54:de:fc:c4:2f:6f:62:d9:91:60: ef:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:26:1A:6D:87:D9:D7:17:A9:10:DA:29:F6:E0:19:5C:45:A4:9F:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/023bfb4e-64ac-3c7d-a8aa-e338cab87491.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.147.144.0/22 154.7.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:d7:ff:d3:08:07:40:03:cd:25:74:20:35:c3:39:aa:fd:58: ff:44:92:98:0b:a7:ba:b2:04:38:be:08:f3:32:3b:07:21:3b: 30:ea:12:b0:24:6f:2e:fb:a5:79:d3:c5:4f:07:5b:e7:90:33: ec:c2:2a:36:8f:cc:60:e9:3a:26:e5:46:35:bc:e3:3c:31:5b: bf:18:83:9d:af:78:c8:84:31:81:e7:1f:f6:b0:cc:01:cd:27: 13:47:9c:ea:f9:11:1b:1f:ef:1a:e1:ff:04:a2:9f:19:98:ea: 43:e6:5e:9c:c1:91:75:44:09:1b:0c:46:69:09:41:33:bc:f5: 86:19:f4:8e:09:ef:c2:fe:bd:09:bf:ee:51:51:b1:f8:cc:2c: 6a:14:1a:72:c3:8f:47:b4:25:39:b3:6c:3b:9e:06:7f:ef:b9: 70:05:43:6e:98:d3:2a:4f:7e:d3:0c:b8:71:0b:6f:83:70:a4: 45:5d:77:50:6e:eb:65:33:78:51:ba:20:af:aa:0b:d9:76:f7: 28:79:3b:20:49:5b:4b:03:aa:e9:b7:24:09:26:77:55:3a:ae: a2:4a:82:ea:4b:5e:1e:47:32:a5:87:8a:e6:85:43:b7:76:ca: f3:79:49:99:71:0b:c5:66:34:f6:39:15:6a:bd:26:f7:26:ec: 0f:26:f3:48 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE+emG2zp67aBtU32QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyNTEzMDAxM1oXDTI3MDEyMzE0MDAxM1owLzEtMCsGA1UEAxMk ZmExMTY4Y2ItZjJmMS00YTI2LWE1ZDItOGExMDM2NTVmZjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTq2azg2StGY5SuFrEWjntmvVfhMqweF0DwM EhCGwgD0zKunl8fZM+Hqr8Xy+5esk4qa0T4dKAGqVS2L/JLsAwwqU/AwXn6DqyG0 iKfr+lxMFxYbaXDjk9KmuUIYhNRV/HxW3JVcKugluXt+iWaAccGL6JH4h/GoiPsP oWLeE6GWnxCB3sNyoYgREuJ5Bcnd6PN/ffEaXRBSP0TtR6yh59NE5YHbjdLZnYgs hUt1ZnCCidD4zOXKVrBZ/9AzSBQGzFZZPJqSR8A/VvC1pNw6gIWSqqZWVhFO2NPI KeV8oP18xytu95C5tBaPcIxhClNND/nLI1Te/MQvb2LZkWDvvwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPwmGm2H2dcXqRDaKfbgGVxFpJ/CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMDIzYmZiNGUtNjRhYy0z YzdkLWE4YWEtZTMzOGNhYjg3NDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCJpOQAwQC mgeEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJXX/9MIB0ADzSV0IDXDOar9WP9EkpgLp7qyBDi+CPMyOwch OzDqErAkby77pXnTxU8HW+eQM+zCKjaPzGDpOiblRjW84zwxW78Yg52veMiEMYHn H/awzAHNJxNHnOr5ERsf7xrh/wSinxmY6kPmXpzBkXVECRsMRmkJQTO89YYZ9I4J 78L+vQm/7lFRsfjMLGoUGnLDj0e0JTmzbDueBn/vuXAFQ26Y0ypPftMMuHELb4Nw pEVdd1Bu62UzeFG6IK+qC9l29yh5OyBJW0sDqum3JAkmd1U6rqJKgupLXh5HMqWH iuaFQ7d2yvN5SZlxC8VmNPY5FWq9Jvcm7A8m80g= -----END CERTIFICATE-----Generated at Tue Oct 27 16:34:23 2026 by rpki-client