$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0a1d4b5a-d763-3cc9-9a7f-aae75ddf6c17.roa File: 0a1d4b5a-d763-3cc9-9a7f-aae75ddf6c17.roa (raw, json) Hash identifier: 3bVmEVShRXBR9NJfn3QOlVCi55jBLKTGrKjlvfIxH+0= Subject key identifier: AC:28:F6:C7:5F:96:B7:33:00:E7:E6:E2:AC:08:30:7C:66:FF:1F:80 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F7220DC2A59DEE85C005BA675 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0a1d4b5a-d763-3cc9-9a7f-aae75ddf6c17.roa Signing time: Fri 09 Oct 2026 14:43:49 +0000 ROA not before: Fri 09 Oct 2026 14:43:49 +0000 ROA not after: Thu 07 Jan 2027 15:43:49 +0000 asID: 14695 IP address blocks: 38.95.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:72:20:dc:2a:59:de:e8:5c:00:5b:a6:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 9 14:43:49 2026 GMT Not After : Jan 7 15:43:49 2027 GMT Subject: CN=bd74fc64-528d-45d7-aa97-48537e75526b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e0:56:01:fa:77:79:af:c6:cf:21:a2:5b:90: 82:5e:9d:f4:ea:41:85:13:cd:49:3d:df:78:c4:e4: e1:17:8f:a3:a0:16:a1:65:5e:88:97:2e:f9:db:57: ab:1b:d7:ff:2e:bb:8f:7b:86:f5:e9:8f:e4:33:11: 65:d0:0d:e7:05:f7:55:32:9d:68:2e:e6:38:4b:25: 5b:a6:bf:c9:dd:26:24:9c:75:0e:12:86:97:22:c7: a4:d8:6d:fa:45:6a:04:f9:e5:5e:e7:14:ce:d1:fa: 61:e2:03:2b:df:3b:2e:56:34:06:07:55:31:de:0b: 15:fd:c1:4f:ea:66:c8:7a:94:bd:76:c8:00:bf:d9: c6:9f:19:0f:58:5f:dc:0d:50:32:d9:78:79:f8:0e: ec:09:e9:1a:6f:10:76:13:07:ec:4b:19:57:ed:71: 37:0f:d2:43:ba:b3:b2:b1:c8:91:e8:be:60:db:f2: f9:8f:d4:1d:d2:27:e0:ff:fd:57:0e:01:1a:69:2a: 2a:8e:1e:d6:11:8f:d3:3b:49:5f:f4:55:87:e8:a5: 48:89:db:84:29:2c:60:c4:25:0d:d1:13:b2:ed:5c: c4:74:8d:19:5a:4c:3b:31:6a:d7:c0:d7:73:0a:3d: 37:0e:a0:54:1e:ca:d6:a3:2b:9e:7e:a8:62:0c:2f: cc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:28:F6:C7:5F:96:B7:33:00:E7:E6:E2:AC:08:30:7C:66:FF:1F:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0a1d4b5a-d763-3cc9-9a7f-aae75ddf6c17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.95.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:3a:71:67:f9:ca:bc:f9:fb:ba:49:d4:b2:5c:f0:8e:b3:50: bb:76:05:37:e8:fb:4d:c4:b2:0c:8f:ba:d5:1c:52:64:66:2e: 4f:45:58:f7:9e:8b:3f:0c:98:3e:6c:9b:29:18:85:08:21:e6: 29:45:85:ad:b3:93:82:bb:28:9c:b6:cc:5e:be:fb:f8:74:c3: 27:0a:20:94:d1:27:9b:f9:3e:e9:3c:90:42:24:65:a4:1c:f5: 09:d9:df:f6:03:33:ad:9b:e9:6c:8d:2a:69:08:92:e7:61:0f: 6d:b5:95:fb:f5:86:cc:8d:e4:77:f3:66:2f:0a:83:e7:ac:3b: 6d:9a:e4:c7:96:e9:47:83:0d:48:4b:7d:a2:c4:57:96:c9:33: bb:99:e5:b5:a5:eb:e4:79:72:1f:84:e5:12:24:84:18:e2:70: 65:87:93:2d:31:8b:ab:34:45:97:82:2b:e3:f0:ff:91:bb:a0: b4:d7:64:66:59:b9:08:29:30:fa:46:20:fa:48:2c:13:3f:49: f3:e6:14:d1:98:6a:0a:c1:d2:04:a0:ca:4b:a7:ee:19:e3:ce: 90:10:e4:cf:3a:fe:82:79:03:c0:c8:12:90:b0:91:28:be:fe: c9:ff:a6:c7:cf:fd:8a:bf:8b:44:5e:ea:2b:45:12:17:06:62: 2f:9d:9b:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9yINwqWd7oXABbpnUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwOTE0NDM0OVoXDTI3MDEwNzE1NDM0OVowLzEtMCsGA1UEAxMk YmQ3NGZjNjQtNTI4ZC00NWQ3LWFhOTctNDg1MzdlNzU1MjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OBWAfp3ea/GzyGiW5CCXp306kGFE81JPd94 xOThF4+joBahZV6Ily7521erG9f/LruPe4b16Y/kMxFl0A3nBfdVMp1oLuY4SyVb pr/J3SYknHUOEoaXIsek2G36RWoE+eVe5xTO0fph4gMr3zsuVjQGB1Ux3gsV/cFP 6mbIepS9dsgAv9nGnxkPWF/cDVAy2Xh5+A7sCekabxB2EwfsSxlX7XE3D9JDurOy sciR6L5g2/L5j9Qd0ifg//1XDgEaaSoqjh7WEY/TO0lf9FWH6KVIiduEKSxgxCUN 0ROy7VzEdI0ZWkw7MWrXwNdzCj03DqBUHsrWoyuefqhiDC/MKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwo9sdflrczAOfm4qwIMHxm/x+AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMGExZDRiNWEtZDc2My0z Y2M5LTlhN2YtYWFlNzVkZGY2YzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJl8cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQ6cWf5yrz5+7pJ1LJc8I6zULt2BTfo+03EsgyPutUcUmRmLk9FWPee iz8MmD5smykYhQgh5ilFha2zk4K7KJy2zF6++/h0wycKIJTRJ5v5Puk8kEIkZaQc 9QnZ3/YDM62b6WyNKmkIkudhD221lfv1hsyN5HfzZi8Kg+esO22a5MeW6UeDDUhL faLEV5bJM7uZ5bWl6+R5ch+E5RIkhBjicGWHky0xi6s0RZeCK+Pw/5G7oLTXZGZZ uQgpMPpGIPpILBM/SfPmFNGYagrB0gSgykun7hnjzpAQ5M86/oJ5A8DIEpCwkSi+ /sn/psfP/Yq/i0Re6itFEhcGYi+dm3c= -----END CERTIFICATE-----Generated at Tue Oct 27 17:34:43 2026 by rpki-client