$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0e4f936e-091b-32f9-99bb-f2299b841e0d.roa File: 0e4f936e-091b-32f9-99bb-f2299b841e0d.roa (raw, json) Hash identifier: xbMnbzuMnZWHfkjTYelqvibKtNtmhHtmA5vEQy9W8Ps= Subject key identifier: 1F:67:BA:A3:C4:BA:0D:5C:ED:B5:7A:C8:38:30:F4:93:9C:2E:A8:86 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F96385E8EF1682D09CC0FB580 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0e4f936e-091b-32f9-99bb-f2299b841e0d.roa Signing time: Thu 22 Oct 2026 13:00:13 +0000 ROA not before: Thu 22 Oct 2026 13:00:13 +0000 ROA not after: Wed 20 Jan 2027 14:00:13 +0000 asID: 274888 IP address blocks: 38.190.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:96:38:5e:8e:f1:68:2d:09:cc:0f:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 22 13:00:13 2026 GMT Not After : Jan 20 14:00:13 2027 GMT Subject: CN=0cfa51be-9ce4-4580-97a3-ec891f0eec6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:93:6c:8c:84:2e:20:57:de:76:38:5e:1e:64: 13:e1:d6:c1:ef:fe:06:ed:f7:b1:0d:fa:ee:6e:c7: e6:01:ae:19:70:78:1d:a0:3d:a2:c1:73:cd:ac:3f: 38:fb:e7:49:d6:7e:0d:c8:a1:1f:75:60:d0:4e:32: 66:8e:2f:13:ca:e5:ba:82:03:12:00:00:aa:50:c5: 5d:73:02:1c:89:13:2c:09:3e:0a:ec:dc:3f:54:c0: 37:88:c9:bb:00:df:66:36:2b:7f:35:fb:b2:f6:ea: 1e:d7:eb:56:c1:d6:72:1c:2f:1b:1c:27:89:db:3a: d9:cb:4c:2f:07:78:0c:01:41:2d:37:12:7c:d7:25: 6f:77:db:ca:d7:9a:65:67:f6:eb:1f:f4:98:2f:af: 7f:bc:1d:fe:9e:d6:df:8c:eb:c4:83:e3:fb:4e:26: 86:16:9f:f4:f0:f2:0d:b8:d1:c8:af:b3:e1:5e:28: c5:1c:5e:d8:2c:1a:30:ab:96:e9:a0:5f:5d:6f:b9: 3c:c4:48:5d:09:4f:4d:a8:14:32:39:37:70:8d:f0: 7a:02:88:29:83:a1:56:7c:db:1b:b9:13:a6:64:0c: 2c:42:37:e6:6d:a4:d9:e9:eb:0d:73:a8:f9:60:d2: a6:af:bc:71:ad:e5:4e:68:4e:1b:c4:a2:6f:58:42: 4b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:67:BA:A3:C4:BA:0D:5C:ED:B5:7A:C8:38:30:F4:93:9C:2E:A8:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0e4f936e-091b-32f9-99bb-f2299b841e0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.190.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:24:bb:e4:d0:99:b2:82:6b:1e:64:ee:94:f0:c1:bd:b4:7a: 6b:2a:3e:c0:90:3d:53:82:d6:83:c9:66:6d:8a:98:e1:e7:a8: bb:44:41:0c:b4:ee:44:d6:ee:c5:6e:6b:3e:93:ce:c2:4a:9b: aa:df:e5:e9:51:d6:b4:a4:95:8f:12:6e:fd:4f:5a:86:b6:e3: 38:b3:ba:9a:09:ab:d1:b5:8d:a5:11:78:8d:0e:cb:bd:c8:88: 8c:29:84:57:a9:1e:b0:00:6d:23:ee:ad:a5:14:f3:17:61:2c: f4:b6:a2:60:ba:6e:14:55:53:3f:1b:0a:19:31:1b:54:d6:c0: e6:38:83:d6:ca:8d:a6:35:8b:90:48:55:c6:90:18:55:30:49: 46:a2:17:6c:ea:0a:54:1f:c7:6d:6b:f6:c5:e5:eb:6d:6e:0d: a4:a7:14:87:2d:86:35:2d:8b:eb:35:a2:63:7e:11:5b:05:02: 98:ee:f1:af:7d:92:6f:15:fa:83:e4:57:0b:31:7b:db:7d:81: 77:c3:11:d9:45:f6:02:88:20:d4:b9:9f:59:80:5e:2f:42:70: 8d:7e:ab:00:fe:09:21:51:73:c5:31:e0:a1:ad:02:42:ad:3f: 67:61:ea:a2:af:d9:e3:1d:56:1a:10:1a:c7:51:be:83:88:1c: 08:04:1a:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+WOF6O8WgtCcwPtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyMjEzMDAxM1oXDTI3MDEyMDE0MDAxM1owLzEtMCsGA1UEAxMk MGNmYTUxYmUtOWNlNC00NTgwLTk3YTMtZWM4OTFmMGVlYzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJNsjIQuIFfedjheHmQT4dbB7/4G7fexDfru bsfmAa4ZcHgdoD2iwXPNrD84++dJ1n4NyKEfdWDQTjJmji8TyuW6ggMSAACqUMVd cwIciRMsCT4K7Nw/VMA3iMm7AN9mNit/Nfuy9uoe1+tWwdZyHC8bHCeJ2zrZy0wv B3gMAUEtNxJ81yVvd9vK15plZ/brH/SYL69/vB3+ntbfjOvEg+P7TiaGFp/08PIN uNHIr7PhXijFHF7YLBowq5bpoF9db7k8xEhdCU9NqBQyOTdwjfB6Aogpg6FWfNsb uROmZAwsQjfmbaTZ6esNc6j5YNKmr7xxreVOaE4bxKJvWEJLYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9nuqPEug1c7bV6yDgw9JOcLqiGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMGU0ZjkzNmUtMDkxYi0z MmY5LTk5YmItZjIyOTliODQxZTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJr54MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4ku+TQmbKCax5k7pTwwb20emsqPsCQPVOC1oPJZm2KmOHnqLtEQQy0 7kTW7sVuaz6TzsJKm6rf5elR1rSklY8Sbv1PWoa24zizupoJq9G1jaUReI0Oy73I iIwphFepHrAAbSPuraUU8xdhLPS2omC6bhRVUz8bChkxG1TWwOY4g9bKjaY1i5BI VcaQGFUwSUaiF2zqClQfx21r9sXl621uDaSnFIcthjUti+s1omN+EVsFApju8a99 km8V+oPkVwsxe9t9gXfDEdlF9gKIINS5n1mAXi9CcI1+qwD+CSFRc8Ux4KGtAkKt P2dh6qKv2eMdVhoQGsdRvoOIHAgEGhk= -----END CERTIFICATE-----Generated at Tue Oct 27 17:35:21 2026 by rpki-client