$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0e9683cb-1c32-372c-aa74-d2c3ab109436.roa File: 0e9683cb-1c32-372c-aa74-d2c3ab109436.roa (raw, json) Hash identifier: fNp0HUd/b1UI4UbXidWWU3IQTr8cLEcQAjIyTnbq9t8= Subject key identifier: 16:99:3A:2B:CD:77:D3:2C:FD:9E:DB:09:7E:EE:CB:1B:1A:71:B6:4B Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F99C10DE8A8BB31F06133DD80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0e9683cb-1c32-372c-aa74-d2c3ab109436.roa Signing time: Fri 23 Oct 2026 19:23:06 +0000 ROA not before: Fri 23 Oct 2026 19:23:06 +0000 ROA not after: Thu 21 Jan 2027 20:23:06 +0000 asID: 397719 IP address blocks: 38.106.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:99:c1:0d:e8:a8:bb:31:f0:61:33:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 23 19:23:06 2026 GMT Not After : Jan 21 20:23:06 2027 GMT Subject: CN=0cdab1fb-2645-485f-8d9e-5080c2d406b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:51:ce:2c:43:ad:d5:91:ae:97:56:41:c5:89: 97:c5:e6:ea:b0:e7:be:0a:11:46:54:2e:3d:21:a6: 22:77:50:d3:5d:8c:6c:b2:bd:4d:df:be:ae:5c:0a: fc:55:43:c0:67:e8:03:fd:76:de:71:fe:19:3d:81: 08:4d:58:61:1c:7b:5c:c0:a8:a3:9b:69:08:f9:f2: d2:6c:d4:d0:af:ad:00:61:ae:18:66:49:34:8d:a3: 83:2c:0d:dc:32:5d:8f:1a:26:ba:ca:18:9f:94:3d: 3b:b5:41:0f:a0:45:1d:0b:5e:50:40:e3:66:13:53: 61:7c:1f:9b:b5:4c:e7:68:39:ce:fe:6a:aa:74:0d: ec:80:41:86:67:d0:f6:b6:68:0b:fb:e6:2b:c9:35: 33:d2:44:b6:61:2a:e8:d9:25:8b:91:78:46:82:66: c7:e3:45:68:2e:66:bb:d5:66:5a:d8:38:a9:d8:74: 86:49:82:1b:59:f6:5d:94:da:82:34:2c:22:cc:27: 1a:ca:4e:5a:bd:2d:44:72:37:4d:c0:e0:7c:7a:84: bf:5e:99:28:d7:6e:a2:f7:6d:2a:24:77:e6:75:22: a3:6a:69:5e:15:c2:ec:74:f4:3e:df:12:22:44:79: e0:ef:bd:ea:60:b6:48:ec:aa:b7:71:1f:1a:af:ba: dd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:99:3A:2B:CD:77:D3:2C:FD:9E:DB:09:7E:EE:CB:1B:1A:71:B6:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0e9683cb-1c32-372c-aa74-d2c3ab109436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.106.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:bd:81:68:4c:bc:da:f7:f4:e4:1a:52:b4:d3:b3:1f:01:75: 25:84:e6:45:3a:d2:c5:c0:29:ce:4f:f1:6a:c2:41:44:f7:f2: 72:b0:d0:a0:1d:bb:2f:cc:6c:4f:d2:c2:17:74:68:5d:10:05: b7:e9:4e:86:0b:41:ce:51:24:0d:62:2a:37:54:4d:e4:79:20: 9b:70:82:b4:61:12:40:d2:0b:a0:25:b2:ae:b2:72:5f:bd:72: 6e:17:31:b6:97:54:8c:47:8f:f4:84:c4:e9:9b:1a:e9:1d:d0: 5e:4a:a6:da:25:6d:8f:9a:bd:65:4c:38:15:86:c0:5e:87:9a: ba:76:0d:27:61:b2:6d:6f:89:69:9b:e9:41:77:ba:10:a7:27: 80:fe:93:3a:4c:ae:56:6e:0d:6c:b1:83:7b:62:95:17:4b:94: 94:6e:9b:78:5d:3f:db:c2:60:9c:6d:bd:fc:c1:ec:5a:83:cc: ef:0b:9c:e0:d4:02:88:9c:92:7e:11:2a:ea:7e:d7:7e:5d:9d: 31:64:71:e8:32:68:17:0b:bc:2e:e8:33:e8:2c:59:3f:5a:9b: b1:08:70:ee:33:7e:e0:66:12:41:8b:92:31:f2:d3:40:e4:6c: bd:36:82:72:9f:54:71:1e:9c:64:05:72:d2:01:e2:cf:78:8a: dc:08:b5:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+ZwQ3oqLsx8GEz3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyMzE5MjMwNloXDTI3MDEyMTIwMjMwNlowLzEtMCsGA1UEAxMk MGNkYWIxZmItMjY0NS00ODVmLThkOWUtNTA4MGMyZDQwNmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVHOLEOt1ZGul1ZBxYmXxebqsOe+ChFGVC49 IaYid1DTXYxssr1N376uXAr8VUPAZ+gD/Xbecf4ZPYEITVhhHHtcwKijm2kI+fLS bNTQr60AYa4YZkk0jaODLA3cMl2PGia6yhiflD07tUEPoEUdC15QQONmE1NhfB+b tUznaDnO/mqqdA3sgEGGZ9D2tmgL++YryTUz0kS2YSro2SWLkXhGgmbH40VoLma7 1WZa2Dip2HSGSYIbWfZdlNqCNCwizCcayk5avS1EcjdNwOB8eoS/Xpko126i920q JHfmdSKjamleFcLsdPQ+3xIiRHng773qYLZI7Kq3cR8ar7rdOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaZOivNd9Ms/Z7bCX7uyxsacbZLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMGU5NjgzY2ItMWMzMi0z NzJjLWFhNzQtZDJjM2FiMTA5NDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJmooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADm9gWhMvNr39OQaUrTTsx8BdSWE5kU60sXAKc5P8WrCQUT38nKw0KAd uy/MbE/Swhd0aF0QBbfpToYLQc5RJA1iKjdUTeR5IJtwgrRhEkDSC6Alsq6ycl+9 cm4XMbaXVIxHj/SExOmbGukd0F5KptolbY+avWVMOBWGwF6Hmrp2DSdhsm1viWmb 6UF3uhCnJ4D+kzpMrlZuDWyxg3tilRdLlJRum3hdP9vCYJxtvfzB7FqDzO8LnODU Aoickn4RKup+135dnTFkcegyaBcLvC7oM+gsWT9am7EIcO4zfuBmEkGLkjHy00Dk bL02gnKfVHEenGQFctIB4s94itwItaA= -----END CERTIFICATE-----Generated at Tue Oct 27 18:14:25 2026 by rpki-client