$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0f23238b-ea82-3b4d-a65e-5f8f7e5d3c63.roa File: 0f23238b-ea82-3b4d-a65e-5f8f7e5d3c63.roa (raw, json) Hash identifier: Rr/8ndVc90WsKQp5GVBRn/PS3V/tQL7axiMQoFCftAw= Subject key identifier: 14:23:C5:C7:32:46:26:0E:07:46:14:AE:4B:3F:64:4D:CA:32:37:E1 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F85717B7BC14196131E1FB6F0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0f23238b-ea82-3b4d-a65e-5f8f7e5d3c63.roa Signing time: Fri 16 Oct 2026 12:46:37 +0000 ROA not before: Fri 16 Oct 2026 12:46:37 +0000 ROA not after: Thu 14 Jan 2027 13:46:37 +0000 asID: 134239 IP address blocks: 38.31.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:71:7b:7b:c1:41:96:13:1e:1f:b6:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 16 12:46:37 2026 GMT Not After : Jan 14 13:46:37 2027 GMT Subject: CN=d5e759ff-ae4a-42c7-a75d-8b39826c2d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f8:1f:8e:af:52:32:47:cb:c2:50:59:0e:bf: d9:59:5a:ea:83:79:2c:6f:66:92:28:6d:18:c5:74: 79:6c:02:10:26:43:84:a0:8c:7e:d7:b7:bd:88:44: 2c:10:3f:1a:2a:33:de:01:92:95:c5:bc:03:73:13: 0e:d1:9b:87:c0:6b:f5:ba:b5:18:7f:fb:92:33:13: 5c:06:2c:d0:e6:77:cf:2e:9b:b8:04:5f:bc:d4:18: b0:8b:a5:dd:de:f7:dc:2f:be:31:52:9c:58:a7:08: f5:c1:15:44:c2:20:2e:c5:16:4f:8f:ee:be:70:38: 86:d2:aa:ae:7e:7e:bb:29:03:46:86:d9:db:36:cc: 91:20:f9:e7:77:f4:43:08:fb:f9:14:04:bb:dd:c0: ba:1c:65:44:58:dc:d0:9a:98:f8:16:f5:2c:fa:b4: 44:f4:7f:e5:02:25:2f:c6:6b:e4:32:bc:49:8d:a1: 28:70:3f:38:1c:32:00:73:c3:5a:a7:ad:8a:44:f9: b8:bc:cc:11:9d:17:33:30:06:ba:36:fe:f4:96:41: 9e:39:65:8b:bb:e8:9b:e3:bd:7b:77:3c:a4:a9:9b: 18:3e:37:91:dd:0f:d1:63:3e:24:fc:92:25:3e:5e: fa:7e:3f:47:ea:a5:4c:06:1e:6c:16:85:49:cb:da: 57:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:23:C5:C7:32:46:26:0E:07:46:14:AE:4B:3F:64:4D:CA:32:37:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0f23238b-ea82-3b4d-a65e-5f8f7e5d3c63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.31.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:bf:3a:92:1f:eb:f9:58:dc:0d:c6:7c:73:c3:78:d8:7d:84: 7e:0c:ef:d4:b6:38:a2:93:86:79:3a:2d:c4:81:d5:18:86:df: ac:77:34:fa:e1:7c:61:31:74:f6:f6:a8:f9:15:0d:c9:3a:9a: 70:b9:7d:fb:17:bb:58:16:3d:8a:68:45:e7:af:36:d2:5b:84: 44:79:cd:23:ff:5a:85:15:a1:44:d9:ab:4d:a4:63:2f:2f:a4: 95:62:1a:d4:97:15:0f:2d:3b:e3:9f:e9:95:31:d8:28:46:88: 28:b7:e0:ad:6e:18:22:db:b3:6b:c9:1c:a1:1e:d1:e4:b0:48: 65:29:8b:ad:b6:9f:52:9d:f7:25:dc:b8:cf:20:dc:64:b1:b4: bd:3d:1d:4f:cd:b2:0c:04:19:93:09:61:4c:6e:0c:1c:00:f4: 97:cb:1a:29:b5:63:ee:0f:84:ba:c4:7f:d5:72:d2:2c:c3:65: 03:e4:de:ed:63:80:60:86:89:82:10:85:67:29:00:c8:ef:a7: 85:9b:89:19:ba:eb:e7:2e:9b:b9:2a:e8:2e:bb:42:e7:ea:39: b9:16:e6:0e:d5:fa:8b:f2:7d:d7:d1:54:98:a0:8f:66:d8:4a: 72:14:57:f8:b5:ef:34:e0:0c:88:5e:a9:48:8f:eb:5b:4b:8d: fa:d5:78:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FcXt7wUGWEx4ftvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxNjEyNDYzN1oXDTI3MDExNDEzNDYzN1owLzEtMCsGA1UEAxMk ZDVlNzU5ZmYtYWU0YS00MmM3LWE3NWQtOGIzOTgyNmMyZDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPgfjq9SMkfLwlBZDr/ZWVrqg3ksb2aSKG0Y xXR5bAIQJkOEoIx+17e9iEQsED8aKjPeAZKVxbwDcxMO0ZuHwGv1urUYf/uSMxNc BizQ5nfPLpu4BF+81Biwi6Xd3vfcL74xUpxYpwj1wRVEwiAuxRZPj+6+cDiG0qqu fn67KQNGhtnbNsyRIPnnd/RDCPv5FAS73cC6HGVEWNzQmpj4FvUs+rRE9H/lAiUv xmvkMrxJjaEocD84HDIAc8Nap62KRPm4vMwRnRczMAa6Nv70lkGeOWWLu+ib4717 dzykqZsYPjeR3Q/RYz4k/JIlPl76fj9H6qVMBh5sFoVJy9pXTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQjxccyRiYOB0YUrks/ZE3KMjfhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMGYyMzIzOGItZWE4Mi0z YjRkLWE2NWUtNWY4ZjdlNWQzYzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJh/9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEi/OpIf6/lY3A3GfHPDeNh9hH4M79S2OKKThnk6LcSB1RiG36x3NPrh fGExdPb2qPkVDck6mnC5ffsXu1gWPYpoReevNtJbhER5zSP/WoUVoUTZq02kYy8v pJViGtSXFQ8tO+Of6ZUx2ChGiCi34K1uGCLbs2vJHKEe0eSwSGUpi622n1Kd9yXc uM8g3GSxtL09HU/NsgwEGZMJYUxuDBwA9JfLGim1Y+4PhLrEf9Vy0izDZQPk3u1j gGCGiYIQhWcpAMjvp4WbiRm66+cum7kq6C67QufqObkW5g7V+ovyfdfRVJigj2bY SnIUV/i17zTgDIheqUiP61tLjfrVeNs= -----END CERTIFICATE-----Generated at Mon Oct 26 02:20:19 2026 by rpki-client