$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1244254d-0342-3238-9dd8-69d6448ce527.roa File: 1244254d-0342-3238-9dd8-69d6448ce527.roa (raw, json) Hash identifier: GU3IXu1+hvve//MeWp+V8wm6S3FjtcxSGcfLRqoAvWI= Subject key identifier: 38:D2:35:63:AA:4F:1B:F9:2C:7E:A6:48:09:C5:73:03:EE:5B:3E:7C Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F7BB2F14B0C4FAE65AF2A5D00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1244254d-0342-3238-9dd8-69d6448ce527.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 275714 IP address blocks: 38.20.0.0/23 maxlen: 24 38.51.134.0/23 maxlen: 24 38.52.128.0/23 maxlen: 24 38.210.208.0/22 maxlen: 24 38.210.212.0/23 maxlen: 24 38.211.128.0/22 maxlen: 24 38.255.122.0/23 maxlen: 24 204.157.108.0/22 maxlen: 24 209.61.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b2:f1:4b:0c:4f:ae:65:af:2a:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=63f46f06-f547-4ee4-baf3-a67db0454e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ad:2c:84:4b:8c:dd:59:4b:1c:61:38:ab:55: 36:f2:b7:cd:d2:3e:6f:cb:82:ca:60:6b:d0:72:03: 38:5b:ba:94:68:f0:3b:60:e5:eb:cc:c0:16:23:86: 42:85:32:c3:bc:a9:3a:1a:21:bd:9d:34:e4:98:f4: b0:bf:3d:b7:0d:8f:37:f3:68:3f:3d:35:e7:11:56: 21:55:92:c7:f1:d8:f0:de:61:5a:18:81:c5:36:40: af:ee:f7:b8:3a:2f:97:9d:b5:1f:30:48:21:24:64: dc:6a:67:f4:1c:7d:a3:69:8c:d3:95:b4:5c:10:a2: 49:40:35:53:d3:fd:fa:92:c1:f6:44:c7:66:82:02: 94:df:b0:00:5c:a3:dd:02:15:8a:59:79:56:ed:b4: e7:71:fa:f8:88:7d:1b:a6:70:d0:56:c7:2f:73:a5: bd:40:87:9d:6a:74:1d:7c:ec:38:fa:9c:f8:80:a6: ed:50:6f:74:54:79:2e:2c:82:15:73:94:d3:63:00: 85:dc:e5:17:0f:09:a4:f1:01:a0:76:b9:64:8b:dd: d5:54:9b:9f:61:6d:d2:d7:35:25:27:21:de:60:a7: 4c:a7:01:05:c7:73:64:22:10:57:8f:43:4a:e1:6d: c5:9d:d9:49:82:a4:e3:3a:61:11:39:f5:32:03:32: d4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D2:35:63:AA:4F:1B:F9:2C:7E:A6:48:09:C5:73:03:EE:5B:3E:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1244254d-0342-3238-9dd8-69d6448ce527.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.20.0.0/23 38.51.134.0/23 38.52.128.0/23 38.210.208.0-38.210.213.255 38.211.128.0/22 38.255.122.0/23 204.157.108.0/22 209.61.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:d7:81:ba:99:fb:13:e9:48:a9:2c:fd:74:40:23:5e:5b:0e: d6:8d:1d:80:cc:32:6e:6c:ee:93:76:b3:c3:2a:3a:13:01:c6: 03:b3:12:4c:66:96:bd:f7:f1:ed:9b:97:56:aa:ec:01:18:1a: 88:a8:8a:cb:18:3f:ff:8e:3c:e5:09:50:7c:2a:dc:46:9f:fb: ac:52:c4:cd:7b:d0:0f:1b:cd:3d:ff:3e:16:bc:e8:c1:b3:3d: e1:69:04:86:4e:8c:7b:38:e6:85:71:6b:eb:5f:82:ff:36:3c: 1c:8d:cd:de:c3:31:9a:cd:6a:1c:af:64:16:bb:f2:55:df:a1: ac:20:f0:09:6c:26:f9:66:0e:95:20:82:d3:1f:0d:f0:27:ea: f8:a4:50:95:4a:4e:61:93:2b:2c:2f:8c:c6:e4:d8:be:c7:43: 3b:bd:01:80:12:0b:31:a0:c2:72:db:54:6f:8b:50:4a:b3:07: 26:69:4d:7b:9e:e5:38:b6:93:e9:14:c8:49:dd:5f:cd:ae:bf: 22:91:55:a1:f5:c4:42:3b:64:fd:2b:62:42:06:87:79:ea:37: 2f:03:ea:b1:e6:b3:16:d6:a9:1b:52:0f:3c:42:1c:77:98:ee: 86:f3:50:c9:25:58:13:b7:3f:27:d3:0f:21:fe:57:dc:9b:0d: 3e:3e:df:57 -----BEGIN CERTIFICATE----- MIIGdTCCBV2gAwIBAgIUAQ0Mn0MoWE97svFLDE+uZa8qXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk NjNmNDZmMDYtZjU0Ny00ZWU0LWJhZjMtYTY3ZGIwNDU0ZTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq0shEuM3VlLHGE4q1U28rfN0j5vy4LKYGvQ cgM4W7qUaPA7YOXrzMAWI4ZChTLDvKk6GiG9nTTkmPSwvz23DY8382g/PTXnEVYh VZLH8djw3mFaGIHFNkCv7ve4Oi+XnbUfMEghJGTcamf0HH2jaYzTlbRcEKJJQDVT 0/36ksH2RMdmggKU37AAXKPdAhWKWXlW7bTncfr4iH0bpnDQVscvc6W9QIedanQd fOw4+pz4gKbtUG90VHkuLIIVc5TTYwCF3OUXDwmk8QGgdrlki93VVJufYW3S1zUl JyHeYKdMpwEFx3NkIhBXj0NK4W3FndlJgqTjOmEROfUyAzLUMwIDAQABo4IDhzCC A4MwHQYDVR0OBBYEFDjSNWOqTxv5LH6mSAnFcwPuWz58MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMTI0NDI1NGQtMDM0Mi0z MjM4LTlkZDgtNjlkNjQ0OGNlNTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQBJhQAAwQB JjOGAwQBJjSAMAwDBAQm0tADBAEm0tQDBAIm04ADBAEm/3oDBALMnWwDBALRPSQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEACteBupn7E+lIqSz9dEAjXlsO1o0dgMwybmzuk3azwyo6EwHGA7MS TGaWvffx7ZuXVqrsARgaiKiKyxg//4485QlQfCrcRp/7rFLEzXvQDxvNPf8+Frzo wbM94WkEhk6MezjmhXFr61+C/zY8HI3N3sMxms1qHK9kFrvyVd+hrCDwCWwm+WYO lSCC0x8N8Cfq+KRQlUpOYZMrLC+MxuTYvsdDO70BgBILMaDCcttUb4tQSrMHJmlN e57lOLaT6RTISd1fza6/IpFVofXEQjtk/StiQgaHeeo3LwPqseazFtapG1IPPEIc d5juhvNQySVYE7c/J9MPIf5X3JsNPj7fVw== -----END CERTIFICATE-----Generated at Wed Oct 28 21:07:09 2026 by rpki-client