$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/15615ba6-816e-38a3-970f-4197d33e7606.roa File: 15615ba6-816e-38a3-970f-4197d33e7606.roa (raw, json) Hash identifier: wKlKDrr2kwVWR+3+PBRcQ10NyFkhruaE/fM3e97IMXQ= Subject key identifier: F0:1D:71:4A:FE:4D:04:09:66:49:10:65:58:5B:98:E9:69:65:B6:03 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F8F3DA898F07980337AE44900 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/15615ba6-816e-38a3-970f-4197d33e7606.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 149725 IP address blocks: 38.58.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:a8:98:f0:79:80:33:7a:e4:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=93eafe38-50ab-49fc-b6fb-d1f07d6d9482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5a:35:93:4e:bd:ca:61:1d:c4:6f:a8:01:83: d7:24:ac:18:a7:9f:e2:6b:83:63:5c:c3:50:17:37: 58:1b:de:d7:28:1f:fa:94:22:ff:11:34:df:27:02: 9f:c7:6e:11:13:16:2f:41:10:34:f0:f1:81:09:ea: e2:4a:b1:19:65:3e:5a:0d:7c:5f:5f:e5:3c:7e:3e: 51:9b:87:5f:81:64:ac:9e:6f:d2:2c:69:3c:6c:e5: e9:d3:aa:99:72:dc:fb:b3:c2:62:69:dc:ac:25:80: 3c:d4:33:aa:72:9a:fc:b4:3f:6e:82:04:04:f8:76: 9e:ba:b7:51:e7:f8:9f:9b:50:ef:79:63:61:9f:7e: e0:77:9d:45:0a:f7:8a:fd:e0:2e:db:aa:55:99:2f: 7b:8a:11:4f:f3:d2:1e:78:b3:1b:5c:0d:25:8f:51: 91:34:ca:fb:c8:86:ce:38:03:0a:2a:e2:04:8f:ff: 3c:45:01:55:72:d6:30:f1:c6:4d:7e:3b:d7:c2:5a: 4b:49:46:47:7e:ac:56:1b:2b:4f:59:37:94:9a:b0: 8f:cb:17:e6:0e:1c:7a:58:ef:29:94:5c:dc:0d:65: 9f:2f:90:e1:dd:aa:f8:a4:eb:29:0b:b9:a5:03:53: 48:7a:8d:43:3f:fd:e1:75:47:7d:b9:3d:f0:b1:eb: 43:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:1D:71:4A:FE:4D:04:09:66:49:10:65:58:5B:98:E9:69:65:B6:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/15615ba6-816e-38a3-970f-4197d33e7606.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.58.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:e1:6a:cf:5f:db:ab:e4:8d:d4:a8:3f:4b:1f:da:95:1a:bf: 77:5c:f5:01:28:e5:ea:e8:ee:bc:3c:20:8d:b2:c8:01:89:60: bc:72:47:ad:69:71:f6:f6:28:b3:d3:80:50:df:13:35:9e:70: ad:61:e8:de:11:14:19:71:f4:fc:b4:4c:c8:4b:6c:44:25:63: 6c:e2:73:45:d7:01:00:2e:60:d7:5f:9e:d9:29:42:ef:b3:12: 1e:c6:65:38:8f:d2:d0:7d:9d:c5:96:0a:c5:bc:72:21:bc:36: 3c:12:24:f2:11:d1:1e:4b:6f:7c:0f:79:53:df:1a:8a:ef:dd: 81:2d:3d:13:e6:84:d9:6b:b8:e4:38:f8:2d:35:05:27:d6:ba: 57:a9:08:dd:15:aa:7c:08:fa:e9:08:36:5c:ce:bd:f7:c7:88: 4a:bb:66:64:79:18:e8:20:12:73:90:2d:5d:3f:d1:a4:f7:cf: 1a:83:ad:56:b8:68:11:1b:1c:4d:92:96:17:af:1d:26:e4:2c: a7:ec:b6:27:fe:c0:97:73:95:04:68:2b:76:ff:7a:7a:59:8e: c1:e7:1b:a6:f3:d3:8b:ff:7f:c3:a7:55:5d:e6:ee:1a:b2:f9: 42:76:cc:79:b2:95:5f:7d:d2:79:fd:05:d2:71:a2:f5:d0:3b: ef:e7:44:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPaiY8HmAM3rkSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk OTNlYWZlMzgtNTBhYi00OWZjLWI2ZmItZDFmMDdkNmQ5NDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVo1k069ymEdxG+oAYPXJKwYp5/ia4NjXMNQ FzdYG97XKB/6lCL/ETTfJwKfx24RExYvQRA08PGBCeriSrEZZT5aDXxfX+U8fj5R m4dfgWSsnm/SLGk8bOXp06qZctz7s8JiadysJYA81DOqcpr8tD9uggQE+HaeurdR 5/ifm1DveWNhn37gd51FCveK/eAu26pVmS97ihFP89IeeLMbXA0lj1GRNMr7yIbO OAMKKuIEj/88RQFVctYw8cZNfjvXwlpLSUZHfqxWGytPWTeUmrCPyxfmDhx6WO8p lFzcDWWfL5Dh3ar4pOspC7mlA1NIeo1DP/3hdUd9uT3wsetDPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPAdcUr+TQQJZkkQZVhbmOlpZbYDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMTU2MTViYTYtODE2ZS0z OGEzLTk3MGYtNDE5N2QzM2U3NjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJjp/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvhas9f26vkjdSoP0sf2pUav3dc9QEo5ero7rw8II2yyAGJYLxyR61p cfb2KLPTgFDfEzWecK1h6N4RFBlx9Py0TMhLbEQlY2zic0XXAQAuYNdfntkpQu+z Eh7GZTiP0tB9ncWWCsW8ciG8NjwSJPIR0R5Lb3wPeVPfGorv3YEtPRPmhNlruOQ4 +C01BSfWulepCN0VqnwI+ukINlzOvffHiEq7ZmR5GOggEnOQLV0/0aT3zxqDrVa4 aBEbHE2SlhevHSbkLKfstif+wJdzlQRoK3b/enpZjsHnG6bz04v/f8OnVV3m7hqy +UJ2zHmylV990nn9BdJxovXQO+/nRJM= -----END CERTIFICATE-----Generated at Tue Oct 27 15:22:18 2026 by rpki-client