$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1734519c-da5b-3ce9-8ea2-b8decb5c2a8b.roa File: 1734519c-da5b-3ce9-8ea2-b8decb5c2a8b.roa (raw, json) Hash identifier: R9KHlqZ+wKjRyHWB2KKGZh27S3bNX/UZVvSTj4UCrTw= Subject key identifier: C3:96:71:62:F9:20:3E:19:84:DB:5D:E9:97:7A:47:8F:CE:7B:08:E6 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F66C2C3F5E2CCDDDC59EFE740 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1734519c-da5b-3ce9-8ea2-b8decb5c2a8b.roa Signing time: Mon 05 Oct 2026 13:00:13 +0000 ROA not before: Mon 05 Oct 2026 13:00:13 +0000 ROA not after: Sun 03 Jan 2027 14:00:13 +0000 asID: 138296 IP address blocks: 38.130.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:c2:c3:f5:e2:cc:dd:dc:59:ef:e7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 5 13:00:13 2026 GMT Not After : Jan 3 14:00:13 2027 GMT Subject: CN=a876505d-99aa-4bdc-8d5a-b2e33c04f98d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c2:34:10:68:fe:8e:2d:85:18:7f:95:26:56: 4a:56:fb:fa:f1:60:1d:e6:c5:cc:e1:09:58:22:9e: 29:53:58:d7:e1:d6:e6:4e:43:81:22:aa:da:8a:17: 94:ff:44:08:be:39:1c:3c:6b:9c:36:82:2e:75:69: a8:cb:f8:e9:fc:19:b4:db:31:43:b8:05:99:23:c4: ff:b1:d6:69:b2:cb:4e:4d:da:e1:91:88:cf:c9:0e: 36:b6:b0:bb:fb:32:97:ab:96:5d:09:f5:a1:82:00: a9:32:90:48:70:0c:48:75:59:a4:2a:99:85:2a:52: f7:65:0f:a4:73:91:88:95:40:f2:0b:54:29:ba:46: fd:b5:d3:cf:52:08:ac:5e:1b:86:b7:b6:7f:5e:1c: 65:0c:4b:16:d3:59:4f:77:7d:3a:9b:ad:ee:28:d5: 4b:32:bf:79:3b:2c:d8:1c:17:20:f0:c1:40:2e:a6: 92:86:95:a4:d7:a8:9e:36:61:0c:10:fc:dd:d3:b0: af:65:d5:a3:69:7d:39:9e:ae:31:4c:d8:fb:5e:ca: 18:be:cf:3a:e1:bf:d8:32:a7:9b:de:89:ab:cb:e9: 9a:7d:b5:9a:62:3e:c1:a2:a4:61:07:0c:10:ad:a1: d8:40:5a:a9:92:66:e9:ba:ab:6a:e1:5d:34:32:ea: 48:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:96:71:62:F9:20:3E:19:84:DB:5D:E9:97:7A:47:8F:CE:7B:08:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1734519c-da5b-3ce9-8ea2-b8decb5c2a8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.130.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:d2:52:9a:ab:ed:13:b4:8f:3c:34:c6:49:72:30:1b:84:47: a0:38:7e:59:80:cc:99:69:7d:a4:86:8b:20:6a:14:39:0d:bf: 28:8a:35:8f:24:87:78:51:88:03:50:0a:13:97:87:dc:45:4a: 2a:42:1a:87:1e:61:ca:8d:5e:ea:96:fa:f3:c1:2d:75:35:61: 6c:8e:04:b1:91:8c:db:09:a5:36:66:6c:25:9c:50:0b:b6:9c: 74:a9:e4:56:58:02:cf:1a:b9:57:b7:41:18:e1:db:43:21:2a: ca:64:a7:28:1c:3a:2e:0a:bc:99:85:cb:a3:fe:a7:ac:54:0c: 31:49:ea:8c:64:a5:49:80:56:15:fa:08:fd:c4:84:38:11:74: c6:73:d2:e8:71:eb:28:a0:bf:e3:5f:60:63:b4:73:1d:a9:0e: 60:7d:ba:bd:26:4a:63:0c:b2:d4:58:fd:80:63:9e:0e:58:af: 42:29:7d:1d:4a:54:1b:20:3b:b8:48:ae:0b:a0:5c:72:05:82: 1b:9d:62:5f:cc:74:9b:0c:95:b1:8f:b7:0f:fa:e0:cb:99:94: ba:33:c0:5e:41:25:34:52:fb:53:90:80:03:a6:39:63:56:3a: c1:1c:ba:c8:ea:09:fe:68:70:e2:ca:e9:72:9f:0a:9f:84:9d: df:32:fd:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9mwsP14szd3Fnv50AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwNTEzMDAxM1oXDTI3MDEwMzE0MDAxM1owLzEtMCsGA1UEAxMk YTg3NjUwNWQtOTlhYS00YmRjLThkNWEtYjJlMzNjMDRmOThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMI0EGj+ji2FGH+VJlZKVvv68WAd5sXM4QlY Ip4pU1jX4dbmTkOBIqraiheU/0QIvjkcPGucNoIudWmoy/jp/Bm02zFDuAWZI8T/ sdZpsstOTdrhkYjPyQ42trC7+zKXq5ZdCfWhggCpMpBIcAxIdVmkKpmFKlL3ZQ+k c5GIlUDyC1Qpukb9tdPPUgisXhuGt7Z/XhxlDEsW01lPd306m63uKNVLMr95OyzY HBcg8MFALqaShpWk16ieNmEMEPzd07CvZdWjaX05nq4xTNj7XsoYvs864b/YMqeb 3omry+mafbWaYj7BoqRhBwwQraHYQFqpkmbpuqtq4V00MupIPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOWcWL5ID4ZhNtd6Zd6R4/OewjmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMTczNDUxOWMtZGE1Yi0z Y2U5LThlYTItYjhkZWNiNWMyYThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJoKQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALXSUpqr7RO0jzw0xklyMBuER6A4flmAzJlpfaSGiyBqFDkNvyiKNY8k h3hRiANQChOXh9xFSipCGoceYcqNXuqW+vPBLXU1YWyOBLGRjNsJpTZmbCWcUAu2 nHSp5FZYAs8auVe3QRjh20MhKspkpygcOi4KvJmFy6P+p6xUDDFJ6oxkpUmAVhX6 CP3EhDgRdMZz0uhx6yigv+NfYGO0cx2pDmB9ur0mSmMMstRY/YBjng5Yr0IpfR1K VBsgO7hIrgugXHIFghudYl/MdJsMlbGPtw/64MuZlLozwF5BJTRS+1OQgAOmOWNW OsEcusjqCf5ocOLK6XKfCp+End8y/Sk= -----END CERTIFICATE-----Generated at Tue Oct 27 13:19:21 2026 by rpki-client