$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1bf8bf91-df85-3044-af28-997d6530ba59.roa File: 1bf8bf91-df85-3044-af28-997d6530ba59.roa (raw, json) Hash identifier: fte2HnV0RL7vQGuIEORVMjysdmlSbSvWJDkjGwFOaP0= Subject key identifier: BD:D8:05:A5:0C:2B:30:A2:B1:90:D7:D8:3A:A9:37:DD:48:10:76:C8 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F7352E2A8702D4535EE9BF700 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1bf8bf91-df85-3044-af28-997d6530ba59.roa Signing time: Sat 10 Oct 2026 01:00:13 +0000 ROA not before: Sat 10 Oct 2026 01:00:13 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 11314 IP address blocks: 38.21.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:52:e2:a8:70:2d:45:35:ee:9b:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 10 01:00:13 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=d27edd8d-643b-4931-95ca-075693c196b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a9:b6:af:71:57:7d:c0:3f:ef:0d:57:09:82: a2:0e:6e:0f:15:ea:17:23:32:3f:94:72:ea:78:bb: 6e:66:4e:12:e4:e8:5f:9e:d3:44:f8:21:4f:02:f6: 76:37:13:dd:a3:14:a1:5d:49:9f:7a:90:98:8a:d6: 23:ea:20:f7:c1:e5:38:fc:71:af:5a:fa:8c:df:9d: ad:16:53:f4:b7:2a:dd:bc:2d:9f:47:63:29:24:ac: cc:5f:9d:8a:1d:1d:74:a0:39:08:de:a3:e5:6c:4d: a1:29:5d:e7:e4:c9:e8:4b:da:83:c7:ce:89:d4:f3: 55:df:a5:eb:68:f3:e4:66:ef:ca:f2:98:2a:98:94: 66:a9:3c:85:45:93:5f:3e:14:ba:49:84:23:5c:10: 44:87:0e:64:de:07:43:0b:29:ae:05:d3:3a:1c:03: 16:d4:01:34:db:df:a0:4d:e0:a0:18:3e:07:4d:80: 01:49:70:90:38:99:25:49:21:44:b9:0a:56:14:d1: 74:cb:a1:85:e3:70:bb:3f:1a:b9:25:9e:6c:a9:b7: d1:d1:2f:df:90:3f:be:af:85:3f:ec:04:61:77:96: bc:68:35:0d:ad:b5:95:d9:91:2e:4f:59:36:cc:7b: d5:70:0e:0c:ca:85:c3:af:2e:7f:11:86:31:8f:1f: c1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D8:05:A5:0C:2B:30:A2:B1:90:D7:D8:3A:A9:37:DD:48:10:76:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1bf8bf91-df85-3044-af28-997d6530ba59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.21.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:64:45:f1:31:f7:e6:99:a5:ff:c3:ab:e7:c4:d0:be:67:ed: d9:31:1b:b9:45:69:19:48:79:89:6f:0f:a2:49:a8:3c:f3:41: f9:25:4e:8e:81:08:1c:41:18:23:b2:75:21:6f:56:2d:a0:09: e9:ee:d5:a0:27:c6:a3:e3:0a:d9:01:01:f0:09:2e:74:da:62: 4a:91:90:ea:0d:0d:8e:ea:38:03:6e:d3:d0:91:b4:c0:13:c9: a7:b4:e0:df:c5:65:a7:e5:64:a5:2b:31:ae:df:0e:20:28:77: 32:93:f2:29:98:99:29:f8:1f:9e:46:26:44:6d:d1:b1:79:75: 5a:5e:b9:fd:e7:5e:5b:6b:a5:69:76:18:8a:d2:2d:b6:7f:66: b1:7b:f7:c4:39:b2:ac:e5:9b:c1:f3:6c:7d:4a:a6:73:73:12: da:88:f3:eb:4a:60:ad:10:c1:3a:8c:85:b2:9b:00:33:f5:f2: ac:b2:42:a2:44:34:28:69:ee:82:d7:0c:d7:13:4a:fa:5c:b6: 20:d4:fe:34:09:ee:a1:f4:dc:e5:09:c2:89:e1:e7:a8:d4:78: 60:56:11:ca:87:b1:5f:76:39:9b:bc:6f:99:6e:42:c0:6c:8e: 5a:f0:7e:6f:0c:b4:aa:6f:90:b7:0d:e9:1a:d8:88:2d:5e:dd: 36:78:e6:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9zUuKocC1FNe6b9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk ZDI3ZWRkOGQtNjQzYi00OTMxLTk1Y2EtMDc1NjkzYzE5NmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Km2r3FXfcA/7w1XCYKiDm4PFeoXIzI/lHLq eLtuZk4S5OhfntNE+CFPAvZ2NxPdoxShXUmfepCYitYj6iD3weU4/HGvWvqM352t FlP0tyrdvC2fR2MpJKzMX52KHR10oDkI3qPlbE2hKV3n5MnoS9qDx86J1PNV36Xr aPPkZu/K8pgqmJRmqTyFRZNfPhS6SYQjXBBEhw5k3gdDCymuBdM6HAMW1AE029+g TeCgGD4HTYABSXCQOJklSSFEuQpWFNF0y6GF43C7Pxq5JZ5sqbfR0S/fkD++r4U/ 7ARhd5a8aDUNrbWV2ZEuT1k2zHvVcA4MyoXDry5/EYYxjx/BeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3YBaUMKzCisZDX2DqpN91IEHbIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMWJmOGJmOTEtZGY4NS0z MDQ0LWFmMjgtOTk3ZDY1MzBiYTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJhWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVkRfEx9+aZpf/Dq+fE0L5n7dkxG7lFaRlIeYlvD6JJqDzzQfklTo6B CBxBGCOydSFvVi2gCenu1aAnxqPjCtkBAfAJLnTaYkqRkOoNDY7qOANu09CRtMAT yae04N/FZaflZKUrMa7fDiAodzKT8imYmSn4H55GJkRt0bF5dVpeuf3nXltrpWl2 GIrSLbZ/ZrF798Q5sqzlm8HzbH1KpnNzEtqI8+tKYK0QwTqMhbKbADP18qyyQqJE NChp7oLXDNcTSvpctiDU/jQJ7qH03OUJwonh56jUeGBWEcqHsV92OZu8b5luQsBs jlrwfm8MtKpvkLcN6RrYiC1e3TZ45tg= -----END CERTIFICATE-----Generated at Sun Oct 25 01:32:23 2026 by rpki-client