$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1f8434b9-0826-33d6-bec7-5ea10de9352a.roa File: 1f8434b9-0826-33d6-bec7-5ea10de9352a.roa (raw, json) Hash identifier: ZTJLidKl78+b8RcJEKwetap96t8RNw1P/fG3XotbwUM= Subject key identifier: 48:3F:35:39:D3:D4:93:F7:A4:A1:90:9F:61:01:B9:59:BD:65:12:F0 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F7217E7054AD4EF8FD1AE3710 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1f8434b9-0826-33d6-bec7-5ea10de9352a.roa Signing time: Fri 09 Oct 2026 14:25:46 +0000 ROA not before: Fri 09 Oct 2026 14:25:46 +0000 ROA not after: Thu 07 Jan 2027 15:25:46 +0000 asID: 270187 IP address blocks: 38.45.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:72:17:e7:05:4a:d4:ef:8f:d1:ae:37:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 9 14:25:46 2026 GMT Not After : Jan 7 15:25:46 2027 GMT Subject: CN=d54e42e0-0a58-4d1e-8a3c-3c901c388639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:53:52:69:35:b6:20:02:4b:9a:63:5d:8a:43: 6c:9f:17:f6:9a:2c:c8:88:4e:bc:eb:c8:07:36:a5: 67:b3:38:76:5f:8e:b1:b0:2d:cd:89:83:f6:86:3a: 81:6a:ff:b0:51:41:80:a6:8f:5b:fd:a2:02:38:be: d7:78:52:52:dd:6c:37:a4:63:53:de:35:db:b7:c7: 53:0e:6e:05:16:fd:5b:b3:fd:d2:e1:0f:ef:aa:92: bc:55:52:03:8a:83:07:43:a7:42:ce:80:2a:00:de: 17:b3:fc:85:f4:f8:16:eb:a9:91:f8:c8:1f:dd:4f: f1:d9:50:fb:86:60:37:17:45:59:b8:56:88:55:31: 83:cb:83:7d:e5:83:88:46:2c:26:fb:90:5c:eb:b7: 26:a3:7e:83:1f:d1:1a:36:77:af:dc:91:95:42:e6: be:b6:cc:f6:34:d0:1c:5e:f2:3d:d6:d3:40:33:18: 3a:95:13:13:1b:6c:cc:d1:93:80:8f:8f:cb:24:51: 33:8e:02:12:3c:e7:ea:23:cf:49:a7:4c:0c:10:28: 30:bd:05:73:16:83:da:44:1b:fe:fa:50:b0:20:65: b0:a5:95:32:78:93:e1:a8:af:39:0a:bb:e1:e6:9c: 6e:33:55:b3:d2:86:21:8a:99:ca:07:02:ab:01:37: a3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:3F:35:39:D3:D4:93:F7:A4:A1:90:9F:61:01:B9:59:BD:65:12:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1f8434b9-0826-33d6-bec7-5ea10de9352a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.45.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:0b:4b:21:0c:60:15:4f:1f:4b:85:a1:69:b1:74:2f:a4:81: fa:c9:31:f9:7c:af:d2:27:20:d3:34:7d:b0:e9:53:e2:33:65: 8e:e4:1a:89:51:a9:bf:d0:5f:63:52:47:66:be:81:74:5b:7b: e7:ad:75:bb:33:6d:d5:4d:b3:b0:ef:2c:3c:28:75:84:d4:fa: 3b:31:a1:96:76:84:77:1c:ff:76:62:09:1e:db:fc:40:39:84: be:d7:fe:69:60:f2:92:82:cd:16:f3:72:a6:44:f2:1f:1d:a0: 80:d9:75:1d:d9:80:56:d5:f1:bf:78:f6:58:ae:e2:60:b3:10: 57:49:7d:e4:67:99:59:4a:ee:b0:1c:fe:3d:15:5d:7e:51:14: b0:29:79:15:6a:b9:d0:51:78:b1:ce:ec:ac:26:72:9d:83:d3: 2e:c1:80:0b:cb:a0:bb:bb:dd:ac:30:62:5f:ce:7c:2a:c1:92: c7:d9:c4:3c:96:de:ae:e5:13:90:10:c9:d3:e2:31:44:ed:de: 62:0b:90:8e:33:44:64:08:e1:27:df:fa:39:5d:61:66:5e:51: c5:e2:3f:cf:b9:d0:8e:2c:78:9d:c5:16:f2:1a:d9:d1:05:ef: fb:1c:0b:21:c2:e1:20:a1:5b:0d:a4:5a:b1:85:8c:26:ad:00: ba:3a:92:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9yF+cFStTvj9GuNxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwOTE0MjU0NloXDTI3MDEwNzE1MjU0NlowLzEtMCsGA1UEAxMk ZDU0ZTQyZTAtMGE1OC00ZDFlLThhM2MtM2M5MDFjMzg4NjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklNSaTW2IAJLmmNdikNsnxf2mizIiE6868gH NqVnszh2X46xsC3NiYP2hjqBav+wUUGApo9b/aICOL7XeFJS3Ww3pGNT3jXbt8dT Dm4FFv1bs/3S4Q/vqpK8VVIDioMHQ6dCzoAqAN4Xs/yF9PgW66mR+Mgf3U/x2VD7 hmA3F0VZuFaIVTGDy4N95YOIRiwm+5Bc67cmo36DH9EaNnev3JGVQua+tsz2NNAc XvI91tNAMxg6lRMTG2zM0ZOAj4/LJFEzjgISPOfqI89Jp0wMECgwvQVzFoPaRBv+ +lCwIGWwpZUyeJPhqK85Crvh5pxuM1Wz0oYhipnKBwKrATejwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEg/NTnT1JP3pKGQn2EBuVm9ZRLwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMWY4NDM0YjktMDgyNi0z M2Q2LWJlYzctNWVhMTBkZTkzNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJi36MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgLSyEMYBVPH0uFoWmxdC+kgfrJMfl8r9InINM0fbDpU+IzZY7kGolR qb/QX2NSR2a+gXRbe+etdbszbdVNs7DvLDwodYTU+jsxoZZ2hHcc/3ZiCR7b/EA5 hL7X/mlg8pKCzRbzcqZE8h8doIDZdR3ZgFbV8b949liu4mCzEFdJfeRnmVlK7rAc /j0VXX5RFLApeRVqudBReLHO7Kwmcp2D0y7BgAvLoLu73awwYl/OfCrBksfZxDyW 3q7lE5AQydPiMUTt3mILkI4zRGQI4Sff+jldYWZeUcXiP8+50I4seJ3FFvIa2dEF 7/scCyHC4SChWw2kWrGFjCatALo6kpg= -----END CERTIFICATE-----Generated at Tue Oct 27 18:15:02 2026 by rpki-client