$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/20cb9b6b-86ee-35b8-a9a4-a864941e0f02.roa File: 20cb9b6b-86ee-35b8-a9a4-a864941e0f02.roa (raw, json) Hash identifier: bftx8I4L4QDkAGGtw+DBmRZi5EQrPe7/7fpRnjqS3RY= Subject key identifier: 81:21:5C:45:88:A6:CA:77:06:30:8B:9C:05:50:5D:6D:89:F3:2E:CB Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F80568B59862FCEA6D5CAF400 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/20cb9b6b-86ee-35b8-a9a4-a864941e0f02.roa Signing time: Wed 14 Oct 2026 16:53:18 +0000 ROA not before: Wed 14 Oct 2026 16:53:18 +0000 ROA not after: Tue 12 Jan 2027 17:49:25 +0000 asID: 206947 IP address blocks: 38.20.12.0/24 maxlen: 24 38.225.77.0/24 maxlen: 24 206.84.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:80:56:8b:59:86:2f:ce:a6:d5:ca:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 14 16:53:18 2026 GMT Not After : Jan 12 17:49:25 2027 GMT Subject: CN=4e5bfcfe-8f2f-4cb5-9d56-7239cd74cc53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5a:6c:1f:54:9a:5a:65:c4:64:0c:a7:fb:53: 82:39:f0:d8:44:6d:a7:1f:f1:4e:fc:15:bd:d1:01: eb:2b:cc:92:52:2b:8c:8d:db:19:4d:dd:ad:ec:a3: 65:71:62:78:60:35:55:9e:93:87:d7:6e:32:5e:0c: 2e:78:76:75:6e:9c:df:e9:fe:87:d5:47:05:8c:b1: 60:92:e1:12:e4:c0:ca:fb:18:c3:45:97:73:f9:13: db:49:c7:36:85:24:f1:5e:15:7f:96:fc:8c:82:a6: c0:b4:5b:30:32:50:2d:c6:ce:de:c9:98:2e:be:48: f8:aa:47:4f:43:9b:11:a4:14:1a:f9:5d:ba:06:35: 23:74:bc:e6:06:d4:09:c0:d5:0d:aa:44:fc:24:bd: 7e:f9:c7:b3:bb:e2:93:36:de:c6:cc:49:f6:36:54: 51:8f:10:73:4a:99:b3:e1:e0:c9:c9:b8:4c:0f:f7: 6b:c5:0f:cc:9f:94:ac:ec:13:49:f3:1d:73:e4:9a: e8:8c:f8:e4:e8:53:66:96:20:45:15:6c:61:fd:43: fb:6b:47:c4:65:4d:72:c8:f1:1a:f1:a8:93:39:a9: 05:16:e6:76:58:0a:ef:27:5b:07:30:9b:61:90:ac: 12:c2:3f:c0:d9:26:a3:8a:36:f1:34:c5:53:c0:b9: d9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:21:5C:45:88:A6:CA:77:06:30:8B:9C:05:50:5D:6D:89:F3:2E:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/20cb9b6b-86ee-35b8-a9a4-a864941e0f02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.20.12.0/24 38.225.77.0/24 206.84.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:f2:82:97:1c:52:af:52:bd:25:df:db:35:ea:d4:fb:4b:9c: c3:99:e0:76:7e:e4:bb:04:b8:6f:af:ac:90:1c:94:cf:25:13: fa:9b:df:bf:ac:cb:a2:ef:55:a5:c6:ae:04:2b:d4:8e:fa:0c: ca:ab:f2:2b:de:3e:b4:26:38:88:d4:11:6f:7c:a4:ff:77:17: 77:5a:2a:de:93:fc:f1:d6:bd:e1:16:0f:0b:85:d8:db:d6:1a: cc:b7:45:db:4a:88:14:98:46:df:5a:b2:7b:55:c5:aa:75:c3: a4:f0:dd:4a:81:62:b5:d6:dd:8e:32:4f:80:c5:fc:93:35:30: 78:77:6e:d8:04:de:f1:15:92:48:07:1d:6a:bc:25:49:a8:6c: 62:75:43:49:c2:06:d9:11:86:e3:d3:7e:a2:dc:59:cb:93:8c: 68:52:d8:42:5b:f4:c1:71:41:1b:28:6d:b5:18:72:77:75:72: d7:2e:49:a2:ae:20:14:f0:65:05:49:01:b7:81:20:fb:8f:65: fa:ca:5d:d0:4b:df:82:83:b4:26:e2:47:ba:25:d4:75:3e:68: 7c:28:10:e6:dd:bd:63:9a:97:fb:67:da:37:cb:d4:5f:ad:59: 5a:3e:0b:e1:35:c3:7c:a1:1a:0c:fe:2b:fa:6b:e5:d9:e4:63: 52:7c:bc:2c -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE+AVotZhi/OptXK9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxNDE2NTMxOFoXDTI3MDExMjE3NDkyNVowLzEtMCsGA1UEAxMk NGU1YmZjZmUtOGYyZi00Y2I1LTlkNTYtNzIzOWNkNzRjYzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVpsH1SaWmXEZAyn+1OCOfDYRG2nH/FO/BW9 0QHrK8ySUiuMjdsZTd2t7KNlcWJ4YDVVnpOH124yXgwueHZ1bpzf6f6H1UcFjLFg kuES5MDK+xjDRZdz+RPbScc2hSTxXhV/lvyMgqbAtFswMlAtxs7eyZguvkj4qkdP Q5sRpBQa+V26BjUjdLzmBtQJwNUNqkT8JL1++cezu+KTNt7GzEn2NlRRjxBzSpmz 4eDJybhMD/drxQ/Mn5Ss7BNJ8x1z5JrojPjk6FNmliBFFWxh/UP7a0fEZU1yyPEa 8aiTOakFFuZ2WArvJ1sHMJthkKwSwj/A2SajijbxNMVTwLnZTwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFIEhXEWIpsp3BjCLnAVQXW2J8y7LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMjBjYjliNmItODZlZS0z NWI4LWE5YTQtYTg2NDk0MWUwZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJhQMAwQA JuFNAwQAzlTHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAI7ygpccUq9SvSXf2zXq1PtLnMOZ4HZ+5LsEuG+v rJAclM8lE/qb37+sy6LvVaXGrgQr1I76DMqr8ivePrQmOIjUEW98pP93F3daKt6T /PHWveEWDwuF2NvWGsy3RdtKiBSYRt9asntVxap1w6Tw3UqBYrXW3Y4yT4DF/JM1 MHh3btgE3vEVkkgHHWq8JUmobGJ1Q0nCBtkRhuPTfqLcWcuTjGhS2EJb9MFxQRso bbUYcnd1ctcuSaKuIBTwZQVJAbeBIPuPZfrKXdBL34KDtCbiR7ol1HU+aHwoEObd vWOal/tn2jfL1F+tWVo+C+E1w3yhGgz+K/pr5dnkY1J8vCw= -----END CERTIFICATE-----Generated at Tue Oct 27 18:14:26 2026 by rpki-client