$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/25c0c5d5-94bf-3b8a-9700-33c3cf4cf081.roa File: 25c0c5d5-94bf-3b8a-9700-33c3cf4cf081.roa (raw, json) Hash identifier: RMWjgXN5qJr0MfhrTGCcPyFeeav0Bs4tVSI0ULqQb6c= Subject key identifier: 74:20:A3:D9:BD:17:A2:F5:78:62:E2:FD:23:9E:1A:C6:0E:F5:57:BA Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F7352DE18BEC4485E33D20A00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/25c0c5d5-94bf-3b8a-9700-33c3cf4cf081.roa Signing time: Sat 10 Oct 2026 01:00:13 +0000 ROA not before: Sat 10 Oct 2026 01:00:13 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 139058 IP address blocks: 38.56.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:52:de:18:be:c4:48:5e:33:d2:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 10 01:00:13 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=dab4eb39-c499-4d06-a535-7a27d294c60c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fd:fc:fc:a2:4e:97:77:4b:6e:b1:79:cf:1c: 01:ad:cf:83:3b:f1:f2:ec:94:f5:a1:4a:85:2c:13: 7a:8d:3c:04:28:27:c3:46:c9:65:18:02:d8:b7:e3: 88:52:90:14:b7:03:c3:29:ac:d0:5c:9c:d7:fd:ab: 87:49:93:5d:b8:c7:95:bf:51:3f:14:5e:db:2a:7b: e0:0e:22:61:7f:1f:ad:61:0a:04:38:81:0d:de:2e: f5:22:cf:0d:ee:77:2f:b5:c3:b0:ac:8b:d4:0c:9a: 1b:e9:50:dc:24:ee:11:cf:1b:ec:e2:09:7e:88:9f: 9b:23:ad:fd:49:c5:ae:28:e0:60:52:ce:7d:31:d2: bf:b4:dd:75:96:1e:28:c2:41:96:41:76:df:64:00: ae:15:59:e2:d3:29:da:21:12:f7:a1:5c:03:16:be: 14:88:6e:0c:2d:6b:08:f3:92:ab:35:63:3b:28:61: 54:a1:fb:23:87:d6:82:84:24:22:fa:0b:3c:0a:e7: 18:cf:7f:a3:7a:e9:40:16:24:d5:bc:d4:12:1d:5f: f0:49:44:3f:e0:42:e0:c6:b9:c6:e4:f9:5b:08:2f: 0d:4c:a1:3c:e1:29:bf:14:24:89:ca:a3:9d:0e:32: 5a:a8:72:be:7c:a7:93:43:f5:58:6e:2c:e7:e5:32: ba:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:20:A3:D9:BD:17:A2:F5:78:62:E2:FD:23:9E:1A:C6:0E:F5:57:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/25c0c5d5-94bf-3b8a-9700-33c3cf4cf081.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.56.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:89:7d:fa:50:e9:b4:0a:e2:79:51:47:05:67:ec:73:e7:90: 76:0d:42:0e:25:a9:37:df:6a:e7:a7:d0:c1:a3:1a:fc:bd:5e: a2:92:5d:b0:b3:63:38:c8:65:11:a0:5a:c6:91:8a:07:ad:12: f8:c6:f9:12:8e:80:66:e8:84:0f:b0:a9:ba:66:1e:f5:b8:e7: af:a4:7d:53:75:35:05:e0:44:60:ba:08:3d:43:f3:3f:8a:5f: c8:4a:a9:b2:59:02:d1:e5:71:97:17:9a:45:52:40:67:c9:8b: 68:02:6c:50:d1:3d:1f:ee:9b:fd:36:29:d9:e1:b4:4c:df:b6: cc:8b:58:3b:b6:5d:6f:17:68:2b:a8:4a:44:c5:a1:9f:22:93: 8a:9f:d6:3b:40:63:f6:33:dd:a3:c9:0f:8b:ec:f8:18:92:05: d5:33:bc:6b:5f:17:e8:74:37:cb:25:e4:06:8f:8a:a9:d4:65: 53:6d:3d:7f:9d:ad:97:7c:c7:41:22:f8:73:c9:25:2e:f9:fa: 67:47:34:10:9f:b3:8f:43:08:25:87:2b:3a:5f:61:74:e1:22: 57:05:69:3d:66:b1:da:45:2d:01:e9:4f:99:16:38:af:e9:2d: 95:63:16:17:8f:fa:93:51:e2:a3:46:b7:e2:ca:1e:22:2a:73: 64:e9:f1:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9zUt4YvsRIXjPSCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk ZGFiNGViMzktYzQ5OS00ZDA2LWE1MzUtN2EyN2QyOTRjNjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP38/KJOl3dLbrF5zxwBrc+DO/Hy7JT1oUqF LBN6jTwEKCfDRsllGALYt+OIUpAUtwPDKazQXJzX/auHSZNduMeVv1E/FF7bKnvg DiJhfx+tYQoEOIEN3i71Is8N7ncvtcOwrIvUDJob6VDcJO4Rzxvs4gl+iJ+bI639 ScWuKOBgUs59MdK/tN11lh4owkGWQXbfZACuFVni0ynaIRL3oVwDFr4UiG4MLWsI 85KrNWM7KGFUofsjh9aChCQi+gs8CucYz3+jeulAFiTVvNQSHV/wSUQ/4ELgxrnG 5PlbCC8NTKE84Sm/FCSJyqOdDjJaqHK+fKeTQ/VYbizn5TK6+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQgo9m9F6L1eGLi/SOeGsYO9Ve6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMjVjMGM1ZDUtOTRiZi0z YjhhLTk3MDAtMzNjM2NmNGNmMDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJjjMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiJffpQ6bQK4nlRRwVn7HPnkHYNQg4lqTffauen0MGjGvy9XqKSXbCz YzjIZRGgWsaRigetEvjG+RKOgGbohA+wqbpmHvW456+kfVN1NQXgRGC6CD1D8z+K X8hKqbJZAtHlcZcXmkVSQGfJi2gCbFDRPR/um/02KdnhtEzftsyLWDu2XW8XaCuo SkTFoZ8ik4qf1jtAY/Yz3aPJD4vs+BiSBdUzvGtfF+h0N8sl5AaPiqnUZVNtPX+d rZd8x0Ei+HPJJS75+mdHNBCfs49DCCWHKzpfYXThIlcFaT1msdpFLQHpT5kWOK/p LZVjFheP+pNR4qNGt+LKHiIqc2Tp8Z8= -----END CERTIFICATE-----Generated at Tue Oct 27 20:29:29 2026 by rpki-client