$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2ce9d33e-d901-3da6-a42f-8954012b28c3.roa File: 2ce9d33e-d901-3da6-a42f-8954012b28c3.roa (raw, json) Hash identifier: h62y+QbCJ80yJyL4JvvPDaBq6gLFH2V+4+GZT1LE/MM= Subject key identifier: 11:17:95:66:EE:0B:F2:80:17:35:A1:29:DB:47:AC:74:22:A6:88:01 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F6F2C8A42FA422BA8C7585480 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2ce9d33e-d901-3da6-a42f-8954012b28c3.roa Signing time: Thu 08 Oct 2026 13:19:55 +0000 ROA not before: Thu 08 Oct 2026 13:19:55 +0000 ROA not after: Thu 31 Dec 2026 15:42:48 +0000 asID: 141664 IP address blocks: 38.95.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:2c:8a:42:fa:42:2b:a8:c7:58:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 8 13:19:55 2026 GMT Not After : Dec 31 15:42:48 2026 GMT Subject: CN=ad9492fe-a4a7-4515-a122-1680b51dd99d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9e:38:dc:d6:5d:19:c0:a7:8d:c8:30:d8:a2: 99:ff:8d:3d:bd:c0:aa:f4:f7:7c:00:17:18:a3:19: a2:3d:f7:98:ab:60:6e:38:b2:15:17:04:62:51:29: 57:8b:47:e3:ae:6b:60:6e:75:1a:9c:58:62:56:52: 48:bd:2b:da:65:62:d4:3c:46:59:02:04:b9:b9:c0: 11:07:06:3a:2b:15:45:dc:99:75:4e:66:1a:53:43: 46:b2:10:34:25:db:54:a9:e5:4b:ad:a8:14:9b:24: 17:87:01:81:73:a3:18:30:32:9e:aa:71:df:d0:0c: 5a:14:fa:7e:93:00:e2:4a:1f:52:f9:8d:de:53:57: 8e:d7:dc:8b:bd:d8:2b:ce:aa:37:b8:e2:81:26:5d: 35:c6:50:cb:6f:7c:8a:01:35:c0:5b:f2:1a:be:ad: c3:4d:c4:83:06:d7:0c:86:73:58:16:4c:b9:5c:78: 46:d3:76:b8:4e:be:04:aa:4e:61:a2:21:21:40:6f: 4f:77:ba:e0:8d:2a:6a:8e:6a:fd:96:eb:b3:c1:06: d1:79:f6:c4:70:77:11:2a:33:80:db:99:75:ea:87: 24:a9:17:23:6c:84:59:93:cf:cd:43:0c:86:35:32: 0d:01:58:ef:89:8e:ec:ae:6b:d5:00:e7:4b:47:55: 51:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:17:95:66:EE:0B:F2:80:17:35:A1:29:DB:47:AC:74:22:A6:88:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2ce9d33e-d901-3da6-a42f-8954012b28c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.95.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:43:2f:a9:b8:75:e9:1e:14:77:ad:1a:2a:6f:db:83:a0:61: 44:ce:0e:d9:0c:1e:91:20:1b:b9:24:c1:2b:dc:49:64:8b:9e: 9f:76:01:fb:cd:19:c3:cb:4b:7a:66:f4:4e:34:ec:de:0d:28: cf:99:42:eb:8a:5f:31:df:f3:6b:be:8c:23:89:99:90:b3:87: e4:c8:3b:be:94:0d:82:8c:65:66:d8:57:af:aa:69:c7:6b:a0: ea:0d:60:f0:28:f2:79:fe:db:ed:64:c8:74:8f:e0:7b:69:24: d3:de:d7:5d:1c:33:e4:91:a6:e5:ce:fb:bf:bf:9b:a6:58:ab: 72:a4:fd:ee:26:65:f5:46:58:f0:66:f9:3d:a7:4c:35:ef:7c: 8d:49:9e:08:41:fa:2e:b8:84:65:e8:fd:0f:68:ca:d0:23:8a: d6:48:ab:fd:07:26:ae:29:2a:8a:de:6a:5d:bd:3c:7b:f8:00: f4:70:c3:67:08:8d:5f:3c:2d:92:12:24:5d:58:e9:a0:b9:4c: a7:ca:37:1e:fd:71:5a:15:9b:5b:b6:f6:1d:d3:ae:2e:90:e6: 67:82:25:c7:a9:99:0c:ea:a4:0b:53:20:bc:61:2e:02:ea:21: b2:cd:60:da:85:89:50:5e:12:14:b7:ab:e3:ab:10:a1:bd:fa: ff:70:23:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vLIpC+kIrqMdYVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwODEzMTk1NVoXDTI2MTIzMTE1NDI0OFowLzEtMCsGA1UEAxMk YWQ5NDkyZmUtYTRhNy00NTE1LWExMjItMTY4MGI1MWRkOTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J443NZdGcCnjcgw2KKZ/409vcCq9Pd8ABcY oxmiPfeYq2BuOLIVFwRiUSlXi0fjrmtgbnUanFhiVlJIvSvaZWLUPEZZAgS5ucAR BwY6KxVF3Jl1TmYaU0NGshA0JdtUqeVLragUmyQXhwGBc6MYMDKeqnHf0AxaFPp+ kwDiSh9S+Y3eU1eO19yLvdgrzqo3uOKBJl01xlDLb3yKATXAW/Iavq3DTcSDBtcM hnNYFky5XHhG03a4Tr4Eqk5hoiEhQG9Pd7rgjSpqjmr9luuzwQbRefbEcHcRKjOA 25l16ockqRcjbIRZk8/NQwyGNTINAVjviY7srmvVAOdLR1VRSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBEXlWbuC/KAFzWhKdtHrHQipogBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMmNlOWQzM2UtZDkwMS0z ZGE2LWE0MmYtODk1NDAxMmIyOGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJl+oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5DL6m4dekeFHetGipv24OgYUTODtkMHpEgG7kkwSvcSWSLnp92AfvN GcPLS3pm9E407N4NKM+ZQuuKXzHf82u+jCOJmZCzh+TIO76UDYKMZWbYV6+qacdr oOoNYPAo8nn+2+1kyHSP4HtpJNPe110cM+SRpuXO+7+/m6ZYq3Kk/e4mZfVGWPBm +T2nTDXvfI1JnghB+i64hGXo/Q9oytAjitZIq/0HJq4pKoreal29PHv4APRww2cI jV88LZISJF1Y6aC5TKfKNx79cVoVm1u29h3Tri6Q5meCJcepmQzqpAtTILxhLgLq IbLNYNqFiVBeEhS3q+OrEKG9+v9wI44= -----END CERTIFICATE-----Generated at Mon Oct 26 10:06:09 2026 by rpki-client