$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2d657b26-c82d-34c0-b092-2cd65a4479a3.roa File: 2d657b26-c82d-34c0-b092-2cd65a4479a3.roa (raw, json) Hash identifier: dQIe5IkBYgW40h4q6NoBOnOaPwiWTiK5XL1k8eoWUNw= Subject key identifier: 8A:3D:FB:91:5F:3D:6D:85:CF:91:EE:07:85:4A:72:02:6A:75:E9:E3 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F7E7D9B064C31D81BF7BE6C20 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2d657b26-c82d-34c0-b092-2cd65a4479a3.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 273018 IP address blocks: 38.252.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:9b:06:4c:31:d8:1b:f7:be:6c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=2fc83147-9af3-4aef-9af3-93efe294046c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4c:4e:21:7a:b8:c7:a4:40:e6:4e:0d:2a:fd: 4d:82:1f:43:0a:d6:e4:51:fa:a1:7f:3a:08:0a:3d: 9b:13:b2:0d:d4:2d:a8:d9:f5:75:f5:5c:56:ea:63: 41:d6:4a:0c:9a:8b:90:e8:42:ea:c2:69:c0:5b:ef: 60:32:a2:a4:53:5b:56:53:16:29:b0:6f:92:cb:c6: ee:ed:65:86:e3:ce:f5:c3:60:97:33:a6:64:c6:d3: 13:6e:c0:2a:32:b3:da:f0:17:9d:e1:3f:13:45:4a: 33:31:1e:38:45:10:ce:40:77:bb:1b:3e:4a:db:3e: 03:25:22:39:28:8f:28:2c:4b:54:fd:71:24:ec:9e: e8:87:a2:e8:3e:79:ce:48:41:69:72:32:eb:4e:71: 4c:15:1c:da:55:40:3d:68:e3:e0:ae:ba:96:da:e8: b1:da:53:53:7e:17:47:85:d9:f6:f7:39:e1:e6:e1: a7:53:e4:52:92:5a:a0:73:95:6c:df:a8:0d:74:da: a4:ce:c6:51:69:02:35:57:7c:cc:4b:d9:0f:8c:e5: 07:fc:68:d0:95:69:bd:03:8b:38:39:fe:9b:43:8c: 1a:cb:17:a1:d6:f7:e6:6a:43:4a:de:94:ee:c0:72: 34:d8:71:d8:ae:b5:37:d3:56:dd:3a:38:9d:8e:57: 56:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3D:FB:91:5F:3D:6D:85:CF:91:EE:07:85:4A:72:02:6A:75:E9:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2d657b26-c82d-34c0-b092-2cd65a4479a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.252.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ea:6c:7c:9f:1f:e6:26:d1:59:6d:42:04:bc:51:1f:61:c1: f9:e7:bd:09:1d:18:e2:80:32:2e:7c:c1:4a:6c:83:c2:94:f2: fd:19:65:91:a6:6c:00:9b:e8:1f:b5:04:13:c4:ed:0c:bb:c4: e4:db:9b:87:13:4e:67:a2:b5:bc:2e:ab:68:6b:89:6a:9d:8f: 75:a8:72:b4:54:a5:22:10:08:cf:65:06:16:9e:46:6e:e0:c8: ed:ed:a2:14:e6:b2:53:e2:01:f3:f3:74:6a:ee:79:f2:07:07: 6b:3d:d1:55:65:73:54:e4:f9:8e:4e:7f:97:76:e2:51:25:06: ec:73:92:e8:4b:a3:e5:95:04:91:4d:38:2b:4a:17:c0:cd:97: e8:1d:bf:3e:39:8b:3b:20:6d:f8:90:76:58:77:61:ff:c7:93: f4:de:76:d4:0f:fd:a8:4f:69:2c:4a:c3:74:61:c8:12:75:2b: f3:2b:6a:8e:84:97:bf:02:19:7d:3f:b8:20:16:e5:91:51:e4: 1e:13:76:e2:ef:cd:56:af:af:c5:3b:57:92:d9:b3:22:20:84: dc:96:5b:3a:88:1c:d4:48:f0:60:11:b9:3e:d3:9b:06:7c:6a: e8:43:ba:fa:38:13:85:9d:a6:52:6f:c0:f7:9d:f5:c1:e5:3a: 98:be:fe:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fZsGTDHYG/e+bCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk MmZjODMxNDctOWFmMy00YWVmLTlhZjMtOTNlZmUyOTQwNDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUxOIXq4x6RA5k4NKv1Ngh9DCtbkUfqhfzoI Cj2bE7IN1C2o2fV19VxW6mNB1koMmouQ6ELqwmnAW+9gMqKkU1tWUxYpsG+Sy8bu 7WWG4871w2CXM6ZkxtMTbsAqMrPa8Bed4T8TRUozMR44RRDOQHe7Gz5K2z4DJSI5 KI8oLEtU/XEk7J7oh6LoPnnOSEFpcjLrTnFMFRzaVUA9aOPgrrqW2uix2lNTfhdH hdn29znh5uGnU+RSklqgc5Vs36gNdNqkzsZRaQI1V3zMS9kPjOUH/GjQlWm9A4s4 Of6bQ4wayxeh1vfmakNK3pTuwHI02HHYrrU301bdOjidjldWcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIo9+5FfPW2Fz5HuB4VKcgJqdenjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMmQ2NTdiMjYtYzgyZC0z NGMwLWIwOTItMmNkNjVhNDQ3OWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJvyYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDqbHyfH+Ym0VltQgS8UR9hwfnnvQkdGOKAMi58wUpsg8KU8v0ZZZGm bACb6B+1BBPE7Qy7xOTbm4cTTmeitbwuq2hriWqdj3WocrRUpSIQCM9lBhaeRm7g yO3tohTmslPiAfPzdGruefIHB2s90VVlc1Tk+Y5Of5d24lElBuxzkuhLo+WVBJFN OCtKF8DNl+gdvz45izsgbfiQdlh3Yf/Hk/TedtQP/ahPaSxKw3RhyBJ1K/Mrao6E l78CGX0/uCAW5ZFR5B4TduLvzVavr8U7V5LZsyIghNyWWzqIHNRI8GARuT7TmwZ8 auhDuvo4E4WdplJvwPed9cHlOpi+/oU= -----END CERTIFICATE-----Generated at Tue Oct 27 16:39:45 2026 by rpki-client