$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2effd355-25e6-3235-9577-01ae406c9d3e.roa File: 2effd355-25e6-3235-9577-01ae406c9d3e.roa (raw, json) Hash identifier: aiDBcT4HGbsmvj2BfTuNDrcBgVsHDrgFsxCZUkoHkgs= Subject key identifier: 75:AB:C5:CD:06:1A:55:80:91:28:62:3D:BE:CF:49:9D:30:D4:74:32 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F89A84B4E77B89FC9290B7F40 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2effd355-25e6-3235-9577-01ae406c9d3e.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 20365 IP address blocks: 38.192.0.0/17 maxlen: 24 38.192.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:4b:4e:77:b8:9f:c9:29:0b:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=13d5b3fc-4350-4c7f-851e-4e40f5239871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b2:8b:0b:ee:d5:cb:30:63:20:41:96:2b:d5: b3:d3:51:f3:bd:64:ec:66:d0:c5:fe:8f:1d:ed:47: e2:d3:80:5c:06:83:13:87:45:5e:52:55:3f:5c:e5: a1:88:cc:fe:05:3b:17:cb:6a:da:fc:bd:21:88:27: 13:45:36:56:9f:a8:ab:40:98:d7:de:60:5f:2d:06: db:a8:0f:35:67:da:0c:04:2d:1b:6b:50:69:08:f1: b9:6d:58:a2:64:d8:79:3d:d3:d0:db:30:f0:67:55: 70:f8:54:c7:38:fb:3a:08:c1:04:06:2b:5e:35:3a: 7e:9d:9e:de:90:fa:0a:29:b0:c6:f8:92:a2:f8:80: 7d:a1:7c:c0:5c:51:fc:ce:07:32:0f:70:ac:30:8d: 60:eb:e7:97:75:c7:6b:de:b5:e7:8d:51:f9:5b:46: ba:0f:b6:1a:32:42:75:7a:d4:8a:76:32:cc:20:07: 7b:a7:e7:c7:4e:34:62:0c:fa:b3:f7:e6:7c:03:f1: 22:71:8b:d8:c4:3d:44:5a:4e:fa:d6:8b:24:ad:cd: 99:6c:64:69:37:8b:16:bb:d4:d1:72:df:3c:7a:10: 87:22:3c:55:45:dd:7c:1e:df:79:14:8f:50:48:ee: d4:40:93:b5:de:71:ef:5f:d2:e1:af:3b:2d:a1:2c: 12:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AB:C5:CD:06:1A:55:80:91:28:62:3D:BE:CF:49:9D:30:D4:74:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2effd355-25e6-3235-9577-01ae406c9d3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.192.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:98:81:e6:c6:36:bd:08:ed:48:1f:bf:c0:2b:fd:65:96:ff: 23:9e:c8:c1:ef:d3:18:8b:72:13:00:9e:3f:95:fa:27:18:7c: 3c:88:8c:91:ac:83:84:19:3b:f9:53:92:d3:f8:fe:04:1e:cb: d9:ff:7b:0e:b2:c9:62:eb:06:b7:77:3f:6e:34:c8:c0:73:7a: 6c:18:71:41:d9:61:ee:e7:ba:f3:24:52:a9:d6:c0:f4:5e:65: 91:01:d8:83:6a:73:a7:29:8b:22:34:d2:e2:ae:db:0e:79:ab: 6b:f4:d9:12:d1:59:e9:be:40:c5:d7:53:9b:72:cc:4f:17:63: e1:32:1a:5e:df:a1:04:ae:ba:0a:1d:44:24:de:cd:45:40:0d: 30:94:df:b7:8d:f7:b2:9a:0f:0b:eb:13:3e:33:f7:e9:bb:0f: 5d:48:29:b3:5f:07:97:e8:88:d6:16:38:7e:5b:ad:6b:43:b2: 8d:83:36:c2:90:a1:05:ae:c6:f1:9c:74:af:b0:01:c0:1c:55: 58:ee:5a:be:4f:74:30:01:51:1f:de:cb:4b:13:2a:10:68:88: 44:20:25:aa:1c:74:fb:c5:49:e8:88:0d:70:69:bc:3b:42:13: ff:18:e7:d4:3a:79:8a:12:7b:f7:1d:4e:fd:54:d2:46:0d:c3: 18:b7:ff:08 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE+JqEtOd7ifySkLf0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk MTNkNWIzZmMtNDM1MC00YzdmLTg1MWUtNGU0MGY1MjM5ODcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbKLC+7VyzBjIEGWK9Wz01HzvWTsZtDF/o8d 7Ufi04BcBoMTh0VeUlU/XOWhiMz+BTsXy2ra/L0hiCcTRTZWn6irQJjX3mBfLQbb qA81Z9oMBC0ba1BpCPG5bViiZNh5PdPQ2zDwZ1Vw+FTHOPs6CMEEBiteNTp+nZ7e kPoKKbDG+JKi+IB9oXzAXFH8zgcyD3CsMI1g6+eXdcdr3rXnjVH5W0a6D7YaMkJ1 etSKdjLMIAd7p+fHTjRiDPqz9+Z8A/EicYvYxD1EWk761oskrc2ZbGRpN4sWu9TR ct88ehCHIjxVRd18Ht95FI9QSO7UQJO13nHvX9LhrzstoSwSdwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHWrxc0GGlWAkShiPb7PSZ0w1HQyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMmVmZmQzNTUtMjVlNi0z MjM1LTk1NzctMDFhZTQwNmM5ZDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAJsAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAPJiB5sY2vQjtSB+/wCv9ZZb/I57Iwe/TGItyEwCeP5X6Jxh8PIiMkayD hBk7+VOS0/j+BB7L2f97DrLJYusGt3c/bjTIwHN6bBhxQdlh7ue68yRSqdbA9F5l kQHYg2pzpymLIjTS4q7bDnmra/TZEtFZ6b5AxddTm3LMTxdj4TIaXt+hBK66Ch1E JN7NRUANMJTft433spoPC+sTPjP36bsPXUgps18Hl+iI1hY4fluta0OyjYM2wpCh Ba7G8Zx0r7ABwBxVWO5avk90MAFRH97LSxMqEGiIRCAlqhx0+8VJ6IgNcGm8O0IT /xjn1Dp5ihJ79x1O/VTSRg3DGLf/CA== -----END CERTIFICATE-----Generated at Tue Oct 27 17:16:45 2026 by rpki-client