$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/38e74e1c-b86a-3296-8086-90ae60fb05a9.roa File: 38e74e1c-b86a-3296-8086-90ae60fb05a9.roa (raw, json) Hash identifier: d/kYe6Hxsuu29wV0++MvYGOPkl1TGlBB5ZkVoC66qPY= Subject key identifier: 84:29:1B:E4:36:A5:D7:F8:96:09:87:26:00:1F:A8:45:69:7F:A8:75 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584FA2C879E97FC24BA7DC917A80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/38e74e1c-b86a-3296-8086-90ae60fb05a9.roa Signing time: Tue 27 Oct 2026 01:00:14 +0000 ROA not before: Tue 27 Oct 2026 01:00:14 +0000 ROA not after: Mon 25 Jan 2027 02:00:14 +0000 asID: 0 IP address blocks: 38.64.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:c8:79:e9:7f:c2:4b:a7:dc:91:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 27 01:00:14 2026 GMT Not After : Jan 25 02:00:14 2027 GMT Subject: CN=4709a4e7-8852-4f19-828e-0fa1e47cc977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:91:a0:8d:8f:bf:f9:4d:d5:cb:f7:d6:61:ef: b8:60:5b:c2:40:ef:c6:d5:4c:8e:5b:4f:44:17:2a: ae:6d:36:42:4a:28:45:38:f3:ff:e2:3d:91:9c:7f: c2:6b:80:57:12:09:e2:ee:b0:90:3c:df:6e:cf:eb: 05:7a:6d:f8:8c:91:c4:79:f2:42:38:80:61:4b:75: b5:3a:56:c9:95:d2:de:ac:cd:86:61:f8:74:db:88: 60:5f:48:69:26:1d:b4:f8:57:5d:ff:a8:28:e5:dc: 6e:55:27:06:53:1c:7a:56:1b:9e:15:ec:f0:dc:37: b5:d0:fe:f9:77:c8:fb:75:6a:53:45:75:73:48:10: 07:b5:a2:8e:ad:54:98:18:61:c2:c6:cf:20:4c:c0: 4f:8e:1a:13:16:56:9f:4c:26:69:d7:bd:e6:12:c3: 0c:89:2b:ea:b7:9f:5a:2e:eb:3b:a7:3d:f5:4e:2e: d8:7f:2e:b7:20:b8:83:32:8d:cf:9f:9c:cc:bf:c2: b8:8b:02:50:2f:e6:d8:b7:4a:b1:96:6a:78:80:75: e9:e7:0d:68:26:e2:34:12:43:96:0b:5e:fa:de:81: ca:83:c0:62:b2:e8:92:be:58:9c:87:3e:d9:ed:0c: 28:ef:68:ae:22:10:02:19:2f:a8:a4:c2:b5:40:03: 2a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:29:1B:E4:36:A5:D7:F8:96:09:87:26:00:1F:A8:45:69:7F:A8:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/38e74e1c-b86a-3296-8086-90ae60fb05a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.64.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:62:82:7c:06:07:f9:12:ff:58:ae:17:01:bd:ae:fe:7e:a6: d2:3a:88:f9:2b:ed:c6:ea:35:bc:71:36:e2:be:e3:3b:d1:5c: 9e:7b:95:bc:b5:c9:ea:6e:c8:69:0c:66:75:74:9d:f8:ee:43: 0f:5e:cf:8f:c6:a9:33:71:df:72:c1:bb:4b:f6:11:57:76:a3: 91:7c:ba:0f:9c:aa:1a:dc:19:a2:ad:10:b8:df:6c:03:1d:c8: d7:f2:c5:91:3a:9f:e7:bf:c9:7a:a4:1f:de:2b:67:fa:0c:61: 95:e6:48:72:6b:dd:ac:55:07:fe:af:4b:e5:b6:0b:8e:74:01: ce:18:96:cb:c1:10:38:56:09:54:57:7a:8d:59:a5:49:5d:c5: 31:c1:fc:0b:28:7c:05:33:dd:4f:f3:63:11:cb:fd:d7:b7:05: 3e:f0:e0:48:e6:ec:82:e3:8e:8c:7b:95:ee:e1:45:ee:1f:31: ca:f1:78:4b:75:ed:e7:ab:df:a2:0c:1f:b3:f8:44:60:0f:d4: 94:44:a7:5d:7a:6a:4e:7d:f7:57:30:6d:55:ae:11:23:e0:6a: 59:a9:a5:83:8f:1f:72:f9:1b:d1:e0:cf:bf:09:6e:d7:8d:29: ec:b1:84:39:25:54:ce:2b:49:78:92:ba:bd:23:47:1c:5e:0f: 6e:15:f6:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+iyHnpf8JLp9yReoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyNzAxMDAxNFoXDTI3MDEyNTAyMDAxNFowLzEtMCsGA1UEAxMk NDcwOWE0ZTctODg1Mi00ZjE5LTgyOGUtMGZhMWU0N2NjOTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZGgjY+/+U3Vy/fWYe+4YFvCQO/G1UyOW09E FyqubTZCSihFOPP/4j2RnH/Ca4BXEgni7rCQPN9uz+sFem34jJHEefJCOIBhS3W1 OlbJldLerM2GYfh024hgX0hpJh20+Fdd/6go5dxuVScGUxx6VhueFezw3De10P75 d8j7dWpTRXVzSBAHtaKOrVSYGGHCxs8gTMBPjhoTFlafTCZp173mEsMMiSvqt59a Lus7pz31Ti7Yfy63ILiDMo3Pn5zMv8K4iwJQL+bYt0qxlmp4gHXp5w1oJuI0EkOW C1763oHKg8BisuiSvlichz7Z7Qwo72iuIhACGS+opMK1QAMqNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQpG+Q2pdf4lgmHJgAfqEVpf6h1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMzhlNzRlMWMtYjg2YS0z Mjk2LTgwODYtOTBhZTYwZmIwNWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJkCsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9ignwGB/kS/1iuFwG9rv5+ptI6iPkr7cbqNbxxNuK+4zvRXJ57lby1 yepuyGkMZnV0nfjuQw9ez4/GqTNx33LBu0v2EVd2o5F8ug+cqhrcGaKtELjfbAMd yNfyxZE6n+e/yXqkH94rZ/oMYZXmSHJr3axVB/6vS+W2C450Ac4YlsvBEDhWCVRX eo1ZpUldxTHB/AsofAUz3U/zYxHL/de3BT7w4Ejm7ILjjox7le7hRe4fMcrxeEt1 7eer36IMH7P4RGAP1JREp116ak5991cwbVWuESPgalmppYOPH3L5G9Hgz78JbteN KeyxhDklVM4rSXiSur0jRxxeD24V9gA= -----END CERTIFICATE-----Generated at Tue Oct 27 17:32:57 2026 by rpki-client