$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/395742fa-6d45-3bf2-83d8-276b94855dc4.roa File: 395742fa-6d45-3bf2-83d8-276b94855dc4.roa (raw, json) Hash identifier: caS8pv2gz7+Y2RgV7Jmr0x6TuYnZpXwKHePLInjh/lE= Subject key identifier: F8:0B:1E:B7:80:F6:26:35:4D:4B:AB:83:D2:F4:A5:74:EB:A3:05:C3 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F8DD8951BD63B1170B8A13EE0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/395742fa-6d45-3bf2-83d8-276b94855dc4.roa Signing time: Mon 19 Oct 2026 13:00:12 +0000 ROA not before: Mon 19 Oct 2026 13:00:12 +0000 ROA not after: Sun 17 Jan 2027 14:00:12 +0000 asID: 11703 IP address blocks: 38.116.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d8:95:1b:d6:3b:11:70:b8:a1:3e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 19 13:00:12 2026 GMT Not After : Jan 17 14:00:12 2027 GMT Subject: CN=7cbc7bf6-b218-4024-b56a-582ff39b8e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:69:9b:c4:b8:46:cf:b4:ce:72:26:6e:7c:11: ab:55:c8:67:36:ab:f4:da:4c:94:a6:fa:6a:79:8f: 85:0e:90:46:65:3e:2a:bd:7b:21:e7:56:a1:c4:37: b1:18:55:d8:19:76:b0:3e:3e:c4:3f:b5:9a:ab:10: d4:69:2a:b6:5f:f7:0a:f7:7d:07:7b:73:d7:3c:06: 4b:4a:36:fd:10:c8:9c:86:0e:24:5e:9a:45:d0:f9: 8b:04:43:72:40:48:ac:78:1c:a9:92:56:70:7e:3a: 81:be:b9:2a:36:2a:09:c9:4a:27:29:27:9f:1f:5a: 23:84:f9:09:b4:bb:54:6d:50:8c:52:0f:df:3d:64: 89:d8:5c:a9:c5:82:68:c8:f7:6a:ba:ee:c5:33:46: f4:3e:03:bb:ae:68:b4:64:f3:7a:b5:21:b0:c4:9f: e3:7e:b8:b5:93:81:a8:59:e0:b9:8f:63:79:25:3d: 34:0d:30:70:10:ee:97:54:27:10:67:73:e4:9e:e2: 6b:40:ac:d2:25:df:80:8c:ce:a2:73:99:d3:79:7a: 24:59:0d:37:9e:66:e0:08:9f:94:a0:bc:bc:d8:59: fd:6e:d8:4f:37:c9:d6:9a:b7:cb:a7:26:31:f5:8b: 26:ad:ce:61:e8:7f:cf:0d:d6:40:f2:c9:4a:3b:6b: 87:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:0B:1E:B7:80:F6:26:35:4D:4B:AB:83:D2:F4:A5:74:EB:A3:05:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/395742fa-6d45-3bf2-83d8-276b94855dc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.116.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:6f:fe:fa:cf:61:e2:2d:d7:77:d4:b2:36:38:fc:cb:8b:ed: 05:fe:68:75:7e:11:2a:e3:96:dd:c2:c2:44:52:04:e1:bc:d8: ee:67:94:13:2d:ed:ad:f0:63:25:c3:31:4c:83:e8:86:fa:f5: 8a:45:dc:58:4e:b2:6f:39:0e:21:aa:24:e5:de:e5:d4:4f:7c: 02:41:f3:3e:dc:85:2a:7d:17:92:00:8f:27:2f:f9:13:fb:9e: 3c:9c:be:99:a2:dc:bf:2b:c7:92:ac:8e:9f:d3:e5:0a:0e:8a: 30:7b:dd:db:c3:51:f9:e5:72:74:89:cb:48:15:ca:eb:9e:3a: 6e:8e:2d:6f:69:74:05:0e:a8:21:03:ea:eb:e5:2f:8a:4b:e3: 43:ed:de:88:f8:91:5f:1f:77:74:b6:e0:36:5a:dd:c3:99:f4: 22:66:77:61:dc:c5:e0:21:6d:7e:3f:33:9d:1d:12:0a:ba:66: 92:32:52:c5:1f:d2:f2:5e:fd:71:b6:5d:00:5d:ac:fd:d4:9f: 32:9a:0b:a6:db:03:d4:17:ab:2e:13:62:55:42:43:85:80:b2: 63:cf:6f:2e:de:20:87:d4:68:98:c1:e2:db:be:dc:14:5d:74: f5:38:19:f8:ab:e2:55:de:28:5e:80:54:46:db:d8:28:3e:86: a2:41:f7:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+N2JUb1jsRcLihPuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk N2NiYzdiZjYtYjIxOC00MDI0LWI1NmEtNTgyZmYzOWI4ZTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGmbxLhGz7TOciZufBGrVchnNqv02kyUpvpq eY+FDpBGZT4qvXsh51ahxDexGFXYGXawPj7EP7WaqxDUaSq2X/cK930He3PXPAZL Sjb9EMichg4kXppF0PmLBENyQEiseBypklZwfjqBvrkqNioJyUonKSefH1ojhPkJ tLtUbVCMUg/fPWSJ2FypxYJoyPdquu7FM0b0PgO7rmi0ZPN6tSGwxJ/jfri1k4Go WeC5j2N5JT00DTBwEO6XVCcQZ3PknuJrQKzSJd+AjM6ic5nTeXokWQ03nmbgCJ+U oLy82Fn9bthPN8nWmrfLpyYx9Ysmrc5h6H/PDdZA8slKO2uH8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgLHreA9iY1TUurg9L0pXTrowXDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMzk1NzQyZmEtNmQ0NS0z YmYyLTgzZDgtMjc2Yjk0ODU1ZGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJnTGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBv/vrPYeIt13fUsjY4/MuL7QX+aHV+ESrjlt3CwkRSBOG82O5nlBMt 7a3wYyXDMUyD6Ib69YpF3FhOsm85DiGqJOXe5dRPfAJB8z7chSp9F5IAjycv+RP7 njycvpmi3L8rx5Ksjp/T5QoOijB73dvDUfnlcnSJy0gVyuueOm6OLW9pdAUOqCED 6uvlL4pL40Pt3oj4kV8fd3S24DZa3cOZ9CJmd2HcxeAhbX4/M50dEgq6ZpIyUsUf 0vJe/XG2XQBdrP3UnzKaC6bbA9QXqy4TYlVCQ4WAsmPPby7eIIfUaJjB4tu+3BRd dPU4Gfir4lXeKF6AVEbb2Cg+hqJB9/I= -----END CERTIFICATE-----Generated at Tue Oct 27 17:16:33 2026 by rpki-client