$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3a07c75c-12b9-368f-ac0d-b79d139e9a6d.roa File: 3a07c75c-12b9-368f-ac0d-b79d139e9a6d.roa (raw, json) Hash identifier: re1imtBTU5Xi4PJfOOxLdoWM4FzzVwLFfW/RmjMQ0kc= Subject key identifier: D5:F4:41:FE:6F:B7:DA:94:B6:18:4D:A7:B4:1B:82:30:50:A0:18:4E Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F761D79C8C728467ED932C250 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3a07c75c-12b9-368f-ac0d-b79d139e9a6d.roa Signing time: Sun 11 Oct 2026 01:00:13 +0000 ROA not before: Sun 11 Oct 2026 01:00:13 +0000 ROA not after: Sat 09 Jan 2027 02:00:13 +0000 asID: 272897 IP address blocks: 38.224.178.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:76:1d:79:c8:c7:28:46:7e:d9:32:c2:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 11 01:00:13 2026 GMT Not After : Jan 9 02:00:13 2027 GMT Subject: CN=d27aecb2-3bc4-4c6c-8504-e943bd23c8d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cd:63:30:df:b7:4e:0d:73:fa:b2:c7:31:a5: bf:8a:b4:fd:e2:27:27:0f:89:59:0e:56:86:6f:93: f7:89:c6:7a:dd:54:10:cd:c3:5e:1d:16:43:4e:41: 00:95:6d:9f:be:e3:55:23:2c:4f:39:41:c4:b0:fd: 54:0d:b4:b2:78:3b:8d:a9:f1:80:81:56:78:c0:40: 7c:c8:48:90:e8:96:81:1f:a9:7f:14:e1:2f:fa:22: 62:9e:3d:92:28:b3:32:63:f5:a7:c8:6f:8a:ab:8f: db:59:97:f6:6b:09:f7:27:9c:94:09:99:b0:fc:86: 41:5c:21:c2:65:af:e6:65:21:5d:89:0a:d0:5e:be: 39:f4:1b:d6:7d:71:e8:ef:46:54:96:01:65:f4:7b: 70:31:3e:e9:05:66:a5:38:cb:51:5c:43:da:5b:1d: 74:da:88:13:ab:57:9f:2a:a1:f4:31:95:f7:ec:02: 90:6b:b8:7b:7b:55:fd:4b:42:ff:01:ca:ef:63:86: b0:8f:e2:e6:25:54:24:c2:8a:28:2d:d0:32:4a:e0: d4:2e:a7:a5:11:fc:d8:ae:04:f6:fe:85:63:d0:b6: ca:3f:59:be:a8:38:c6:d2:87:0c:e4:35:62:a2:99: b7:41:c9:9b:ae:a0:d3:ef:46:c9:6c:16:09:e8:63: e9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F4:41:FE:6F:B7:DA:94:B6:18:4D:A7:B4:1B:82:30:50:A0:18:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3a07c75c-12b9-368f-ac0d-b79d139e9a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.224.178.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:62:25:7a:07:64:42:91:a0:b0:38:71:1a:15:62:ea:6c:39: 18:3a:e8:76:78:4e:a4:11:19:f9:5e:71:bb:0d:4f:ea:a9:c4: 9c:4a:c9:35:3e:a2:f6:98:b8:09:82:48:b5:6b:a0:d2:41:75: 6d:95:a6:fb:40:a9:48:a1:2e:77:4b:a5:aa:64:97:b1:e5:a2: 72:46:85:1d:ba:c4:6e:98:18:89:05:6b:c6:9e:7e:00:65:20: 86:ca:40:5d:31:60:15:dd:6d:e9:61:cc:67:1f:a5:25:33:fe: 21:2a:d9:48:43:6a:ea:a8:aa:94:99:dc:d6:9f:1c:88:f9:be: 70:a4:fe:b6:a7:05:4b:3f:db:75:42:2e:90:37:c2:97:98:2e: 7c:9b:20:2c:59:3f:d2:7d:cb:02:61:f4:ce:6d:83:6d:0f:f0: d6:98:45:11:78:7a:67:4f:1f:87:44:aa:79:14:7a:05:57:9e: d4:c1:af:9f:98:9a:8d:b3:47:cd:65:87:b6:af:32:dc:77:ff: c7:6f:7f:81:72:c6:5a:d4:91:8c:b3:fc:71:4a:8b:67:91:dc: e0:d8:6b:b9:af:1d:d1:33:e7:8b:96:6c:84:d5:30:fc:28:43: aa:de:56:f4:ef:f1:27:b4:83:6b:2f:40:93:7f:a8:7b:70:d8: e2:15:16:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE92HXnIxyhGftkywlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxMTAxMDAxM1oXDTI3MDEwOTAyMDAxM1owLzEtMCsGA1UEAxMk ZDI3YWVjYjItM2JjNC00YzZjLTg1MDQtZTk0M2JkMjNjOGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs1jMN+3Tg1z+rLHMaW/irT94icnD4lZDlaG b5P3icZ63VQQzcNeHRZDTkEAlW2fvuNVIyxPOUHEsP1UDbSyeDuNqfGAgVZ4wEB8 yEiQ6JaBH6l/FOEv+iJinj2SKLMyY/WnyG+Kq4/bWZf2awn3J5yUCZmw/IZBXCHC Za/mZSFdiQrQXr459BvWfXHo70ZUlgFl9HtwMT7pBWalOMtRXEPaWx102ogTq1ef KqH0MZX37AKQa7h7e1X9S0L/AcrvY4awj+LmJVQkwoooLdAySuDULqelEfzYrgT2 /oVj0LbKP1m+qDjG0ocM5DViopm3QcmbrqDT70bJbBYJ6GPpXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNX0Qf5vt9qUthhNp7QbgjBQoBhOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvM2EwN2M3NWMtMTJiOS0z NjhmLWFjMGQtYjc5ZDEzOWU5YTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJuCyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMdiJXoHZEKRoLA4cRoVYupsORg66HZ4TqQRGflecbsNT+qpxJxKyTU+ ovaYuAmCSLVroNJBdW2VpvtAqUihLndLpapkl7HlonJGhR26xG6YGIkFa8aefgBl IIbKQF0xYBXdbelhzGcfpSUz/iEq2UhDauqoqpSZ3NafHIj5vnCk/ranBUs/23VC LpA3wpeYLnybICxZP9J9ywJh9M5tg20P8NaYRRF4emdPH4dEqnkUegVXntTBr5+Y mo2zR81lh7avMtx3/8dvf4FyxlrUkYyz/HFKi2eR3ODYa7mvHdEz54uWbITVMPwo Q6reVvTv8Se0g2svQJN/qHtw2OIVFp4= -----END CERTIFICATE-----Generated at Tue Oct 27 16:35:59 2026 by rpki-client