$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3cdd091e-02ed-3dc3-9548-b0ffac88c208.roa File: 3cdd091e-02ed-3dc3-9548-b0ffac88c208.roa (raw, json) Hash identifier: CPCz5bG+tLGa4CqzCfEIeogf68Xca4p+k1ZnJgEvQVs= Subject key identifier: 14:C9:31:CB:63:AB:EB:E0:B9:30:44:D3:FF:38:9F:F8:05:F3:1C:C8 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F9BCDE561A63A75A415E0CD80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3cdd091e-02ed-3dc3-9548-b0ffac88c208.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 273683 IP address blocks: 38.3.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:e5:61:a6:3a:75:a4:15:e0:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=13453d82-49bc-43d8-9bf3-ffc89d335825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:17:3e:7e:e5:7a:c7:99:64:35:6c:d4:3f:66: 60:9a:32:f6:0a:07:cb:78:8b:76:f1:f2:55:01:6a: a7:fe:33:4d:cb:42:fb:62:f2:f3:4e:d5:d0:02:9d: 15:82:20:52:61:87:e9:8e:5f:ce:cc:3a:44:09:f4: ba:1b:68:ed:da:ce:22:4b:88:2c:0d:05:82:9a:4d: 31:0c:a1:e3:51:1e:16:b2:ef:d3:f5:84:20:d9:9c: 65:d8:4b:31:10:02:96:1e:de:38:e1:1d:eb:48:b1: 7e:eb:96:af:c4:53:cd:9d:01:a9:52:a9:1c:c7:68: b4:bb:3b:32:d5:a3:b7:1b:5e:54:44:46:59:29:81: 07:ce:a2:86:df:0a:91:03:cf:1e:fb:1b:82:c8:ac: 21:b9:52:39:03:c1:ec:75:e7:cc:c6:b0:de:a8:76: c5:39:5c:99:a1:3b:a0:98:06:b6:59:1c:bc:90:9f: 2a:8c:7e:d5:7e:5e:37:c6:c5:4d:d6:f9:6f:ae:9c: 36:9b:8e:74:1f:2f:88:a2:57:26:30:0b:e1:15:15: ba:36:07:d1:c8:08:2e:f1:6c:e8:16:dc:48:f5:51: 04:7d:1b:bd:cf:eb:ea:7f:dc:c0:d3:d4:02:4e:5d: 58:ad:a2:14:38:f7:f7:aa:58:70:33:9b:b0:66:53: d8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C9:31:CB:63:AB:EB:E0:B9:30:44:D3:FF:38:9F:F8:05:F3:1C:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3cdd091e-02ed-3dc3-9548-b0ffac88c208.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.3.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:7d:73:0f:87:9b:06:44:3f:e9:55:42:17:7c:19:d2:82:e8: 22:44:2e:39:04:5b:b7:8e:f7:a2:41:2b:84:3b:7d:21:92:11: b1:6f:4d:ab:62:15:27:f6:9a:18:ac:2b:bd:4a:03:7d:58:f6: dc:07:3d:0d:9a:64:02:df:7c:c2:6e:a9:57:30:e0:fd:95:e6: 5a:58:84:63:59:ad:36:e4:5c:6a:95:56:fb:f2:f2:3d:77:3b: c6:7c:8a:f0:3b:94:f2:06:99:5a:23:ce:02:52:cd:de:e1:5d: d2:e2:90:70:e0:a3:09:28:bf:5d:22:30:e4:d4:e8:c8:a3:a8: b0:82:bb:f1:f0:f8:58:48:b1:90:f7:1a:8c:34:d8:a2:67:f1: 09:48:5a:a4:8e:aa:5b:cb:eb:92:04:9c:b4:dc:1d:a9:65:9d: 84:a9:ae:6d:8d:c5:af:06:e2:19:b9:6e:ac:2b:cd:14:5c:11: 7f:19:75:95:bf:99:94:c3:8a:25:ce:f1:ca:1f:82:44:ff:5c: f5:6c:0a:b6:9e:7a:4e:d2:0f:90:1b:72:d4:c3:f0:65:26:71: fd:21:d6:64:35:0a:29:9c:81:2b:fd:c8:09:08:6f:74:ea:15: bb:83:25:fb:bd:53:87:10:db:db:f6:ef:ad:aa:38:87:14:35: 28:2c:fd:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzeVhpjp1pBXgzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk MTM0NTNkODItNDliYy00M2Q4LTliZjMtZmZjODlkMzM1ODI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRc+fuV6x5lkNWzUP2ZgmjL2CgfLeIt28fJV AWqn/jNNy0L7YvLzTtXQAp0VgiBSYYfpjl/OzDpECfS6G2jt2s4iS4gsDQWCmk0x DKHjUR4Wsu/T9YQg2Zxl2EsxEAKWHt444R3rSLF+65avxFPNnQGpUqkcx2i0uzsy 1aO3G15UREZZKYEHzqKG3wqRA88e+xuCyKwhuVI5A8HsdefMxrDeqHbFOVyZoTug mAa2WRy8kJ8qjH7Vfl43xsVN1vlvrpw2m450Hy+IolcmMAvhFRW6NgfRyAgu8Wzo FtxI9VEEfRu9z+vqf9zA09QCTl1YraIUOPf3qlhwM5uwZlPYwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTJMctjq+vguTBE0/84n/gF8xzIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvM2NkZDA5MWUtMDJlZC0z ZGMzLTk1NDgtYjBmZmFjODhjMjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJgOBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALB9cw+HmwZEP+lVQhd8GdKC6CJELjkEW7eO96JBK4Q7fSGSEbFvTati FSf2mhisK71KA31Y9twHPQ2aZALffMJuqVcw4P2V5lpYhGNZrTbkXGqVVvvy8j13 O8Z8ivA7lPIGmVojzgJSzd7hXdLikHDgowkov10iMOTU6MijqLCCu/Hw+FhIsZD3 Gow02KJn8QlIWqSOqlvL65IEnLTcHallnYSprm2Nxa8G4hm5bqwrzRRcEX8ZdZW/ mZTDiiXO8cofgkT/XPVsCraeek7SD5AbctTD8GUmcf0h1mQ1CimcgSv9yAkIb3Tq FbuDJfu9U4cQ29v2762qOIcUNSgs/Y4= -----END CERTIFICATE-----Generated at Wed Oct 28 14:37:29 2026 by rpki-client