$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3dc3b8a2-7ae7-3c8f-9680-383e267ce525.roa File: 3dc3b8a2-7ae7-3c8f-9680-383e267ce525.roa (raw, json) Hash identifier: i1fGcA6zeuV4yAfXxZ4jhBO5lEpSRwwFfIFIiU2Ti54= Subject key identifier: 76:94:AD:66:0B:50:A1:2B:66:18:98:C2:71:E6:FE:3C:04:E6:3C:4F Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F549D5D913EE4E2B7BDC05EC0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3dc3b8a2-7ae7-3c8f-9680-383e267ce525.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 215283 IP address blocks: 38.126.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:5d:91:3e:e4:e2:b7:bd:c0:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=cdf4c9fd-2bee-491c-a78c-ba64877e2af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:02:79:ed:d1:2d:56:11:af:b6:7d:ae:77:5e: 7d:e1:00:74:16:d7:19:b0:07:48:41:fc:6d:78:b7: 86:3c:d5:f7:00:c4:d4:07:4e:10:b3:65:a2:27:a2: 4b:d8:4a:f8:7f:55:2b:3c:57:c8:15:35:0e:94:54: 35:31:62:77:a9:1c:1e:88:26:33:87:4d:48:69:71: 8e:e9:fb:75:f2:13:2e:e1:1f:66:1d:04:17:2c:3f: 93:dd:c0:de:31:c9:6a:41:54:10:a2:cc:c9:b5:a5: b9:ee:8b:b8:7f:ad:7e:ba:48:6f:13:c9:f7:83:ca: 5d:60:55:4e:76:b2:62:ad:5b:ab:fb:59:0c:33:69: ec:65:08:90:af:e5:37:c7:06:23:a8:7c:07:6a:6d: bc:11:19:90:ca:ab:3c:41:62:f9:57:e9:be:d6:68: 16:cc:47:40:03:5c:9a:f8:bf:49:a9:f5:50:64:23: 62:a4:8e:ba:a1:92:23:14:01:fd:1d:e9:3a:8f:cf: c1:bf:5f:20:b1:70:45:18:e5:49:38:58:60:43:dd: dc:bc:d3:8b:2f:a0:8e:e8:19:1a:c0:2d:c2:90:28: d3:45:96:ef:fb:11:05:a5:b8:1a:e3:4c:ce:65:57: 80:8e:b0:8f:f3:02:47:74:b8:d2:32:e8:b3:7b:f5: e8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:94:AD:66:0B:50:A1:2B:66:18:98:C2:71:E6:FE:3C:04:E6:3C:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3dc3b8a2-7ae7-3c8f-9680-383e267ce525.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.126.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:79:8e:1c:43:d3:e6:5c:8e:2f:66:d6:84:9a:d9:e6:d4:3d: bc:72:e3:05:02:38:53:ea:4d:e6:48:b7:9e:05:23:e9:90:71: 3e:2c:61:24:98:c8:cf:23:2b:55:19:32:35:3b:64:28:4c:20: 69:ac:be:2e:99:49:09:9c:bb:19:9e:c7:14:0b:34:1d:e2:85: 24:9f:f1:7e:05:42:26:b1:98:af:ab:1f:6c:02:67:d0:5b:6d: f1:29:5c:41:cb:82:ec:87:99:ab:5c:83:0f:2c:7b:42:fb:ec: 78:f2:75:5c:4d:c7:c1:e0:1f:74:6e:7d:22:4c:d6:64:63:38: bf:e5:ac:e6:83:ec:d9:a4:ce:8d:1d:97:45:76:60:22:65:00: e4:84:b0:b4:91:e2:ce:29:c2:27:61:3e:4e:ef:a9:06:64:06: de:e2:7b:db:c1:0a:1e:23:6a:db:b4:32:e1:0e:36:a4:2f:ba: 0a:39:57:aa:ea:19:f7:e9:3f:a1:f0:11:64:53:53:8b:cf:08: 6c:ec:a7:72:62:f8:01:c8:97:0d:0e:d6:63:db:8d:07:6b:fe: ca:c3:a3:90:f3:73:59:d7:e2:8f:1f:2b:15:40:5e:25:e3:95: 05:62:00:a5:91:b7:c5:4a:e3:33:8b:f4:4a:da:d6:ec:12:08: 07:00:50:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnV2RPuTit73AXsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk Y2RmNGM5ZmQtMmJlZS00OTFjLWE3OGMtYmE2NDg3N2UyYWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AJ57dEtVhGvtn2ud1594QB0FtcZsAdIQfxt eLeGPNX3AMTUB04Qs2WiJ6JL2Er4f1UrPFfIFTUOlFQ1MWJ3qRweiCYzh01IaXGO 6ft18hMu4R9mHQQXLD+T3cDeMclqQVQQoszJtaW57ou4f61+ukhvE8n3g8pdYFVO drJirVur+1kMM2nsZQiQr+U3xwYjqHwHam28ERmQyqs8QWL5V+m+1mgWzEdAA1ya +L9JqfVQZCNipI66oZIjFAH9Hek6j8/Bv18gsXBFGOVJOFhgQ93cvNOLL6CO6Bka wC3CkCjTRZbv+xEFpbga40zOZVeAjrCP8wJHdLjSMuize/XoeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHaUrWYLUKErZhiYwnHm/jwE5jxPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvM2RjM2I4YTItN2FlNy0z YzhmLTk2ODAtMzgzZTI2N2NlNTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJn6UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKN5jhxD0+Zcji9m1oSa2ebUPbxy4wUCOFPqTeZIt54FI+mQcT4sYSSY yM8jK1UZMjU7ZChMIGmsvi6ZSQmcuxmexxQLNB3ihSSf8X4FQiaxmK+rH2wCZ9Bb bfEpXEHLguyHmatcgw8se0L77HjydVxNx8HgH3RufSJM1mRjOL/lrOaD7Nmkzo0d l0V2YCJlAOSEsLSR4s4pwidhPk7vqQZkBt7ie9vBCh4jatu0MuEONqQvugo5V6rq GffpP6HwEWRTU4vPCGzsp3Ji+AHIlw0O1mPbjQdr/srDo5Dzc1nX4o8fKxVAXiXj lQViAKWRt8VK4zOL9Era1uwSCAcAUPQ= -----END CERTIFICATE-----Generated at Wed Oct 14 18:48:39 2026 by rpki-client