$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3fc7f35a-9f48-3d93-aca5-de77a3cea7e9.roa File: 3fc7f35a-9f48-3d93-aca5-de77a3cea7e9.roa (raw, json) Hash identifier: /bq7VqBnpf9eZ/qihZ1iOfn2nQ1S2qk092UxT9DVhY8= Subject key identifier: 10:A4:57:02:3E:A8:22:8F:CF:F1:5B:98:0E:BE:DE:AA:A1:A2:72:4A Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F7352DBB90FB3E0776079EE80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3fc7f35a-9f48-3d93-aca5-de77a3cea7e9.roa Signing time: Sat 10 Oct 2026 01:00:13 +0000 ROA not before: Sat 10 Oct 2026 01:00:13 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 274272 IP address blocks: 38.21.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:52:db:b9:0f:b3:e0:77:60:79:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 10 01:00:13 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=3d3f4a38-4095-4a8b-bd23-51433de854d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:90:c0:a0:bf:e5:85:65:14:73:88:5a:e8:85: fd:24:bf:8b:9b:0d:96:a1:dc:9f:72:56:bf:dc:99: 13:63:1e:d0:f8:0a:cf:49:38:e3:4d:9c:f8:b9:fe: 40:bb:5d:5d:01:2c:62:4f:85:0d:12:90:2b:07:dc: 94:45:00:29:73:f9:6e:42:91:98:36:05:24:25:b0: db:37:e4:ab:de:fb:99:49:eb:f6:8e:b5:99:25:07: 0f:48:5e:87:ad:bd:be:b1:28:d2:86:f3:a2:eb:4b: 65:a5:79:aa:92:09:90:61:26:eb:bf:7a:bc:1e:54: 33:d5:eb:ca:ac:29:f1:7f:24:9e:de:81:f8:ae:aa: 16:d8:3f:1e:9a:af:2b:e8:2f:8f:22:39:09:11:be: 80:8d:e1:d0:4c:c4:ac:3b:3f:48:66:dd:db:6f:10: eb:be:b8:1e:61:ff:8f:98:2b:6b:2e:a8:2b:dd:41: 45:04:11:87:e4:0d:9d:b8:e1:b7:41:c1:10:30:8e: 3b:b8:92:81:77:6f:6b:92:14:df:38:2d:ac:5c:89: 73:7b:5e:08:37:3f:24:c4:ec:11:34:6c:17:72:68: 2e:26:44:1d:f1:2c:3c:82:d9:9b:2e:b7:0a:85:52: 72:78:3a:98:ac:7d:89:af:f2:5e:2c:98:bc:65:0e: ad:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A4:57:02:3E:A8:22:8F:CF:F1:5B:98:0E:BE:DE:AA:A1:A2:72:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3fc7f35a-9f48-3d93-aca5-de77a3cea7e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.21.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:e1:e3:ce:42:bf:96:07:25:fc:27:71:87:79:3f:00:b3:75: 53:eb:86:b6:59:29:aa:82:c4:a3:e7:cf:15:30:17:f9:91:f3: b4:e6:06:ab:56:4e:1c:1a:dd:54:48:c8:a7:63:a9:a9:68:79: d6:5d:2a:dc:49:6b:6b:cd:3d:00:97:d8:2d:39:99:78:8d:87: c2:49:5d:da:34:3a:19:88:0a:e9:5e:57:0c:43:07:bb:52:8f: 06:ac:42:2f:6d:db:53:7f:12:4e:e3:39:c3:af:8b:d7:3f:ae: a6:e1:11:2f:47:77:a2:8d:a4:a5:96:2d:fc:9d:74:9f:1b:b5: b0:50:45:2a:5d:86:ce:2f:19:2d:42:da:ee:6d:e9:dd:63:57: 8f:cf:80:c5:95:bc:ac:53:bc:26:2f:f0:25:8f:b0:44:29:08: 23:77:af:bf:6f:d2:b3:f5:d1:21:cc:34:c9:31:60:49:00:d4: da:42:45:c5:3d:69:63:b5:3b:ed:72:f0:c9:fb:cb:0b:cf:33: 71:e8:95:69:4a:37:55:c8:d6:42:39:9c:b8:fc:61:43:b5:95: 85:ff:cf:e0:8e:c6:a3:ed:0e:d7:9f:d1:38:95:b5:78:6e:75: d0:ae:8c:d0:8f:7e:2b:ea:48:e0:f8:8b:ff:2a:63:3b:31:fd: e1:d7:e6:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9zUtu5D7Pgd2B57oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk M2QzZjRhMzgtNDA5NS00YThiLWJkMjMtNTE0MzNkZTg1NGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJDAoL/lhWUUc4ha6IX9JL+Lmw2Wodyfcla/ 3JkTYx7Q+ArPSTjjTZz4uf5Au11dASxiT4UNEpArB9yURQApc/luQpGYNgUkJbDb N+Sr3vuZSev2jrWZJQcPSF6Hrb2+sSjShvOi60tlpXmqkgmQYSbrv3q8HlQz1evK rCnxfySe3oH4rqoW2D8emq8r6C+PIjkJEb6AjeHQTMSsOz9IZt3bbxDrvrgeYf+P mCtrLqgr3UFFBBGH5A2duOG3QcEQMI47uJKBd29rkhTfOC2sXIlze14INz8kxOwR NGwXcmguJkQd8Sw8gtmbLrcKhVJyeDqYrH2Jr/JeLJi8ZQ6tXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCkVwI+qCKPz/FbmA6+3qqhonJKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvM2ZjN2YzNWEtOWY0OC0z ZDkzLWFjYTUtZGU3N2EzY2VhN2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJhV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMTh485Cv5YHJfwncYd5PwCzdVPrhrZZKaqCxKPnzxUwF/mR87TmBqtW Thwa3VRIyKdjqaloedZdKtxJa2vNPQCX2C05mXiNh8JJXdo0OhmICuleVwxDB7tS jwasQi9t21N/Ek7jOcOvi9c/rqbhES9Hd6KNpKWWLfyddJ8btbBQRSpdhs4vGS1C 2u5t6d1jV4/PgMWVvKxTvCYv8CWPsEQpCCN3r79v0rP10SHMNMkxYEkA1NpCRcU9 aWO1O+1y8Mn7ywvPM3HolWlKN1XI1kI5nLj8YUO1lYX/z+COxqPtDtef0TiVtXhu ddCujNCPfivqSOD4i/8qYzsx/eHX5vU= -----END CERTIFICATE-----Generated at Tue Oct 27 22:37:50 2026 by rpki-client