$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4023ef54-e1f6-3228-967b-da81e1202edd.roa File: 4023ef54-e1f6-3228-967b-da81e1202edd.roa (raw, json) Hash identifier: cGwY0sBObJGWebfhlcV4/GyUUcV1Qk0ty91UUJrqUGA= Subject key identifier: 7C:00:A1:95:07:AC:CF:E3:15:A7:B5:D0:1B:FE:3D:9A:76:3A:37:20 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F698CD692A980044958170360 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4023ef54-e1f6-3228-967b-da81e1202edd.roa Signing time: Tue 06 Oct 2026 12:59:06 +0000 ROA not before: Tue 06 Oct 2026 12:59:06 +0000 ROA not after: Mon 04 Jan 2027 13:59:06 +0000 asID: 28458 IP address blocks: 38.225.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8c:d6:92:a9:80:04:49:58:17:03:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 6 12:59:06 2026 GMT Not After : Jan 4 13:59:06 2027 GMT Subject: CN=8b980d2d-8db8-48c5-a885-3f21911d9744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ae:8d:59:db:ff:6d:83:4b:63:ee:08:c4:a0: 7b:21:f5:0b:70:49:25:22:aa:61:f6:b3:33:33:0f: d0:e0:eb:41:4e:fd:d2:e6:32:14:bb:9d:7a:63:1a: cb:00:a5:02:71:f9:8c:ca:1e:2c:0e:6e:80:85:7e: 21:7d:c0:f7:6c:23:1f:ac:6b:4b:ca:f8:3d:99:ae: ff:f8:d4:6b:fe:26:c1:a5:01:90:d8:c1:f4:33:c9: 20:28:18:72:b1:5e:55:d3:f1:cd:65:19:04:41:5c: 8f:68:b3:19:dc:5e:8e:91:61:7a:67:ce:ba:94:2c: 14:ad:d5:95:30:50:c3:27:b0:e8:b1:1a:18:fb:20: b0:30:e6:cc:34:28:2f:94:90:44:c2:c4:b1:6c:93: a0:84:c2:22:66:0e:87:01:99:aa:c9:63:a5:23:8d: 87:84:83:71:d8:ea:36:bf:5b:6b:9f:55:67:6c:ea: 93:0f:31:d6:0a:6e:85:0e:4c:b0:fd:20:9b:37:c7: 09:89:f8:1b:7b:b1:3f:c6:8d:dd:dc:b8:8e:69:d3: ba:60:dd:b4:52:05:75:a3:1b:28:df:6c:8c:a6:5e: d8:de:70:bc:b4:c2:d6:13:d9:07:b8:10:43:a6:c0: cc:8e:27:f5:0c:3f:dd:0d:e2:78:a4:79:b7:0b:56: 81:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:00:A1:95:07:AC:CF:E3:15:A7:B5:D0:1B:FE:3D:9A:76:3A:37:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4023ef54-e1f6-3228-967b-da81e1202edd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.225.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:7c:37:3b:cb:38:84:7e:57:b1:38:1f:5d:8e:d1:fb:96:10: 3e:3c:44:c6:45:97:2c:fb:eb:0a:ea:a8:d5:fc:7c:49:24:10: b6:88:c3:21:96:42:2d:aa:33:18:1e:c3:44:f2:5a:55:4f:21: 65:46:4f:a1:83:05:c8:e4:f9:6a:56:14:9b:75:60:f5:e5:df: 5d:b5:5a:b8:1e:1a:b7:ba:5b:fb:83:d8:16:69:05:6c:cc:74: 3e:6a:18:4b:60:f3:59:a4:20:2c:2c:b4:8d:60:1e:ed:7e:d0: 5b:ec:0c:c4:7e:4a:1c:bb:52:cd:cb:1b:eb:b1:a7:65:83:52: 69:7e:7f:49:b1:4b:df:57:9d:2d:28:5c:c1:6b:b0:ad:6b:00: 12:a1:fc:35:e8:8f:65:9a:39:b0:7a:ff:a5:4b:93:a3:ce:05: 50:00:cb:69:2c:49:13:b9:16:b4:4e:e7:db:55:2d:f3:94:43: c4:94:f0:62:9e:37:06:2e:ca:e5:a1:24:8a:a1:ac:ea:de:5e: 83:99:6c:62:c4:14:8c:52:10:be:10:ed:48:5e:ac:51:80:4e: 32:e6:75:da:ce:ab:06:8d:86:a6:11:01:a9:6e:5d:49:89:51: ac:9e:ea:92:f3:de:e1:4a:f3:d0:42:8c:ce:87:f7:50:2f:0f: 8c:5b:7b:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjNaSqYAESVgXA2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwNjEyNTkwNloXDTI3MDEwNDEzNTkwNlowLzEtMCsGA1UEAxMk OGI5ODBkMmQtOGRiOC00OGM1LWE4ODUtM2YyMTkxMWQ5NzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo66NWdv/bYNLY+4IxKB7IfULcEklIqph9rMz Mw/Q4OtBTv3S5jIUu516YxrLAKUCcfmMyh4sDm6AhX4hfcD3bCMfrGtLyvg9ma7/ +NRr/ibBpQGQ2MH0M8kgKBhysV5V0/HNZRkEQVyPaLMZ3F6OkWF6Z866lCwUrdWV MFDDJ7DosRoY+yCwMObMNCgvlJBEwsSxbJOghMIiZg6HAZmqyWOlI42HhINx2Oo2 v1trn1VnbOqTDzHWCm6FDkyw/SCbN8cJifgbe7E/xo3d3LiOadO6YN20UgV1oxso 32yMpl7Y3nC8tMLWE9kHuBBDpsDMjif1DD/dDeJ4pHm3C1aBAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwAoZUHrM/jFae10Bv+PZp2OjcgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNDAyM2VmNTQtZTFmNi0z MjI4LTk2N2ItZGE4MWUxMjAyZWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJuFtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJx8NzvLOIR+V7E4H12O0fuWED48RMZFlyz76wrqqNX8fEkkELaIwyGW Qi2qMxgew0TyWlVPIWVGT6GDBcjk+WpWFJt1YPXl3121WrgeGre6W/uD2BZpBWzM dD5qGEtg81mkICwstI1gHu1+0FvsDMR+Shy7Us3LG+uxp2WDUml+f0mxS99XnS0o XMFrsK1rABKh/DXoj2WaObB6/6VLk6POBVAAy2ksSRO5FrRO59tVLfOUQ8SU8GKe NwYuyuWhJIqhrOreXoOZbGLEFIxSEL4Q7UherFGATjLmddrOqwaNhqYRAaluXUmJ Uaye6pLz3uFK89BCjM6H91AvD4xbe3o= -----END CERTIFICATE-----Generated at Wed Oct 28 04:34:46 2026 by rpki-client