$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/42aa81db-92e1-30b8-9602-29d0c339c48c.roa File: 42aa81db-92e1-30b8-9602-29d0c339c48c.roa (raw, json) Hash identifier: 4QzpehZJe7SJ1x3UV7QKCTFdHOoqfjZZUMhOGTnn/ss= Subject key identifier: 5A:2B:E5:CC:46:CF:37:3B:C2:2D:1D:D4:08:82:78:E1:04:01:B8:5D Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F8DD8949342C2F6642D5F3200 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/42aa81db-92e1-30b8-9602-29d0c339c48c.roa Signing time: Mon 19 Oct 2026 13:00:12 +0000 ROA not before: Mon 19 Oct 2026 13:00:12 +0000 ROA not after: Sun 17 Jan 2027 14:00:12 +0000 asID: 275628 IP address blocks: 38.250.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d8:94:93:42:c2:f6:64:2d:5f:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 19 13:00:12 2026 GMT Not After : Jan 17 14:00:12 2027 GMT Subject: CN=9cdaf1f9-f03f-4741-9877-a20f1cfdd2ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e1:e8:ad:be:87:38:a3:58:ff:60:0d:1d:3f: 5a:57:b0:6e:2d:45:ca:6f:fd:54:31:0f:66:b0:8f: 07:8a:38:0c:73:ad:01:ba:ac:c0:22:de:53:e2:aa: ab:5c:d1:6f:98:8f:ec:fe:73:53:64:d1:c3:06:a5: c9:1d:3d:b7:37:2f:2a:48:8e:27:c5:f6:d7:6e:b6: b2:66:85:72:1f:9e:f0:ab:43:49:89:d6:ad:44:a6: d5:a1:a1:85:2c:fb:02:f3:be:49:43:a8:ee:97:c1: 41:9a:ea:69:d2:7e:36:8f:0a:06:18:cb:e0:79:b2: 26:d7:c9:85:6f:6a:93:e9:82:5d:52:d5:79:d5:91: 52:8b:17:c7:25:93:7f:55:e4:c6:eb:5a:27:58:81: 92:db:07:2b:d4:f5:70:07:f8:5c:59:f7:65:ec:9f: cb:b3:74:d8:2a:60:8a:62:56:85:67:b7:f3:0c:a5: dd:3a:e2:2b:23:4f:e3:4d:71:3e:7e:cd:ba:87:4a: 33:11:b1:82:ff:0e:05:3b:3d:03:90:8c:dd:63:94: 8c:bf:11:bb:f1:74:2a:cd:41:e5:31:ef:c3:c6:2f: 20:c1:38:72:ed:38:73:8b:3c:b2:45:c3:38:7a:90: ba:6a:de:6a:13:e2:9a:af:64:62:8d:85:ae:21:74: ac:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:2B:E5:CC:46:CF:37:3B:C2:2D:1D:D4:08:82:78:E1:04:01:B8:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/42aa81db-92e1-30b8-9602-29d0c339c48c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.250.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:88:e2:73:2e:fc:ba:35:10:ea:3f:14:98:97:1b:92:c5:b6: a6:c9:44:c5:14:4f:b5:1d:52:46:e3:fa:42:ea:a3:c6:aa:68: 01:69:e5:03:27:4f:2a:c2:a8:0d:46:b9:ba:5a:b7:06:32:e9: 20:74:96:f2:e4:41:d3:a0:b0:75:54:c7:ee:29:72:d7:3e:05: 0e:3b:74:83:24:f9:d4:67:10:6f:f4:28:a4:ea:3f:92:af:90: bc:28:ef:07:fa:bd:07:bf:76:51:91:c2:b4:3f:c2:de:ec:61: b7:a9:64:82:33:9e:46:73:2b:39:bc:13:5a:e8:3b:40:13:56: 29:9f:41:fc:c0:65:56:bd:fc:2a:c8:d9:28:f8:84:5b:19:5f: 8b:84:05:b5:2f:9d:45:76:11:9f:05:4f:85:1e:6f:f9:f1:59: 9d:9a:d9:2c:d0:9c:53:24:28:84:4e:54:e2:3a:fb:15:56:41: d5:52:d7:f7:54:cf:6e:cf:48:83:da:17:49:16:65:7a:63:fa: 8a:75:33:de:b2:7c:48:9f:d6:17:5d:dc:8c:c4:a8:ab:e1:47: e3:84:48:eb:60:fd:48:7c:e9:db:dd:3c:9b:30:43:55:2e:57: 26:7c:6f:2a:f6:c7:b8:42:9e:30:cc:a3:63:8c:e8:95:a5:47: 1c:44:60:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+N2JSTQsL2ZC1fMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk OWNkYWYxZjktZjAzZi00NzQxLTk4NzctYTIwZjFjZmRkMmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+Horb6HOKNY/2ANHT9aV7BuLUXKb/1UMQ9m sI8HijgMc60BuqzAIt5T4qqrXNFvmI/s/nNTZNHDBqXJHT23Ny8qSI4nxfbXbray ZoVyH57wq0NJidatRKbVoaGFLPsC875JQ6jul8FBmupp0n42jwoGGMvgebIm18mF b2qT6YJdUtV51ZFSixfHJZN/VeTG61onWIGS2wcr1PVwB/hcWfdl7J/Ls3TYKmCK YlaFZ7fzDKXdOuIrI0/jTXE+fs26h0ozEbGC/w4FOz0DkIzdY5SMvxG78XQqzUHl Me/Dxi8gwThy7ThzizyyRcM4epC6at5qE+Kar2RijYWuIXSsIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFor5cxGzzc7wi0d1AiCeOEEAbhdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNDJhYTgxZGItOTJlMS0z MGI4LTk2MDItMjlkMGMzMzljNDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJvpfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOI4nMu/Lo1EOo/FJiXG5LFtqbJRMUUT7UdUkbj+kLqo8aqaAFp5QMn TyrCqA1GubpatwYy6SB0lvLkQdOgsHVUx+4pctc+BQ47dIMk+dRnEG/0KKTqP5Kv kLwo7wf6vQe/dlGRwrQ/wt7sYbepZIIznkZzKzm8E1roO0ATVimfQfzAZVa9/CrI 2Sj4hFsZX4uEBbUvnUV2EZ8FT4Ueb/nxWZ2a2SzQnFMkKIROVOI6+xVWQdVS1/dU z27PSIPaF0kWZXpj+op1M96yfEif1hdd3IzEqKvhR+OESOtg/Uh86dvdPJswQ1Uu VyZ8byr2x7hCnjDMo2OM6JWlRxxEYHE= -----END CERTIFICATE-----Generated at Tue Oct 27 20:50:48 2026 by rpki-client