$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a3f5cde-a67a-398a-9693-83bb19e76009.roa File: 4a3f5cde-a67a-398a-9693-83bb19e76009.roa (raw, json) Hash identifier: k2RT9j1iFStP5hF5+23oti65GgDLVduwKgLOv2CUi0Y= Subject key identifier: 1F:6C:81:D6:0B:B2:C0:4F:F8:17:CD:0B:DA:79:A0:68:05:E0:BA:23 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F89A84C31151A16D569CA5500 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a3f5cde-a67a-398a-9693-83bb19e76009.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 210129 IP address blocks: 38.56.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:4c:31:15:1a:16:d5:69:ca:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=3feb9690-5c0a-4727-85b8-1b43c17af5ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b9:8f:06:69:1e:69:25:d4:9e:2c:89:8f:65: e4:01:9e:18:02:31:9c:93:1f:f0:0b:5a:83:66:71: 7b:f6:b1:65:0a:e6:b0:1a:62:ea:56:40:35:58:05: e0:ef:fe:a2:01:da:ae:ee:30:04:6d:cb:41:f2:de: 2d:3c:89:05:e6:45:16:8f:3e:06:36:57:96:9c:96: ea:ef:37:42:50:7a:22:a6:d6:21:88:9d:a1:fe:ae: b5:34:20:35:96:6f:8f:86:1f:ca:ea:6e:ba:ef:18: d7:a7:72:05:94:91:3a:d4:fa:e5:5f:d9:bb:2a:3c: c9:73:8a:f5:c2:4b:4b:e4:3c:6b:cb:60:9d:83:7b: 7a:9f:c6:a5:67:16:20:1a:0e:35:0f:bb:86:0d:a1: 7f:61:ac:78:dd:90:e5:a1:27:30:66:11:9e:f6:25: ca:c3:dc:92:60:a5:18:f7:9c:4f:46:02:a2:b3:60: 20:aa:ab:02:82:7a:db:86:21:76:5e:85:25:7f:e4: ce:39:8c:71:ec:d3:4b:3d:55:f9:d5:90:2f:b9:6b: cb:f1:9d:68:c0:05:da:c3:0e:ce:25:2f:c7:40:86: 59:c4:cf:b3:48:75:94:2f:bf:db:55:3b:77:6e:1e: 36:95:ed:5c:61:ad:0d:53:54:ce:20:a9:d9:ae:ad: 3d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:6C:81:D6:0B:B2:C0:4F:F8:17:CD:0B:DA:79:A0:68:05:E0:BA:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a3f5cde-a67a-398a-9693-83bb19e76009.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.56.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:fb:d3:ee:61:29:05:54:ff:d6:fe:a0:67:4c:ac:9f:7d:ed: c7:48:fe:b3:6b:f1:a8:9c:db:de:bf:0b:34:b8:b1:b9:df:9c: f1:21:35:80:db:d6:52:e2:24:6b:9b:1e:f6:19:12:4f:1e:a4: a6:34:30:9f:df:3d:ea:97:df:46:45:bc:91:8b:62:09:33:18: cf:f9:65:02:64:b7:92:00:93:80:a6:44:80:fb:16:26:6d:3d: 32:cc:d5:c6:9b:d0:ba:de:a2:75:35:cf:d4:ec:b1:50:9c:ec: 48:bf:71:c4:c7:b4:19:30:6a:3c:a6:f3:44:a9:2f:9c:27:7b: 25:7d:02:22:87:d2:8b:0d:97:8d:dd:3c:79:a0:81:3f:54:ab: 8a:f3:96:36:65:10:a5:d0:9b:69:b7:94:e4:9b:5a:5b:e3:f2: 7d:b3:d8:4a:a8:d2:c8:45:13:68:20:1c:18:a0:28:7e:cb:26: 5d:bc:cc:da:97:40:77:82:a8:b4:24:ef:2d:bd:56:7a:69:04: 90:74:fb:f7:92:ed:07:da:38:84:41:67:4e:cd:33:5a:d7:bb: a7:43:91:2b:0b:06:f5:4d:55:56:41:ee:53:72:e6:49:14:d8: a2:8a:02:c1:73:27:3f:1d:2e:3c:80:48:a4:17:54:5c:14:b2: 5e:52:17:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqEwxFRoW1WnKVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk M2ZlYjk2OTAtNWMwYS00NzI3LTg1YjgtMWI0M2MxN2FmNWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7mPBmkeaSXUniyJj2XkAZ4YAjGckx/wC1qD ZnF79rFlCuawGmLqVkA1WAXg7/6iAdqu7jAEbctB8t4tPIkF5kUWjz4GNleWnJbq 7zdCUHoiptYhiJ2h/q61NCA1lm+Phh/K6m667xjXp3IFlJE61PrlX9m7KjzJc4r1 wktL5Dxry2Cdg3t6n8alZxYgGg41D7uGDaF/Yax43ZDloScwZhGe9iXKw9ySYKUY 95xPRgKis2AgqqsCgnrbhiF2XoUlf+TOOYxx7NNLPVX51ZAvuWvL8Z1owAXaww7O JS/HQIZZxM+zSHWUL7/bVTt3bh42le1cYa0NU1TOIKnZrq094wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9sgdYLssBP+BfNC9p5oGgF4LojMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNGEzZjVjZGUtYTY3YS0z OThhLTk2OTMtODNiYjE5ZTc2MDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFJjggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIb70+5hKQVU/9b+oGdMrJ997cdI/rNr8aic296/CzS4sbnfnPEhNYDb 1lLiJGubHvYZEk8epKY0MJ/fPeqX30ZFvJGLYgkzGM/5ZQJkt5IAk4CmRID7FiZt PTLM1cab0LreonU1z9TssVCc7Ei/ccTHtBkwajym80SpL5wneyV9AiKH0osNl43d PHmggT9Uq4rzljZlEKXQm2m3lOSbWlvj8n2z2Eqo0shFE2ggHBigKH7LJl28zNqX QHeCqLQk7y29VnppBJB0+/eS7QfaOIRBZ07NM1rXu6dDkSsLBvVNVVZB7lNy5kkU 2KKKAsFzJz8dLjyASKQXVFwUsl5SF9M= -----END CERTIFICATE-----Generated at Tue Oct 27 20:51:08 2026 by rpki-client