$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a8205c7-07b2-3d91-a6d9-f40c5592e1a5.roa File: 4a8205c7-07b2-3d91-a6d9-f40c5592e1a5.roa (raw, json) Hash identifier: uUptWpFyqqplA45VUE0sDm02lfaND1E2g0tYyjRTAxU= Subject key identifier: 5B:97:95:62:06:C6:48:1B:06:BE:01:9B:27:D6:79:94:FC:E0:E1:51 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F5E62E5C3D2604E606F9E17C3 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a8205c7-07b2-3d91-a6d9-f40c5592e1a5.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 32212 IP address blocks: 38.70.200.0/21 maxlen: 24 38.70.208.0/21 maxlen: 24 38.127.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:e5:c3:d2:60:4e:60:6f:9e:17:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=ce5812d9-dea1-4c77-b660-0dd9dceea1dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5a:87:05:11:fa:bd:b9:9b:02:3e:9c:c9:96: 8c:3b:52:58:07:13:22:50:85:aa:4f:5a:62:f5:09: 11:18:d9:d8:4a:96:0e:e0:24:06:d0:9f:8d:10:8d: d7:e7:26:ff:ab:45:32:37:d7:27:20:ed:fc:1a:f3: 10:13:1e:cb:cc:2c:c6:43:1c:ec:0d:b3:da:41:ff: 65:0f:4d:b4:f4:1d:20:c6:a7:33:73:72:5a:5a:09: c6:2d:26:f6:db:d4:78:3b:e1:43:45:ce:08:ce:a7: 7c:8c:cf:dc:c9:80:c2:b4:f3:1a:6f:9f:06:23:74: 7a:0b:17:60:19:0d:1f:df:b9:18:00:0b:c7:a7:51: 0c:3c:1e:ce:90:83:6e:f4:f1:55:45:ff:2e:13:ab: 6c:e1:ab:9f:56:73:c7:5d:93:d6:61:38:9d:9a:a0: 03:99:92:5c:73:7e:23:50:6b:bf:e3:09:1b:1c:a7: 12:92:97:01:2f:af:25:91:0f:a1:c0:cd:2b:78:b1: 53:57:9d:48:a3:84:26:85:b2:86:6d:92:06:19:08: 39:93:ac:98:44:dd:b8:d5:35:0b:dc:99:8b:1f:c9: a3:5f:1b:af:80:3d:eb:6c:97:ae:59:af:3e:4d:00: 3a:b6:e5:31:45:48:aa:a9:85:bf:0c:84:8e:48:d6: cb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:97:95:62:06:C6:48:1B:06:BE:01:9B:27:D6:79:94:FC:E0:E1:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a8205c7-07b2-3d91-a6d9-f40c5592e1a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.70.200.0-38.70.215.255 38.127.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:f0:4f:38:8d:75:71:7b:a1:5d:5e:f3:15:26:94:bc:20:f0: 23:02:69:c2:d8:0f:3c:a6:f0:c1:3d:37:52:46:76:61:5b:17: 1f:c5:82:87:8f:42:af:1b:a7:3a:bd:70:b3:fa:7e:63:b7:b3: cd:ba:62:a5:0e:c1:fd:4a:a5:dd:97:81:8d:b6:e9:ba:26:85: 94:23:51:2c:09:19:f2:5d:6e:ff:e9:b5:84:b5:35:31:05:68: 5b:e3:f7:10:2e:f0:13:1f:5f:1f:70:2f:51:37:d5:e6:e9:61: 38:60:13:9c:ec:cc:75:95:d9:2e:79:62:9a:63:15:12:82:c2: 39:fe:bc:64:57:14:56:0a:b7:82:87:60:7d:14:01:32:d6:e3: f7:da:ef:84:c5:b1:6f:85:cb:f1:1f:00:23:e5:89:c5:90:07: 12:29:b0:45:27:c8:40:64:62:be:4a:c5:29:c5:80:4c:4e:bc: f0:a9:19:e0:94:7a:33:b8:49:82:cc:07:14:a0:82:d2:eb:dc: 67:74:ad:53:ca:2e:3c:a0:9e:6b:56:ea:e0:73:f6:83:c7:85: b3:10:43:7e:f2:27:58:73:02:ac:22:df:4f:1f:20:d5:c6:d6: 92:24:fd:c0:51:6e:c9:6e:d9:2a:54:0f:ed:32:e5:2e:10:f8: 0a:aa:fc:07 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE9eYuXD0mBOYG+eF8MwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk Y2U1ODEyZDktZGVhMS00Yzc3LWI2NjAtMGRkOWRjZWVhMWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVqHBRH6vbmbAj6cyZaMO1JYBxMiUIWqT1pi 9QkRGNnYSpYO4CQG0J+NEI3X5yb/q0UyN9cnIO38GvMQEx7LzCzGQxzsDbPaQf9l D0209B0gxqczc3JaWgnGLSb229R4O+FDRc4Izqd8jM/cyYDCtPMab58GI3R6Cxdg GQ0f37kYAAvHp1EMPB7OkINu9PFVRf8uE6ts4aufVnPHXZPWYTidmqADmZJcc34j UGu/4wkbHKcSkpcBL68lkQ+hwM0reLFTV51Io4QmhbKGbZIGGQg5k6yYRN241TUL 3JmLH8mjXxuvgD3rbJeuWa8+TQA6tuUxRUiqqYW/DISOSNbLKwIDAQABo4IDYzCC A18wHQYDVR0OBBYEFFuXlWIGxkgbBr4BmyfWeZT84OFRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNGE4MjA1YzctMDdiMi0z ZDkxLWE2ZDktZjQwYzU1OTJlMWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAMmRsgD BAMmRtADBAMmf/gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAiPBPOI11cXuhXV7zFSaUvCDwIwJpwtgPPKbw wT03UkZ2YVsXH8WCh49CrxunOr1ws/p+Y7ezzbpipQ7B/Uql3ZeBjbbpuiaFlCNR LAkZ8l1u/+m1hLU1MQVoW+P3EC7wEx9fH3AvUTfV5ulhOGATnOzMdZXZLnlimmMV EoLCOf68ZFcUVgq3godgfRQBMtbj99rvhMWxb4XL8R8AI+WJxZAHEimwRSfIQGRi vkrFKcWATE688KkZ4JR6M7hJgswHFKCC0uvcZ3StU8ouPKCea1bq4HP2g8eFsxBD fvInWHMCrCLfTx8g1cbWkiT9wFFuyW7ZKlQP7TLlLhD4Cqr8Bw== -----END CERTIFICATE-----Generated at Tue Oct 27 17:35:17 2026 by rpki-client