$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4c88a499-a162-3ae1-9878-382d0d171392.roa File: 4c88a499-a162-3ae1-9878-382d0d171392.roa (raw, json) Hash identifier: ykb3AX4/D052vT8WWi1y69oLRvOyemjxLlOJLiqS0SI= Subject key identifier: EC:B2:0B:0F:E4:E6:29:0E:3C:BA:DA:41:64:66:53:93:AF:68:3F:63 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F9FFDBD5FCEB82BB453716F80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4c88a499-a162-3ae1-9878-382d0d171392.roa Signing time: Mon 26 Oct 2026 01:00:13 +0000 ROA not before: Mon 26 Oct 2026 01:00:13 +0000 ROA not after: Sun 24 Jan 2027 02:00:13 +0000 asID: 137458 IP address blocks: 38.94.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9f:fd:bd:5f:ce:b8:2b:b4:53:71:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 26 01:00:13 2026 GMT Not After : Jan 24 02:00:13 2027 GMT Subject: CN=f3c1d178-4c35-47bb-b086-60be86adbb16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:cc:5c:85:98:55:71:a7:f2:29:cb:ab:af:a3: a9:42:77:7d:8e:8f:17:9f:e8:be:87:b2:53:30:9e: f9:eb:40:be:93:70:e5:6f:63:c8:53:4e:15:15:a1: 75:fe:e0:82:02:74:fe:41:d8:38:f1:dd:5f:21:f4: 0e:e2:d3:21:7a:e4:cd:45:dc:69:83:81:9a:ae:8d: d2:8a:ee:8e:45:ca:84:0f:db:4d:44:64:89:37:db: 48:6d:62:a5:8c:67:00:1d:39:8d:a6:0f:10:b2:fc: 71:cc:af:0d:01:d6:ab:79:8d:82:16:44:a5:20:8f: 89:5f:b8:21:7a:c6:a2:84:80:3f:60:77:24:c1:7e: da:87:cd:a5:f4:b7:8f:d4:85:fd:fe:e3:da:37:6d: da:be:d1:e8:7a:eb:2b:05:26:68:b6:43:10:7e:bb: d0:bf:cc:e7:74:52:94:89:d9:4c:87:82:6e:6a:06: d5:96:cf:fb:ad:10:b5:97:bd:b3:19:6e:9e:c9:e0: bf:56:fa:5d:b1:27:99:9e:58:e0:d0:7b:ea:76:c0: d2:db:ae:61:c3:56:ae:93:e9:5d:4e:d0:7c:cf:c5: 52:d9:95:56:72:d6:99:84:d6:4a:4d:d4:5f:6e:50: 4b:9d:1d:d0:94:e1:8b:2f:db:03:1b:04:cc:80:0e: b2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B2:0B:0F:E4:E6:29:0E:3C:BA:DA:41:64:66:53:93:AF:68:3F:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4c88a499-a162-3ae1-9878-382d0d171392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.94.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:dc:59:a6:4f:e5:1e:bf:92:95:27:96:4c:ae:e8:54:18:65: d5:89:f2:78:22:fe:dd:94:88:0b:9c:b6:d9:cc:24:de:8c:de: 0c:03:46:f1:55:98:6a:a9:c9:0d:82:5a:a2:6d:a3:d1:d7:d4: f5:98:db:5d:f9:42:1c:18:4e:71:3a:c6:d5:de:70:11:0f:65: 77:79:46:05:7b:8a:cd:30:39:81:1f:66:fe:7b:3c:b5:af:7c: 9c:ba:bc:ff:90:45:d1:90:5a:c2:ba:6e:bf:95:90:b5:4e:4f: 60:dd:52:24:af:71:ce:94:29:62:17:dd:ee:1c:9d:d0:14:a6: be:9a:77:10:31:39:8a:b5:10:90:b3:97:62:bf:38:5e:b3:39: 39:61:54:62:8e:5f:ea:0e:18:e1:52:7b:04:d3:97:f5:6a:1a: b5:14:f2:77:12:1b:ff:66:96:81:98:15:ba:a2:b9:d3:c7:5a: 8f:2e:14:25:df:7a:ee:53:fa:d3:d7:81:c5:6b:d9:b9:06:df: 42:10:8b:ce:ed:d0:18:0c:5b:38:bb:e1:9b:b2:90:c1:2c:40: ad:ac:f6:4f:71:a7:8a:23:56:c8:c9:eb:f7:79:67:db:9b:56: 9d:05:71:9b:e7:81:b9:6d:51:aa:d8:7a:7a:09:a0:e4:f1:9c: 5f:2e:f8:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+f/b1fzrgrtFNxb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyNjAxMDAxM1oXDTI3MDEyNDAyMDAxM1owLzEtMCsGA1UEAxMk ZjNjMWQxNzgtNGMzNS00N2JiLWIwODYtNjBiZTg2YWRiYjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMxchZhVcafyKcurr6OpQnd9jo8Xn+i+h7JT MJ7560C+k3Dlb2PIU04VFaF1/uCCAnT+Qdg48d1fIfQO4tMheuTNRdxpg4Garo3S iu6ORcqED9tNRGSJN9tIbWKljGcAHTmNpg8QsvxxzK8NAdareY2CFkSlII+JX7gh esaihIA/YHckwX7ah82l9LeP1IX9/uPaN23avtHoeusrBSZotkMQfrvQv8zndFKU idlMh4JuagbVls/7rRC1l72zGW6eyeC/VvpdsSeZnljg0HvqdsDS265hw1auk+ld TtB8z8VS2ZVWctaZhNZKTdRfblBLnR3QlOGLL9sDGwTMgA6y8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOyyCw/k5ikOPLraQWRmU5OvaD9jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNGM4OGE0OTktYTE2Mi0z YWUxLTk4NzgtMzgyZDBkMTcxMzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJl7EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMHcWaZP5R6/kpUnlkyu6FQYZdWJ8ngi/t2UiAucttnMJN6M3gwDRvFV mGqpyQ2CWqJto9HX1PWY2135QhwYTnE6xtXecBEPZXd5RgV7is0wOYEfZv57PLWv fJy6vP+QRdGQWsK6br+VkLVOT2DdUiSvcc6UKWIX3e4cndAUpr6adxAxOYq1EJCz l2K/OF6zOTlhVGKOX+oOGOFSewTTl/VqGrUU8ncSG/9mloGYFbqiudPHWo8uFCXf eu5T+tPXgcVr2bkG30IQi87t0BgMWzi74ZuykMEsQK2s9k9xp4ojVsjJ6/d5Z9ub Vp0FcZvngbltUarYenoJoOTxnF8u+PU= -----END CERTIFICATE-----Generated at Tue Oct 27 15:22:17 2026 by rpki-client