$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4d0cab39-8b4c-35b3-8045-08d2dcafca55.roa File: 4d0cab39-8b4c-35b3-8045-08d2dcafca55.roa (raw, json) Hash identifier: Qou4B+oarA+9t60tKV9Cuiwuqeu79NJHOXX58XX6tDU= Subject key identifier: 42:8F:EC:43:5B:EE:F8:63:37:F6:A8:1D:6E:3E:0E:D6:89:6C:2D:4C Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F5B97FF3E7219A5D6F36D7FE0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4d0cab39-8b4c-35b3-8045-08d2dcafca55.roa Signing time: Thu 01 Oct 2026 13:00:12 +0000 ROA not before: Thu 01 Oct 2026 13:00:12 +0000 ROA not after: Wed 30 Dec 2026 14:00:12 +0000 asID: 272403 IP address blocks: 38.101.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:97:ff:3e:72:19:a5:d6:f3:6d:7f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 1 13:00:12 2026 GMT Not After : Dec 30 14:00:12 2026 GMT Subject: CN=55c2f9f4-68c6-40ac-ae74-1a5e4a1c07b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ec:dc:49:2f:97:ad:09:9a:13:54:c6:88:67: 16:81:77:60:72:0f:46:b7:ce:4c:a6:fb:64:82:4f: 46:48:e1:f8:f1:f6:1e:f4:ed:aa:00:2c:1c:cb:43: 57:dd:ce:19:ff:d3:5c:57:19:fa:e6:26:76:98:dc: dd:fa:a4:62:16:ee:6e:50:45:dd:52:3b:8c:e6:f9: 9a:41:e0:86:7e:67:ab:4e:c7:04:7c:38:46:6d:e1: f4:f5:61:fb:60:7d:74:28:4f:f7:3d:6a:dc:c3:f0: 38:93:a2:3d:85:9f:1d:83:b6:18:3e:2c:a4:eb:95: 81:fb:fc:9b:54:d4:06:27:a4:8c:c2:e2:0a:11:3b: 75:7a:d0:f6:22:50:78:b4:9f:6a:db:5c:83:4f:aa: 80:60:ac:f4:a6:7c:0f:f9:75:1a:20:b1:1b:0f:1a: 4e:d8:e6:e2:b7:ca:eb:dc:ae:72:6e:6a:6f:8a:4c: d3:02:58:b4:13:7e:85:ba:03:25:10:7d:66:54:28: 04:67:40:ca:a1:bb:22:55:ef:f7:8f:5f:78:ef:01: 79:dc:1f:8d:58:bf:19:9d:26:7c:52:a7:ed:1d:c4: 86:9e:49:64:ba:65:22:dc:c3:99:07:f7:32:5d:d1: 6b:2e:1d:b2:82:96:65:12:bd:c5:bb:78:97:7e:0d: b1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8F:EC:43:5B:EE:F8:63:37:F6:A8:1D:6E:3E:0E:D6:89:6C:2D:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4d0cab39-8b4c-35b3-8045-08d2dcafca55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.101.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:1e:ff:b4:a2:67:6e:43:51:6e:5f:e5:98:d9:98:80:c7:ee: 6f:3e:0e:e9:05:67:ef:68:c4:cb:67:fd:12:85:7d:f0:08:2f: 77:20:18:dc:0a:c0:a0:00:d8:12:31:da:9a:42:53:62:f8:b6: 91:b7:dc:72:ec:04:fb:7c:7b:14:0f:57:56:41:09:a0:35:f9: cd:3b:f8:7c:e4:b5:8b:70:14:e4:91:e0:7c:70:5f:54:bd:71: d0:98:a0:ce:89:3d:9e:91:24:da:97:77:02:f5:26:5b:90:92: ac:2b:8c:0a:12:39:22:1d:32:3e:cb:ea:eb:20:c1:d0:e3:06: 3c:65:5e:69:1b:06:18:43:85:a4:aa:4f:96:ed:e9:18:c8:c5: 2a:5c:03:6b:5c:81:5b:d7:66:35:2f:f3:08:23:cd:ae:c1:3d: bb:05:cb:da:8e:d9:e6:80:b2:e6:56:13:ed:58:65:3a:af:8b: 0d:a7:51:01:85:99:0a:67:a7:cf:22:34:80:54:3e:3d:d7:38: 99:e7:18:df:81:19:91:34:12:e6:e0:1a:50:1b:ba:17:32:5d: a0:cf:8c:8f:7f:e9:91:ba:b5:53:45:15:9e:87:33:01:ce:7a: 42:c7:54:0c:8b:74:3d:5a:14:3b:5c:ca:b1:51:96:3c:0c:05: df:5d:6a:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bl/8+chml1vNtf+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk NTVjMmY5ZjQtNjhjNi00MGFjLWFlNzQtMWE1ZTRhMWMwN2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouzcSS+XrQmaE1TGiGcWgXdgcg9Gt85Mpvtk gk9GSOH48fYe9O2qACwcy0NX3c4Z/9NcVxn65iZ2mNzd+qRiFu5uUEXdUjuM5vma QeCGfmerTscEfDhGbeH09WH7YH10KE/3PWrcw/A4k6I9hZ8dg7YYPiyk65WB+/yb VNQGJ6SMwuIKETt1etD2IlB4tJ9q21yDT6qAYKz0pnwP+XUaILEbDxpO2Obit8rr 3K5ybmpvikzTAli0E36FugMlEH1mVCgEZ0DKobsiVe/3j1947wF53B+NWL8ZnSZ8 UqftHcSGnklkumUi3MOZB/cyXdFrLh2ygpZlEr3Fu3iXfg2xFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKP7ENb7vhjN/aoHW4+DtaJbC1MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNGQwY2FiMzktOGI0Yy0z NWIzLTgwNDUtMDhkMmRjYWZjYTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJmVZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4e/7SiZ25DUW5f5ZjZmIDH7m8+DukFZ+9oxMtn/RKFffAIL3cgGNwK wKAA2BIx2ppCU2L4tpG33HLsBPt8exQPV1ZBCaA1+c07+HzktYtwFOSR4HxwX1S9 cdCYoM6JPZ6RJNqXdwL1JluQkqwrjAoSOSIdMj7L6usgwdDjBjxlXmkbBhhDhaSq T5bt6RjIxSpcA2tcgVvXZjUv8wgjza7BPbsFy9qO2eaAsuZWE+1YZTqviw2nUQGF mQpnp88iNIBUPj3XOJnnGN+BGZE0EubgGlAbuhcyXaDPjI9/6ZG6tVNFFZ6HMwHO ekLHVAyLdD1aFDtcyrFRljwMBd9daio= -----END CERTIFICATE-----Generated at Tue Oct 27 16:38:51 2026 by rpki-client