$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4db54d0c-1eed-366e-be0a-8b7d4b543b9b.roa File: 4db54d0c-1eed-366e-be0a-8b7d4b543b9b.roa (raw, json) Hash identifier: QrE1PqIOuGnVnLGRulFhqu8Lsc1Z+ZFnEgcydCltm4s= Subject key identifier: 87:B1:46:0C:3B:46:96:2A:12:30:CC:DB:20:3C:23:AC:C3:3E:79:C9 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584FA2C872B31656FB5D48E98880 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4db54d0c-1eed-366e-be0a-8b7d4b543b9b.roa Signing time: Tue 27 Oct 2026 01:00:14 +0000 ROA not before: Tue 27 Oct 2026 01:00:14 +0000 ROA not after: Mon 25 Jan 2027 02:00:14 +0000 asID: 215228 IP address blocks: 38.123.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:c8:72:b3:16:56:fb:5d:48:e9:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 27 01:00:14 2026 GMT Not After : Jan 25 02:00:14 2027 GMT Subject: CN=df75ac10-591f-4cfa-8107-bef483f05aca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:47:5f:d5:22:47:26:89:3d:8d:1f:f5:8e:71: d8:b6:12:05:e6:65:b0:a6:fa:73:1d:01:2b:e9:96: ba:71:24:40:dc:60:54:df:3e:9a:f1:b9:97:29:7f: 65:4f:1f:d6:e6:f3:30:4b:dd:af:8f:f2:a4:04:8e: 16:52:c3:37:89:13:9a:7e:d2:ba:ec:6f:04:e1:b5: 1c:e5:d6:79:f5:b3:4b:1f:60:5c:9f:d7:d2:93:88: 25:52:dd:2c:74:59:89:fb:82:08:74:ea:72:df:e9: 20:01:de:54:80:e7:61:bf:6a:f7:0a:14:f5:1b:0f: d5:49:80:48:55:d5:d8:ad:ca:60:67:f7:ff:f6:28: 66:16:ff:ca:45:17:03:8f:9d:b3:05:bb:e6:e5:3e: 16:19:91:c7:5b:31:0c:3a:ad:e3:3f:45:21:a4:3b: 00:c5:2f:58:1b:4c:e4:4b:10:03:dd:dc:80:70:a3: 7e:94:a3:2c:c2:51:13:ef:09:00:7e:e3:ea:d2:e7: da:db:25:3c:13:17:52:77:d4:ca:dc:6e:3c:ce:d2: ce:f8:38:ab:ff:51:ce:65:78:77:f9:e8:12:81:bd: e0:04:59:96:48:f0:2b:f2:bb:97:cc:64:cc:f3:f0: 78:a6:f2:e5:55:c0:f8:95:a7:77:3f:86:0a:21:ae: 2d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B1:46:0C:3B:46:96:2A:12:30:CC:DB:20:3C:23:AC:C3:3E:79:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4db54d0c-1eed-366e-be0a-8b7d4b543b9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.123.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:2e:3a:3d:5b:d0:87:a0:e1:33:cc:73:5b:fb:c3:bd:20:f3: 40:b4:1b:f3:d2:64:b5:16:99:72:f3:e7:b1:c6:cb:8c:c4:71: 2d:41:31:04:9b:4e:4d:69:3a:b8:4b:95:44:a9:c0:30:9a:d3: 5e:3b:4a:33:0d:ee:ff:81:34:c5:b5:03:31:5e:a8:73:b3:f3: e2:99:81:65:f9:60:03:64:5e:ac:15:7e:4e:50:a0:2b:79:af: 22:2f:bd:1c:46:46:45:f5:c4:51:43:19:74:32:d0:ea:22:ff: 52:70:4d:32:5b:23:a7:15:2c:a0:1a:8c:63:51:61:09:ea:69: e2:8d:a3:dc:cc:66:2b:14:2e:f5:65:e7:27:c0:80:ea:ed:30: dc:7f:d8:a9:a7:ec:ad:de:0a:0b:cd:7e:3c:e3:f6:93:09:d1: e6:6f:ea:eb:da:bb:e0:58:cc:57:70:55:93:43:1a:2d:a9:73: 1d:01:e3:63:a7:1d:46:22:87:03:01:68:4c:50:bd:12:c3:df: 39:38:62:a1:44:a6:c0:2b:64:8b:e8:1f:d1:19:4a:f4:19:3f: 5a:fd:7f:9a:21:1f:32:43:fb:29:a8:f7:35:70:0a:45:24:2e: 6d:82:57:61:e0:6b:9e:c4:3d:54:75:dd:10:86:61:6a:1f:44: 39:d9:8c:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+iyHKzFlb7XUjpiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyNzAxMDAxNFoXDTI3MDEyNTAyMDAxNFowLzEtMCsGA1UEAxMk ZGY3NWFjMTAtNTkxZi00Y2ZhLTgxMDctYmVmNDgzZjA1YWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0df1SJHJok9jR/1jnHYthIF5mWwpvpzHQEr 6Za6cSRA3GBU3z6a8bmXKX9lTx/W5vMwS92vj/KkBI4WUsM3iROaftK67G8E4bUc 5dZ59bNLH2Bcn9fSk4glUt0sdFmJ+4IIdOpy3+kgAd5UgOdhv2r3ChT1Gw/VSYBI VdXYrcpgZ/f/9ihmFv/KRRcDj52zBbvm5T4WGZHHWzEMOq3jP0UhpDsAxS9YG0zk SxAD3dyAcKN+lKMswlET7wkAfuPq0ufa2yU8ExdSd9TK3G48ztLO+Dir/1HOZXh3 +egSgb3gBFmWSPAr8ruXzGTM8/B4pvLlVcD4lad3P4YKIa4t7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIexRgw7RpYqEjDM2yA8I6zDPnnJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNGRiNTRkMGMtMWVlZC0z NjZlLWJlMGEtOGI3ZDRiNTQzYjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJntoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQuOj1b0Ieg4TPMc1v7w70g80C0G/PSZLUWmXLz57HGy4zEcS1BMQSb Tk1pOrhLlUSpwDCa0147SjMN7v+BNMW1AzFeqHOz8+KZgWX5YANkXqwVfk5QoCt5 ryIvvRxGRkX1xFFDGXQy0Ooi/1JwTTJbI6cVLKAajGNRYQnqaeKNo9zMZisULvVl 5yfAgOrtMNx/2Kmn7K3eCgvNfjzj9pMJ0eZv6uvau+BYzFdwVZNDGi2pcx0B42On HUYihwMBaExQvRLD3zk4YqFEpsArZIvoH9EZSvQZP1r9f5ohHzJD+ymo9zVwCkUk Lm2CV2Hga57EPVR13RCGYWofRDnZjDk= -----END CERTIFICATE-----Generated at Tue Oct 27 11:10:50 2026 by rpki-client