$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4e8cce28-4386-3ed9-aad3-31dbf64f9a40.roa File: 4e8cce28-4386-3ed9-aad3-31dbf64f9a40.roa (raw, json) Hash identifier: 2zpjLL7HVoI1ZuhvQxBJO8GoaBVL9FBNSSxdmJ+17xw= Subject key identifier: 52:FB:72:E8:3B:E2:41:5F:B2:F8:58:3E:B4:E8:54:FD:FC:8E:BF:5E Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F5FC807DC5EEADDD392DAE100 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4e8cce28-4386-3ed9-aad3-31dbf64f9a40.roa Signing time: Sat 03 Oct 2026 01:00:12 +0000 ROA not before: Sat 03 Oct 2026 01:00:12 +0000 ROA not after: Fri 01 Jan 2027 02:00:12 +0000 asID: 272943 IP address blocks: 38.156.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5f:c8:07:dc:5e:ea:dd:d3:92:da:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 3 01:00:12 2026 GMT Not After : Jan 1 02:00:12 2027 GMT Subject: CN=95fd688e-3058-410c-9fb8-2bb3d103db2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8a:87:d6:09:3e:78:94:41:31:d2:4f:37:3f: a6:0a:c2:44:83:4f:91:fd:8f:3c:ee:d9:e4:9c:62: 8a:be:25:34:e4:50:16:a1:bf:1a:7b:fa:70:b2:9e: bb:76:6f:bc:1c:64:d1:6e:e5:f9:a4:e9:5f:69:e9: 25:46:cd:c4:68:56:76:30:26:81:41:41:7b:0f:70: bd:c3:40:01:6f:74:11:94:4c:ee:b5:39:9a:34:dc: 68:5d:cb:11:b4:af:de:fe:1e:ae:15:56:64:c3:0a: 5b:25:3a:dd:22:1f:30:f8:6d:ab:6c:bf:70:ee:ac: b8:81:63:c8:fd:61:ed:1a:24:8b:c8:b9:52:dd:7f: 6e:6e:50:d6:9b:fd:ba:a1:f6:a7:fd:28:7f:dc:68: ac:21:0a:06:0c:b6:2e:ef:94:18:3c:7a:6e:0e:f0: ed:8d:f8:db:25:80:21:60:a6:1f:36:57:49:ef:38: cd:8a:dc:40:f6:51:b9:d4:cb:db:98:bb:c5:16:12: 10:e4:62:a8:1a:7a:04:ec:ae:36:6f:90:d7:86:71: 75:3b:8b:dd:00:25:55:50:c1:c7:45:10:c0:bb:56: 23:35:60:31:98:23:55:eb:2b:df:2d:91:e1:1e:09: 91:98:de:dc:97:ff:05:6f:b9:d6:22:9f:d4:38:f1: 5a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FB:72:E8:3B:E2:41:5F:B2:F8:58:3E:B4:E8:54:FD:FC:8E:BF:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4e8cce28-4386-3ed9-aad3-31dbf64f9a40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.156.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:30:0a:98:65:0e:99:e4:25:7a:99:94:d5:04:15:a0:1f:c0: b5:a2:39:30:53:cb:cf:60:10:e3:bc:3c:f1:41:74:76:92:7c: 3e:11:09:ec:07:95:cd:56:60:27:de:06:a3:68:d6:3f:41:c6: a6:50:2e:06:e1:83:46:c3:3b:f5:74:f6:3b:ba:d8:80:99:39: d9:38:16:35:fa:00:a9:0d:70:ea:6f:05:ee:6e:d2:1c:70:40: e5:2a:27:5c:31:31:b4:44:a5:2e:97:bd:37:d3:8b:1b:6f:9a: aa:6a:49:40:76:21:df:9e:0d:9a:7c:6d:04:bc:85:3b:ba:1b: 25:c2:77:79:08:42:53:bf:f4:a9:22:5f:b0:11:a7:f3:fb:56: ae:24:fc:34:3b:d6:65:fd:53:04:32:e6:d2:75:6b:ab:62:64: 5f:03:13:0b:de:d5:57:49:2f:05:13:0d:50:23:15:a8:34:5c: 1b:b5:74:2c:6b:36:74:30:69:8b:4f:98:bf:ae:30:e7:ac:f0: 43:22:b5:b3:0c:d5:8f:57:46:fc:70:09:b8:0e:5b:df:72:cc: c9:3d:47:bf:ad:61:46:ca:dc:90:d3:52:59:92:b2:c7:17:99: 67:71:21:22:e7:f1:cc:58:9e:f0:7e:9d:a1:1c:e6:4e:ab:dd: e2:c5:77:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9fyAfcXurd05La4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwMzAxMDAxMloXDTI3MDEwMTAyMDAxMlowLzEtMCsGA1UEAxMk OTVmZDY4OGUtMzA1OC00MTBjLTlmYjgtMmJiM2QxMDNkYjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIqH1gk+eJRBMdJPNz+mCsJEg0+R/Y887tnk nGKKviU05FAWob8ae/pwsp67dm+8HGTRbuX5pOlfaeklRs3EaFZ2MCaBQUF7D3C9 w0ABb3QRlEzutTmaNNxoXcsRtK/e/h6uFVZkwwpbJTrdIh8w+G2rbL9w7qy4gWPI /WHtGiSLyLlS3X9ublDWm/26ofan/Sh/3GisIQoGDLYu75QYPHpuDvDtjfjbJYAh YKYfNldJ7zjNitxA9lG51MvbmLvFFhIQ5GKoGnoE7K42b5DXhnF1O4vdACVVUMHH RRDAu1YjNWAxmCNV6yvfLZHhHgmRmN7cl/8Fb7nWIp/UOPFarwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFL7cug74kFfsvhYPrToVP38jr9eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNGU4Y2NlMjgtNDM4Ni0z ZWQ5LWFhZDMtMzFkYmY2NGY5YTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJpxZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkwCphlDpnkJXqZlNUEFaAfwLWiOTBTy89gEOO8PPFBdHaSfD4RCewH lc1WYCfeBqNo1j9BxqZQLgbhg0bDO/V09ju62ICZOdk4FjX6AKkNcOpvBe5u0hxw QOUqJ1wxMbREpS6XvTfTixtvmqpqSUB2Id+eDZp8bQS8hTu6GyXCd3kIQlO/9Kki X7ARp/P7Vq4k/DQ71mX9UwQy5tJ1a6tiZF8DEwve1VdJLwUTDVAjFag0XBu1dCxr NnQwaYtPmL+uMOes8EMitbMM1Y9XRvxwCbgOW99yzMk9R7+tYUbK3JDTUlmSsscX mWdxISLn8cxYnvB+naEc5k6r3eLFd/E= -----END CERTIFICATE-----Generated at Tue Oct 27 16:35:10 2026 by rpki-client