$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4fedc788-c1f4-35bf-bf72-6d039b034866.roa File: 4fedc788-c1f4-35bf-bf72-6d039b034866.roa (raw, json) Hash identifier: ilRIn8350TeSc4FEjeMV+rla9B915d5acy+XbdhX8FE= Subject key identifier: A8:30:77:7D:05:97:57:54:41:EF:21:FA:17:3B:12:4A:CA:BB:B6:63 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F4C3D61C751BBF5ABE7408800 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4fedc788-c1f4-35bf-bf72-6d039b034866.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 62468 IP address blocks: 38.39.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:61:c7:51:bb:f5:ab:e7:40:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=03d6ca9c-112c-4542-8485-b00b74e28393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:31:21:1d:95:7e:a4:94:ac:19:89:bb:41:79: 37:cd:0d:4f:5e:15:da:90:72:55:38:69:c3:ca:fe: dc:95:d8:f2:bd:99:88:5b:85:e0:e5:f5:7e:3b:a5: bd:81:6c:81:a9:f5:0e:e8:c3:f9:f8:e7:13:5e:75: 1d:12:bb:0d:c3:2c:bf:9a:cf:5a:ec:2d:a6:ba:e9: 7b:cf:18:38:e8:00:95:05:1a:88:05:43:e9:20:e6: 0b:82:09:68:6f:31:b2:90:05:89:a0:72:7b:d7:b5: 52:d3:29:11:5b:42:a7:ed:e1:51:43:c8:1d:fd:34: f4:28:8c:7d:db:d2:c4:de:e6:31:a6:f4:27:fb:56: 81:55:60:26:9a:de:0e:8b:9f:6b:51:9a:31:d2:4a: 68:8e:cf:83:3e:cf:c6:b6:e5:13:52:20:73:7e:9a: 48:50:50:a5:9d:39:d7:cd:f1:bc:ed:1a:21:5e:df: 30:c3:d9:ef:86:f9:8c:c3:76:a2:a1:15:b1:5e:a2: 6f:08:34:8f:b6:84:b6:20:a2:07:3a:7e:57:4e:58: 04:54:f8:4d:8e:06:70:a9:e5:8d:58:3f:fb:6e:b1: 43:46:6f:d8:3a:fa:93:28:39:02:2d:bd:60:bd:55: 57:15:ab:64:89:68:ba:1c:a9:53:af:0e:07:81:b5: 4e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:30:77:7D:05:97:57:54:41:EF:21:FA:17:3B:12:4A:CA:BB:B6:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4fedc788-c1f4-35bf-bf72-6d039b034866.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.39.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:b8:b9:0f:47:24:3d:a4:bd:35:76:a9:d0:8e:fa:50:8b:83: 73:66:58:a8:e8:71:63:5a:d9:2d:97:d7:48:4f:7a:a3:6b:97: 76:9c:b0:52:9b:12:b8:32:17:f5:79:a3:ff:a9:02:50:6d:3d: 7d:89:b1:2a:fd:f0:26:da:f2:d4:05:d7:44:87:d7:f1:2a:cd: 3f:7c:4b:85:9f:f7:10:d1:40:1e:8c:13:79:b1:85:d9:81:d5: 4e:ea:7e:3f:f5:bc:f7:ab:35:14:dc:d4:f2:91:e1:ce:de:01: 53:33:ba:5d:5a:b9:df:97:16:cc:b3:fa:0f:92:45:9f:73:7e: f5:51:35:f3:2f:2c:e5:07:8c:85:58:98:a9:89:b0:9a:2d:da: 0f:72:87:43:74:e0:81:64:16:c6:26:6d:c5:4b:4f:07:6f:08: bd:2a:04:02:82:99:3a:ec:5d:17:0a:7b:d0:16:f5:f4:a6:dc: 65:91:6b:5b:80:15:ed:1f:6c:be:29:03:81:80:0e:5f:e4:e2: 77:54:b8:d5:a7:f8:98:de:19:7b:50:16:48:16:41:15:07:62: 9b:82:32:a5:3a:5f:21:18:16:86:f5:f4:19:30:40:43:95:46: 5a:4e:5b:d2:f5:47:3a:a7:de:8b:4c:71:53:ae:7f:4e:99:18: 48:37:97:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPWHHUbv1q+dAiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MDNkNmNhOWMtMTEyYy00NTQyLTg0ODUtYjAwYjc0ZTI4MzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojEhHZV+pJSsGYm7QXk3zQ1PXhXakHJVOGnD yv7cldjyvZmIW4Xg5fV+O6W9gWyBqfUO6MP5+OcTXnUdErsNwyy/ms9a7C2muul7 zxg46ACVBRqIBUPpIOYLgglobzGykAWJoHJ717VS0ykRW0Kn7eFRQ8gd/TT0KIx9 29LE3uYxpvQn+1aBVWAmmt4Oi59rUZox0kpojs+DPs/GtuUTUiBzfppIUFClnTnX zfG87RohXt8ww9nvhvmMw3aioRWxXqJvCDSPtoS2IKIHOn5XTlgEVPhNjgZwqeWN WD/7brFDRm/YOvqTKDkCLb1gvVVXFatkiWi6HKlTrw4HgbVOwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgwd30Fl1dUQe8h+hc7EkrKu7ZjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNGZlZGM3ODgtYzFmNC0z NWJmLWJmNzItNmQwMzliMDM0ODY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJicYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKW4uQ9HJD2kvTV2qdCO+lCLg3NmWKjocWNa2S2X10hPeqNrl3acsFKb ErgyF/V5o/+pAlBtPX2JsSr98Cba8tQF10SH1/EqzT98S4Wf9xDRQB6ME3mxhdmB 1U7qfj/1vPerNRTc1PKR4c7eAVMzul1aud+XFsyz+g+SRZ9zfvVRNfMvLOUHjIVY mKmJsJot2g9yh0N04IFkFsYmbcVLTwdvCL0qBAKCmTrsXRcKe9AW9fSm3GWRa1uA Fe0fbL4pA4GADl/k4ndUuNWn+JjeGXtQFkgWQRUHYpuCMqU6XyEYFob19BkwQEOV RlpOW9L1Rzqn3otMcVOuf06ZGEg3l60= -----END CERTIFICATE-----Generated at Mon Oct 26 06:15:24 2026 by rpki-client