$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/56340ca6-d58e-32fe-a948-6cd5010230f9.roa File: 56340ca6-d58e-32fe-a948-6cd5010230f9.roa (raw, json) Hash identifier: S3mYVrzV/C7ko+ei2IjUwDAvOe4DIXkbEjY1rlB/peU= Subject key identifier: 36:AA:D6:66:10:F9:D2:28:A8:7D:85:9E:18:C3:D3:EA:CB:EC:03:94 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F6C58337FA2482D91956D10A0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/56340ca6-d58e-32fe-a948-6cd5010230f9.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 273205 IP address blocks: 38.196.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:33:7f:a2:48:2d:91:95:6d:10:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=ce19e4d3-3af0-4aa3-8e86-4d8feab7dd15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3e:5b:1e:31:12:80:ef:09:61:89:94:c6:cc: cb:bc:cb:43:ed:01:77:87:21:a5:d8:23:1d:62:97: fb:d9:16:a7:74:c2:42:48:32:ff:68:cb:ee:27:74: 79:fb:2b:ce:1f:0a:81:5d:59:8e:4a:fc:dc:7e:e8: 26:a3:e6:58:e6:95:22:50:b3:fb:19:c5:3b:bf:e5: 29:f3:45:0e:ab:c0:57:2f:83:fb:ac:7b:5a:3a:68: 68:d3:6a:21:f4:99:74:be:13:3a:d3:6f:6e:be:aa: 8b:38:d2:8e:8d:d0:36:38:ba:39:51:33:a3:ca:16: 09:53:76:b2:af:40:1b:1f:92:4c:b0:18:5a:4c:29: 42:4e:fc:fa:11:ff:62:78:95:4d:3d:dc:06:5b:d9: cc:96:7b:74:07:0c:ec:c3:38:73:22:35:94:b4:09: e3:0d:b1:06:0b:09:db:bc:cc:80:95:f1:70:54:af: 6c:18:9d:a5:6e:19:a6:e5:f7:e2:90:f4:85:9b:fd: fe:10:6d:90:8d:0c:7b:a1:78:18:53:fd:ca:66:8c: 1e:c3:7a:65:f2:0e:de:b1:c7:17:e1:75:24:06:98: 82:ac:93:45:ef:5e:dd:7b:a2:66:f3:82:98:1b:e7: 3c:20:67:18:dd:ca:ac:85:c2:43:11:82:4a:b3:6f: 6d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:AA:D6:66:10:F9:D2:28:A8:7D:85:9E:18:C3:D3:EA:CB:EC:03:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/56340ca6-d58e-32fe-a948-6cd5010230f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.196.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:8d:65:b2:32:76:ca:6a:5f:26:fa:c7:8d:56:fb:2c:a3:5c: 16:19:2c:48:74:a0:14:29:3b:67:1d:54:ab:9e:75:c7:da:f7: cd:9b:a3:6a:f4:0b:74:a6:0c:47:6a:9b:a4:93:ae:f0:5d:de: 17:6f:2c:c9:e9:e9:4e:55:61:42:83:55:75:cb:10:ec:ae:6c: 2e:f2:ee:a0:0b:85:9f:bb:35:8a:bb:49:2b:1b:eb:aa:54:10: cc:84:50:92:d3:68:db:d8:c0:36:da:26:76:52:78:df:87:80: bb:39:60:62:a1:89:b3:f9:31:1f:26:1c:a2:2f:89:d4:0f:16: 46:87:ea:0c:8a:9c:38:62:64:ae:a4:fa:e8:d1:1a:b1:2f:ad: 6c:73:a9:c3:d2:cb:62:7e:8d:37:1e:4d:6a:d3:cf:24:49:cd: 5c:19:ab:70:a5:78:24:48:80:b4:89:4b:64:d0:6f:9b:5f:ca: fd:76:22:f1:81:de:4c:bb:a4:2e:94:9a:f7:02:e7:70:2f:22: b6:fb:13:31:5c:f2:55:4d:db:be:fb:50:2c:3f:76:70:52:5f: cb:bc:4c:5f:eb:9b:e4:69:91:25:b4:5e:86:23:b4:19:78:1f: 18:2a:a7:2c:e7:45:c4:c4:a2:0a:00:af:28:ed:0b:6d:36:10: 95:01:f2:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWDN/okgtkZVtEKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk Y2UxOWU0ZDMtM2FmMC00YWEzLThlODYtNGQ4ZmVhYjdkZDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiD5bHjESgO8JYYmUxszLvMtD7QF3hyGl2CMd Ypf72RandMJCSDL/aMvuJ3R5+yvOHwqBXVmOSvzcfugmo+ZY5pUiULP7GcU7v+Up 80UOq8BXL4P7rHtaOmho02oh9Jl0vhM6029uvqqLONKOjdA2OLo5UTOjyhYJU3ay r0AbH5JMsBhaTClCTvz6Ef9ieJVNPdwGW9nMlnt0BwzswzhzIjWUtAnjDbEGCwnb vMyAlfFwVK9sGJ2lbhmm5ffikPSFm/3+EG2QjQx7oXgYU/3KZowew3pl8g7esccX 4XUkBpiCrJNF717de6Jm84KYG+c8IGcY3cqshcJDEYJKs29thQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDaq1mYQ+dIoqH2FnhjD0+rL7AOUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNTYzNDBjYTYtZDU4ZS0z MmZlLWE5NDgtNmNkNTAxMDIzMGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEJsTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWNZbIydspqXyb6x41W+yyjXBYZLEh0oBQpO2cdVKuedcfa982bo2r0 C3SmDEdqm6STrvBd3hdvLMnp6U5VYUKDVXXLEOyubC7y7qALhZ+7NYq7SSsb66pU EMyEUJLTaNvYwDbaJnZSeN+HgLs5YGKhibP5MR8mHKIvidQPFkaH6gyKnDhiZK6k +ujRGrEvrWxzqcPSy2J+jTceTWrTzyRJzVwZq3CleCRIgLSJS2TQb5tfyv12IvGB 3ky7pC6UmvcC53AvIrb7EzFc8lVN2777UCw/dnBSX8u8TF/rm+RpkSW0XoYjtBl4 HxgqpyznRcTEogoAryjtC202EJUB8hY= -----END CERTIFICATE-----Generated at Wed Oct 28 07:25:08 2026 by rpki-client