$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/58ad286e-6d51-32b2-9c50-40ffeb4b007b.roa File: 58ad286e-6d51-32b2-9c50-40ffeb4b007b.roa (raw, json) Hash identifier: FnaE1XPgpPTvRKPNvgbwXKj+GVeKzmoCZedLYiy+5h0= Subject key identifier: 23:57:01:11:50:A5:70:4A:72:2D:2B:24:F8:6F:3E:46:71:FF:6E:4C Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F6DBD6B040C28719BE3A03E00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/58ad286e-6d51-32b2-9c50-40ffeb4b007b.roa Signing time: Thu 08 Oct 2026 01:00:11 +0000 ROA not before: Thu 08 Oct 2026 01:00:11 +0000 ROA not after: Wed 06 Jan 2027 02:00:11 +0000 asID: 273861 IP address blocks: 38.127.150.0/23 maxlen: 24 38.247.46.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6d:bd:6b:04:0c:28:71:9b:e3:a0:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 8 01:00:11 2026 GMT Not After : Jan 6 02:00:11 2027 GMT Subject: CN=f396fe6a-3cc3-4419-9749-491a4ef23ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:61:14:18:77:09:03:ce:d6:7c:dd:42:d9:51: a8:76:41:c4:84:23:60:6e:78:79:27:a8:b3:08:df: 90:2d:c2:8c:e3:19:9a:9c:1a:41:af:3c:f1:02:72: 84:cc:7f:4a:5a:93:64:6c:97:af:ad:1a:3a:dd:87: 41:c7:45:8f:e3:3e:ad:7a:48:25:2e:32:2a:f8:21: 8f:b9:2e:5e:f7:c2:89:a3:a1:32:ff:ff:af:cf:5d: 7e:84:91:d9:21:82:67:c5:be:1a:21:7c:03:c1:5c: 8b:45:bc:2c:c9:c9:35:45:b1:f9:54:c1:24:6a:73: 53:3b:d1:34:e7:71:3e:57:c0:09:04:9d:3e:b9:6d: 7a:a6:c2:11:5f:03:be:18:d8:8a:55:59:0a:54:89: 5a:be:83:82:c7:5d:a1:04:43:b2:c5:70:a8:ac:3b: 0f:9e:cf:a8:8f:26:6e:d3:89:64:3f:3d:48:e3:6c: a8:9b:f3:d5:b7:09:94:4f:b7:be:89:16:a1:35:1b: d3:a8:81:db:8b:33:22:03:5b:bd:93:10:5e:a9:29: d0:45:3a:db:f8:c5:63:a7:fe:2c:cd:82:4a:9b:9e: 41:79:6a:6d:0c:f8:ad:36:ea:e6:04:6c:f7:da:d9: f3:cf:1c:37:d4:4d:ed:5b:04:6e:35:a7:fe:3e:df: 29:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:57:01:11:50:A5:70:4A:72:2D:2B:24:F8:6F:3E:46:71:FF:6E:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/58ad286e-6d51-32b2-9c50-40ffeb4b007b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.127.150.0/23 38.247.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:0e:3b:22:15:36:65:31:4e:ef:f3:1f:c3:65:1f:fb:6e:24: ab:3e:2b:19:ed:88:40:ac:ba:8d:3c:2f:80:84:b8:74:10:e9: 34:d3:b6:e3:3b:49:f7:d3:6d:73:96:51:b2:ed:1c:e7:da:d6: d7:34:43:82:94:06:97:d8:58:c4:10:88:db:8a:ed:15:80:12: 1f:af:be:85:72:27:b3:2b:2d:1d:08:8f:da:b7:b2:4d:82:cd: 2b:76:dd:9c:6b:e1:42:45:40:7a:47:93:52:d6:c7:af:a3:e6: 16:9e:c9:52:cb:c1:ce:0b:6d:36:3e:e2:55:0b:bb:0f:94:7a: 9d:2c:9e:2c:58:51:a9:c9:ab:25:09:d8:77:7b:4b:65:01:28: 2e:a9:dd:4c:c4:e5:68:b8:83:0e:61:47:d6:79:34:12:c4:a5: 07:30:4f:87:e4:79:79:13:06:83:81:1c:fc:bb:09:be:bf:d5: e1:e7:b3:85:b2:1a:d9:1b:38:98:1f:00:1a:75:c9:de:27:b7: db:94:0f:ed:0f:07:b8:be:7c:ef:d0:7a:fa:94:14:b5:54:b7: 75:aa:e0:33:90:97:35:31:59:ed:d7:38:f6:2c:1e:85:db:2b: f2:61:4b:56:8c:40:56:01:66:10:af:b8:b6:be:86:4a:a2:6e: ea:0e:36:62 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9tvWsEDChxm+OgPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwODAxMDAxMVoXDTI3MDEwNjAyMDAxMVowLzEtMCsGA1UEAxMk ZjM5NmZlNmEtM2NjMy00NDE5LTk3NDktNDkxYTRlZjIzY2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGEUGHcJA87WfN1C2VGodkHEhCNgbnh5J6iz CN+QLcKM4xmanBpBrzzxAnKEzH9KWpNkbJevrRo63YdBx0WP4z6tekglLjIq+CGP uS5e98KJo6Ey//+vz11+hJHZIYJnxb4aIXwDwVyLRbwsyck1RbH5VMEkanNTO9E0 53E+V8AJBJ0+uW16psIRXwO+GNiKVVkKVIlavoOCx12hBEOyxXCorDsPns+ojyZu 04lkPz1I42yom/PVtwmUT7e+iRahNRvTqIHbizMiA1u9kxBeqSnQRTrb+MVjp/4s zYJKm55BeWptDPitNurmBGz32tnzzxw31E3tWwRuNaf+Pt8p5wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCNXARFQpXBKci0rJPhvPkZx/25MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNThhZDI4NmUtNmQ1MS0z MmIyLTljNTAtNDBmZmViNGIwMDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBJn+WAwQB JvcuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAC4OOyIVNmUxTu/zH8NlH/tuJKs+KxntiECsuo08L4CEuHQQ 6TTTtuM7SffTbXOWUbLtHOfa1tc0Q4KUBpfYWMQQiNuK7RWAEh+vvoVyJ7MrLR0I j9q3sk2CzSt23Zxr4UJFQHpHk1LWx6+j5haeyVLLwc4LbTY+4lULuw+Uep0snixY UanJqyUJ2Hd7S2UBKC6p3UzE5Wi4gw5hR9Z5NBLEpQcwT4fkeXkTBoOBHPy7Cb6/ 1eHns4WyGtkbOJgfABp1yd4nt9uUD+0PB7i+fO/QevqUFLVUt3Wq4DOQlzUxWe3X OPYsHoXbK/JhS1aMQFYBZhCvuLa+hkqibuoONmI= -----END CERTIFICATE-----Generated at Tue Oct 27 20:34:43 2026 by rpki-client