$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5a3fc43d-b95f-3590-a2e2-5715f9b71d7c.roa File: 5a3fc43d-b95f-3590-a2e2-5715f9b71d7c.roa (raw, json) Hash identifier: XUfQt4WjVZLoH91OB885csVmorai2fzr2nECCOc1w3k= Subject key identifier: 98:9A:68:A5:43:32:A7:AD:12:03:96:8C:05:F2:96:8B:52:A0:DD:5E Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F8DD8957E84399D14F2E9A980 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5a3fc43d-b95f-3590-a2e2-5715f9b71d7c.roa Signing time: Mon 19 Oct 2026 13:00:12 +0000 ROA not before: Mon 19 Oct 2026 13:00:12 +0000 ROA not after: Sun 17 Jan 2027 14:00:12 +0000 asID: 273273 IP address blocks: 38.236.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d8:95:7e:84:39:9d:14:f2:e9:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 19 13:00:12 2026 GMT Not After : Jan 17 14:00:12 2027 GMT Subject: CN=e0e37aa5-8273-41dc-a2e7-1812edadd0bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ea:2e:94:07:08:da:0e:7e:d2:cc:75:ab:d8: 67:9e:ce:99:57:20:29:2d:6f:17:6e:a6:bd:d6:c7: 09:06:9b:d6:b1:21:0c:f1:e2:25:48:da:52:08:8c: 7c:41:76:41:b6:34:19:23:53:ec:dd:67:9c:38:b6: f2:fa:1f:27:28:91:94:fe:9c:5a:fa:e5:72:1e:11: ca:8d:de:6c:4b:d4:71:ad:1c:f8:57:ed:c3:43:36: da:f7:e3:36:9e:6d:91:da:ca:33:b1:15:90:a2:58: c1:c1:e5:cc:bc:3c:d9:a1:5b:63:cf:fd:1f:9c:62: 54:e8:4d:c3:50:32:06:f4:c5:5f:c1:83:e7:29:5e: 64:29:73:f8:68:15:e0:65:7b:67:6a:b7:ba:20:4b: df:75:58:a3:e3:70:a4:a2:1e:8b:b9:1a:c3:98:5c: 8e:89:a9:6e:0f:07:3b:8d:79:7b:4b:22:e7:46:1b: 65:e7:31:ba:56:d6:71:1b:01:ab:46:30:2c:ba:f8: 5b:e3:d1:ed:ea:20:8b:0c:5b:82:46:5e:64:91:53: 2b:10:94:d2:27:ac:97:ee:f3:4e:92:1d:16:c3:c4: 17:d5:79:ad:30:ae:12:26:fb:5e:e3:43:c6:e9:b6: 02:36:f3:01:1b:d2:d0:ad:2d:c5:24:f3:65:ed:90: 13:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9A:68:A5:43:32:A7:AD:12:03:96:8C:05:F2:96:8B:52:A0:DD:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5a3fc43d-b95f-3590-a2e2-5715f9b71d7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.236.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:cf:26:a3:ea:28:4d:4e:cc:67:81:4b:36:f9:1e:c4:01:3e: a8:ba:51:9e:ba:e1:7e:52:a5:46:4e:b1:f2:24:bb:31:8a:b8: 52:f4:e2:0f:3f:46:b1:29:cd:4d:4e:15:5c:19:12:fa:29:26: 0f:8f:05:d1:83:c2:47:d4:87:b0:d2:e8:e6:0b:b3:d9:35:75: ed:bd:6e:f9:19:72:06:84:25:e2:47:08:0c:38:49:b9:b4:16: c6:6b:5e:c9:9c:2d:47:0d:94:0c:0c:e5:2f:1e:bb:22:48:0a: d5:64:8b:d5:b5:68:d5:ae:b7:68:87:7b:fa:59:4f:db:91:41: fb:20:11:4d:af:d8:9b:a4:89:1d:af:3a:12:31:40:ab:09:a1: 55:b7:34:66:89:ab:ef:d4:11:ba:12:f0:89:b7:b4:ca:fc:93: 93:d7:20:39:13:0c:6f:7b:ae:fa:b8:6e:fc:86:34:c2:70:9f: d5:61:24:e9:6a:cd:b2:10:63:b5:0d:92:e9:8e:ab:71:71:d8: 7f:38:9b:ff:ed:e5:59:cf:f2:dc:0f:5e:fe:df:57:a7:6b:ca: e6:9e:38:6d:5f:eb:47:2e:06:9d:d2:69:63:2f:d6:3e:68:b5: c2:22:b9:6c:ed:37:9b:bb:a9:c8:64:06:f8:4d:09:51:0d:33: 64:18:26:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+N2JV+hDmdFPLpqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk ZTBlMzdhYTUtODI3My00MWRjLWEyZTctMTgxMmVkYWRkMGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluoulAcI2g5+0sx1q9hnns6ZVyApLW8Xbqa9 1scJBpvWsSEM8eIlSNpSCIx8QXZBtjQZI1Ps3WecOLby+h8nKJGU/pxa+uVyHhHK jd5sS9RxrRz4V+3DQzba9+M2nm2R2sozsRWQoljBweXMvDzZoVtjz/0fnGJU6E3D UDIG9MVfwYPnKV5kKXP4aBXgZXtnare6IEvfdVij43Ckoh6LuRrDmFyOialuDwc7 jXl7SyLnRhtl5zG6VtZxGwGrRjAsuvhb49Ht6iCLDFuCRl5kkVMrEJTSJ6yX7vNO kh0Ww8QX1XmtMK4SJvte40PG6bYCNvMBG9LQrS3FJPNl7ZATWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJiaaKVDMqetEgOWjAXylotSoN1eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNWEzZmM0M2QtYjk1Zi0z NTkwLWEyZTItNTcxNWY5YjcxZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJuxEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILPJqPqKE1OzGeBSzb5HsQBPqi6UZ664X5SpUZOsfIkuzGKuFL04g8/ RrEpzU1OFVwZEvopJg+PBdGDwkfUh7DS6OYLs9k1de29bvkZcgaEJeJHCAw4Sbm0 FsZrXsmcLUcNlAwM5S8euyJICtVki9W1aNWut2iHe/pZT9uRQfsgEU2v2JukiR2v OhIxQKsJoVW3NGaJq+/UEboS8Im3tMr8k5PXIDkTDG97rvq4bvyGNMJwn9VhJOlq zbIQY7UNkumOq3Fx2H84m//t5VnP8twPXv7fV6dryuaeOG1f60cuBp3SaWMv1j5o tcIiuWztN5u7qchkBvhNCVENM2QYJtg= -----END CERTIFICATE-----Generated at Tue Oct 27 22:43:11 2026 by rpki-client