$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5aa6ef72-237e-3afb-88b6-12fde469da44.roa File: 5aa6ef72-237e-3afb-88b6-12fde469da44.roa (raw, json) Hash identifier: iZH+uCn/8kAI6ZUMOD8o65VTG+u41rVAujsbgYzbpCw= Subject key identifier: 0F:5A:5F:09:58:33:1F:78:AF:C2:75:CC:FE:57:2D:07:E3:AD:13:1B Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F6C5834A7A369E54E5EAA6BC0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5aa6ef72-237e-3afb-88b6-12fde469da44.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 273263 IP address blocks: 38.124.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:34:a7:a3:69:e5:4e:5e:aa:6b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=c49f9069-3c60-4104-a51f-01c693f48424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e1:88:3f:e7:a8:fc:e5:27:71:ef:84:e9:78: 42:06:9d:1c:18:ea:35:a9:1e:95:32:ae:53:17:89: 6c:66:5c:38:0c:c3:87:a9:8e:21:69:e0:83:d9:f6: f5:53:75:07:62:a8:42:04:3f:f1:c9:de:a0:98:e8: 81:ce:90:b7:0a:ea:ec:15:51:5d:6e:00:3c:14:a8: c1:74:cb:8b:be:e4:78:1f:fc:86:c9:f1:70:40:a5: 50:35:3e:24:24:dc:c4:a0:f9:b8:07:71:ef:fd:0e: fb:af:7c:74:eb:0e:68:cc:1f:b8:ef:fa:ac:3f:98: 11:e8:46:65:5d:ad:f7:3b:b7:95:91:0b:36:77:f3: 41:14:de:11:1c:d0:b6:79:47:7b:fa:af:13:7e:55: 57:4f:bb:b2:6b:6d:cd:f3:4f:c8:d1:38:74:d0:87: 9a:fd:72:6e:08:7e:89:21:28:21:a9:ed:6f:53:49: 9c:b2:1a:ea:c5:5f:45:df:6b:31:a0:07:a2:84:e5: 12:c6:f2:99:5d:8a:c4:66:be:0e:f1:71:b4:35:e9: 90:de:10:bd:bd:1e:f3:55:61:2c:a8:d6:d3:d3:ed: aa:40:bf:58:52:bd:c7:df:f3:43:ba:51:d2:24:5a: a3:b2:57:cc:08:9d:b0:81:fe:a6:ca:d7:94:2f:af: e7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5A:5F:09:58:33:1F:78:AF:C2:75:CC:FE:57:2D:07:E3:AD:13:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5aa6ef72-237e-3afb-88b6-12fde469da44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.124.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:f7:b7:df:7d:08:43:ca:64:54:ac:62:61:f6:78:2a:81:93: 44:64:4a:aa:35:5c:be:dd:32:ad:ae:82:85:7a:51:17:39:a6: c5:b2:f7:a1:e6:6d:27:51:45:dd:9a:b9:6d:bb:3b:cd:a5:a2: 3d:e2:1b:30:56:38:1c:e9:89:92:68:8f:d4:e5:e3:ee:ae:98: 98:82:96:ca:78:f2:83:9a:60:42:e0:bc:a9:65:55:cf:9d:5b: e3:a2:c1:38:8e:c1:91:c3:ae:af:6a:0d:cc:b1:d8:57:c8:76: 27:9f:87:b1:1a:50:70:c5:c4:a4:c2:b4:ca:be:26:bb:95:a6: e7:f7:11:93:9c:82:89:bf:d8:09:04:81:a5:9f:e6:a1:c9:c4: f5:e1:9b:41:6e:6c:58:3b:c9:37:8b:ba:e8:7b:56:38:36:65: ce:45:a4:c1:82:14:5b:fc:d5:e1:86:9a:bc:d8:52:3a:ba:1f: 78:84:8c:ac:eb:96:39:c9:70:a8:a8:48:4e:53:03:35:4f:c4: 71:95:b9:a4:09:a3:ca:31:b0:a5:ab:81:61:a7:e2:48:f4:fa: 2d:2d:03:55:62:08:46:c7:72:e8:01:56:02:e2:29:2f:97:62: c2:bd:85:45:11:09:56:ee:e1:f5:c8:b1:64:7e:b2:59:bb:ca: e8:bd:22:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWDSno2nlTl6qa8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk YzQ5ZjkwNjktM2M2MC00MTA0LWE1MWYtMDFjNjkzZjQ4NDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uGIP+eo/OUnce+E6XhCBp0cGOo1qR6VMq5T F4lsZlw4DMOHqY4haeCD2fb1U3UHYqhCBD/xyd6gmOiBzpC3CursFVFdbgA8FKjB dMuLvuR4H/yGyfFwQKVQNT4kJNzEoPm4B3Hv/Q77r3x06w5ozB+47/qsP5gR6EZl Xa33O7eVkQs2d/NBFN4RHNC2eUd7+q8TflVXT7uya23N80/I0Th00Iea/XJuCH6J ISghqe1vU0mcshrqxV9F32sxoAeihOUSxvKZXYrEZr4O8XG0NemQ3hC9vR7zVWEs qNbT0+2qQL9YUr3H3/NDulHSJFqjslfMCJ2wgf6myteUL6/nkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9aXwlYMx94r8J1zP5XLQfjrRMbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNWFhNmVmNzItMjM3ZS0z YWZiLTg4YjYtMTJmZGU0NjlkYTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJnzSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMH3t999CEPKZFSsYmH2eCqBk0RkSqo1XL7dMq2ugoV6URc5psWy96Hm bSdRRd2auW27O82loj3iGzBWOBzpiZJoj9Tl4+6umJiClsp48oOaYELgvKllVc+d W+OiwTiOwZHDrq9qDcyx2FfIdiefh7EaUHDFxKTCtMq+JruVpuf3EZOcgom/2AkE gaWf5qHJxPXhm0FubFg7yTeLuuh7Vjg2Zc5FpMGCFFv81eGGmrzYUjq6H3iEjKzr ljnJcKioSE5TAzVPxHGVuaQJo8oxsKWrgWGn4kj0+i0tA1ViCEbHcugBVgLiKS+X YsK9hUURCVbu4fXIsWR+slm7yui9IjM= -----END CERTIFICATE-----Generated at Tue Oct 27 16:36:58 2026 by rpki-client