$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5aff5d35-497e-3063-8506-399e6fc05262.roa File: 5aff5d35-497e-3063-8506-399e6fc05262.roa (raw, json) Hash identifier: It7517rwLLdPBjuY7soUezOtwWBA7M8VlHiXlT+Iz2E= Subject key identifier: 00:DB:F6:C7:11:A3:9E:3A:57:83:BE:A6:A5:B3:BA:85:7C:51:D2:B3 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F5A32A14F43C862B79CB9B400 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5aff5d35-497e-3063-8506-399e6fc05262.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 0 IP address blocks: 38.244.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:a1:4f:43:c8:62:b7:9c:b9:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=405c6f75-888b-4910-bcb7-628f4742865e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:72:4a:0c:9c:bd:87:45:0c:81:b0:a1:6f:04: 0f:54:67:a8:05:f4:0f:ff:ec:0e:f8:2f:92:45:c9: 57:61:7f:ef:17:e0:1b:e6:6d:62:78:d8:d7:00:73: 1d:84:59:46:ae:80:4b:da:95:09:29:11:74:6a:fb: 52:af:88:36:1e:c8:a1:fd:6b:3d:58:34:77:68:6c: 1b:cf:8d:e9:5d:de:7b:69:8c:39:a6:75:57:45:64: 95:51:92:59:ed:38:85:9e:1e:4b:f9:dc:4f:9f:db: ea:84:1e:27:41:77:5e:a4:8f:e2:db:fb:de:32:39: 41:65:b9:ea:55:91:8e:f9:cd:14:1c:a0:eb:10:93: c5:04:b8:c0:92:84:ec:3c:7d:b0:aa:a1:d0:8e:43: 75:40:1f:ff:43:c4:d0:0d:d1:f3:5b:33:d0:a2:f9: 88:1e:a7:50:cb:ad:eb:54:8d:8c:de:94:5a:a5:17: 52:1b:b5:82:53:18:df:d7:b9:57:50:19:f4:84:60: 58:ee:f0:98:2b:e6:69:e5:05:83:99:1c:5b:51:0e: 4e:f2:16:a4:b5:8c:38:56:c4:ab:29:f8:66:35:1d: 30:ff:65:f8:75:7c:ee:dd:9b:bc:5e:af:17:2a:5d: 23:6a:4b:62:c7:d7:de:3e:79:c6:e3:b0:69:2e:4d: dd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:DB:F6:C7:11:A3:9E:3A:57:83:BE:A6:A5:B3:BA:85:7C:51:D2:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5aff5d35-497e-3063-8506-399e6fc05262.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.244.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:53:96:30:33:0c:8e:90:b8:8c:62:96:78:d9:8f:38:72:a8: 8d:6b:5f:0e:3e:72:b7:93:8b:3d:d2:53:a3:dd:e6:46:66:42: d5:e2:b6:e0:bb:bb:60:7a:48:0f:cf:04:fe:cf:aa:c5:55:f6: ef:97:84:dc:e4:cd:1b:b8:f7:f8:88:f3:ba:65:5e:92:6c:5f: 1d:be:2e:01:39:47:86:d7:77:95:a2:1a:88:b4:74:b4:59:64: 43:47:df:97:a6:60:31:78:d8:76:1e:34:2e:d9:15:65:76:89: be:d8:43:cf:c5:7d:e5:0b:5a:d6:fe:09:e2:ad:7c:4c:94:9a: ed:be:c8:5d:8b:6d:e6:b5:ae:4e:ae:15:3b:8c:3c:81:fc:c0: 0a:5f:d5:9e:48:27:b2:03:a4:d6:b0:fc:49:17:46:4d:70:16: 0f:84:5d:67:78:b5:96:53:43:4a:98:62:d4:09:ae:82:3e:fd: 63:96:7f:4d:3a:00:c9:8a:d7:15:b3:83:87:b5:ae:38:44:30: 3f:0f:ae:fe:6d:55:68:e1:0b:89:6e:ff:97:f4:54:f8:a7:6f: 6b:e7:ec:b2:dc:df:a7:b4:93:31:e3:01:16:3b:98:06:78:75: ff:44:c0:05:ea:27:cd:f1:42:5f:34:5a:74:ca:a9:26:a8:e1: e3:50:16:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMqFPQ8hit5y5tAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk NDA1YzZmNzUtODg4Yi00OTEwLWJjYjctNjI4ZjQ3NDI4NjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunJKDJy9h0UMgbChbwQPVGeoBfQP/+wO+C+S RclXYX/vF+Ab5m1ieNjXAHMdhFlGroBL2pUJKRF0avtSr4g2Hsih/Ws9WDR3aGwb z43pXd57aYw5pnVXRWSVUZJZ7TiFnh5L+dxPn9vqhB4nQXdepI/i2/veMjlBZbnq VZGO+c0UHKDrEJPFBLjAkoTsPH2wqqHQjkN1QB//Q8TQDdHzWzPQovmIHqdQy63r VI2M3pRapRdSG7WCUxjf17lXUBn0hGBY7vCYK+Zp5QWDmRxbUQ5O8haktYw4VsSr KfhmNR0w/2X4dXzu3Zu8Xq8XKl0jaktix9fePnnG47BpLk3djwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADb9scRo546V4O+pqWzuoV8UdKzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNWFmZjVkMzUtNDk3ZS0z MDYzLTg1MDYtMzk5ZTZmYzA1MjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGJvRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdTljAzDI6QuIxilnjZjzhyqI1rXw4+creTiz3SU6Pd5kZmQtXituC7 u2B6SA/PBP7PqsVV9u+XhNzkzRu49/iI87plXpJsXx2+LgE5R4bXd5WiGoi0dLRZ ZENH35emYDF42HYeNC7ZFWV2ib7YQ8/FfeULWtb+CeKtfEyUmu2+yF2Lbea1rk6u FTuMPIH8wApf1Z5IJ7IDpNaw/EkXRk1wFg+EXWd4tZZTQ0qYYtQJroI+/WOWf006 AMmK1xWzg4e1rjhEMD8Prv5tVWjhC4lu/5f0VPinb2vn7LLc36e0kzHjARY7mAZ4 df9EwAXqJ83xQl80WnTKqSao4eNQFqM= -----END CERTIFICATE-----Generated at Thu Oct 8 07:19:50 2026 by rpki-client