$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/62e45cd1-bfbc-3289-9b6a-435e5664dca0.roa File: 62e45cd1-bfbc-3289-9b6a-435e5664dca0.roa (raw, json) Hash identifier: seM5Uw0WQhkUji+GdFH25FqUuPHP9B3nBPVWLzB9UaA= Subject key identifier: 27:F7:71:9A:BE:5E:67:FD:B8:3B:9C:2A:2D:61:C4:0C:CB:68:44:38 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F549DA7D65A8E00C7DADDD100 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/62e45cd1-bfbc-3289-9b6a-435e5664dca0.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 33570 IP address blocks: 38.96.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:a7:d6:5a:8e:00:c7:da:dd:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=2c5e5ae2-0203-44b7-bb0c-a12c5a671bb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:93:6c:ca:ce:59:62:fa:89:87:55:3f:8e:83: 6c:c3:40:cf:15:d5:b5:c4:07:95:33:68:e6:31:77: f3:ba:c2:c5:27:6f:49:be:4c:d7:d7:9e:c8:88:68: 5e:03:23:75:28:06:b3:9e:23:2e:7b:8c:69:e5:e8: 97:61:0b:51:f3:3b:7d:6b:ca:81:5d:e4:0f:79:88: 0a:e4:d7:91:92:1c:7b:74:cf:aa:9c:5f:f3:83:af: 08:29:73:7d:f7:b0:4a:e0:cc:f8:c2:ce:54:1d:24: c8:2b:6d:25:a0:df:af:d0:87:a8:1e:70:67:d1:34: e0:f3:89:35:7d:d7:f1:b9:25:70:d2:16:5e:0b:9d: 3f:0e:c5:9e:17:5b:a3:6f:f3:c6:ce:54:90:81:51: ac:14:b0:94:58:27:93:a5:e4:7e:54:8b:6b:2b:79: c0:d8:16:b4:c0:46:ef:e2:b0:ae:23:7a:13:6a:08: b4:7f:d6:ed:76:74:5c:b9:ed:88:b6:89:99:a6:99: 71:bf:0c:ca:ca:65:64:4b:df:86:1b:be:40:c0:9b: 94:47:21:17:9d:0b:3e:52:cf:d4:8a:29:b3:0e:80: cb:94:dc:cf:38:51:6d:ce:96:4d:40:b2:28:2d:12: c0:fe:18:b4:f3:7f:00:e2:86:57:6e:b8:2d:73:0b: d9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F7:71:9A:BE:5E:67:FD:B8:3B:9C:2A:2D:61:C4:0C:CB:68:44:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/62e45cd1-bfbc-3289-9b6a-435e5664dca0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.96.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:a7:9d:7e:ca:48:06:ee:26:99:8b:74:cb:77:ea:b0:12:c9: b7:99:51:50:85:13:39:42:01:6b:b4:08:88:07:5b:49:db:1e: e5:9e:e1:c2:e4:f7:2a:4e:0e:d5:11:34:2e:9b:e3:89:ec:71: 14:64:6b:3b:67:66:3b:f8:d8:a1:e3:ac:4c:ff:3e:b5:b0:91: ef:6c:70:ed:db:78:74:58:f2:74:66:a2:d8:cf:bb:75:a6:8f: 88:5c:0c:c8:01:04:41:12:60:b2:f3:2f:5e:04:b7:ee:35:e4: 61:04:e0:ea:5b:81:00:88:d1:a0:d2:35:83:fe:ae:b5:a4:4d: 00:77:0a:bc:6f:d6:82:01:13:a5:1e:c3:b2:bd:a4:23:44:a2: 4d:b3:11:b0:95:e6:f3:b1:ff:3c:1e:19:e4:23:c0:2f:c1:9b: 16:d2:80:e0:41:71:5b:d5:92:2b:bb:7a:f0:bf:0b:fd:18:73: 6d:84:4d:07:b5:14:f2:42:cd:7e:74:7a:3d:3c:d0:cf:7a:45: fb:c0:63:94:b9:a9:e7:1c:4b:02:a0:f2:ba:18:91:6c:88:86: 2b:88:be:37:47:2f:c4:07:b2:51:6a:92:c8:59:00:e6:e5:0b: 1f:e5:e2:68:34:4d:b4:aa:f1:0a:c3:82:61:5f:6c:5b:9a:a9: d9:5d:c7:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnafWWo4Ax9rd0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MmM1ZTVhZTItMDIwMy00NGI3LWJiMGMtYTEyYzVhNjcxYmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5Nsys5ZYvqJh1U/joNsw0DPFdW1xAeVM2jm MXfzusLFJ29JvkzX157IiGheAyN1KAazniMue4xp5eiXYQtR8zt9a8qBXeQPeYgK 5NeRkhx7dM+qnF/zg68IKXN997BK4Mz4ws5UHSTIK20loN+v0IeoHnBn0TTg84k1 fdfxuSVw0hZeC50/DsWeF1ujb/PGzlSQgVGsFLCUWCeTpeR+VItrK3nA2Ba0wEbv 4rCuI3oTagi0f9btdnRcue2ItomZpplxvwzKymVkS9+GG75AwJuURyEXnQs+Us/U iimzDoDLlNzPOFFtzpZNQLIoLRLA/hi0838A4oZXbrgtcwvZKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCf3cZq+Xmf9uDucKi1hxAzLaEQ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNjJlNDVjZDEtYmZiYy0z Mjg5LTliNmEtNDM1ZTU2NjRkY2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJmDGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWnnX7KSAbuJpmLdMt36rASybeZUVCFEzlCAWu0CIgHW0nbHuWe4cLk 9ypODtURNC6b44nscRRkaztnZjv42KHjrEz/PrWwke9scO3beHRY8nRmotjPu3Wm j4hcDMgBBEESYLLzL14Et+415GEE4OpbgQCI0aDSNYP+rrWkTQB3Crxv1oIBE6Ue w7K9pCNEok2zEbCV5vOx/zweGeQjwC/BmxbSgOBBcVvVkiu7evC/C/0Yc22ETQe1 FPJCzX50ej080M96RfvAY5S5qeccSwKg8roYkWyIhiuIvjdHL8QHslFqkshZAObl Cx/l4mg0TbSq8QrDgmFfbFuaqdldxxU= -----END CERTIFICATE-----Generated at Tue Oct 27 15:00:30 2026 by rpki-client