$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/656db2ee-b0d1-3101-ac68-cf0c37398dc1.roa File: 656db2ee-b0d1-3101-ac68-cf0c37398dc1.roa (raw, json) Hash identifier: ja78A3Inrd611fryQGWSxi6o+8nMUy0CONNqHBF9f4Y= Subject key identifier: 49:BC:B2:03:ED:67:8B:F2:46:3B:31:5A:7E:80:C5:A2:96:15:07:73 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F5B97FE2F6B3B5CE938033E00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/656db2ee-b0d1-3101-ac68-cf0c37398dc1.roa Signing time: Thu 01 Oct 2026 13:00:12 +0000 ROA not before: Thu 01 Oct 2026 13:00:12 +0000 ROA not after: Wed 30 Dec 2026 14:00:12 +0000 asID: 150447 IP address blocks: 38.72.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:97:fe:2f:6b:3b:5c:e9:38:03:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 1 13:00:12 2026 GMT Not After : Dec 30 14:00:12 2026 GMT Subject: CN=a172528a-0378-4207-bdfc-2aad6c7d8e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:23:34:77:f2:fd:8f:dc:39:d6:e9:e1:ee:19: d5:45:c9:57:66:d7:7b:63:1e:c8:d3:ab:56:37:ec: b0:aa:fd:95:c8:fe:47:e1:50:6b:95:46:8f:f5:d5: 39:b5:6e:56:6f:d0:19:ac:05:07:dd:15:66:be:1c: a6:c9:e6:19:8d:fd:0c:63:8d:2a:ae:1d:10:3b:25: 58:64:65:de:21:d3:91:87:43:27:e9:bd:54:1e:04: f8:c3:ca:fa:db:78:84:69:e1:c7:f1:e6:5b:db:f7: 31:37:c3:3e:e6:0d:17:84:54:31:42:d3:2f:fe:17: 74:09:bf:52:1d:d3:a6:31:fb:8a:19:03:d0:2e:69: e7:29:2a:4d:61:c1:d5:32:b2:a4:d3:f0:d2:73:58: 82:47:fd:ee:dd:33:40:52:4d:d1:d2:4c:4b:d0:65: 81:d7:86:8e:80:15:de:ae:2b:07:38:a5:a5:b0:a1: ae:69:75:11:d4:be:c8:33:8d:d0:b2:48:6e:00:ce: 86:ba:d6:32:25:0f:36:e9:16:f4:c9:87:8f:47:90: 6d:66:51:ca:94:0b:8a:f5:b5:de:4d:41:c3:be:60: 7c:08:d6:95:d4:cd:13:5a:39:ec:1b:f6:43:64:88: 35:3b:80:d6:52:e3:80:db:68:2c:d1:60:77:bf:b4: 91:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:BC:B2:03:ED:67:8B:F2:46:3B:31:5A:7E:80:C5:A2:96:15:07:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/656db2ee-b0d1-3101-ac68-cf0c37398dc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.72.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:c8:44:9e:6d:8a:f1:c4:bc:d6:02:c6:98:bf:82:18:94:b4: 8d:5e:65:b6:4b:b6:44:29:ba:89:33:e9:68:56:71:af:93:92: 6f:a2:39:08:89:6f:c8:74:5d:ce:b9:ac:fd:37:f8:62:1f:e7: 63:02:f5:0a:d5:f5:e2:32:8b:e3:00:98:e4:44:78:1d:c3:7a: 42:d0:95:47:a4:8a:0c:89:c4:44:a8:16:5d:de:20:23:ea:c5: d9:67:2c:19:a9:00:25:3f:10:30:28:d9:52:12:5d:2d:8f:33: be:08:8a:d3:35:f0:71:f3:e0:80:2b:e7:c6:46:00:6a:04:cb: 4d:88:c9:20:a5:64:bc:23:e7:a4:95:4f:d7:6c:14:5f:ee:6c: 65:c5:a1:f5:5a:33:54:09:23:c0:4c:84:8a:6d:16:d4:8d:b1: f3:cc:c2:5c:a5:31:29:e4:d4:73:d4:81:e4:36:14:d2:11:7b: 97:27:6c:1a:a4:73:49:7c:cc:9c:be:f9:db:d9:5b:09:be:93: 58:08:cb:a1:9e:cf:ed:1c:5d:6b:f6:de:45:46:75:1f:1a:ef: 74:55:58:3c:b0:16:a4:68:df:9f:67:99:15:3d:f7:0f:2f:55: da:38:7a:87:af:b2:3c:52:fd:a9:fa:0f:45:b9:25:73:b5:d5: 32:21:d8:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bl/4vaztc6TgDPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk YTE3MjUyOGEtMDM3OC00MjA3LWJkZmMtMmFhZDZjN2Q4ZTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSM0d/L9j9w51unh7hnVRclXZtd7Yx7I06tW N+ywqv2VyP5H4VBrlUaP9dU5tW5Wb9AZrAUH3RVmvhymyeYZjf0MY40qrh0QOyVY ZGXeIdORh0Mn6b1UHgT4w8r623iEaeHH8eZb2/cxN8M+5g0XhFQxQtMv/hd0Cb9S HdOmMfuKGQPQLmnnKSpNYcHVMrKk0/DSc1iCR/3u3TNAUk3R0kxL0GWB14aOgBXe risHOKWlsKGuaXUR1L7IM43QskhuAM6GutYyJQ826Rb0yYePR5BtZlHKlAuK9bXe TUHDvmB8CNaV1M0TWjnsG/ZDZIg1O4DWUuOA22gs0WB3v7SRcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEm8sgPtZ4vyRjsxWn6AxaKWFQdzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNjU2ZGIyZWUtYjBkMS0z MTAxLWFjNjgtY2YwYzM3Mzk4ZGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJkhYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALPIRJ5tivHEvNYCxpi/ghiUtI1eZbZLtkQpuokz6WhWca+Tkm+iOQiJ b8h0Xc65rP03+GIf52MC9QrV9eIyi+MAmOREeB3DekLQlUekigyJxESoFl3eICPq xdlnLBmpACU/EDAo2VISXS2PM74IitM18HHz4IAr58ZGAGoEy02IySClZLwj56SV T9dsFF/ubGXFofVaM1QJI8BMhIptFtSNsfPMwlylMSnk1HPUgeQ2FNIRe5cnbBqk c0l8zJy++dvZWwm+k1gIy6Gez+0cXWv23kVGdR8a73RVWDywFqRo359nmRU99w8v Vdo4eoevsjxS/an6D0W5JXO11TIh2J8= -----END CERTIFICATE-----Generated at Wed Oct 28 00:53:01 2026 by rpki-client