$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/67a842af-3bab-34da-b7ef-88cc9de6c75a.roa File: 67a842af-3bab-34da-b7ef-88cc9de6c75a.roa (raw, json) Hash identifier: Ae2t6SJvJOtPbh6SuJoNi3Q5tDggcbMG2rSnbQeVkM8= Subject key identifier: 67:01:40:C3:E3:BD:66:94:01:08:77:76:14:CE:6B:75:EC:C3:CA:D6 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F9208693515149414C1088C80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/67a842af-3bab-34da-b7ef-88cc9de6c75a.roa Signing time: Wed 21 Oct 2026 01:00:12 +0000 ROA not before: Wed 21 Oct 2026 01:00:12 +0000 ROA not after: Tue 19 Jan 2027 02:00:12 +0000 asID: 272403 IP address blocks: 38.158.88.0/22 maxlen: 22 38.158.88.0/24 maxlen: 24 38.158.89.0/24 maxlen: 24 38.158.90.0/24 maxlen: 24 38.158.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:92:08:69:35:15:14:94:14:c1:08:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 21 01:00:12 2026 GMT Not After : Jan 19 02:00:12 2027 GMT Subject: CN=cfa6b767-3914-411f-81bb-fc4187a90bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:91:e4:c5:3e:bb:d0:69:89:43:c4:7b:03:b3: 85:8e:35:9e:55:72:8f:f6:44:3f:35:fc:2b:21:04: 2f:62:d3:ed:bd:61:57:e4:75:8e:17:54:ba:77:b3: 28:77:34:35:83:1c:30:12:a7:38:c9:00:30:78:b8: 0f:33:dd:47:64:90:08:3c:46:48:02:e0:85:a8:3f: da:b5:4b:24:90:0b:65:d6:ce:0d:57:93:aa:ac:92: 4e:b6:60:e2:f5:5c:bf:eb:57:16:c1:1b:09:d9:b9: 6c:75:22:4d:18:fd:a8:bc:2c:15:5f:70:5f:3a:68: eb:fd:c0:56:76:11:3e:71:a9:11:03:de:c2:c2:7e: c8:b2:4f:25:4e:c4:f0:92:8a:de:84:e4:33:27:6e: 00:3d:33:e6:5a:1a:80:bd:44:1e:0a:f8:d1:35:6e: dd:5f:8a:17:3d:e0:06:95:fb:bf:fe:d8:6e:5f:84: ed:3d:d4:06:eb:14:50:f9:02:6b:9b:43:bb:13:d8: 3c:2a:7f:32:6a:c1:32:4b:b3:bf:80:73:89:88:6f: 6c:2f:ad:fd:e7:fa:61:a4:f8:9a:54:93:b3:85:bd: c6:d2:28:f3:5e:2a:8d:a1:5b:b4:1f:df:7d:c3:84: e4:35:82:1e:c2:a1:a0:61:af:0f:20:5a:17:bb:20: 5b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:01:40:C3:E3:BD:66:94:01:08:77:76:14:CE:6B:75:EC:C3:CA:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/67a842af-3bab-34da-b7ef-88cc9de6c75a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.158.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:40:90:ae:3b:8a:06:f7:a9:a1:5f:81:dc:e8:d8:37:4e:5a: 55:43:85:e9:9b:3d:b1:a3:ad:15:9f:73:ac:ea:ae:65:61:cf: 6b:81:ff:24:3f:f5:95:3a:b0:a5:d0:64:b8:87:7f:c4:d0:ef: 95:6f:de:e0:1e:7c:17:dd:27:4e:09:38:04:26:f9:84:7b:59: 4f:f7:1c:a9:d5:f5:33:84:a0:2e:4c:0b:3c:da:a8:86:4b:5a: 53:88:f0:21:c1:5d:15:a0:05:78:c9:ef:eb:e0:56:a0:39:e3: 18:03:81:1f:98:3a:3f:c1:a5:e4:83:f9:77:8c:1f:e0:d5:25: 7c:7c:b1:51:dd:3c:ef:1a:1a:56:f0:72:90:68:d6:b0:72:53: 77:6b:ac:38:f7:4b:5a:e9:be:de:e1:b3:38:df:b8:df:a8:aa: 8d:92:6f:b1:92:d3:a3:a7:1a:d0:37:51:e7:8f:e5:32:06:ca: ba:f8:4f:dc:f6:24:b7:ae:3f:48:35:20:17:88:fc:99:56:fa: 50:1a:0a:d5:64:21:fa:e4:9a:45:90:bf:37:05:53:3a:dd:71: 4a:1a:dd:ac:d4:11:e1:c3:77:2e:a1:a2:ee:a1:ff:c5:97:56: 12:96:bf:a9:7e:c6:72:b6:fa:27:ed:26:18:1b:fb:3d:0d:de: 3e:f1:70:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+SCGk1FRSUFMEIjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyMTAxMDAxMloXDTI3MDExOTAyMDAxMlowLzEtMCsGA1UEAxMk Y2ZhNmI3NjctMzkxNC00MTFmLTgxYmItZmM0MTg3YTkwYmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5HkxT670GmJQ8R7A7OFjjWeVXKP9kQ/Nfwr IQQvYtPtvWFX5HWOF1S6d7ModzQ1gxwwEqc4yQAweLgPM91HZJAIPEZIAuCFqD/a tUskkAtl1s4NV5OqrJJOtmDi9Vy/61cWwRsJ2blsdSJNGP2ovCwVX3BfOmjr/cBW dhE+cakRA97Cwn7Isk8lTsTwkorehOQzJ24APTPmWhqAvUQeCvjRNW7dX4oXPeAG lfu//thuX4TtPdQG6xRQ+QJrm0O7E9g8Kn8yasEyS7O/gHOJiG9sL6395/phpPia VJOzhb3G0ijzXiqNoVu0H999w4TkNYIewqGgYa8PIFoXuyBbDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcBQMPjvWaUAQh3dhTOa3Xsw8rWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNjdhODQyYWYtM2JhYi0z NGRhLWI3ZWYtODhjYzlkZTZjNzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJp5YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMpAkK47igb3qaFfgdzo2DdOWlVDhembPbGjrRWfc6zqrmVhz2uB/yQ/ 9ZU6sKXQZLiHf8TQ75Vv3uAefBfdJ04JOAQm+YR7WU/3HKnV9TOEoC5MCzzaqIZL WlOI8CHBXRWgBXjJ7+vgVqA54xgDgR+YOj/BpeSD+XeMH+DVJXx8sVHdPO8aGlbw cpBo1rByU3drrDj3S1rpvt7hszjfuN+oqo2Sb7GS06OnGtA3UeeP5TIGyrr4T9z2 JLeuP0g1IBeI/JlW+lAaCtVkIfrkmkWQvzcFUzrdcUoa3azUEeHDdy6hou6h/8WX VhKWv6l+xnK2+iftJhgb+z0N3j7xcCQ= -----END CERTIFICATE-----Generated at Tue Oct 27 20:38:52 2026 by rpki-client