$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/69850dd9-74b0-3ae1-89fb-7dd7bd59f4c9.roa File: 69850dd9-74b0-3ae1-89fb-7dd7bd59f4c9.roa (raw, json) Hash identifier: hp+joWBvPq6BllKGNtb7NFBHPoUijgpTyEPl/iiBdmg= Subject key identifier: B3:2B:5A:EF:5E:A9:DB:46:9D:F9:A8:02:DF:32:7F:96:4B:88:15:7B Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F66C2BC4246D63171C4497740 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/69850dd9-74b0-3ae1-89fb-7dd7bd59f4c9.roa Signing time: Mon 05 Oct 2026 13:00:13 +0000 ROA not before: Mon 05 Oct 2026 13:00:13 +0000 ROA not after: Sun 03 Jan 2027 14:00:13 +0000 asID: 138296 IP address blocks: 38.20.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:c2:bc:42:46:d6:31:71:c4:49:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 5 13:00:13 2026 GMT Not After : Jan 3 14:00:13 2027 GMT Subject: CN=11621016-1a4d-4068-8425-0db16f5ac691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:88:ad:ab:04:fe:bc:06:eb:3a:75:04:db:d9: 28:da:7b:b0:f1:6e:02:85:47:4b:f3:32:4b:99:d2: 91:33:b0:8f:8e:f6:fd:c6:ca:a0:7c:b7:89:3c:dc: 10:d5:a0:e4:cf:da:43:20:36:06:26:bb:67:8c:21: f5:9e:4b:b5:7d:18:48:e1:00:2e:d7:a4:8d:e5:4c: 4f:a8:b7:1f:e4:b4:4f:98:e1:74:5a:ce:fa:d2:15: c3:c7:29:29:b0:2c:67:dc:0e:b4:aa:a3:b6:ef:5c: 11:63:0a:5a:36:21:fa:6c:7c:cb:a2:49:a3:a1:90: 10:ff:99:f5:d2:b9:ae:ef:88:c0:d7:a1:77:38:64: 0f:9f:9d:47:e9:a4:1c:4d:7c:69:b8:14:cb:bc:d5: e9:66:c3:16:7d:26:60:28:9c:6c:20:09:7e:91:36: 0c:85:5d:8f:ee:88:bf:d2:01:5a:80:2c:ea:78:81: e1:a7:42:13:f8:0a:be:f4:e8:d1:18:22:d7:6f:48: bd:8f:47:18:d7:af:76:78:dd:23:15:83:f2:cd:96: 25:89:28:46:86:07:fd:b1:80:f4:ad:42:52:a3:14: 15:13:44:76:c4:4f:b0:cb:f1:8d:80:3b:0c:e8:38: 45:88:4a:b8:06:61:96:2f:9c:8b:9c:6e:a4:a2:5b: 87:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:2B:5A:EF:5E:A9:DB:46:9D:F9:A8:02:DF:32:7F:96:4B:88:15:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/69850dd9-74b0-3ae1-89fb-7dd7bd59f4c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.20.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:a9:f3:51:b4:aa:48:ff:58:d8:3b:0f:fd:af:0f:df:b8:a4: 06:7e:6b:2b:37:3d:1a:d9:9d:15:1c:94:4f:a0:d3:34:83:49: fa:74:58:33:13:5c:5e:c4:e2:cc:19:bd:6e:57:22:81:17:92: cf:da:0c:3e:22:63:fc:6a:07:d5:87:98:e2:51:c1:2a:a4:48: 6e:ad:59:6a:6f:3d:41:82:55:9b:02:f5:83:21:00:8b:ee:15: da:3c:57:a0:f4:14:e9:3d:fe:c4:51:42:15:88:cf:ac:b4:a6: f9:71:05:01:e1:29:57:13:a9:c5:c3:ea:82:fb:eb:19:44:3b: cc:cc:f3:17:32:f5:ac:5b:99:35:7a:b4:2e:60:95:a1:8e:b6: 42:b5:4e:e1:3b:b8:68:70:a7:55:8a:5d:08:4a:64:c0:94:d2: fd:c8:59:c8:4b:f8:d5:5d:9f:67:8f:e9:cc:8b:02:88:54:74: 37:4c:8b:18:20:de:ee:91:e7:c4:68:97:f0:b3:80:0c:52:96: 39:5f:e4:25:5b:24:e0:8b:6f:d1:05:c3:88:5e:97:85:95:53: 2b:e4:f2:f3:ab:a4:8b:b8:28:b1:51:0e:37:3c:30:25:54:05: de:6f:57:23:c1:41:06:5e:1b:5f:92:9c:f6:e6:23:18:fa:9f: b1:3a:8f:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9mwrxCRtYxccRJd0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwNTEzMDAxM1oXDTI3MDEwMzE0MDAxM1owLzEtMCsGA1UEAxMk MTE2MjEwMTYtMWE0ZC00MDY4LTg0MjUtMGRiMTZmNWFjNjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4itqwT+vAbrOnUE29ko2nuw8W4ChUdL8zJL mdKRM7CPjvb9xsqgfLeJPNwQ1aDkz9pDIDYGJrtnjCH1nku1fRhI4QAu16SN5UxP qLcf5LRPmOF0Ws760hXDxykpsCxn3A60qqO271wRYwpaNiH6bHzLokmjoZAQ/5n1 0rmu74jA16F3OGQPn51H6aQcTXxpuBTLvNXpZsMWfSZgKJxsIAl+kTYMhV2P7oi/ 0gFagCzqeIHhp0IT+Aq+9OjRGCLXb0i9j0cY1692eN0jFYPyzZYliShGhgf9sYD0 rUJSoxQVE0R2xE+wy/GNgDsM6DhFiEq4BmGWL5yLnG6koluHGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMrWu9eqdtGnfmoAt8yf5ZLiBV7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNjk4NTBkZDktNzRiMC0z YWUxLTg5ZmItN2RkN2JkNTlmNGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJhSMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM2p81G0qkj/WNg7D/2vD9+4pAZ+ays3PRrZnRUclE+g0zSDSfp0WDMT XF7E4swZvW5XIoEXks/aDD4iY/xqB9WHmOJRwSqkSG6tWWpvPUGCVZsC9YMhAIvu Fdo8V6D0FOk9/sRRQhWIz6y0pvlxBQHhKVcTqcXD6oL76xlEO8zM8xcy9axbmTV6 tC5glaGOtkK1TuE7uGhwp1WKXQhKZMCU0v3IWchL+NVdn2eP6cyLAohUdDdMixgg 3u6R58Rol/CzgAxSljlf5CVbJOCLb9EFw4hel4WVUyvk8vOrpIu4KLFRDjc8MCVU Bd5vVyPBQQZeG1+SnPbmIxj6n7E6j+w= -----END CERTIFICATE-----Generated at Tue Oct 27 09:53:45 2026 by rpki-client