$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/763c899c-b9ba-3713-97d9-03a71389f175.roa File: 763c899c-b9ba-3713-97d9-03a71389f175.roa (raw, json) Hash identifier: cUjTXcwG2rK6PWxJ1KzBddazxXsLQdyi86D2X5XB75Y= Subject key identifier: E4:07:1F:03:D8:E6:CD:3E:48:2C:88:A7:AC:EB:10:9C:0C:D5:00:40 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F8F3DC080B6694129DF1B4D80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/763c899c-b9ba-3713-97d9-03a71389f175.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 267728 IP address blocks: 38.255.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:c0:80:b6:69:41:29:df:1b:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=00063e95-308a-41f1-b2ae-b537a88e49cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e9:85:a3:62:6c:62:64:7c:3f:33:0b:02:ec: 17:f0:9b:32:4d:c2:18:cd:e6:a6:fc:d5:49:50:50: b3:22:a2:89:09:af:05:a8:98:28:07:c4:5b:70:41: c8:64:49:e7:d1:b0:82:bf:98:ff:5c:f9:2e:ee:c7: 57:7e:22:f0:3c:21:c3:fb:ae:5d:52:19:d5:fb:6d: 41:13:ed:32:e9:2f:39:52:c0:08:80:a6:84:46:4a: 57:80:8f:49:c0:be:55:c1:a3:21:c8:ab:ae:ca:8f: fa:58:7e:a3:86:8e:da:9e:4d:2c:98:b6:17:1a:d6: b8:a7:eb:e0:00:78:a6:3a:e9:46:f2:81:48:ba:74: 90:a6:e1:e7:69:35:0e:55:35:f4:41:cf:c0:23:d4: 0b:f7:a5:2c:07:c4:2d:e1:1a:ad:10:29:84:89:46: a8:bf:4a:88:50:e7:ca:2b:0a:aa:4d:80:73:0d:49: 27:43:00:06:be:19:66:ad:41:fe:a8:9b:a2:57:bf: bf:88:56:56:27:2a:f6:e9:0c:5d:e8:40:11:bd:9f: 42:b8:fc:99:31:bf:a0:02:5a:91:eb:fb:5f:2f:25: e6:34:c4:58:9c:2d:a5:0d:ac:44:36:02:c0:cf:6e: 69:ae:4a:43:8e:f4:54:88:6c:5e:fc:ea:a7:11:9e: d0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:07:1F:03:D8:E6:CD:3E:48:2C:88:A7:AC:EB:10:9C:0C:D5:00:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/763c899c-b9ba-3713-97d9-03a71389f175.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.255.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:36:a6:df:4a:8d:c1:fe:ab:e7:4a:ab:88:50:f5:e9:25:33: 61:3f:94:51:98:45:fe:25:8c:e5:fe:fa:2b:cb:ce:8e:01:46: d3:24:89:ec:76:19:75:46:98:df:c7:a4:83:38:f8:a1:ad:af: 8a:02:cf:4f:75:45:a4:2e:46:3c:ae:04:93:00:52:1a:a8:6e: b7:2e:37:07:96:61:18:2a:11:10:d4:95:c4:9a:be:7f:8c:a8: 7d:25:07:5a:2a:8e:0a:ee:da:4a:3a:c2:ce:c4:ec:1c:51:ad: 41:69:64:10:ed:db:19:4a:43:f9:62:d4:d9:63:c9:0a:45:d9: 5d:a6:8c:bf:9d:ce:26:e6:53:d0:f5:d1:14:1b:af:22:59:b5: af:17:39:3d:f3:71:6e:80:50:6c:98:03:29:c2:74:53:88:e7: ba:52:08:94:f4:79:0c:d6:c2:ad:0a:d4:af:93:51:5b:1d:b4: 5a:50:c1:78:a4:9c:84:29:0c:c3:db:e5:15:2b:46:77:e3:1d: 1c:6e:50:f9:ce:e7:b0:ca:08:85:eb:fe:a1:c9:b0:01:c0:e1: 70:28:30:31:da:14:c4:ed:6f:77:7e:9e:6c:c8:12:6a:17:f9: df:39:39:29:55:2b:3b:3e:de:d9:bc:4b:17:f4:47:69:33:52: 68:b7:35:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPcCAtmlBKd8bTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk MDAwNjNlOTUtMzA4YS00MWYxLWIyYWUtYjUzN2E4OGU0OWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiemFo2JsYmR8PzMLAuwX8JsyTcIYzeam/NVJ UFCzIqKJCa8FqJgoB8RbcEHIZEnn0bCCv5j/XPku7sdXfiLwPCHD+65dUhnV+21B E+0y6S85UsAIgKaERkpXgI9JwL5VwaMhyKuuyo/6WH6jho7ank0smLYXGta4p+vg AHimOulG8oFIunSQpuHnaTUOVTX0Qc/AI9QL96UsB8Qt4RqtECmEiUaov0qIUOfK KwqqTYBzDUknQwAGvhlmrUH+qJuiV7+/iFZWJyr26Qxd6EARvZ9CuPyZMb+gAlqR 6/tfLyXmNMRYnC2lDaxENgLAz25prkpDjvRUiGxe/OqnEZ7QvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQHHwPY5s0+SCyIp6zrEJwM1QBAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNzYzYzg5OWMtYjliYS0z NzEzLTk3ZDktMDNhNzEzODlmMTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJv9MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABE2pt9KjcH+q+dKq4hQ9eklM2E/lFGYRf4ljOX++ivLzo4BRtMkiex2 GXVGmN/HpIM4+KGtr4oCz091RaQuRjyuBJMAUhqobrcuNweWYRgqERDUlcSavn+M qH0lB1oqjgru2ko6ws7E7BxRrUFpZBDt2xlKQ/li1NljyQpF2V2mjL+dzibmU9D1 0RQbryJZta8XOT3zcW6AUGyYAynCdFOI57pSCJT0eQzWwq0K1K+TUVsdtFpQwXik nIQpDMPb5RUrRnfjHRxuUPnO57DKCIXr/qHJsAHA4XAoMDHaFMTtb3d+nmzIEmoX +d85OSlVKzs+3tm8Sxf0R2kzUmi3NbY= -----END CERTIFICATE-----Generated at Tue Oct 27 15:10:37 2026 by rpki-client