$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7cff54e7-f29c-3c8f-acc6-e91a4d861e02.roa File: 7cff54e7-f29c-3c8f-acc6-e91a4d861e02.roa (raw, json) Hash identifier: O2c6LIT62xL9ih2athUXLNu9xHkedylnAEYytbdF8fo= Subject key identifier: 1A:BB:0F:8F:20:EB:87:E7:4E:20:90:2E:13:AD:19:EA:C9:94:00:A7 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F998A1D613B363F59AA0BC4C0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7cff54e7-f29c-3c8f-acc6-e91a4d861e02.roa Signing time: Fri 23 Oct 2026 17:32:25 +0000 ROA not before: Fri 23 Oct 2026 17:32:25 +0000 ROA not after: Thu 21 Jan 2027 18:02:20 +0000 asID: 400941 IP address blocks: 38.115.32.0/20 maxlen: 23 38.115.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:99:8a:1d:61:3b:36:3f:59:aa:0b:c4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 23 17:32:25 2026 GMT Not After : Jan 21 18:02:20 2027 GMT Subject: CN=a176beaa-84a5-4573-af1e-1c3f9f668ced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:80:fd:38:17:56:2e:00:20:f4:e4:33:6b:d0: f2:34:4f:dc:15:b7:f3:7b:da:6f:6e:b5:05:47:e5: 32:fa:95:60:36:f0:d6:5b:45:c6:0d:aa:ee:e7:66: b5:8c:28:d3:f2:83:1f:57:e4:8d:76:4f:69:10:97: a5:c8:75:f2:07:b9:88:1a:75:ee:5e:56:c1:51:ca: af:b7:c2:fc:a4:8b:44:50:59:a5:b6:8c:b8:13:cd: 8b:92:03:a3:95:e7:a8:90:06:9c:91:9a:14:1c:ab: c0:f9:bf:d3:03:16:ee:54:99:db:28:82:47:d5:b4: 43:63:c1:36:fb:d9:b4:fc:b0:7f:0f:7f:b7:3a:a9: 8f:0c:fe:68:80:97:f2:47:6b:01:71:d5:a5:19:b4: f7:39:6b:f3:7a:43:7d:95:d0:2c:8e:d8:6a:33:07: f6:1f:4a:c1:d8:03:73:44:45:6e:a1:bd:3b:c0:6d: f1:4d:65:3f:65:1f:e1:aa:a4:73:d7:8c:f2:1e:2a: 47:c0:91:1b:06:48:f4:cf:c2:a3:b1:06:7b:4b:37: 35:c0:1a:93:c6:c4:72:11:44:9e:f2:06:96:a4:16: e0:71:8a:3d:d2:93:0d:d4:74:dc:15:a8:53:36:5e: 06:5f:95:2b:5a:33:f7:6a:cf:e4:62:27:3b:42:77: 4a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BB:0F:8F:20:EB:87:E7:4E:20:90:2E:13:AD:19:EA:C9:94:00:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7cff54e7-f29c-3c8f-acc6-e91a4d861e02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.115.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:84:4d:ae:92:d0:01:31:f2:f2:98:ad:be:95:4b:eb:57:08: de:c5:69:27:67:3c:41:cf:31:15:c9:df:96:4f:e1:33:e7:1c: 4d:9b:ca:a1:89:a3:ab:66:66:8d:a2:a9:71:67:c7:b1:b6:9a: 53:f2:80:ff:48:99:a9:a2:4a:20:71:4c:41:b8:22:0c:80:4e: bb:67:c5:80:2b:c1:23:96:ff:94:5b:a9:3f:d0:b9:2f:05:f7: 61:af:ea:0c:bf:56:f3:7b:78:e9:66:3b:19:3c:42:5c:86:7e: d4:25:35:f1:9b:83:ca:ab:e4:9f:de:b9:9d:3d:e8:f8:92:59: 2f:2c:2d:dc:36:95:55:c3:63:85:29:26:07:39:6d:04:72:28: 91:a6:c0:58:14:f1:fb:1d:d8:2b:25:35:a5:00:83:25:7d:fa: 9b:92:b3:9f:3b:91:f7:ce:8f:15:f6:86:32:f4:37:35:3c:2b: ca:0a:28:ca:fc:e2:fe:40:9f:d5:ad:48:81:73:ce:39:8a:3c: 84:8a:ab:4d:7a:a3:75:15:98:93:66:9c:f1:5f:3b:cc:50:d6: fb:7b:a4:83:28:01:92:81:d4:e1:03:62:42:9e:b2:bc:89:89: 02:e9:c2:a7:14:38:c9:57:d6:d6:57:eb:85:8d:12:c5:ad:d4: c9:dd:7f:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+Zih1hOzY/WaoLxMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyMzE3MzIyNVoXDTI3MDEyMTE4MDIyMFowLzEtMCsGA1UEAxMk YTE3NmJlYWEtODRhNS00NTczLWFmMWUtMWMzZjlmNjY4Y2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4D9OBdWLgAg9OQza9DyNE/cFbfze9pvbrUF R+Uy+pVgNvDWW0XGDaru52a1jCjT8oMfV+SNdk9pEJelyHXyB7mIGnXuXlbBUcqv t8L8pItEUFmltoy4E82LkgOjleeokAackZoUHKvA+b/TAxbuVJnbKIJH1bRDY8E2 +9m0/LB/D3+3OqmPDP5ogJfyR2sBcdWlGbT3OWvzekN9ldAsjthqMwf2H0rB2ANz REVuob07wG3xTWU/ZR/hqqRz14zyHipHwJEbBkj0z8KjsQZ7Szc1wBqTxsRyEUSe 8gaWpBbgcYo90pMN1HTcFahTNl4GX5UrWjP3as/kYic7QndK0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBq7D48g64fnTiCQLhOtGerJlACnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvN2NmZjU0ZTctZjI5Yy0z YzhmLWFjYzYtZTkxYTRkODYxZTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEJnMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2ETa6S0AEx8vKYrb6VS+tXCN7FaSdnPEHPMRXJ35ZP4TPnHE2byqGJ o6tmZo2iqXFnx7G2mlPygP9ImamiSiBxTEG4IgyATrtnxYArwSOW/5RbqT/QuS8F 92Gv6gy/VvN7eOlmOxk8QlyGftQlNfGbg8qr5J/euZ096PiSWS8sLdw2lVXDY4Up Jgc5bQRyKJGmwFgU8fsd2CslNaUAgyV9+puSs587kffOjxX2hjL0NzU8K8oKKMr8 4v5An9WtSIFzzjmKPISKq016o3UVmJNmnPFfO8xQ1vt7pIMoAZKB1OEDYkKesryJ iQLpwqcUOMlX1tZX64WNEsWt1Mndf3E= -----END CERTIFICATE-----Generated at Tue Oct 27 17:34:39 2026 by rpki-client