$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/810a87df-ad1c-3b68-ad7b-38cacaa79ca0.roa File: 810a87df-ad1c-3b68-ad7b-38cacaa79ca0.roa (raw, json) Hash identifier: DMt69UQD3oGrw9dvfIXNbdXThQT+pg5gIWmSMSUrGYQ= Subject key identifier: 86:60:47:47:71:21:D6:7E:B4:ED:BD:B3:7E:C8:1C:7B:0A:A0:CC:E2 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F7E7E076AD9B1A3464F39DB00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/810a87df-ad1c-3b68-ad7b-38cacaa79ca0.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 274850 IP address blocks: 38.199.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7e:07:6a:d9:b1:a3:46:4f:39:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=b8e72db5-602d-41a6-a8eb-4b1f4d86c327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:45:58:19:f2:8a:3a:99:a5:13:22:93:43:c0: 49:38:3a:54:da:26:c0:35:ab:2e:16:f0:1b:9d:fa: 28:3b:10:b9:e4:e7:53:f9:cb:b7:a5:ce:0a:f4:e5: 2d:ac:78:c3:e0:4e:8f:d5:e9:95:1f:f5:d3:c1:92: 9a:64:fb:18:c0:f8:30:20:5f:56:71:21:1d:40:42: e0:ed:ff:4c:9a:56:47:39:61:27:0a:31:74:a8:2a: c4:e3:7b:25:8a:ca:5a:79:e5:a4:a9:1c:01:39:a0: d0:0e:87:ee:29:42:43:8b:49:a0:d7:c2:c4:08:28: 61:9d:8b:11:37:f1:69:fd:79:5b:26:fc:c9:5b:8d: 63:4c:96:c5:0c:5f:61:ea:e9:6e:de:13:81:76:55: d3:09:00:52:55:23:47:e1:19:07:3e:82:cc:b8:0d: 62:a4:2e:91:3a:9a:c0:c8:68:71:f4:13:7e:2d:3a: 17:93:26:59:13:f0:d0:08:cc:57:5e:30:94:d8:bc: d9:ef:e0:55:a0:fb:9b:6d:a2:13:7d:1e:b7:10:38: d5:dd:a2:28:01:b4:bf:0a:44:9d:6a:0e:97:24:ef: ca:21:f1:54:22:31:7b:21:b2:b4:5d:fa:ae:1d:84: 8f:9c:f0:b8:33:06:0b:11:d9:d9:1e:eb:8a:6e:84: 40:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:60:47:47:71:21:D6:7E:B4:ED:BD:B3:7E:C8:1C:7B:0A:A0:CC:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/810a87df-ad1c-3b68-ad7b-38cacaa79ca0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.199.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:1e:0b:95:da:1c:f5:e3:21:94:cf:b7:c6:3d:01:a1:98:b0: 45:61:2c:c9:dd:5e:6a:84:f0:c6:79:3f:eb:cd:d0:e2:ee:4b: f3:c9:13:ec:83:c4:9d:03:70:ba:bb:bd:fd:a5:74:59:7d:99: b6:80:e2:a2:02:06:fe:c6:10:90:35:f9:b1:06:8b:a0:1f:63: b6:70:9a:9f:8d:01:8c:74:ee:35:54:49:5c:64:88:0b:0c:89: 0d:2e:bf:11:9c:eb:20:6b:0d:19:3d:70:d1:91:d2:81:a0:e0: 47:4e:99:42:cc:a0:fb:bd:7a:52:f0:50:13:2b:63:78:16:29: 60:8f:47:cf:9d:a1:f8:55:72:30:29:f6:df:c3:00:f8:05:ce: 63:8a:15:6f:cc:40:f0:75:b3:9f:1d:48:b0:85:bf:cb:a1:41: ee:bd:67:52:6d:75:7d:5d:6b:e0:57:9d:d2:3c:a4:7d:eb:86: 30:bc:31:a5:e7:9b:78:e9:27:59:8e:42:d0:33:00:f2:cb:7a: ea:1d:c5:ee:d9:5a:e4:4d:0c:84:38:4b:4c:39:c8:5b:74:f9: 65:e7:37:18:f6:74:20:4b:bd:a2:0c:cc:2b:a0:45:d4:5f:b3: 87:59:f1:6c:91:f0:f4:e3:26:63:64:0a:c2:55:d6:df:a5:cc: d7:ae:ee:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fgdq2bGjRk852wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk YjhlNzJkYjUtNjAyZC00MWE2LWE4ZWItNGIxZjRkODZjMzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEVYGfKKOpmlEyKTQ8BJODpU2ibANasuFvAb nfooOxC55OdT+cu3pc4K9OUtrHjD4E6P1emVH/XTwZKaZPsYwPgwIF9WcSEdQELg 7f9MmlZHOWEnCjF0qCrE43slispaeeWkqRwBOaDQDofuKUJDi0mg18LECChhnYsR N/Fp/XlbJvzJW41jTJbFDF9h6ulu3hOBdlXTCQBSVSNH4RkHPoLMuA1ipC6ROprA yGhx9BN+LToXkyZZE/DQCMxXXjCU2LzZ7+BVoPubbaITfR63EDjV3aIoAbS/CkSd ag6XJO/KIfFUIjF7IbK0XfquHYSPnPC4MwYLEdnZHuuKboRAzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZgR0dxIdZ+tO29s37IHHsKoMziMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODEwYTg3ZGYtYWQxYy0z YjY4LWFkN2ItMzhjYWNhYTc5Y2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJsfIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYeC5XaHPXjIZTPt8Y9AaGYsEVhLMndXmqE8MZ5P+vN0OLuS/PJE+yD xJ0DcLq7vf2ldFl9mbaA4qICBv7GEJA1+bEGi6AfY7Zwmp+NAYx07jVUSVxkiAsM iQ0uvxGc6yBrDRk9cNGR0oGg4EdOmULMoPu9elLwUBMrY3gWKWCPR8+dofhVcjAp 9t/DAPgFzmOKFW/MQPB1s58dSLCFv8uhQe69Z1JtdX1da+BXndI8pH3rhjC8MaXn m3jpJ1mOQtAzAPLLeuodxe7ZWuRNDIQ4S0w5yFt0+WXnNxj2dCBLvaIMzCugRdRf s4dZ8WyR8PTjJmNkCsJV1t+lzNeu7sU= -----END CERTIFICATE-----Generated at Wed Oct 28 00:51:04 2026 by rpki-client