$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/86265be1-30ba-31aa-992f-37518feccdb6.roa File: 86265be1-30ba-31aa-992f-37518feccdb6.roa (raw, json) Hash identifier: 6uOIAtLg5kfKVdMDf5f6qZyiCsJe7Nv7SJoOSiiEBw4= Subject key identifier: DB:F2:B0:DE:CC:D0:40:03:36:8C:19:54:BC:92:BB:B0:2C:FF:84:6E Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F549DA2394060562538D228C0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/86265be1-30ba-31aa-992f-37518feccdb6.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 209753 IP address blocks: 38.27.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:a2:39:40:60:56:25:38:d2:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=b4034020-106e-415d-8c99-dfd7d3bb4daa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ef:d5:83:97:a7:a8:26:72:6d:0f:89:9e:4d: 97:84:c0:bf:1a:84:a9:03:24:a3:40:28:9b:6d:fa: b2:60:de:03:c7:fe:17:7c:ec:a5:76:48:a2:3a:18: c8:9d:5f:df:c8:c0:3e:12:75:da:dd:fa:01:a4:ae: b4:3d:76:3b:00:4d:b1:6a:84:53:fc:7a:2a:4b:ae: fa:11:5c:c6:1a:4e:2c:4d:ee:86:83:23:d6:d2:0e: 4a:f3:c7:1a:6e:ac:22:5a:22:07:0b:34:2a:a9:6a: c8:ab:f5:a5:db:38:c7:39:11:fa:36:c1:56:86:79: be:ee:db:69:32:39:a1:85:30:a5:f2:6f:a0:db:31: c9:b6:f0:7c:d8:d7:60:39:af:ae:ec:97:4e:6f:65: cf:b0:41:f2:9f:99:b0:6e:a1:68:c3:c1:0e:7a:64: 20:19:a7:4e:9f:d3:eb:bc:13:fd:00:0f:82:3e:0f: 54:e4:02:0d:fa:5a:7f:c2:7e:c4:9d:89:ba:d0:cf: a8:7a:70:d6:60:e3:9f:06:96:3f:77:38:11:1b:3c: 67:72:7c:74:5d:c9:42:b4:0d:26:31:b8:6b:cb:ac: 63:bc:75:0e:0b:b2:b8:9d:aa:a2:47:d4:53:7d:c7: f6:b9:e6:7f:1a:f2:89:ae:11:0d:56:8d:b7:94:1a: e5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F2:B0:DE:CC:D0:40:03:36:8C:19:54:BC:92:BB:B0:2C:FF:84:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/86265be1-30ba-31aa-992f-37518feccdb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.27.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:c2:c8:e7:aa:cb:bd:12:f6:aa:a3:f4:03:96:36:41:e8:a7: 7c:12:e8:ba:32:68:50:41:25:86:8f:e8:a6:33:cb:bd:68:a8: a8:45:59:01:b0:07:0d:d6:3b:3b:ef:24:80:96:1e:bf:c0:b6: 52:ea:51:4a:50:8f:8a:5c:68:ba:f8:31:68:01:cc:37:ce:cd: a2:92:bd:4d:93:00:20:36:80:4e:b0:7f:13:04:8a:7d:e4:73: dc:3a:c4:62:18:56:ae:a0:59:cc:c7:9f:30:cc:fe:60:0e:fd: 42:8b:0d:99:6c:a5:5c:f6:b5:ad:18:51:24:c6:e2:3e:0e:16: 36:93:54:60:cb:00:0c:78:42:04:80:56:39:5d:36:fb:76:36: 25:ca:3d:c3:62:b3:81:78:8f:50:4a:a4:d7:4a:13:9b:2d:03: 11:8e:94:6a:d4:00:e0:1c:31:78:af:24:e0:dd:c0:91:51:14: a0:d6:fc:72:47:71:dc:b9:35:b0:35:32:50:6e:cf:c0:46:56: f7:5b:ba:48:74:95:dc:c8:31:f9:d0:be:38:a1:5e:e1:00:aa: c7:ad:43:3b:97:58:0b:31:7d:de:ce:6f:d9:ab:e5:3a:dd:49: be:f0:9d:b3:79:2d:e3:c1:ab:ff:a9:5f:ab:66:0e:88:a7:b6: 38:05:c0:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnaI5QGBWJTjSKMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk YjQwMzQwMjAtMTA2ZS00MTVkLThjOTktZGZkN2QzYmI0ZGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgO/Vg5enqCZybQ+Jnk2XhMC/GoSpAySjQCib bfqyYN4Dx/4XfOyldkiiOhjInV/fyMA+EnXa3foBpK60PXY7AE2xaoRT/HoqS676 EVzGGk4sTe6GgyPW0g5K88cabqwiWiIHCzQqqWrIq/Wl2zjHORH6NsFWhnm+7ttp MjmhhTCl8m+g2zHJtvB82NdgOa+u7JdOb2XPsEHyn5mwbqFow8EOemQgGadOn9Pr vBP9AA+CPg9U5AIN+lp/wn7EnYm60M+oenDWYOOfBpY/dzgRGzxncnx0XclCtA0m Mbhry6xjvHUOC7K4naqiR9RTfcf2ueZ/GvKJrhENVo23lBrlwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvysN7M0EADNowZVLySu7As/4RuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODYyNjViZTEtMzBiYS0z MWFhLTk5MmYtMzc1MThmZWNjZGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJhsCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfCyOeqy70S9qqj9AOWNkHop3wS6LoyaFBBJYaP6KYzy71oqKhFWQGw Bw3WOzvvJICWHr/AtlLqUUpQj4pcaLr4MWgBzDfOzaKSvU2TACA2gE6wfxMEin3k c9w6xGIYVq6gWczHnzDM/mAO/UKLDZlspVz2ta0YUSTG4j4OFjaTVGDLAAx4QgSA VjldNvt2NiXKPcNis4F4j1BKpNdKE5stAxGOlGrUAOAcMXivJODdwJFRFKDW/HJH cdy5NbA1MlBuz8BGVvdbukh0ldzIMfnQvjihXuEAqsetQzuXWAsxfd7Ob9mr5Trd Sb7wnbN5LePBq/+pX6tmDointjgFwJo= -----END CERTIFICATE-----Generated at Tue Oct 27 15:04:07 2026 by rpki-client