$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8720e7c6-72d3-3799-9410-9689d70a6b15.roa File: 8720e7c6-72d3-3799-9410-9689d70a6b15.roa (raw, json) Hash identifier: AV+BRio5tS/+RbNTALx36v0jolgxREz4CHxkmlw9Ix8= Subject key identifier: A0:3E:55:B9:D9:67:53:34:CE:AD:36:FC:28:E2:11:B1:97:E6:66:FB Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F5E9359A88442650A87002C40 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8720e7c6-72d3-3799-9410-9689d70a6b15.roa Signing time: Fri 02 Oct 2026 14:38:20 +0000 ROA not before: Fri 02 Oct 2026 14:38:20 +0000 ROA not after: Thu 31 Dec 2026 15:38:20 +0000 asID: 267242 IP address blocks: 38.224.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:93:59:a8:84:42:65:0a:87:00:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 2 14:38:20 2026 GMT Not After : Dec 31 15:38:20 2026 GMT Subject: CN=6026c823-87fb-401c-81c9-b7cfc057290c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:dd:c5:73:f1:96:bb:9e:1c:d9:b6:c4:1e:e6: cd:23:85:45:0a:d9:45:78:7c:c6:53:3f:f2:80:61: 48:38:47:94:6b:c8:83:3d:ca:3b:f5:12:40:6f:cb: 3f:c2:35:be:f8:7e:e8:bd:35:ea:5b:2c:5c:1c:2b: 4c:6c:22:2e:1f:b9:69:8c:79:49:7f:41:de:53:d5: b7:fa:e4:e8:f7:ba:a0:e1:0a:52:2d:42:bc:4e:82: a2:a2:27:17:1c:ba:4a:08:90:ba:4d:cb:71:1e:31: 0b:03:dd:a6:40:7c:ae:e2:a2:81:ad:55:93:f1:35: c4:f1:04:00:54:10:38:c8:e5:a7:cb:75:a1:14:93: 99:73:95:df:48:49:e5:a5:26:6b:e4:f4:66:d6:7b: 22:0b:d9:9d:40:9c:08:0d:07:df:35:b5:9c:8e:c5: a4:91:b1:3f:d0:1d:9b:48:61:12:05:24:16:d7:db: 9b:c6:ee:b4:5e:34:b0:de:a7:6d:d7:17:8a:d5:a0: fd:1d:99:1b:80:df:e4:98:0b:f5:4f:44:34:95:37: a9:4a:1d:da:50:58:8a:6a:8b:4b:89:cd:dc:50:b9: 8b:d5:37:db:e4:94:59:21:74:3c:37:80:d4:f9:c5: 94:82:0c:8f:71:a6:a7:4d:34:70:3b:98:6b:56:84: 6e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:3E:55:B9:D9:67:53:34:CE:AD:36:FC:28:E2:11:B1:97:E6:66:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8720e7c6-72d3-3799-9410-9689d70a6b15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.224.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:51:49:a6:2a:36:2c:5d:33:e3:6f:07:dd:8e:82:49:28:b3: f0:8c:1a:b2:63:d7:12:7c:e4:d5:ac:ea:39:ff:46:84:8f:4e: 9d:87:c0:b5:46:83:e9:aa:b5:a5:62:4d:8c:2f:d1:36:3d:b4: 29:3a:d4:38:2e:d2:c8:4c:2c:d8:b4:5a:bc:71:3d:7a:e3:2a: 1e:38:44:b9:40:e2:4a:a5:aa:4f:02:91:b4:d5:48:7c:63:ba: 8b:d9:d1:32:82:e0:93:55:63:2f:f4:a3:b8:e6:57:e2:95:a0: 2e:a8:ff:3c:1b:12:7b:1d:99:11:33:dd:3e:da:b9:43:69:2e: ed:e3:48:78:80:6d:b9:18:70:bb:c9:29:f5:1d:24:08:a3:ff: 46:f9:51:0c:fb:43:73:98:01:81:48:6f:05:0e:60:34:8c:f0: a7:27:ff:55:b5:91:2b:41:4e:b2:9e:c6:d0:a9:94:8f:7f:5f: 6c:27:1d:4a:30:5d:d7:41:1f:82:34:68:6e:61:8c:0a:3c:d1: 04:c4:ef:50:cc:61:37:0b:82:35:5e:9c:25:6e:d0:a5:29:68: 6e:39:18:3d:1c:d5:c7:cf:be:98:34:00:64:b6:e9:dc:28:b4: 38:71:f6:92:95:ae:fa:8e:27:58:25:99:ea:a6:19:17:c6:6a: 53:51:d6:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ek1mohEJlCocALEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwMjE0MzgyMFoXDTI2MTIzMTE1MzgyMFowLzEtMCsGA1UEAxMk NjAyNmM4MjMtODdmYi00MDFjLTgxYzktYjdjZmMwNTcyOTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2d3Fc/GWu54c2bbEHubNI4VFCtlFeHzGUz/y gGFIOEeUa8iDPco79RJAb8s/wjW++H7ovTXqWyxcHCtMbCIuH7lpjHlJf0HeU9W3 +uTo97qg4QpSLUK8ToKioicXHLpKCJC6TctxHjELA92mQHyu4qKBrVWT8TXE8QQA VBA4yOWny3WhFJOZc5XfSEnlpSZr5PRm1nsiC9mdQJwIDQffNbWcjsWkkbE/0B2b SGESBSQW19ubxu60XjSw3qdt1xeK1aD9HZkbgN/kmAv1T0Q0lTepSh3aUFiKaotL ic3cULmL1Tfb5JRZIXQ8N4DU+cWUggyPcaanTTRwO5hrVoRu4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKA+VbnZZ1M0zq02/CjiEbGX5mb7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODcyMGU3YzYtNzJkMy0z Nzk5LTk0MTAtOTY4OWQ3MGE2YjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJuDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFRSaYqNixdM+NvB92Ogkkos/CMGrJj1xJ85NWs6jn/RoSPTp2HwLVG g+mqtaViTYwv0TY9tCk61Dgu0shMLNi0WrxxPXrjKh44RLlA4kqlqk8CkbTVSHxj uovZ0TKC4JNVYy/0o7jmV+KVoC6o/zwbEnsdmREz3T7auUNpLu3jSHiAbbkYcLvJ KfUdJAij/0b5UQz7Q3OYAYFIbwUOYDSM8Kcn/1W1kStBTrKextCplI9/X2wnHUow XddBH4I0aG5hjAo80QTE71DMYTcLgjVenCVu0KUpaG45GD0c1cfPvpg0AGS26dwo tDhx9pKVrvqOJ1glmeqmGRfGalNR1h0= -----END CERTIFICATE-----Generated at Tue Oct 27 20:44:17 2026 by rpki-client