$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/877e6b9f-c5cc-37d9-b9f0-45bbdb53d233.roa File: 877e6b9f-c5cc-37d9-b9f0-45bbdb53d233.roa (raw, json) Hash identifier: tgj15HpItu6hsSjIgrifWblKrFmx3z6oIQ4dRSwRfNM= Subject key identifier: 95:64:58:93:E5:6B:48:98:4F:3D:56:33:05:A5:6C:A6:23:DD:02:ED Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F8E2CBF8D40AC2527696FDC80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/877e6b9f-c5cc-37d9-b9f0-45bbdb53d233.roa Signing time: Mon 19 Oct 2026 15:50:24 +0000 ROA not before: Mon 19 Oct 2026 15:50:24 +0000 ROA not after: Thu 14 Jan 2027 02:00:12 +0000 asID: 275786 IP address blocks: 38.4.240.0/21 maxlen: 24 38.43.66.0/23 maxlen: 24 38.210.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8e:2c:bf:8d:40:ac:25:27:69:6f:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 19 15:50:24 2026 GMT Not After : Jan 14 02:00:12 2027 GMT Subject: CN=7d03d199-14ed-47e6-b59e-94f3b31950f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:97:79:c8:46:d0:e9:db:94:91:40:18:5d:8d: 5c:10:28:10:2d:f7:82:df:26:aa:fc:18:e8:23:4e: d7:53:c3:2e:63:34:db:e7:3d:79:65:49:d8:59:02: d8:39:3d:b0:4b:46:37:b0:f2:f3:1d:76:2d:78:4f: 82:01:54:9c:47:65:d8:3b:7e:61:39:07:9e:81:40: 9e:ed:d9:4f:bf:32:ab:8a:3c:bd:fd:43:8b:08:37: 89:82:5c:67:04:ad:4e:bd:75:50:d1:42:0c:fe:ed: 3e:db:f8:d2:d9:6d:63:c2:47:57:50:c9:3e:d8:68: 02:4d:90:d5:24:37:45:e2:33:6c:3a:9f:b4:08:3a: ce:e7:f5:ff:59:21:e8:23:57:6c:cb:3e:8b:67:b7: 12:2f:ab:20:92:8e:7c:ce:44:59:c6:5a:94:38:3c: b6:75:7d:5a:56:28:f6:c7:6c:53:2c:b0:65:4a:33: 33:c5:43:da:ec:17:23:d7:eb:cf:ac:93:80:0a:5f: 30:32:29:5c:5c:d4:8b:e4:8b:b0:3e:df:17:aa:ca: 01:c8:3b:0a:6d:11:f0:7b:08:40:16:04:b7:8a:2c: 15:43:67:b0:3a:e3:ca:89:64:d4:6b:8e:cb:96:85: 90:0b:f3:b9:96:99:dd:49:63:23:98:f2:07:19:2a: 14:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:64:58:93:E5:6B:48:98:4F:3D:56:33:05:A5:6C:A6:23:DD:02:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/877e6b9f-c5cc-37d9-b9f0-45bbdb53d233.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.4.240.0/21 38.43.66.0/23 38.210.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:68:f9:a6:c2:bb:af:9e:13:a3:f4:9e:e7:6c:a9:c5:6f:44: 15:e9:64:12:85:cd:82:d3:ce:a2:9b:47:9f:bc:ad:49:22:3e: 13:93:73:82:07:c3:b5:5f:2d:fc:07:f4:86:f4:cc:c7:7f:9b: a6:ce:03:e2:fc:49:3a:25:fb:15:dd:a4:08:fb:c1:dd:bc:52: 7d:cd:f1:66:cf:72:e5:57:06:71:2f:63:ec:8d:3f:3b:27:aa: 9f:e6:8d:05:e8:19:89:f3:23:74:90:a3:66:b6:c0:ad:14:42: fb:db:3f:bf:52:ad:71:6c:05:9e:62:a7:06:c2:df:96:3f:47: f6:1a:90:2b:5f:23:87:e4:23:e8:10:66:d7:3f:96:48:31:8b: 41:7a:f6:09:48:3c:bd:8f:e0:76:c1:95:c8:4a:ad:b4:cf:0e: f3:a9:e0:ec:5c:7e:56:67:cc:25:a8:21:33:c0:41:7f:9b:d5: 79:90:3b:1a:99:93:22:8e:24:81:4f:11:8e:8a:21:b9:48:43: f8:93:23:83:71:95:3e:4b:7d:8e:fb:de:8d:7c:15:0c:04:b9: e4:98:b8:bf:8f:99:ec:be:4f:35:09:01:18:26:b9:43:db:30: 83:c3:02:21:08:f5:33:e1:38:59:5c:85:a1:a5:b6:e3:1b:65: de:ce:a8:df -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE+OLL+NQKwlJ2lv3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxOTE1NTAyNFoXDTI3MDExNDAyMDAxMlowLzEtMCsGA1UEAxMk N2QwM2QxOTktMTRlZC00N2U2LWI1OWUtOTRmM2IzMTk1MGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZd5yEbQ6duUkUAYXY1cECgQLfeC3yaq/Bjo I07XU8MuYzTb5z15ZUnYWQLYOT2wS0Y3sPLzHXYteE+CAVScR2XYO35hOQeegUCe 7dlPvzKrijy9/UOLCDeJglxnBK1OvXVQ0UIM/u0+2/jS2W1jwkdXUMk+2GgCTZDV JDdF4jNsOp+0CDrO5/X/WSHoI1dsyz6LZ7cSL6sgko58zkRZxlqUODy2dX1aVij2 x2xTLLBlSjMzxUPa7Bcj1+vPrJOACl8wMilcXNSL5IuwPt8XqsoByDsKbRHwewhA FgS3iiwVQ2ewOuPKiWTUa47LloWQC/O5lpndSWMjmPIHGSoUQwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFJVkWJPla0iYTz1WMwWlbKYj3QLtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODc3ZTZiOWYtYzVjYy0z N2Q5LWI5ZjAtNDViYmRiNTNkMjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDJgTwAwQB JitCAwQBJtL+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABto+abCu6+eE6P0nudsqcVvRBXpZBKFzYLTzqKb R5+8rUkiPhOTc4IHw7VfLfwH9Ib0zMd/m6bOA+L8STol+xXdpAj7wd28Un3N8WbP cuVXBnEvY+yNPzsnqp/mjQXoGYnzI3SQo2a2wK0UQvvbP79SrXFsBZ5ipwbC35Y/ R/YakCtfI4fkI+gQZtc/lkgxi0F69glIPL2P4HbBlchKrbTPDvOp4OxcflZnzCWo ITPAQX+b1XmQOxqZkyKOJIFPEY6KIblIQ/iTI4NxlT5LfY773o18FQwEueSYuL+P mey+TzUJARgmuUPbMIPDAiEI9TPhOFlchaGltuMbZd7OqN8= -----END CERTIFICATE-----Generated at Wed Oct 28 11:39:08 2026 by rpki-client