$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/889ddb2e-8edc-3f44-a514-6e122e7bb1b6.roa File: 889ddb2e-8edc-3f44-a514-6e122e7bb1b6.roa (raw, json) Hash identifier: d7wgblpXbYuuBn7Girsaz6UjSOQ0CB7Dzy9ldCQzgso= Subject key identifier: 86:A4:26:E6:AB:25:C4:9A:25:4A:F3:81:DA:CD:45:44:A5:07:6E:F3 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F6DBD6D3F70218C062902B600 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/889ddb2e-8edc-3f44-a514-6e122e7bb1b6.roa Signing time: Thu 08 Oct 2026 01:00:11 +0000 ROA not before: Thu 08 Oct 2026 01:00:11 +0000 ROA not after: Wed 06 Jan 2027 02:00:11 +0000 asID: 271808 IP address blocks: 38.246.152.0/22 maxlen: 24 38.246.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6d:bd:6d:3f:70:21:8c:06:29:02:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 8 01:00:11 2026 GMT Not After : Jan 6 02:00:11 2027 GMT Subject: CN=eeec5568-5846-4238-bc7a-5695aaf11805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0c:af:4c:e0:8d:0c:3d:27:6f:d2:1d:f2:14: 12:d2:2d:53:3f:fb:39:4c:79:3f:fc:82:3a:27:6b: 66:71:f5:d9:24:b7:fc:77:8d:3c:2c:d7:ff:81:f9: 8c:fe:bc:5e:96:7a:52:a1:31:ff:59:b8:f8:e7:4f: df:cf:d3:0b:2d:07:5b:92:5a:19:78:f6:4d:58:2b: 05:97:25:b1:7b:e6:fc:73:53:bd:43:28:5b:e7:b4: d2:0f:d5:12:06:be:ca:24:74:90:0d:f0:7e:3a:c6: 39:4c:8b:be:50:89:6a:2c:28:08:c2:59:03:69:16: 4a:8d:60:1d:59:fa:80:48:9e:d5:a8:9d:50:76:f6: 49:5d:5b:b2:89:c0:0f:aa:58:f5:3f:36:0b:c3:43: 5f:3e:97:2f:d1:f4:fb:8d:2d:c5:4f:25:e8:ea:18: 48:ec:36:3f:67:d7:70:06:5a:63:4f:70:eb:d0:d0: d4:29:8e:ba:bf:cf:b5:de:7b:81:f6:12:0d:ae:2e: 9d:d7:73:78:cf:b9:93:cc:c0:fb:54:eb:72:fc:ee: a4:83:e6:a7:d5:91:c6:1e:73:8e:c8:b3:72:ac:30: ff:99:70:2c:ab:07:f7:ab:e8:5f:bb:50:c2:d3:88: 1b:45:c1:46:48:12:29:ac:0f:20:90:f5:47:4a:42: 8f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A4:26:E6:AB:25:C4:9A:25:4A:F3:81:DA:CD:45:44:A5:07:6E:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/889ddb2e-8edc-3f44-a514-6e122e7bb1b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.246.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:4f:d0:38:01:1f:80:52:7c:90:1e:16:e9:fd:5e:ff:d2:0c: e9:4a:0a:25:c2:90:90:77:25:da:39:76:c7:a9:d6:91:b2:f9: e6:22:d7:3d:a5:94:4c:83:42:25:10:67:13:42:fe:01:76:70: b7:fa:be:e1:a6:63:b9:4c:f4:ee:ae:0d:fd:82:4c:fe:6f:20: 87:0e:f9:a0:07:5c:90:e1:45:25:03:b0:8d:87:51:06:3c:de: 79:a3:12:da:ac:c6:a0:c1:9c:d5:90:91:3b:61:70:ec:3e:36: 4c:61:fb:f6:09:06:69:08:ec:cb:4e:05:87:6a:a2:5b:32:85: 91:ec:2d:95:25:d4:42:59:60:02:0f:e4:ae:7a:9f:38:b9:50: cf:29:90:8b:bf:e4:4c:91:fc:48:03:5c:81:e5:e2:7e:80:5e: 39:0d:e5:d8:ce:eb:3e:87:55:44:02:a7:61:0a:48:2d:0d:2f: 36:0e:bd:46:0f:2a:59:84:45:8c:bd:9c:26:02:d3:e5:5d:62: a1:ad:1c:05:f2:00:32:04:f1:51:83:4e:9d:d0:90:e3:b0:0c: 6c:ed:2f:70:c0:39:31:18:3d:c0:51:4b:97:b8:ab:98:8b:56: 28:14:09:5e:f8:4e:af:c4:c7:8f:62:e9:11:8a:62:53:64:05: cd:81:1e:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9tvW0/cCGMBikCtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwODAxMDAxMVoXDTI3MDEwNjAyMDAxMVowLzEtMCsGA1UEAxMk ZWVlYzU1NjgtNTg0Ni00MjM4LWJjN2EtNTY5NWFhZjExODA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwyvTOCNDD0nb9Id8hQS0i1TP/s5THk//II6 J2tmcfXZJLf8d408LNf/gfmM/rxelnpSoTH/Wbj450/fz9MLLQdbkloZePZNWCsF lyWxe+b8c1O9Qyhb57TSD9USBr7KJHSQDfB+OsY5TIu+UIlqLCgIwlkDaRZKjWAd WfqASJ7VqJ1QdvZJXVuyicAPqlj1PzYLw0NfPpcv0fT7jS3FTyXo6hhI7DY/Z9dw BlpjT3Dr0NDUKY66v8+13nuB9hINri6d13N4z7mTzMD7VOty/O6kg+an1ZHGHnOO yLNyrDD/mXAsqwf3q+hfu1DC04gbRcFGSBIprA8gkPVHSkKP1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIakJuarJcSaJUrzgdrNRUSlB27zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODg5ZGRiMmUtOGVkYy0z ZjQ0LWE1MTQtNmUxMjJlN2JiMWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJvaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxP0DgBH4BSfJAeFun9Xv/SDOlKCiXCkJB3Jdo5dsep1pGy+eYi1z2l lEyDQiUQZxNC/gF2cLf6vuGmY7lM9O6uDf2CTP5vIIcO+aAHXJDhRSUDsI2HUQY8 3nmjEtqsxqDBnNWQkTthcOw+Nkxh+/YJBmkI7MtOBYdqolsyhZHsLZUl1EJZYAIP 5K56nzi5UM8pkIu/5EyR/EgDXIHl4n6AXjkN5djO6z6HVUQCp2EKSC0NLzYOvUYP KlmERYy9nCYC0+VdYqGtHAXyADIE8VGDTp3QkOOwDGztL3DAOTEYPcBRS5e4q5iL VigUCV74Tq/Ex49i6RGKYlNkBc2BHlc= -----END CERTIFICATE-----Generated at Wed Oct 28 07:25:10 2026 by rpki-client