$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/89ca7cd7-8624-3016-b967-e20d9bd36b70.roa File: 89ca7cd7-8624-3016-b967-e20d9bd36b70.roa (raw, json) Hash identifier: I1GsB1lfGfeJBmhi1ScLwpF+LMF3OUc/r2wUZLC0JEo= Subject key identifier: FC:F2:58:2C:6F:B9:BD:0B:0D:7B:11:37:0D:03:6B:D3:F2:3C:03:35 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F5E62F716407ACEA347FD9B00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/89ca7cd7-8624-3016-b967-e20d9bd36b70.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 274128 IP address blocks: 38.19.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:f7:16:40:7a:ce:a3:47:fd:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=5cecd6de-b6c0-446f-985d-a7091abe783a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d9:ff:13:f9:a9:1d:c9:b7:86:c6:82:f2:be: 5a:f5:79:7c:4e:ba:ca:72:0a:a8:3f:67:a5:ab:a2: fc:b0:ec:07:bf:0f:07:d2:b1:b4:65:01:19:a2:bc: f0:f2:36:6b:cd:6e:49:00:1d:fa:f1:ff:fe:85:4f: 3e:31:72:fe:f3:c3:69:42:28:0e:12:c8:0c:2f:77: 5a:d0:fb:83:84:11:be:7c:a6:c1:3a:f4:a5:78:49: 86:52:e7:6a:26:89:50:aa:3b:8f:35:bc:9a:8f:6e: 00:de:4e:80:22:59:ed:b2:dd:9a:cb:9c:9b:eb:5a: 86:d4:33:a2:32:d5:10:c5:91:e3:b3:70:3e:f5:0b: b5:52:6c:ee:91:63:b8:da:1b:74:8c:5f:ea:b8:b6: 65:a4:08:83:ec:79:45:c0:6e:15:d3:ef:ac:76:99: 9c:57:f2:27:5b:7f:3a:ef:75:0a:dd:f6:c3:54:55: 94:23:6f:23:39:29:11:f7:81:78:63:14:08:18:e6: 41:65:f3:22:07:77:cc:59:c8:b9:e6:18:aa:ed:5b: 09:21:4f:67:46:43:a4:fc:59:fb:1c:06:52:c2:60: 95:d7:fa:bd:bb:a0:21:8f:da:ee:44:1b:dc:3e:1e: 45:d3:57:d5:74:28:fa:a3:50:b6:63:1f:f3:26:13: 8f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F2:58:2C:6F:B9:BD:0B:0D:7B:11:37:0D:03:6B:D3:F2:3C:03:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/89ca7cd7-8624-3016-b967-e20d9bd36b70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.19.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:9d:d2:97:d1:b8:4c:8b:9d:90:be:29:dc:80:43:60:ab:c0: cd:9f:d2:c3:43:09:5f:ae:31:19:6e:b9:8f:9b:b2:8b:d3:b0: 67:20:5c:34:f9:68:a4:3e:a9:3d:25:f1:fe:40:8d:25:e4:be: ed:e5:0e:12:52:37:92:4f:10:68:5e:b0:9c:55:1d:5a:a2:d4: b3:58:a9:18:80:67:7c:3e:c4:71:69:4c:31:34:2e:8e:c0:d5: 5e:4e:ff:aa:ba:4f:36:f2:d6:d5:45:89:e9:4d:6f:f5:c5:c8: 98:ac:e9:7f:10:64:20:8a:64:35:6b:a8:57:c2:2f:20:cc:40: 6d:8e:0c:25:67:66:f6:05:ca:c1:10:8f:0e:2a:df:43:79:a3: 87:61:a3:61:0a:b7:f3:2a:49:7f:18:64:70:ed:73:4d:cb:3a: fe:4a:e9:66:d1:d0:51:c6:4f:9a:6c:b7:7b:ec:a8:b8:aa:04: 8c:8e:90:60:ea:5d:80:47:aa:e1:60:34:e9:66:6f:e7:51:5d: 27:bb:32:30:db:23:b0:fa:da:e8:81:c8:85:f5:20:00:7a:7a: 19:b7:d5:f7:67:32:ca:09:47:01:ca:15:62:48:d6:8c:a1:59: 6e:aa:5b:89:38:47:2d:5c:10:7e:f2:23:3d:13:fd:38:3b:6e: 74:bb:d6:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYvcWQHrOo0f9mwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk NWNlY2Q2ZGUtYjZjMC00NDZmLTk4NWQtYTcwOTFhYmU3ODNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNn/E/mpHcm3hsaC8r5a9Xl8TrrKcgqoP2el q6L8sOwHvw8H0rG0ZQEZorzw8jZrzW5JAB368f/+hU8+MXL+88NpQigOEsgML3da 0PuDhBG+fKbBOvSleEmGUudqJolQqjuPNbyaj24A3k6AIlntst2ay5yb61qG1DOi MtUQxZHjs3A+9Qu1UmzukWO42ht0jF/quLZlpAiD7HlFwG4V0++sdpmcV/InW386 73UK3fbDVFWUI28jOSkR94F4YxQIGOZBZfMiB3fMWci55hiq7VsJIU9nRkOk/Fn7 HAZSwmCV1/q9u6Ahj9ruRBvcPh5F01fVdCj6o1C2Yx/zJhOPEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzyWCxvub0LDXsRNw0Da9PyPAM1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODljYTdjZDctODYyNC0z MDE2LWI5NjctZTIwZDliZDM2YjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJhPuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESd0pfRuEyLnZC+KdyAQ2CrwM2f0sNDCV+uMRluuY+bsovTsGcgXDT5 aKQ+qT0l8f5AjSXkvu3lDhJSN5JPEGhesJxVHVqi1LNYqRiAZ3w+xHFpTDE0Lo7A 1V5O/6q6Tzby1tVFielNb/XFyJis6X8QZCCKZDVrqFfCLyDMQG2ODCVnZvYFysEQ jw4q30N5o4dho2EKt/MqSX8YZHDtc03LOv5K6WbR0FHGT5pst3vsqLiqBIyOkGDq XYBHquFgNOlmb+dRXSe7MjDbI7D62uiByIX1IAB6ehm31fdnMsoJRwHKFWJI1oyh WW6qW4k4Ry1cEH7yIz0T/Tg7bnS71t0= -----END CERTIFICATE-----Generated at Tue Oct 27 22:37:54 2026 by rpki-client