$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/89d411ec-6823-30ea-989f-55ce85b086c7.roa File: 89d411ec-6823-30ea-989f-55ce85b086c7.roa (raw, json) Hash identifier: GzQPV1F9C6zZh4GMsCrqtIyBUo4Yz+GW1DnJ6npZDz4= Subject key identifier: 39:97:DB:74:82:91:0D:04:7A:14:FD:57:41:EC:7A:B8:76:C7:D0:3C Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F93C99BC284B6C70645FC8E00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/89d411ec-6823-30ea-989f-55ce85b086c7.roa Signing time: Wed 21 Oct 2026 16:05:30 +0000 ROA not before: Wed 21 Oct 2026 16:05:30 +0000 ROA not after: Tue 19 Jan 2027 17:05:30 +0000 asID: 273335 IP address blocks: 38.196.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:93:c9:9b:c2:84:b6:c7:06:45:fc:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 21 16:05:30 2026 GMT Not After : Jan 19 17:05:30 2027 GMT Subject: CN=86f355de-7817-4bbb-9f43-ae1fa21918a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fa:53:6f:5c:83:ee:be:82:1f:a3:86:b7:cb: 9a:b1:2b:fd:e0:5c:37:4b:28:76:60:c7:74:84:14: 1d:f2:2b:80:c9:51:cd:12:f3:f3:55:84:db:fd:ae: fb:69:42:fa:24:ea:99:6e:38:e9:66:b5:6b:d9:cf: 9b:e3:d5:e7:42:d1:eb:ed:98:40:4f:f1:0a:61:00: 0f:7e:b2:62:5b:61:c8:3e:e6:09:23:a9:2c:f1:4b: 79:4d:6b:81:65:94:41:8c:41:ab:45:40:0f:63:4f: b3:e7:7b:5e:b6:20:ce:cb:7b:3e:0b:e4:92:24:7c: 91:b9:49:75:c5:21:48:ab:d9:b9:63:dd:20:f2:90: 47:80:b4:fc:b1:b4:94:9e:c6:12:2c:08:da:78:48: 38:b9:92:1c:d9:ad:dd:87:34:06:30:34:98:c8:b4: 64:59:10:11:ad:1b:c4:33:dd:76:50:bd:5f:83:26: 24:2b:28:83:23:5d:2a:3d:96:80:ed:99:74:ea:c8: ad:94:8f:a5:7e:35:ce:a2:fd:03:fb:eb:d4:55:2c: d3:65:de:5d:8b:2f:02:15:e2:16:d3:02:f6:08:97: ca:bb:f3:02:59:d7:91:12:db:09:d5:d4:38:8a:84: 97:ea:22:e9:1b:53:69:0e:22:d1:aa:88:59:5d:07: 4d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:97:DB:74:82:91:0D:04:7A:14:FD:57:41:EC:7A:B8:76:C7:D0:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/89d411ec-6823-30ea-989f-55ce85b086c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.196.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:e9:69:0f:e1:6e:29:f3:ec:fe:24:cc:2e:70:fc:77:b6:71: 45:b8:e6:ec:38:ab:5d:be:15:22:ef:f0:87:0d:21:3c:95:5c: 5a:fe:df:d6:ac:80:23:77:0c:1f:e9:a3:24:ba:6c:fd:4a:8d: ed:0b:e8:91:88:ff:7a:23:6e:28:9d:3f:8f:5f:98:f2:aa:d0: 2a:63:b3:de:8a:42:41:ec:6a:69:51:07:d8:09:d0:d6:7e:2b: f9:f7:18:4a:99:35:79:0f:27:11:c8:a6:70:79:27:53:d8:87: 23:93:d0:9d:3e:75:fb:d4:4c:8e:d5:8e:b8:2b:1f:d6:48:a2: d7:80:0f:93:66:ca:09:45:3d:db:bb:c8:49:4b:19:cf:04:9a: d6:87:c1:f3:bc:66:ac:69:63:cb:ee:76:6a:fa:09:a9:0c:63: 21:fa:91:78:63:ef:67:ff:55:37:b0:50:0d:54:20:31:73:1d: fd:a1:dc:af:50:24:fb:38:7c:2b:05:a9:b0:14:99:a8:85:0f: 6c:f7:79:30:32:7e:48:72:81:84:a5:4e:80:ac:4a:e0:41:4b: 40:f5:4e:3e:e9:17:b8:32:1d:89:9a:5a:6f:30:b6:64:29:fc: 7c:08:85:d5:57:cf:5d:36:72:40:c7:d6:d3:61:e4:59:6c:90: cb:16:7a:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+TyZvChLbHBkX8jgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyMTE2MDUzMFoXDTI3MDExOTE3MDUzMFowLzEtMCsGA1UEAxMk ODZmMzU1ZGUtNzgxNy00YmJiLTlmNDMtYWUxZmEyMTkxOGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPpTb1yD7r6CH6OGt8uasSv94Fw3Syh2YMd0 hBQd8iuAyVHNEvPzVYTb/a77aUL6JOqZbjjpZrVr2c+b49XnQtHr7ZhAT/EKYQAP frJiW2HIPuYJI6ks8Ut5TWuBZZRBjEGrRUAPY0+z53tetiDOy3s+C+SSJHyRuUl1 xSFIq9m5Y90g8pBHgLT8sbSUnsYSLAjaeEg4uZIc2a3dhzQGMDSYyLRkWRARrRvE M912UL1fgyYkKyiDI10qPZaA7Zl06sitlI+lfjXOov0D++vUVSzTZd5diy8CFeIW 0wL2CJfKu/MCWdeREtsJ1dQ4ioSX6iLpG1NpDiLRqohZXQdNbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmX23SCkQ0EehT9V0Hserh2x9A8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODlkNDExZWMtNjgyMy0z MGVhLTk4OWYtNTVjZTg1YjA4NmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJsSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPpaQ/hbinz7P4kzC5w/He2cUW45uw4q12+FSLv8IcNITyVXFr+39as gCN3DB/poyS6bP1Kje0L6JGI/3ojbiidP49fmPKq0Cpjs96KQkHsamlRB9gJ0NZ+ K/n3GEqZNXkPJxHIpnB5J1PYhyOT0J0+dfvUTI7VjrgrH9ZIoteAD5NmyglFPdu7 yElLGc8EmtaHwfO8ZqxpY8vudmr6CakMYyH6kXhj72f/VTewUA1UIDFzHf2h3K9Q JPs4fCsFqbAUmaiFD2z3eTAyfkhygYSlToCsSuBBS0D1Tj7pF7gyHYmaWm8wtmQp /HwIhdVXz102ckDH1tNh5FlskMsWevg= -----END CERTIFICATE-----Generated at Tue Oct 27 16:32:14 2026 by rpki-client