$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/89e1d647-4f39-3d6e-b984-fb53b9130c75.roa File: 89e1d647-4f39-3d6e-b984-fb53b9130c75.roa (raw, json) Hash identifier: r58F7UWrCGiZviIcu4qpAgP2UXNwksEbVyk8ujEEHFw= Subject key identifier: 1B:D6:FE:EC:22:68:17:A5:B5:10:92:1B:79:87:B7:EA:E9:7A:ED:F4 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F536D90898F3ADE02437C4560 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/89e1d647-4f39-3d6e-b984-fb53b9130c75.roa Signing time: Mon 28 Sep 2026 14:48:18 +0000 ROA not before: Mon 28 Sep 2026 14:48:18 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 401706 IP address blocks: 38.57.220.0/24 maxlen: 24 38.159.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:6d:90:89:8f:3a:de:02:43:7c:45:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 28 14:48:18 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ea29a2d4-4bb3-4c85-be14-c4254823991c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:04:9a:3a:4b:c0:af:c7:ca:d1:b3:e2:a6:2e: 04:3a:17:3a:be:17:b6:19:0b:6f:4d:46:1d:e7:96: 0d:06:ad:91:67:79:8e:b0:79:20:27:61:75:58:76: 0a:ed:8d:b8:40:bc:16:de:cc:12:c8:79:8e:5c:90: e0:ab:42:89:15:48:93:0b:86:fe:8e:aa:7e:2f:b7: ca:1a:bd:f7:0a:09:bd:61:96:24:d0:fe:44:09:2e: c2:78:77:81:c5:de:15:97:36:c3:4f:b3:4f:e5:91: 6b:11:36:5b:83:be:ee:d7:a6:dc:93:a8:91:9d:b2: 34:9a:b0:21:2d:bd:c0:75:e1:79:62:01:4b:41:a1: bc:0c:a8:13:34:a6:44:08:0d:a7:b6:ec:f3:2e:87: 32:45:f8:12:e0:50:06:ec:36:e2:73:bc:9b:0f:3f: 8a:44:e4:66:8e:35:28:ad:89:bd:5a:1a:ab:e4:03: 0b:bf:a7:28:ed:c8:d4:d4:3b:c2:b0:4c:58:ab:24: 50:fc:37:58:a0:0d:7d:f5:ad:19:e1:fd:f5:ae:22: c3:30:d2:32:5a:72:96:08:33:e9:c3:a9:43:67:82: d3:3c:62:e1:6a:53:d0:27:ac:e6:97:25:5f:9e:11: 92:da:16:17:2d:f3:43:27:99:a2:6b:22:5e:f6:a0: 48:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D6:FE:EC:22:68:17:A5:B5:10:92:1B:79:87:B7:EA:E9:7A:ED:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/89e1d647-4f39-3d6e-b984-fb53b9130c75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.57.220.0/24 38.159.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:00:ea:8e:39:23:a4:a8:f8:37:85:db:95:9d:55:a7:85:52: 4f:c7:c0:20:78:d7:04:bc:5f:84:a9:b3:f3:7e:0a:87:60:92: 4e:cc:87:79:3e:fe:ed:f1:62:09:1c:c8:e7:d7:a2:33:33:7f: b6:7c:1b:5a:ca:29:99:4e:9a:51:7d:9c:e7:b4:19:c1:23:71: 2f:17:d4:e6:bf:65:1f:37:3f:7a:a1:34:b9:7c:f0:b3:ac:a7: 3a:0e:ce:8e:87:26:60:93:9a:21:a7:4f:20:31:3d:63:1c:a6: 34:f1:b7:b9:bb:23:75:83:57:99:c1:a8:dc:24:ce:30:19:7f: 25:7a:93:ac:de:af:36:3d:72:22:5e:61:23:4f:61:56:50:f8: 14:1d:98:10:af:12:f0:5a:15:0b:37:17:b2:0b:8f:29:da:0f: d2:7e:0a:bb:71:17:3c:1f:51:73:db:70:3e:47:b9:24:62:4d: 6d:9a:a6:e9:76:2c:38:d1:e5:e4:10:61:4e:57:e5:ac:28:88: e0:d9:16:41:04:6a:e1:c2:75:9c:03:c7:db:7c:0c:70:6c:3f: 4b:e6:50:48:b3:0f:fc:51:6b:28:be:1a:40:0e:d1:f4:58:5f: ac:41:f1:a9:0d:8c:8d:55:15:91:6c:05:fe:81:26:fd:b9:21: b2:1c:60:8a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9TbZCJjzreAkN8RWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyODE0NDgxOFoXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWEyOWEyZDQtNGJiMy00Yzg1LWJlMTQtYzQyNTQ4MjM5OTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgASaOkvAr8fK0bPipi4EOhc6vhe2GQtvTUYd 55YNBq2RZ3mOsHkgJ2F1WHYK7Y24QLwW3swSyHmOXJDgq0KJFUiTC4b+jqp+L7fK Gr33Cgm9YZYk0P5ECS7CeHeBxd4VlzbDT7NP5ZFrETZbg77u16bck6iRnbI0mrAh Lb3AdeF5YgFLQaG8DKgTNKZECA2ntuzzLocyRfgS4FAG7Dbic7ybDz+KRORmjjUo rYm9Whqr5AMLv6co7cjU1DvCsExYqyRQ/DdYoA199a0Z4f31riLDMNIyWnKWCDPp w6lDZ4LTPGLhalPQJ6zmlyVfnhGS2hYXLfNDJ5miayJe9qBIxQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBvW/uwiaBeltRCSG3mHt+rpeu30MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODllMWQ2NDctNGYzOS0z ZDZlLWI5ODQtZmI1M2I5MTMwYzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJjncAwQA Jp9xMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFcA6o45I6So+DeF25WdVaeFUk/HwCB41wS8X4Sps/N+Codg kk7Mh3k+/u3xYgkcyOfXojMzf7Z8G1rKKZlOmlF9nOe0GcEjcS8X1Oa/ZR83P3qh NLl88LOspzoOzo6HJmCTmiGnTyAxPWMcpjTxt7m7I3WDV5nBqNwkzjAZfyV6k6ze rzY9ciJeYSNPYVZQ+BQdmBCvEvBaFQs3F7ILjynaD9J+CrtxFzwfUXPbcD5HuSRi TW2apul2LDjR5eQQYU5X5awoiODZFkEEauHCdZwDx9t8DHBsP0vmUEizD/xRayi+ GkAO0fRYX6xB8akNjI1VFZFsBf6BJv25IbIcYIo= -----END CERTIFICATE-----Generated at Tue Oct 27 20:33:51 2026 by rpki-client