$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8a7f7a84-ddba-3aa7-880f-a84cd2b14aa8.roa File: 8a7f7a84-ddba-3aa7-880f-a84cd2b14aa8.roa (raw, json) Hash identifier: OLhihQkX5HE/EzkKQcpfNFsJ3fPzZt5bLVimVAEsrjI= Subject key identifier: 7B:D0:6C:0F:6A:33:19:1D:11:42:09:CC:7A:C8:0F:55:D3:7B:7D:3B Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F7352DDA432D144B356FD9680 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8a7f7a84-ddba-3aa7-880f-a84cd2b14aa8.roa Signing time: Sat 10 Oct 2026 01:00:13 +0000 ROA not before: Sat 10 Oct 2026 01:00:13 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 203466 IP address blocks: 38.45.18.0/24 maxlen: 24 206.42.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:52:dd:a4:32:d1:44:b3:56:fd:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 10 01:00:13 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=20a8cec3-99f2-482f-abc2-3d69a158ec47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d5:c7:be:ed:36:16:aa:03:cd:7b:05:2a:0c: ca:b5:96:bd:f0:20:7c:08:8b:e7:36:75:86:0c:45: d0:76:99:49:b8:d1:68:20:f0:01:64:d3:19:fa:51: c1:64:a0:78:48:74:72:05:6f:34:bb:0a:26:42:3e: 7e:a0:68:d4:56:31:0a:56:27:68:b7:31:89:4d:ea: 84:79:94:c4:7c:13:70:ed:da:9c:63:0c:cf:25:a6: 7b:79:68:3a:89:01:4e:31:2b:4d:fb:45:df:d3:58: f7:11:97:76:0e:af:91:2d:0c:c9:5b:93:64:1e:9f: f9:ad:03:be:85:03:64:a0:5d:8e:58:6c:93:be:88: a7:69:17:d0:2a:d7:05:e1:c6:23:7a:25:ca:b0:0c: 69:a1:f5:79:2e:76:75:4b:a6:6d:2d:1b:39:22:80: 84:6b:93:06:b7:0a:5b:02:9c:45:83:b6:5f:f4:7e: 42:79:73:d8:6a:4a:c7:00:2d:c1:1e:26:33:f0:18: 72:ec:ae:ea:92:9a:c4:fb:d6:76:b0:e6:14:60:29: d4:41:b7:65:e6:6d:15:c2:01:9d:f1:ba:2c:6d:3c: 29:87:68:62:f6:12:12:3f:fb:f6:d7:2e:33:97:ad: c0:d8:67:af:f2:87:c6:7c:1a:03:0c:5a:df:1e:0f: 1d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D0:6C:0F:6A:33:19:1D:11:42:09:CC:7A:C8:0F:55:D3:7B:7D:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8a7f7a84-ddba-3aa7-880f-a84cd2b14aa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.45.18.0/24 206.42.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:20:8a:07:ab:37:3f:49:e0:63:24:db:b3:d5:0e:f9:e9:3b: d2:c2:4f:5e:02:9d:aa:f0:e1:63:ee:10:b8:7b:d8:17:ad:d4: 6b:41:31:82:c8:2f:bd:c4:90:9f:ee:1a:97:9a:2a:7b:8b:b1: 25:60:22:0e:d7:0e:13:1d:ca:69:9c:84:28:bd:bc:24:44:bf: c1:68:c2:3e:f5:c9:1a:66:55:44:3a:38:0f:8c:d6:52:49:06: 1f:99:a4:0c:71:5b:36:73:73:7c:63:8e:76:56:61:92:4f:20: eb:10:c3:b0:b3:0b:2a:24:84:ed:e1:21:1f:34:b8:49:03:a3: ad:65:c7:1e:e8:61:8e:3a:d2:eb:4a:58:5e:77:8e:23:4e:42: 31:b7:12:8f:6d:73:ec:4c:da:c8:3a:4d:07:8a:54:87:ec:7f: 57:33:b0:b6:18:f1:19:43:e9:9b:17:9b:4b:21:ba:93:4d:17: 87:aa:06:6a:c3:ae:d6:31:92:1f:6b:45:be:bc:a4:55:de:13: 90:76:d3:42:b0:2a:31:ca:4e:d1:8a:b8:f2:b3:94:5c:77:5b: d2:76:6e:60:37:c5:11:69:43:72:5f:ea:b0:39:41:24:ab:b9: c5:73:99:9a:81:d9:05:13:c7:e7:3e:7b:c1:61:ab:91:a0:04: 63:fc:74:85 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9zUt2kMtFEs1b9loAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk MjBhOGNlYzMtOTlmMi00ODJmLWFiYzItM2Q2OWExNThlYzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNXHvu02FqoDzXsFKgzKtZa98CB8CIvnNnWG DEXQdplJuNFoIPABZNMZ+lHBZKB4SHRyBW80uwomQj5+oGjUVjEKVidotzGJTeqE eZTEfBNw7dqcYwzPJaZ7eWg6iQFOMStN+0Xf01j3EZd2Dq+RLQzJW5NkHp/5rQO+ hQNkoF2OWGyTvoinaRfQKtcF4cYjeiXKsAxpofV5LnZ1S6ZtLRs5IoCEa5MGtwpb ApxFg7Zf9H5CeXPYakrHAC3BHiYz8Bhy7K7qkprE+9Z2sOYUYCnUQbdl5m0VwgGd 8bosbTwph2hi9hISP/v21y4zl63A2Gev8ofGfBoDDFrfHg8dVwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHvQbA9qMxkdEUIJzHrID1XTe307MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOGE3ZjdhODQtZGRiYS0z YWE3LTg4MGYtYTg0Y2QyYjE0YWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJi0SAwQA ziptMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGUgigerNz9J4GMk27PVDvnpO9LCT14Cnarw4WPuELh72Bet 1GtBMYLIL73EkJ/uGpeaKnuLsSVgIg7XDhMdymmchCi9vCREv8Fowj71yRpmVUQ6 OA+M1lJJBh+ZpAxxWzZzc3xjjnZWYZJPIOsQw7CzCyokhO3hIR80uEkDo61lxx7o YY460utKWF53jiNOQjG3Eo9tc+xM2sg6TQeKVIfsf1czsLYY8RlD6ZsXm0shupNN F4eqBmrDrtYxkh9rRb68pFXeE5B200KwKjHKTtGKuPKzlFx3W9J2bmA3xRFpQ3Jf 6rA5QSSrucVzmZqB2QUTx+c+e8Fhq5GgBGP8dIU= -----END CERTIFICATE-----Generated at Tue Oct 27 12:19:37 2026 by rpki-client