$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8ac24166-0dcf-3a23-b1be-6db8512c0788.roa File: 8ac24166-0dcf-3a23-b1be-6db8512c0788.roa (raw, json) Hash identifier: FxF57P+kJ4otFDi8RHGS5pKrYL+fhHwZq7jG3J4I38U= Subject key identifier: DB:53:01:80:0C:8E:B1:F1:E8:FF:01:96:E9:A1:BE:AD:1B:64:3D:2A Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F85785154ACE91024D21AA700 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8ac24166-0dcf-3a23-b1be-6db8512c0788.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 273874 IP address blocks: 38.70.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:51:54:ac:e9:10:24:d2:1a:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=21c53ba8-1d1d-438d-897a-bceac68be2f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f4:3f:a6:be:70:ba:1e:9f:a0:a2:c3:76:94: 85:f9:8c:70:33:d7:b1:2c:6f:57:8e:b1:61:7c:04: d5:e3:b5:f4:7d:94:ee:de:ec:e0:aa:ba:c7:da:35: b4:fe:44:b6:36:a1:a1:ef:75:dc:a0:16:45:dc:8c: 12:a5:cf:a3:32:1f:73:41:6c:2a:b1:07:e8:63:63: 8e:b0:6c:49:7c:d6:3d:0d:e5:ea:e9:df:2a:36:64: 30:2b:f5:29:6e:79:8f:49:60:81:67:82:25:5a:94: 19:e0:3b:2f:1f:db:65:34:09:d9:ab:15:fb:f8:70: 89:ee:57:df:6a:b0:a7:1b:42:a6:d7:04:c9:19:09: 34:e9:12:9b:a4:5e:d0:8d:33:cf:d0:1b:c5:99:df: ff:6e:3b:cb:d2:9c:c6:a1:c5:11:b8:9c:fb:ae:50: 32:0e:bf:c7:dd:5f:91:42:f6:2a:b7:34:bf:81:3f: b8:19:bd:68:3a:7b:9e:b5:13:4a:90:d3:01:7c:04: 74:17:b6:1e:e9:a4:79:d9:ea:bc:d8:49:f7:f7:7a: 2d:7a:d8:b9:ce:aa:06:bc:f6:76:1e:db:77:87:3b: 6d:7d:31:8a:1f:2f:38:33:00:69:61:6e:89:ac:0a: f4:31:b9:d7:af:bb:99:bb:a8:eb:7b:55:20:73:4d: f0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:53:01:80:0C:8E:B1:F1:E8:FF:01:96:E9:A1:BE:AD:1B:64:3D:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8ac24166-0dcf-3a23-b1be-6db8512c0788.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.70.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:2c:6d:3c:97:52:21:92:08:b2:25:43:b4:1e:2c:bf:b0:11: ad:ab:d2:6d:b2:61:87:32:9a:df:2e:50:88:8e:2e:e6:36:47: 65:c2:23:12:e6:06:f4:b8:77:ac:5c:72:00:85:d0:b4:49:2c: f7:d3:e8:80:e2:be:f9:02:ac:6a:19:0c:12:e0:79:cb:40:89: 64:55:7b:c6:a4:16:d8:3c:fe:ec:98:0d:c3:66:ca:59:dd:5e: 7f:96:e2:27:74:6a:50:c5:27:84:da:d5:57:a8:7a:9f:0a:57: e1:cf:03:6e:73:0b:3f:91:9d:dc:4c:09:32:fe:88:ad:aa:68: eb:02:77:2e:93:5a:eb:e1:a4:f9:67:0d:f6:7e:9e:3a:75:39: 20:96:bb:6c:e0:c0:02:79:06:29:16:4f:8f:2f:1c:78:af:ff: c0:9b:d8:77:a4:17:d0:77:08:e2:4e:08:2b:44:ba:05:2d:3e: 98:6f:29:3a:c1:f5:0b:cf:36:bf:a4:0f:7f:b8:4e:e1:cf:ef: c4:b6:6b:27:7c:8b:44:1b:b5:e7:e0:69:60:9d:3f:0d:2a:6d: 2c:c7:3f:ad:21:75:9f:85:99:44:06:2e:40:81:10:e5:8a:bf: ae:a1:da:20:aa:15:2d:04:af:82:3d:0b:a9:06:da:26:8c:52: 0a:9c:0f:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeFFUrOkQJNIapwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk MjFjNTNiYTgtMWQxZC00MzhkLTg5N2EtYmNlYWM2OGJlMmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/Q/pr5wuh6foKLDdpSF+YxwM9exLG9XjrFh fATV47X0fZTu3uzgqrrH2jW0/kS2NqGh73XcoBZF3IwSpc+jMh9zQWwqsQfoY2OO sGxJfNY9DeXq6d8qNmQwK/UpbnmPSWCBZ4IlWpQZ4DsvH9tlNAnZqxX7+HCJ7lff arCnG0Km1wTJGQk06RKbpF7QjTPP0BvFmd//bjvL0pzGocURuJz7rlAyDr/H3V+R QvYqtzS/gT+4Gb1oOnuetRNKkNMBfAR0F7Ye6aR52eq82En393oteti5zqoGvPZ2 Htt3hzttfTGKHy84MwBpYW6JrAr0MbnXr7uZu6jre1Ugc03wQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtTAYAMjrHx6P8Blumhvq0bZD0qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOGFjMjQxNjYtMGRjZi0z YTIzLWIxYmUtNmRiODUxMmMwNzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJkYcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL4sbTyXUiGSCLIlQ7QeLL+wEa2r0m2yYYcymt8uUIiOLuY2R2XCIxLm BvS4d6xccgCF0LRJLPfT6IDivvkCrGoZDBLgectAiWRVe8akFtg8/uyYDcNmylnd Xn+W4id0alDFJ4Ta1Veoep8KV+HPA25zCz+RndxMCTL+iK2qaOsCdy6TWuvhpPln DfZ+njp1OSCWu2zgwAJ5BikWT48vHHiv/8Cb2HekF9B3COJOCCtEugUtPphvKTrB 9QvPNr+kD3+4TuHP78S2ayd8i0QbtefgaWCdPw0qbSzHP60hdZ+FmUQGLkCBEOWK v66h2iCqFS0Er4I9C6kG2iaMUgqcDyA= -----END CERTIFICATE-----Generated at Tue Oct 27 22:51:33 2026 by rpki-client