$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8b252f2a-93fb-3643-98e6-e0207719a27e.roa File: 8b252f2a-93fb-3643-98e6-e0207719a27e.roa (raw, json) Hash identifier: no3XFswG8xpzG9xJiiToJ0c0vR6SBNbtwXteiH///os= Subject key identifier: B1:F2:B4:D5:C2:CF:76:8D:1A:E0:9C:F0:DD:91:70:F5:70:35:85:19 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F8412E29A11D851CBF17B9D80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8b252f2a-93fb-3643-98e6-e0207719a27e.roa Signing time: Fri 16 Oct 2026 01:00:12 +0000 ROA not before: Fri 16 Oct 2026 01:00:12 +0000 ROA not after: Thu 14 Jan 2027 02:00:12 +0000 asID: 265551 IP address blocks: 38.19.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:84:12:e2:9a:11:d8:51:cb:f1:7b:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 16 01:00:12 2026 GMT Not After : Jan 14 02:00:12 2027 GMT Subject: CN=f5f0927e-1726-40b9-9181-c9adbef43894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:51:ee:66:5a:b2:de:8d:e9:44:a0:fc:2a:7b: 73:fc:ad:e5:d6:84:da:7c:8f:cf:67:05:0d:cd:ff: 94:5f:f6:df:c9:ac:cf:e9:34:bd:13:a5:64:5c:1c: 30:f0:ff:67:cc:ef:d6:67:27:65:67:3b:67:4c:cd: ca:98:30:5f:e7:1b:0d:23:46:97:ea:77:3d:af:88: e7:d3:62:f6:a3:35:03:25:59:52:23:a7:03:9f:3f: 92:38:2d:58:03:20:72:09:3a:d4:67:1b:fa:89:95: fe:ed:53:03:9a:8f:4d:a8:71:2d:76:3e:29:06:2b: e2:a9:2a:e2:18:bb:db:35:22:3f:51:7c:fd:12:f1: 59:ba:38:3c:41:58:7b:67:98:8f:a6:36:f4:99:f5: 75:13:6d:1a:a8:15:cc:19:82:cc:57:31:69:8c:cc: d8:70:03:ea:07:56:87:2c:4d:75:72:b3:8a:61:8e: ce:0a:aa:fd:28:cd:41:d6:ac:e0:94:93:70:57:1d: a3:ad:01:f1:ea:5e:16:8b:5c:dc:cd:56:36:9e:2d: 31:ab:f8:8c:04:c8:82:90:06:2c:f5:7c:ea:36:5d: 0e:bf:3d:74:c1:a2:32:00:08:40:e3:fb:fe:b4:d9: 4d:17:a5:26:c2:36:92:09:86:c4:ed:a8:a1:4f:44: 38:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F2:B4:D5:C2:CF:76:8D:1A:E0:9C:F0:DD:91:70:F5:70:35:85:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8b252f2a-93fb-3643-98e6-e0207719a27e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.19.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:85:1b:50:a4:22:fc:27:d8:98:6d:ca:8d:27:9b:0f:75:bd: af:44:ab:e2:66:83:ca:8b:e2:a6:0c:f6:4d:ed:16:e8:4b:71: 60:ce:f2:4e:d6:a7:c4:e5:2f:c9:15:87:ff:ef:72:35:f8:ba: 23:c0:04:32:ef:69:48:16:f6:5e:f5:5d:e6:48:21:f6:fe:cf: a6:b0:35:da:29:63:c6:18:c4:fc:2b:bc:e0:d9:79:8c:d7:bc: ee:b2:ab:5b:15:cd:c1:64:c5:26:fa:ec:9d:82:c4:a6:7d:7d: b3:da:44:00:2b:17:c1:a2:94:52:71:24:aa:84:03:c4:2d:23: 77:85:33:c1:c1:20:24:22:11:c5:7e:77:6a:c6:8f:4d:02:27: f9:58:44:a1:fa:d5:5a:7c:20:e9:90:86:30:a1:ca:8b:89:ca: f4:f8:4f:75:16:aa:90:2e:8b:1d:99:5e:7a:6f:7a:50:e8:65: fa:98:bf:d1:6e:fb:f7:45:0a:66:af:aa:f4:7d:1f:5a:0d:31: a1:8a:0b:5f:22:0f:ba:e4:93:25:b4:fe:06:bd:d9:d6:24:46: 3e:4c:5d:58:30:fd:f1:72:33:75:ac:28:d7:96:7c:95:ee:d6: 01:92:74:b3:56:e0:28:c6:cf:42:88:c5:16:59:bb:9f:1e:f4: 29:2d:9b:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+EEuKaEdhRy/F7nYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxNjAxMDAxMloXDTI3MDExNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjVmMDkyN2UtMTcyNi00MGI5LTkxODEtYzlhZGJlZjQzODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVHuZlqy3o3pRKD8Kntz/K3l1oTafI/PZwUN zf+UX/bfyazP6TS9E6VkXBww8P9nzO/WZydlZztnTM3KmDBf5xsNI0aX6nc9r4jn 02L2ozUDJVlSI6cDnz+SOC1YAyByCTrUZxv6iZX+7VMDmo9NqHEtdj4pBiviqSri GLvbNSI/UXz9EvFZujg8QVh7Z5iPpjb0mfV1E20aqBXMGYLMVzFpjMzYcAPqB1aH LE11crOKYY7OCqr9KM1B1qzglJNwVx2jrQHx6l4Wi1zczVY2ni0xq/iMBMiCkAYs 9XzqNl0Ovz10waIyAAhA4/v+tNlNF6UmwjaSCYbE7aihT0Q4yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHytNXCz3aNGuCc8N2RcPVwNYUZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOGIyNTJmMmEtOTNmYi0z NjQzLTk4ZTYtZTAyMDc3MTlhMjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJhM8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL2FG1CkIvwn2Jhtyo0nmw91va9Eq+Jmg8qL4qYM9k3tFuhLcWDO8k7W p8TlL8kVh//vcjX4uiPABDLvaUgW9l71XeZIIfb+z6awNdopY8YYxPwrvODZeYzX vO6yq1sVzcFkxSb67J2CxKZ9fbPaRAArF8GilFJxJKqEA8QtI3eFM8HBICQiEcV+ d2rGj00CJ/lYRKH61Vp8IOmQhjChyouJyvT4T3UWqpAuix2ZXnpvelDoZfqYv9Fu +/dFCmavqvR9H1oNMaGKC18iD7rkkyW0/ga92dYkRj5MXVgw/fFyM3WsKNeWfJXu 1gGSdLNW4CjGz0KIxRZZu58e9Cktm90= -----END CERTIFICATE-----Generated at Tue Oct 27 22:47:52 2026 by rpki-client