$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8bb90ca3-2fc1-3d88-9dc4-cf4f3e9f8c06.roa File: 8bb90ca3-2fc1-3d88-9dc4-cf4f3e9f8c06.roa (raw, json) Hash identifier: GgKENGgpmeuNgelT8C0x4Y8Bwo/ucwfY4PjhWV0mjs0= Subject key identifier: 83:B5:95:EC:11:88:E6:A1:C5:59:75:E4:84:86:AA:E4:6B:7E:4E:51 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F698D6471D7223BD373381880 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8bb90ca3-2fc1-3d88-9dc4-cf4f3e9f8c06.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 153789 IP address blocks: 38.135.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:64:71:d7:22:3b:d3:73:38:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=dc0251e7-e70c-46d0-8be9-44726a6b44a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:39:f0:be:53:c0:3c:17:5c:62:ad:db:4b:bd: 16:eb:c7:3b:f6:ae:26:16:0f:3b:2f:3d:95:ff:71: 13:6e:14:60:2c:74:9a:8c:c7:1a:b3:84:c2:6f:ad: 69:ed:7e:e4:15:58:ee:5c:db:af:f7:4b:1b:38:ee: 49:b4:f4:db:3e:74:3f:e1:63:2e:a5:d9:3e:6f:24: f0:58:b0:0d:5d:34:6a:ae:15:22:b5:0f:aa:de:9f: 7e:46:75:29:01:68:56:6d:de:f1:5b:63:ec:55:15: 3c:4d:24:b1:82:30:49:b0:b1:06:19:46:7a:7d:8d: 81:ad:09:09:16:4e:b1:2e:a1:3e:8e:98:bc:16:73: b0:58:e7:18:7d:9e:7b:31:a2:75:a1:77:3e:14:23: d6:a3:02:87:91:e0:e9:4b:6f:ea:e6:bc:f1:56:8f: b8:9f:45:fe:ff:ce:a9:f7:a0:92:ef:23:61:4c:b3: 86:71:50:85:2c:39:e0:df:87:0a:6a:57:f2:1e:3e: 0d:f9:7a:3f:35:a9:16:1a:c2:16:8a:3b:ca:4a:c1: 00:f6:ac:fe:29:be:9f:b8:5b:14:8e:f1:0c:8f:90: e6:41:8f:c3:2d:4d:dd:02:c3:20:2c:8d:ee:ed:bb: 69:32:50:77:0f:1a:75:3c:11:3f:d6:39:19:aa:de: 32:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B5:95:EC:11:88:E6:A1:C5:59:75:E4:84:86:AA:E4:6B:7E:4E:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8bb90ca3-2fc1-3d88-9dc4-cf4f3e9f8c06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.135.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:a7:b6:85:d7:f8:0c:c4:78:0d:ee:fa:bc:4f:73:10:cc:d3: 1d:1c:f2:24:ae:3b:1d:21:62:fe:e4:c2:8d:2d:13:f6:a3:cf: 87:7c:88:78:7f:5d:7f:fb:d3:07:1a:bb:51:8b:6a:c3:a7:42: d7:d7:17:03:bc:f5:3f:08:ee:56:3f:9a:4b:ce:a1:06:cb:25: 42:03:0f:73:43:e7:e1:b5:70:a8:24:cd:55:4e:21:ec:5b:aa: ca:62:e2:f5:49:c2:fc:81:12:ed:ca:1c:95:be:46:80:48:08: aa:af:7b:a3:29:5e:b0:23:0c:41:08:6f:10:30:fb:33:ee:9a: c6:9d:b9:4c:e8:08:63:f1:63:ec:71:e8:65:f7:59:f7:35:2a: 7d:24:b6:b3:50:a3:9e:3b:86:02:ee:5e:c0:d0:c8:bb:c6:fe: fe:91:06:d4:52:9e:96:12:6d:20:dd:72:87:90:41:c6:5d:15: 13:47:b6:c7:18:87:da:41:1e:12:e1:8e:03:0a:93:57:5c:c7: ed:02:56:74:a6:52:81:05:56:19:83:d8:a3:4c:b4:af:a5:87: 63:11:70:6b:4b:b3:d9:65:7c:02:bd:66:4d:c8:84:12:01:0d: f2:8d:1c:a7:52:31:f8:4c:48:e6:71:47:48:4d:0d:41:8b:9b: dc:e7:38:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjWRx1yI703M4GIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk ZGMwMjUxZTctZTcwYy00NmQwLThiZTktNDQ3MjZhNmI0NGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDnwvlPAPBdcYq3bS70W68c79q4mFg87Lz2V /3ETbhRgLHSajMcas4TCb61p7X7kFVjuXNuv90sbOO5JtPTbPnQ/4WMupdk+byTw WLANXTRqrhUitQ+q3p9+RnUpAWhWbd7xW2PsVRU8TSSxgjBJsLEGGUZ6fY2BrQkJ Fk6xLqE+jpi8FnOwWOcYfZ57MaJ1oXc+FCPWowKHkeDpS2/q5rzxVo+4n0X+/86p 96CS7yNhTLOGcVCFLDng34cKalfyHj4N+Xo/NakWGsIWijvKSsEA9qz+Kb6fuFsU jvEMj5DmQY/DLU3dAsMgLI3u7btpMlB3Dxp1PBE/1jkZqt4ypwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIO1lewRiOahxVl15ISGquRrfk5RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOGJiOTBjYTMtMmZjMS0z ZDg4LTlkYzQtY2Y0ZjNlOWY4YzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJoeXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6ntoXX+AzEeA3u+rxPcxDM0x0c8iSuOx0hYv7kwo0tE/ajz4d8iHh/ XX/70wcau1GLasOnQtfXFwO89T8I7lY/mkvOoQbLJUIDD3ND5+G1cKgkzVVOIexb qspi4vVJwvyBEu3KHJW+RoBICKqve6MpXrAjDEEIbxAw+zPumsaduUzoCGPxY+xx 6GX3Wfc1Kn0ktrNQo547hgLuXsDQyLvG/v6RBtRSnpYSbSDdcoeQQcZdFRNHtscY h9pBHhLhjgMKk1dcx+0CVnSmUoEFVhmD2KNMtK+lh2MRcGtLs9llfAK9Zk3IhBIB DfKNHKdSMfhMSOZxR0hNDUGLm9znODI= -----END CERTIFICATE-----Generated at Mon Oct 19 02:28:46 2026 by rpki-client