$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8bd22023-f706-366f-ba7e-9fa8a7c46ef1.roa File: 8bd22023-f706-366f-ba7e-9fa8a7c46ef1.roa (raw, json) Hash identifier: wKOKnt50Pdg1i4kJswhwa9mhxXI7zVyEmm15O8qswuo= Subject key identifier: CB:73:3A:04:27:06:6C:A5:12:C2:67:17:E9:BE:51:5A:EB:38:1E:21 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F4972D1F16B99987BEDC91F00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8bd22023-f706-366f-ba7e-9fa8a7c46ef1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 0 IP address blocks: 38.58.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:d1:f1:6b:99:98:7b:ed:c9:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=00cca7cf-5e9d-4716-babb-9cab6b74bf5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e7:5c:76:38:fc:40:84:9f:1d:b3:a2:b1:7a: 61:b2:33:a9:81:de:1c:6e:54:e5:47:75:34:00:f7: a8:67:1e:ee:6d:8a:64:87:96:31:61:21:57:73:a7: 44:c8:e6:09:44:db:51:d2:2c:ed:17:fa:d4:9c:f2: 92:55:21:e1:00:72:46:2f:ac:9f:e6:30:90:3f:7d: ea:69:85:02:01:e3:b3:5a:07:19:fb:1a:47:65:42: d6:cb:30:08:9d:8e:87:2b:a8:94:2c:c7:2f:c8:e8: f9:be:69:05:bc:41:cf:c4:b1:e3:dd:a1:a9:fb:67: 9a:8c:5e:f9:ad:dc:59:50:79:4a:70:54:02:90:79: 2d:e6:09:9f:cb:22:38:11:04:59:04:8d:9c:35:8a: 6b:63:27:0d:6d:0a:50:10:de:f3:83:44:39:3e:80: c7:e2:ec:37:6a:3a:ba:5a:32:46:4b:86:47:0c:8a: dd:aa:8f:a1:00:03:52:87:d2:b8:88:87:da:de:c0: 73:21:c0:cf:61:9d:58:d4:aa:f1:2b:d7:88:3f:a9: b1:40:1b:16:1d:45:90:8b:c4:ab:3f:4d:ab:84:ae: 05:7a:83:6a:c3:c4:0e:ff:ea:61:a4:43:24:26:d2: b3:7f:af:76:15:f4:2a:ae:89:23:60:a1:71:54:f9: 7c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:73:3A:04:27:06:6C:A5:12:C2:67:17:E9:BE:51:5A:EB:38:1E:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8bd22023-f706-366f-ba7e-9fa8a7c46ef1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.58.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:95:a0:67:0d:ea:35:1d:b7:75:83:14:b8:0d:16:1d:fc:cb: 23:82:67:53:7f:a1:1c:9c:12:31:62:9b:e2:ff:de:2f:40:81: 90:d9:76:33:a2:30:0e:14:cf:cf:af:1e:c5:61:80:ed:0b:59: 77:fe:70:52:4a:e3:29:f0:69:65:2a:76:8f:1b:3e:bb:a7:a7: 4c:03:a6:9a:53:8c:d0:0e:fa:4d:ee:e8:55:f3:4e:a4:cc:e1: 82:6d:6f:d5:64:99:48:72:03:39:4b:96:f8:33:13:6b:9b:c6: 23:75:27:37:e6:a1:6e:7f:5c:d8:b4:ec:ba:36:b5:62:ec:db: 25:0e:2a:74:8d:41:f1:fa:de:80:ec:0d:c8:cf:a8:23:13:e8: 5d:8a:aa:d6:e1:0e:df:6d:f3:b3:a8:c5:ed:8f:9a:47:52:97: 88:7f:64:78:16:28:4d:10:06:c6:77:b7:66:4d:7c:8f:2f:1f: ff:48:a0:d9:8f:8a:eb:93:07:ba:ba:83:b5:71:e0:d1:a4:46: 78:4e:01:d1:15:63:1b:09:0d:db:3a:2a:0a:49:3b:36:ee:c9: 9a:27:92:41:7d:71:f1:75:ff:20:54:ff:10:6d:40:7c:71:05: 5b:97:ba:70:cf:d3:35:44:9a:02:60:a2:39:81:78:10:e2:07: 12:00:f6:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JctHxa5mYe+3JHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDBjY2E3Y2YtNWU5ZC00NzE2LWJhYmItOWNhYjZiNzRiZjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsudcdjj8QISfHbOisXphsjOpgd4cblTlR3U0 APeoZx7ubYpkh5YxYSFXc6dEyOYJRNtR0iztF/rUnPKSVSHhAHJGL6yf5jCQP33q aYUCAeOzWgcZ+xpHZULWyzAInY6HK6iULMcvyOj5vmkFvEHPxLHj3aGp+2eajF75 rdxZUHlKcFQCkHkt5gmfyyI4EQRZBI2cNYprYycNbQpQEN7zg0Q5PoDH4uw3ajq6 WjJGS4ZHDIrdqo+hAANSh9K4iIfa3sBzIcDPYZ1Y1KrxK9eIP6mxQBsWHUWQi8Sr P02rhK4FeoNqw8QO/+phpEMkJtKzf692FfQqrokjYKFxVPl80wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtzOgQnBmylEsJnF+m+UVrrOB4hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOGJkMjIwMjMtZjcwNi0z NjZmLWJhN2UtOWZhOGE3YzQ2ZWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJjrqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKVoGcN6jUdt3WDFLgNFh38yyOCZ1N/oRycEjFim+L/3i9AgZDZdjOi MA4Uz8+vHsVhgO0LWXf+cFJK4ynwaWUqdo8bPrunp0wDpppTjNAO+k3u6FXzTqTM 4YJtb9VkmUhyAzlLlvgzE2ubxiN1JzfmoW5/XNi07Lo2tWLs2yUOKnSNQfH63oDs DcjPqCMT6F2KqtbhDt9t87Ooxe2PmkdSl4h/ZHgWKE0QBsZ3t2ZNfI8vH/9IoNmP iuuTB7q6g7Vx4NGkRnhOAdEVYxsJDds6KgpJOzbuyZonkkF9cfF1/yBU/xBtQHxx BVuXunDP0zVEmgJgojmBeBDiBxIA9os= -----END CERTIFICATE-----Generated at Tue Oct 27 20:37:27 2026 by rpki-client