$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8bf9e516-3556-3db3-9710-effea1eb1175.roa File: 8bf9e516-3556-3db3-9710-effea1eb1175.roa (raw, json) Hash identifier: bqT+ySY1qYxFuNnhxlRFx5qZeIKdj8TyXyJtP+PJwEg= Subject key identifier: 66:3E:A6:1D:3E:17:64:DC:AD:00:F4:B6:8E:2A:26:E5:0D:0D:47:CE Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F92085C4A4ACD79B16EF7CB00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8bf9e516-3556-3db3-9710-effea1eb1175.roa Signing time: Wed 21 Oct 2026 01:00:12 +0000 ROA not before: Wed 21 Oct 2026 01:00:12 +0000 ROA not after: Tue 19 Jan 2027 02:00:12 +0000 asID: 271922 IP address blocks: 38.210.56.0/22 maxlen: 24 38.254.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:92:08:5c:4a:4a:cd:79:b1:6e:f7:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 21 01:00:12 2026 GMT Not After : Jan 19 02:00:12 2027 GMT Subject: CN=daafa7a3-62ba-4203-9197-2b008efe24d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ac:db:74:1e:e9:b6:a1:e2:0f:39:c0:8c:00: 1c:a5:8f:6a:7f:06:09:4a:39:83:bc:80:79:cf:5d: 63:92:ab:bb:5f:b2:4e:ea:04:ee:b5:13:4c:8e:d0: 27:35:e6:29:46:44:38:b1:e6:36:c7:21:36:5d:b5: 6a:d0:92:3f:98:b4:52:6a:bb:34:71:32:ef:7a:9c: 74:64:dd:bc:b6:8b:58:28:0e:67:87:b0:95:12:fa: 36:8d:49:d8:3e:c9:ff:89:5b:d1:b2:c4:2a:5d:2c: 83:92:a3:22:b8:dc:1a:6e:c9:82:08:f7:f9:30:7c: e3:8e:98:6a:f6:0b:84:47:72:dd:db:b1:90:4b:19: e8:66:2e:66:59:10:09:3d:8f:5a:60:a4:3f:07:a5: 5e:19:bb:a0:d6:8a:7d:6e:69:9c:78:9e:ab:1c:98: a4:5b:07:d4:40:fe:af:85:cd:0a:21:82:ae:70:66: d3:22:32:91:ff:f2:24:45:b3:07:78:f0:0f:46:b3: 87:87:77:fc:66:8c:7d:7d:25:dc:ba:6d:19:f4:15: ca:17:90:6d:6e:13:21:c7:9d:6a:1c:62:48:0d:32: e6:ab:6e:4d:e3:c4:18:a2:e8:58:fe:38:94:e4:a6: c0:73:84:dd:34:7d:c5:44:8a:4a:fc:a0:01:ee:b7: 04:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:3E:A6:1D:3E:17:64:DC:AD:00:F4:B6:8E:2A:26:E5:0D:0D:47:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8bf9e516-3556-3db3-9710-effea1eb1175.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.210.56.0/22 38.254.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:21:b0:8f:83:a1:ba:4a:34:e5:4d:57:51:75:13:1c:67:23: 8f:36:03:0b:29:01:e3:c8:69:01:5e:6c:9f:9a:84:85:b3:30: de:89:3f:ed:7b:f6:16:31:7f:42:cd:4e:88:04:34:39:88:c6: 2b:58:b4:a3:24:9f:6a:47:e4:e5:1b:c0:c3:33:84:aa:21:86: 2a:4a:e2:d6:83:b0:59:21:49:5a:ef:8d:c9:86:81:ca:48:66: 3a:46:e1:e8:52:5b:42:78:d8:4b:65:5f:f4:28:28:3c:16:31: e8:7d:fb:54:47:46:bc:35:ed:ce:19:9b:75:40:58:72:2b:20: 51:d2:60:f8:26:b0:75:61:93:46:f8:8c:40:91:0c:97:2f:c9: e1:48:b0:95:6d:9f:e6:11:ec:31:fa:10:27:af:e3:05:d3:00: cf:3f:67:14:53:52:fc:c5:42:6f:8a:5a:db:53:4f:1c:85:47: 21:e1:32:32:dd:2c:9c:54:20:ba:20:c5:7d:3f:0b:7c:17:9f: 13:a2:ae:f4:89:3c:63:2a:0c:d2:20:00:b0:48:20:6c:a4:2f: 00:f7:53:e8:da:e1:08:d3:6f:aa:01:ab:d9:4f:f0:0c:e4:52: bf:ea:0a:36:76:de:65:ed:bf:72:4d:67:59:97:a0:2f:6a:46: 7b:01:99:9b -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE+SCFxKSs15sW73ywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyMTAxMDAxMloXDTI3MDExOTAyMDAxMlowLzEtMCsGA1UEAxMk ZGFhZmE3YTMtNjJiYS00MjAzLTkxOTctMmIwMDhlZmUyNGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqzbdB7ptqHiDznAjAAcpY9qfwYJSjmDvIB5 z11jkqu7X7JO6gTutRNMjtAnNeYpRkQ4seY2xyE2XbVq0JI/mLRSars0cTLvepx0 ZN28totYKA5nh7CVEvo2jUnYPsn/iVvRssQqXSyDkqMiuNwabsmCCPf5MHzjjphq 9guER3Ld27GQSxnoZi5mWRAJPY9aYKQ/B6VeGbug1op9bmmceJ6rHJikWwfUQP6v hc0KIYKucGbTIjKR//IkRbMHePAPRrOHh3f8Zox9fSXcum0Z9BXKF5BtbhMhx51q HGJIDTLmq25N48QYouhY/jiU5KbAc4TdNH3FRIpK/KAB7rcEuQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGY+ph0+F2TcrQD0to4qJuUNDUfOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOGJmOWU1MTYtMzU1Ni0z ZGIzLTk3MTAtZWZmZWExZWIxMTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCJtI4AwQC Jv50MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABMhsI+DobpKNOVNV1F1ExxnI482AwspAePIaQFebJ+ahIWz MN6JP+179hYxf0LNTogENDmIxitYtKMkn2pH5OUbwMMzhKohhipK4taDsFkhSVrv jcmGgcpIZjpG4ehSW0J42EtlX/QoKDwWMeh9+1RHRrw17c4Zm3VAWHIrIFHSYPgm sHVhk0b4jECRDJcvyeFIsJVtn+YR7DH6ECev4wXTAM8/ZxRTUvzFQm+KWttTTxyF RyHhMjLdLJxUILogxX0/C3wXnxOirvSJPGMqDNIgALBIIGykLwD3U+ja4QjTb6oB q9lP8AzkUr/qCjZ23mXtv3JNZ1mXoC9qRnsBmZs= -----END CERTIFICATE-----Generated at Tue Oct 27 15:02:07 2026 by rpki-client