$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8c8c317f-34e2-3e2b-9b72-69d056d2e620.roa File: 8c8c317f-34e2-3e2b-9b72-69d056d2e620.roa (raw, json) Hash identifier: 6chbzDBjnllSndCRqEgkekYFqz/4ViJaDroceaJgH/4= Subject key identifier: CA:66:08:52:D9:59:4B:DF:AA:88:06:C9:16:55:0E:44:DD:30:85:03 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F5CFD5724AA6AABE3C47FE9C0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8c8c317f-34e2-3e2b-9b72-69d056d2e620.roa Signing time: Fri 02 Oct 2026 01:00:12 +0000 ROA not before: Fri 02 Oct 2026 01:00:12 +0000 ROA not after: Thu 31 Dec 2026 02:00:12 +0000 asID: 274192 IP address blocks: 38.76.68.0/24 maxlen: 24 38.111.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5c:fd:57:24:aa:6a:ab:e3:c4:7f:e9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 2 01:00:12 2026 GMT Not After : Dec 31 02:00:12 2026 GMT Subject: CN=d3093364-fb20-4427-8b14-6d6adbc9ba6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:43:d1:81:e9:ff:29:6a:e8:7d:c5:24:73:6a: 55:15:c3:09:b2:a3:3a:f7:cf:5d:83:a9:ba:2f:fc: 16:12:ab:09:17:10:8d:30:3b:7a:22:aa:a2:d9:68: ef:98:fc:29:8f:ae:2a:82:c3:22:92:2f:da:03:a5: ac:fc:9e:66:cd:8f:ac:88:a5:5c:23:62:93:4c:07: cf:48:fc:84:df:d1:5d:7d:a7:24:6d:7f:df:26:a8: 66:24:9a:f9:cf:63:b4:2a:0f:6a:08:3c:a0:6b:c2: 56:23:01:db:a2:fa:56:1a:53:aa:19:4c:59:c0:7d: 59:ef:7d:c8:cb:f4:84:c1:ac:bc:c8:4d:84:4a:1a: 7a:a9:d4:79:3a:3b:d1:b9:b6:5e:1d:fd:e2:57:45: bf:90:16:c0:64:4d:9c:7d:95:af:fd:01:5f:28:d0: a6:9e:1c:33:0e:f8:e4:f7:e7:e5:2d:93:c6:c0:e2: b1:77:92:8b:0e:c9:01:fc:1e:cb:8b:ea:ea:17:d3: 6f:1d:23:6f:c2:94:26:34:77:4b:e9:70:e4:d6:25: c0:21:41:65:0c:c8:35:b2:2f:b1:05:88:31:95:50: af:1f:d8:20:6c:5c:29:37:48:4e:2a:b4:10:09:31: 92:0a:24:08:92:3c:58:40:6f:5c:de:8a:cf:18:da: 0f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:66:08:52:D9:59:4B:DF:AA:88:06:C9:16:55:0E:44:DD:30:85:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8c8c317f-34e2-3e2b-9b72-69d056d2e620.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.76.68.0/24 38.111.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:1a:74:db:df:f6:24:69:a5:9f:19:16:d3:b8:c7:45:52:82: 51:bd:82:a0:45:3a:dc:82:53:85:c0:9a:f4:24:d3:cf:a2:e7: f2:b5:7e:d1:b7:84:69:17:14:a8:2a:6b:5d:79:27:72:6f:85: 6f:b2:de:22:2c:8b:b3:b4:2c:a7:e2:26:51:71:c5:58:bc:c2: e6:a5:d7:b5:26:21:fa:71:9a:f0:bb:23:fc:e2:b7:22:87:87: 3d:f1:1e:9b:f6:ff:33:c4:32:13:07:5f:8b:49:4e:a7:11:1f: a9:b2:f4:15:04:44:26:85:25:e9:de:a7:a5:67:36:cc:3c:5e: 02:9e:06:63:0c:fb:d4:d5:0a:6b:03:88:e0:0d:f5:ce:35:c9: c1:86:54:2e:48:e2:13:ca:dd:8a:a0:35:ce:28:fe:9d:5b:fb: 2f:74:07:f7:09:ba:b2:5d:e5:7f:51:1f:de:5c:56:c6:5c:cc: 88:f3:46:0b:c9:d7:74:09:f2:dd:75:39:7b:af:b9:c9:d3:1a: 31:2c:64:88:fc:36:57:fe:02:2f:b1:5a:66:93:60:c4:a1:00: be:3e:49:62:80:64:2c:6c:0f:f6:44:52:25:cf:14:0f:db:1a: c3:19:41:9e:bf:01:dd:33:cf:d7:c1:21:f5:4c:cb:88:14:a2: 40:cd:90:c8 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9c/Vckqmqr48R/6cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwMjAxMDAxMloXDTI2MTIzMTAyMDAxMlowLzEtMCsGA1UEAxMk ZDMwOTMzNjQtZmIyMC00NDI3LThiMTQtNmQ2YWRiYzliYTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUPRgen/KWrofcUkc2pVFcMJsqM6989dg6m6 L/wWEqsJFxCNMDt6Iqqi2WjvmPwpj64qgsMiki/aA6Ws/J5mzY+siKVcI2KTTAfP SPyE39FdfackbX/fJqhmJJr5z2O0Kg9qCDyga8JWIwHbovpWGlOqGUxZwH1Z733I y/SEway8yE2EShp6qdR5OjvRubZeHf3iV0W/kBbAZE2cfZWv/QFfKNCmnhwzDvjk 9+flLZPGwOKxd5KLDskB/B7Li+rqF9NvHSNvwpQmNHdL6XDk1iXAIUFlDMg1si+x BYgxlVCvH9ggbFwpN0hOKrQQCTGSCiQIkjxYQG9c3orPGNoP2wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMpmCFLZWUvfqogGyRZVDkTdMIUDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOGM4YzMxN2YtMzRlMi0z ZTJiLTliNzItNjlkMDU2ZDJlNjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJkxEAwQA Jm9hMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKEadNvf9iRppZ8ZFtO4x0VSglG9gqBFOtyCU4XAmvQk08+i 5/K1ftG3hGkXFKgqa115J3JvhW+y3iIsi7O0LKfiJlFxxVi8wual17UmIfpxmvC7 I/zityKHhz3xHpv2/zPEMhMHX4tJTqcRH6my9BUERCaFJenep6VnNsw8XgKeBmMM +9TVCmsDiOAN9c41ycGGVC5I4hPK3YqgNc4o/p1b+y90B/cJurJd5X9RH95cVsZc zIjzRgvJ13QJ8t11OXuvucnTGjEsZIj8Nlf+Ai+xWmaTYMShAL4+SWKAZCxsD/ZE UiXPFA/bGsMZQZ6/Ad0zz9fBIfVMy4gUokDNkMg= -----END CERTIFICATE-----Generated at Tue Oct 27 20:30:05 2026 by rpki-client