$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8e6151e7-f3a4-302e-9c0d-19b5b41fb015.roa File: 8e6151e7-f3a4-302e-9c0d-19b5b41fb015.roa (raw, json) Hash identifier: u8SqRX7pF78QAO5MO4YNLat8fvfWuZoHJ4chNSReUEU= Subject key identifier: AF:A8:7C:D0:82:3D:11:D6:95:ED:3C:66:24:60:9D:72:73:F7:B1:78 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F9BCDE8A72E2602394EE9A600 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8e6151e7-f3a4-302e-9c0d-19b5b41fb015.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 399728 IP address blocks: 38.87.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:e8:a7:2e:26:02:39:4e:e9:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=fc0c020c-6502-4848-b4b0-a31da5d2b63b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a3:20:d1:ba:dd:ee:c0:29:a0:8b:16:8b:2d: b6:79:b2:5d:48:6a:6b:d4:d1:db:06:c6:14:cd:64: fd:bc:dd:ca:17:33:db:dc:68:38:7d:11:d2:79:44: 6b:52:5c:92:e7:d9:a4:53:08:da:d5:e3:20:b4:5c: ae:8a:e9:6e:dd:f9:05:a2:ee:a6:63:f4:24:c3:43: 53:dd:11:bf:9b:e1:16:32:84:5e:9f:b0:71:f4:64: d4:44:f6:d5:71:d9:27:c8:67:2e:1d:23:55:65:28: f8:5d:dd:90:f3:2f:f2:1e:46:2d:2f:06:f7:9c:89: 40:82:cf:ed:a0:76:32:5f:c7:24:12:c3:9c:16:c1: 86:2e:08:0e:00:b6:31:ed:1d:f6:17:a5:f1:2b:12: be:38:11:cc:a7:f7:5d:5f:d6:99:8c:62:7f:76:d1: c9:d9:d5:ed:84:f5:a0:78:31:d2:94:6d:a7:34:82: 49:eb:10:40:4e:cf:6f:73:96:20:29:fb:7e:6a:fb: 32:8e:42:1c:3d:43:27:01:0c:3b:dc:b0:43:41:00: 05:e9:92:a7:0e:92:69:d2:dc:c6:e3:a1:b1:4a:95: 32:af:33:01:f5:8e:48:a9:95:88:e0:81:4b:d6:b2: 4e:9b:a1:99:5b:ed:2d:69:13:41:4c:2c:44:75:b2: 2b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A8:7C:D0:82:3D:11:D6:95:ED:3C:66:24:60:9D:72:73:F7:B1:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8e6151e7-f3a4-302e-9c0d-19b5b41fb015.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.87.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:30:60:ef:08:a6:37:38:22:b8:2c:a1:b4:b9:92:b5:c2:d7: 23:e9:36:a5:c1:24:94:de:3e:1f:06:81:ac:79:e5:dc:75:ae: 75:13:87:db:b8:05:72:aa:38:38:6f:88:ac:02:d8:f4:3e:75: 65:01:60:3c:93:53:21:e6:3b:a6:7e:a8:8c:67:e5:7a:45:ae: 0d:f4:e5:ac:b2:2a:54:d6:84:49:03:60:28:54:fa:00:7f:33: 9b:ab:c7:78:60:7c:82:74:8c:51:8a:bc:6e:97:91:08:71:b4: d0:b8:0c:ea:8b:6f:af:27:3e:89:cd:0a:b7:7e:f4:a9:dd:f8: 6f:1c:2f:01:4d:f1:75:bd:7c:5c:72:ed:96:bf:22:6c:78:7e: 6e:63:e2:40:a4:be:89:e9:ca:e2:38:fd:94:36:7f:b4:d3:23: eb:e0:7d:96:cd:ac:5a:24:34:d3:66:60:34:72:5d:50:ff:e7: c2:8e:be:17:5c:e7:7d:cb:54:ef:d1:4d:30:b7:d9:49:f9:61: 35:f9:3f:b4:7d:68:a1:2c:59:bc:1d:23:0a:d7:7f:fa:21:36: ae:d9:fd:e0:dd:7d:f4:62:cd:24:68:ae:f5:e2:fd:71:f1:6c: d0:1a:9f:a5:7c:52:77:32:f6:40:de:d0:89:a9:82:f1:19:4a: c1:db:f8:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzeinLiYCOU7ppgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk ZmMwYzAyMGMtNjUwMi00ODQ4LWI0YjAtYTMxZGE1ZDJiNjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaMg0brd7sApoIsWiy22ebJdSGpr1NHbBsYU zWT9vN3KFzPb3Gg4fRHSeURrUlyS59mkUwja1eMgtFyuiulu3fkFou6mY/Qkw0NT 3RG/m+EWMoRen7Bx9GTURPbVcdknyGcuHSNVZSj4Xd2Q8y/yHkYtLwb3nIlAgs/t oHYyX8ckEsOcFsGGLggOALYx7R32F6XxKxK+OBHMp/ddX9aZjGJ/dtHJ2dXthPWg eDHSlG2nNIJJ6xBATs9vc5YgKft+avsyjkIcPUMnAQw73LBDQQAF6ZKnDpJp0tzG 46GxSpUyrzMB9Y5IqZWI4IFL1rJOm6GZW+0taRNBTCxEdbIr4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+ofNCCPRHWle08ZiRgnXJz97F4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOGU2MTUxZTctZjNhNC0z MDJlLTljMGQtMTliNWI0MWZiMDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJld7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAwYO8Ipjc4IrgsobS5krXC1yPpNqXBJJTePh8Ggax55dx1rnUTh9u4 BXKqODhviKwC2PQ+dWUBYDyTUyHmO6Z+qIxn5XpFrg305ayyKlTWhEkDYChU+gB/ M5urx3hgfIJ0jFGKvG6XkQhxtNC4DOqLb68nPonNCrd+9Knd+G8cLwFN8XW9fFxy 7Za/Imx4fm5j4kCkvonpyuI4/ZQ2f7TTI+vgfZbNrFokNNNmYDRyXVD/58KOvhdc 533LVO/RTTC32Un5YTX5P7R9aKEsWbwdIwrXf/ohNq7Z/eDdffRizSRorvXi/XHx bNAan6V8Uncy9kDe0ImpgvEZSsHb+C0= -----END CERTIFICATE-----Generated at Wed Oct 28 11:41:23 2026 by rpki-client