$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9132ca8b-8c9e-3d66-8a88-7509562e8f4e.roa File: 9132ca8b-8c9e-3d66-8a88-7509562e8f4e.roa (raw, json) Hash identifier: aMrfdutLxERFnKBoeoL9Hkzb+rXNRMVMJBmsVbygd2o= Subject key identifier: FA:38:A6:D3:D9:48:31:28:53:6F:64:D2:62:F2:9E:35:77:43:6B:E0 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F5A3309FFA73C2D4C340E28A0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9132ca8b-8c9e-3d66-8a88-7509562e8f4e.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 273170 IP address blocks: 38.211.245.0/24 maxlen: 24 209.61.1.0/24 maxlen: 24 209.61.2.0/24 maxlen: 24 209.61.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:09:ff:a7:3c:2d:4c:34:0e:28:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=414e4bff-a33b-49c4-bfb6-e2c0434aec63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:78:79:fa:8e:db:1e:43:39:ef:47:e9:c0:6b: b9:86:0f:8a:93:41:4d:de:70:df:35:16:e7:cb:71: 55:ba:2a:fe:2d:f1:9c:89:2c:ed:74:0c:ea:e8:a1: 6b:c4:46:20:7d:4d:34:e9:d1:1f:27:0f:a2:3e:37: c2:d6:7f:93:33:9b:01:1a:6c:fa:8b:17:c3:2c:68: 8c:a1:d8:68:fc:89:cb:0f:d2:b6:eb:cb:54:e3:40: 34:78:17:77:c8:bb:50:61:dd:2b:da:34:16:fc:51: 3f:7a:fa:7f:5f:ff:cd:70:46:e2:66:e8:c6:ac:96: 33:1e:56:14:80:db:47:a4:1a:b8:ab:22:c4:51:29: 77:4e:17:bd:1d:57:69:df:37:37:93:7e:28:15:d8: 3b:24:d9:8a:dd:1e:2d:16:43:64:c0:13:dc:59:54: e5:77:c3:f8:1d:9b:10:88:e1:01:db:2c:8d:c8:52: 42:e3:e5:df:4c:bc:fe:9f:c3:9d:34:c5:c0:cd:2d: 62:c3:6e:be:94:d7:75:2d:e4:af:14:c7:6d:96:f1: d6:99:a8:10:1d:f1:88:b7:73:77:ba:ff:3a:ac:72: 8e:ae:a2:24:5d:f5:32:e7:36:e1:00:16:b7:0c:54: 27:ee:e3:65:b8:e2:0f:82:d9:f8:db:34:3d:b3:b6: d7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:38:A6:D3:D9:48:31:28:53:6F:64:D2:62:F2:9E:35:77:43:6B:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9132ca8b-8c9e-3d66-8a88-7509562e8f4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.211.245.0/24 209.61.1.0-209.61.3.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:bf:7e:ee:8c:cf:5e:9c:49:0b:2d:70:33:9b:c0:d0:e6:f4: 9c:69:0e:97:53:3c:59:72:3e:cf:d9:05:3f:3c:47:9c:11:30: 60:6d:21:b0:09:75:1c:3a:8a:7b:b6:a2:ef:0e:aa:89:ab:77: 33:3f:f9:d3:13:6b:74:e5:81:3d:c0:d1:b0:62:eb:47:a5:a8: b2:df:5f:f6:6d:1f:d1:21:2c:d2:86:da:3e:5c:f0:9d:f2:46: 9e:cc:ab:58:e1:53:29:fd:18:32:28:61:79:e4:1d:c3:31:d0: a7:5d:0b:b3:e8:06:61:46:96:42:c3:11:16:ad:cf:f9:d2:54: 3d:b2:77:ea:e5:90:23:9f:53:98:55:ca:2c:29:5f:8a:26:4e: 3f:d3:39:b1:6f:ec:22:ad:0e:6c:9a:45:21:ce:5f:71:0a:09: 67:d1:b8:bd:91:12:33:51:02:24:a3:db:15:ca:94:d6:e0:5f: 85:fc:92:ec:c3:0f:4d:6b:3e:c1:20:8a:47:79:a8:72:d6:00: 9c:13:c1:b6:3e:54:74:58:d6:44:86:09:47:09:65:d1:4b:e2: b1:50:71:d7:53:ae:fd:3f:f3:80:ca:92:2c:6e:de:27:1e:30: 2c:a3:62:78:e9:56:50:9f:5e:73:95:54:c4:ac:d7:87:44:95: b2:ee:0e:00 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE9aMwn/pzwtTDQOKKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk NDE0ZTRiZmYtYTMzYi00OWM0LWJmYjYtZTJjMDQzNGFlYzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXh5+o7bHkM570fpwGu5hg+Kk0FN3nDfNRbn y3FVuir+LfGciSztdAzq6KFrxEYgfU006dEfJw+iPjfC1n+TM5sBGmz6ixfDLGiM odho/InLD9K268tU40A0eBd3yLtQYd0r2jQW/FE/evp/X//NcEbiZujGrJYzHlYU gNtHpBq4qyLEUSl3The9HVdp3zc3k34oFdg7JNmK3R4tFkNkwBPcWVTld8P4HZsQ iOEB2yyNyFJC4+XfTLz+n8OdNMXAzS1iw26+lNd1LeSvFMdtlvHWmagQHfGIt3N3 uv86rHKOrqIkXfUy5zbhABa3DFQn7uNluOIPgtn42zQ9s7bXHwIDAQABo4IDYzCC A18wHQYDVR0OBBYEFPo4ptPZSDEoU29k0mLynjV3Q2vgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOTEzMmNhOGItOGM5ZS0z ZDY2LThhODgtNzUwOTU2MmU4ZjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAJtP1MAwD BADRPQEDBALRPQAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAVL9+7ozPXpxJCy1wM5vA0Ob0nGkOl1M8WXI+ z9kFPzxHnBEwYG0hsAl1HDqKe7ai7w6qiat3Mz/50xNrdOWBPcDRsGLrR6Wost9f 9m0f0SEs0obaPlzwnfJGnsyrWOFTKf0YMihheeQdwzHQp10Ls+gGYUaWQsMRFq3P +dJUPbJ36uWQI59TmFXKLClfiiZOP9M5sW/sIq0ObJpFIc5fcQoJZ9G4vZESM1EC JKPbFcqU1uBfhfyS7MMPTWs+wSCKR3moctYAnBPBtj5UdFjWRIYJRwll0UvisVBx 11Ou/T/zgMqSLG7eJx4wLKNieOlWUJ9ec5VUxKzXh0SVsu4OAA== -----END CERTIFICATE-----Generated at Tue Oct 27 20:29:10 2026 by rpki-client