$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/933404d2-2703-3ee9-ae53-473077d61790.roa File: 933404d2-2703-3ee9-ae53-473077d61790.roa (raw, json) Hash identifier: /KzVtJWvAFG+kYhO2w51J4qOcDg34nqwckP5laYbJB0= Subject key identifier: 9A:BA:58:D8:BA:3C:0A:81:7F:A5:89:69:BF:BA:EA:1C:17:D8:03:00 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F6C5836443216EA55A31A2300 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/933404d2-2703-3ee9-ae53-473077d61790.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 394957 IP address blocks: 38.100.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:36:44:32:16:ea:55:a3:1a:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=c7b8223f-bd60-4d7b-9609-5babbf88b459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6b:28:20:77:98:a3:cd:85:9d:2b:b6:46:28: 43:57:45:ae:32:b6:60:6a:87:16:2f:ae:cb:a2:80: 0c:0c:4b:11:ee:83:b7:e8:36:8e:80:fd:15:a6:53: 01:62:90:66:57:da:7b:8b:9c:4c:37:4c:ce:e1:d8: 9f:db:c4:82:10:cf:46:60:05:da:5b:4f:20:e7:56: 7c:d1:b3:cb:9c:b1:18:1e:c4:3d:fc:50:9b:16:9a: 64:4d:ef:10:9c:62:70:95:9b:e8:00:52:5e:9d:a3: a2:e4:69:71:0d:20:32:ed:6c:36:1a:5a:4a:5e:85: 11:a9:42:e5:c5:60:6c:ac:d1:82:f8:bb:11:7a:4f: 31:a5:93:28:fc:c2:d5:5e:13:5d:f9:5a:53:7c:cc: 9e:e0:ff:2f:07:8b:ce:b0:a7:ae:b8:5c:1c:4c:89: 0e:f8:d3:b2:14:29:47:c0:0a:fd:9f:f3:25:44:66: 40:a6:43:14:c5:81:a3:69:79:98:5d:8d:35:83:2b: b8:1c:a2:e0:57:d2:7a:ab:9f:83:5c:89:51:11:12: 8c:a4:25:68:79:06:07:1d:57:e6:61:4f:6e:2b:45: c2:8a:70:a3:b9:0b:2f:33:3d:2a:15:ba:be:9c:c1: af:50:7f:fb:3d:a8:52:0d:a7:f5:96:bd:32:8a:f6: fb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:BA:58:D8:BA:3C:0A:81:7F:A5:89:69:BF:BA:EA:1C:17:D8:03:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/933404d2-2703-3ee9-ae53-473077d61790.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.100.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:20:5f:dd:ef:52:f3:47:8e:11:4d:ab:15:15:bb:0d:06:d0: 41:55:39:40:08:78:62:89:74:17:e6:5d:dc:19:b3:7a:52:4c: 82:cf:02:f3:5d:e5:20:3b:35:7e:4f:71:99:86:81:a0:ff:66: 6e:d0:52:1d:a0:47:44:92:ad:98:4a:4b:6b:de:eb:41:9f:20: 34:b1:ef:cf:4f:48:3f:c3:c3:4d:ea:3e:df:56:83:b3:e8:58: 65:0f:da:27:3c:c5:9d:29:1a:2a:73:48:db:8d:79:d2:dd:0f: 00:f0:44:ae:00:14:58:0a:65:0a:d8:2a:3d:2f:2f:c8:44:d7: 99:eb:2d:5c:43:3b:8c:90:17:cf:9d:50:4a:ee:54:63:81:4f: fb:3e:db:a3:cb:7b:e4:0b:96:87:b9:f1:5e:00:e4:5f:23:fc: 4a:34:7b:45:17:01:e7:51:6b:34:eb:4a:ab:f4:13:da:55:f3: 15:50:e2:2f:0b:a1:21:2e:62:f3:59:8c:c4:6e:0f:d2:b5:ef: 29:bb:9a:af:cf:d8:6c:c4:4f:80:e4:52:9d:25:da:eb:03:84: a6:f1:cd:48:72:4d:42:e5:cd:cc:a2:94:99:86:b7:87:7d:24: 6c:df:b4:f3:4f:04:bc:96:d7:9c:96:a1:15:39:c8:54:6f:7b: 5f:e8:f0:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWDZEMhbqVaMaIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk YzdiODIyM2YtYmQ2MC00ZDdiLTk2MDktNWJhYmJmODhiNDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWsoIHeYo82FnSu2RihDV0WuMrZgaocWL67L ooAMDEsR7oO36DaOgP0VplMBYpBmV9p7i5xMN0zO4dif28SCEM9GYAXaW08g51Z8 0bPLnLEYHsQ9/FCbFppkTe8QnGJwlZvoAFJenaOi5GlxDSAy7Ww2GlpKXoURqULl xWBsrNGC+LsRek8xpZMo/MLVXhNd+VpTfMye4P8vB4vOsKeuuFwcTIkO+NOyFClH wAr9n/MlRGZApkMUxYGjaXmYXY01gyu4HKLgV9J6q5+DXIlRERKMpCVoeQYHHVfm YU9uK0XCinCjuQsvMz0qFbq+nMGvUH/7PahSDaf1lr0yivb7LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJq6WNi6PAqBf6WJab+66hwX2AMAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOTMzNDA0ZDItMjcwMy0z ZWU5LWFlNTMtNDczMDc3ZDYxNzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJmQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALwgX93vUvNHjhFNqxUVuw0G0EFVOUAIeGKJdBfmXdwZs3pSTILPAvNd 5SA7NX5PcZmGgaD/Zm7QUh2gR0SSrZhKS2ve60GfIDSx789PSD/Dw03qPt9Wg7Po WGUP2ic8xZ0pGipzSNuNedLdDwDwRK4AFFgKZQrYKj0vL8hE15nrLVxDO4yQF8+d UEruVGOBT/s+26PLe+QLloe58V4A5F8j/Eo0e0UXAedRazTrSqv0E9pV8xVQ4i8L oSEuYvNZjMRuD9K17ym7mq/P2GzET4DkUp0l2usDhKbxzUhyTULlzcyilJmGt4d9 JGzftPNPBLyW15yWoRU5yFRve1/o8AA= -----END CERTIFICATE-----Generated at Tue Oct 27 13:01:03 2026 by rpki-client