$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/94cd383a-9b15-3b5e-9a19-6a0a9a0e6641.roa File: 94cd383a-9b15-3b5e-9a19-6a0a9a0e6641.roa (raw, json) Hash identifier: r3QFuiomnqIuvSnhwvXPpB4EfYN2sd4rTO4pRcEWFfk= Subject key identifier: E4:67:44:DE:79:15:83:61:E7:37:F0:62:CB:AE:ED:F0:54:6A:E3:D1 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F91028F6732A4BA78BC9FF530 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/94cd383a-9b15-3b5e-9a19-6a0a9a0e6641.roa Signing time: Tue 20 Oct 2026 16:12:49 +0000 ROA not before: Tue 20 Oct 2026 16:12:49 +0000 ROA not after: Mon 18 Jan 2027 17:12:49 +0000 asID: 18463 IP address blocks: 38.60.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:91:02:8f:67:32:a4:ba:78:bc:9f:f5:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 20 16:12:49 2026 GMT Not After : Jan 18 17:12:49 2027 GMT Subject: CN=e5681db7-b41c-4043-b576-e8fb82b52bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b4:09:0f:7c:04:e5:88:2c:a2:ac:28:b3:3f: a3:4a:85:46:11:cc:34:05:33:06:5a:42:60:42:52: 91:84:2a:53:f4:bc:eb:62:bb:47:22:a4:2f:7a:47: 45:a9:6a:0b:6e:fc:08:66:9d:83:57:fd:aa:48:26: a8:b4:d5:0a:47:95:7f:ff:78:9f:26:eb:3d:18:bc: af:07:1e:0b:13:f6:33:b8:d2:49:9f:25:fc:f8:ba: fd:39:cd:55:f7:b9:d9:4b:eb:9e:45:33:bd:78:7d: a5:69:4e:e2:7f:67:f1:46:e4:e8:94:71:02:ef:85: 21:99:82:63:9f:da:0a:9d:ad:aa:cc:5f:91:0b:a2: b8:82:52:49:77:53:d8:cc:f6:74:45:0c:3d:cd:c5: 09:22:c0:f9:b3:1f:75:3c:14:23:2a:10:d8:9e:88: b2:40:e6:c2:aa:03:f0:ab:02:2b:0e:81:4b:06:8c: 0d:81:22:9e:93:d1:ff:1b:5c:82:0b:e3:23:74:e6: 28:61:b0:b6:3d:8d:5f:d3:96:eb:bf:d9:60:af:a5: db:57:30:ee:66:ff:c4:58:77:e8:06:07:ce:86:e7: 0a:f3:44:e0:a3:0e:61:d4:64:cb:6e:15:23:6f:47: 11:e6:57:f6:2f:3d:da:f4:06:77:48:a7:82:7c:fd: 30:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:67:44:DE:79:15:83:61:E7:37:F0:62:CB:AE:ED:F0:54:6A:E3:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/94cd383a-9b15-3b5e-9a19-6a0a9a0e6641.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.60.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:e5:c6:ae:d0:19:e5:50:e3:6f:b5:d4:1f:c9:1e:33:3b:ce: dd:79:cf:41:36:dd:00:93:83:e3:20:07:63:e7:d2:cd:df:fa: 59:01:36:79:25:76:14:0a:3d:94:d1:38:c6:5b:39:95:db:58: 20:ba:60:55:d5:ff:f2:ad:2b:8a:e6:29:39:1f:32:63:fd:90: dc:c7:e3:0e:8e:cf:40:44:93:d6:44:27:01:e4:f2:be:15:ba: 6a:9e:12:17:9a:c7:2a:51:86:b7:6a:1d:da:c1:6c:49:8c:39: f0:8a:b0:af:24:2a:2c:bf:c1:0f:f8:48:e3:e8:8b:80:9c:f1: 48:2b:2b:cf:20:22:55:6e:72:2d:e1:f3:7a:23:8b:d2:f0:eb: e5:28:05:36:5b:13:15:42:ae:be:d3:41:02:d1:db:5f:af:39: d7:5d:0b:8f:01:c3:43:56:48:f9:d6:a5:21:15:cb:fc:18:15: 0f:cb:d8:3f:bc:e8:49:ba:f1:2d:93:8f:7b:a8:cc:cb:08:64: 74:01:9b:53:74:9d:54:13:0f:ae:c2:f7:8c:aa:0d:c5:6a:e3: 2a:11:77:ea:36:f0:d2:3f:27:f3:83:8d:ea:d2:e9:4d:20:3d: 38:16:3f:ef:69:38:d1:08:50:ba:6f:93:b0:f7:fb:df:c0:0d: c5:cf:ac:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+RAo9nMqS6eLyf9TAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyMDE2MTI0OVoXDTI3MDExODE3MTI0OVowLzEtMCsGA1UEAxMk ZTU2ODFkYjctYjQxYy00MDQzLWI1NzYtZThmYjgyYjUyYmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLQJD3wE5Ygsoqwosz+jSoVGEcw0BTMGWkJg QlKRhCpT9LzrYrtHIqQvekdFqWoLbvwIZp2DV/2qSCaotNUKR5V//3ifJus9GLyv Bx4LE/YzuNJJnyX8+Lr9Oc1V97nZS+ueRTO9eH2laU7if2fxRuTolHEC74UhmYJj n9oKna2qzF+RC6K4glJJd1PYzPZ0RQw9zcUJIsD5sx91PBQjKhDYnoiyQObCqgPw qwIrDoFLBowNgSKek9H/G1yCC+MjdOYoYbC2PY1f05brv9lgr6XbVzDuZv/EWHfo BgfOhucK80Tgow5h1GTLbhUjb0cR5lf2Lz3a9AZ3SKeCfP0w5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORnRN55FYNh5zfwYsuu7fBUauPRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOTRjZDM4M2EtOWIxNS0z YjVlLTlhMTktNmEwYTlhMGU2NjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGJjwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjlxq7QGeVQ42+11B/JHjM7zt15z0E23QCTg+MgB2Pn0s3f+lkBNnkl dhQKPZTROMZbOZXbWCC6YFXV//KtK4rmKTkfMmP9kNzH4w6Oz0BEk9ZEJwHk8r4V umqeEheaxypRhrdqHdrBbEmMOfCKsK8kKiy/wQ/4SOPoi4Cc8UgrK88gIlVuci3h 83oji9Lw6+UoBTZbExVCrr7TQQLR21+vOdddC48Bw0NWSPnWpSEVy/wYFQ/L2D+8 6Em68S2Tj3uozMsIZHQBm1N0nVQTD67C94yqDcVq4yoRd+o28NI/J/ODjerS6U0g PTgWP+9pONEIULpvk7D3+9/ADcXPrJY= -----END CERTIFICATE-----Generated at Tue Oct 27 16:32:22 2026 by rpki-client