$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/957986c4-7baa-3a71-8381-e8326718ef0b.roa File: 957986c4-7baa-3a71-8381-e8326718ef0b.roa (raw, json) Hash identifier: YAaUi22mBwaOrzvvaDaVK3zUJvYZJ44cKsJdxZ0xkC0= Subject key identifier: DF:EB:9B:08:E0:37:62:8C:C5:30:C6:89:65:4F:DB:CC:6B:B9:3B:06 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F53A50C0A00E56B6A8C556B80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/957986c4-7baa-3a71-8381-e8326718ef0b.roa Signing time: Mon 28 Sep 2026 16:40:06 +0000 ROA not before: Mon 28 Sep 2026 16:40:06 +0000 ROA not after: Sun 27 Dec 2026 17:40:06 +0000 asID: 44894 IP address blocks: 38.244.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:a5:0c:0a:00:e5:6b:6a:8c:55:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 28 16:40:06 2026 GMT Not After : Dec 27 17:40:06 2026 GMT Subject: CN=8e2d6abb-7000-42af-9e75-9a3ae91bfb76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:52:b4:83:78:be:39:be:84:0c:05:06:09:e1: ca:8c:6a:9e:33:6c:b6:b6:8d:07:a5:c4:33:44:7b: c0:f0:fb:1d:9a:99:6f:fb:fe:27:36:df:7d:72:9e: 70:41:42:87:f7:91:87:c8:52:73:a3:e5:f8:e4:f0: 61:92:1b:8d:21:d3:2d:da:88:3d:54:5f:20:85:ea: e3:d3:03:08:e3:26:d6:6c:98:79:39:be:61:3b:fd: 9a:bc:23:d1:d5:a9:05:b9:08:7b:6f:66:b2:ac:43: d4:c2:6a:ba:ad:c9:c0:4b:a4:6c:16:1a:b5:6d:21: 6e:b5:03:3f:bb:f7:37:9f:ef:51:ce:81:60:9a:0b: 30:5f:a3:9d:21:30:37:f8:7a:af:60:98:aa:be:42: cb:6e:c3:c8:52:8a:f0:bf:77:09:ff:e6:d5:df:bd: 0e:0c:e3:63:df:7c:23:e6:cb:1a:df:da:bd:09:c9: 1a:e4:32:31:fd:b8:0a:bc:25:02:d2:5e:15:70:2c: d5:ea:43:26:9c:30:14:3b:00:d1:ae:f3:d4:f7:a0: 27:6f:7a:36:55:3b:b9:38:5f:11:49:1d:93:84:2f: 6d:dd:49:19:4b:38:ce:83:06:19:9c:3f:28:fd:68: 4c:84:14:95:2d:b5:52:66:cf:e1:47:f9:ba:38:ae: d7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EB:9B:08:E0:37:62:8C:C5:30:C6:89:65:4F:DB:CC:6B:B9:3B:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/957986c4-7baa-3a71-8381-e8326718ef0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.244.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:a9:69:20:ac:98:96:3b:71:d5:0e:33:7c:a0:ed:2d:80:a8: ba:5b:ed:7b:bd:9d:cf:2d:3e:53:03:05:e4:79:59:21:03:1d: a1:5a:1e:00:ab:26:b2:18:54:cb:4c:2b:21:ea:a3:4d:4c:28: 85:e7:ac:fd:18:09:b0:e2:5c:9f:52:09:d2:3b:57:cb:5a:7c: c8:97:f7:bc:71:c5:5b:36:4f:05:b1:e3:90:33:f9:cb:04:60: 86:85:9c:d1:38:31:8b:86:7f:a2:9b:41:ed:19:03:03:0b:f2: d8:53:84:a8:ee:db:76:eb:5b:38:b6:c1:7d:24:8b:8a:23:09: 03:da:8f:94:53:ad:de:3b:62:fe:ec:66:37:69:04:b2:e4:99: c0:02:2f:39:de:0b:5c:f4:c1:68:cf:65:d4:2d:73:8a:d8:68: ba:6b:0a:db:fa:7a:57:0f:02:3a:93:f6:29:5e:87:65:17:ea: 90:de:44:38:a1:a4:72:9e:ae:c0:3a:7e:6a:b0:9b:3f:4b:04: 10:17:39:8c:96:46:5a:99:d8:85:50:ff:bb:99:20:ca:e1:be: 57:14:ab:5c:54:36:f7:6e:55:11:5a:b4:d6:df:35:c9:27:b9: f5:bc:fc:97:13:5e:0a:1d:28:a6:bb:12:8d:70:53:8a:79:fa: 7c:d4:a6:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TpQwKAOVraoxVa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyODE2NDAwNloXDTI2MTIyNzE3NDAwNlowLzEtMCsGA1UEAxMk OGUyZDZhYmItNzAwMC00MmFmLTllNzUtOWEzYWU5MWJmYjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVK0g3i+Ob6EDAUGCeHKjGqeM2y2to0HpcQz RHvA8Psdmplv+/4nNt99cp5wQUKH95GHyFJzo+X45PBhkhuNIdMt2og9VF8gherj 0wMI4ybWbJh5Ob5hO/2avCPR1akFuQh7b2ayrEPUwmq6rcnAS6RsFhq1bSFutQM/ u/c3n+9RzoFgmgswX6OdITA3+HqvYJiqvkLLbsPIUorwv3cJ/+bV370ODONj33wj 5ssa39q9Ccka5DIx/bgKvCUC0l4VcCzV6kMmnDAUOwDRrvPU96Anb3o2VTu5OF8R SR2ThC9t3UkZSzjOgwYZnD8o/WhMhBSVLbVSZs/hR/m6OK7XOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/rmwjgN2KMxTDGiWVP28xruTsGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOTU3OTg2YzQtN2JhYS0z YTcxLTgzODEtZTgzMjY3MThlZjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJvTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSpaSCsmJY7cdUOM3yg7S2AqLpb7Xu9nc8tPlMDBeR5WSEDHaFaHgCr JrIYVMtMKyHqo01MKIXnrP0YCbDiXJ9SCdI7V8tafMiX97xxxVs2TwWx45Az+csE YIaFnNE4MYuGf6KbQe0ZAwML8thThKju23brWzi2wX0ki4ojCQPaj5RTrd47Yv7s ZjdpBLLkmcACLzneC1z0wWjPZdQtc4rYaLprCtv6elcPAjqT9ileh2UX6pDeRDih pHKersA6fmqwmz9LBBAXOYyWRlqZ2IVQ/7uZIMrhvlcUq1xUNvduVRFatNbfNckn ufW8/JcTXgodKKa7Eo1wU4p5+nzUpuo= -----END CERTIFICATE-----Generated at Thu Oct 22 20:06:39 2026 by rpki-client