$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9a66c770-b964-381d-895e-6501b4a4de25.roa File: 9a66c770-b964-381d-895e-6501b4a4de25.roa (raw, json) Hash identifier: r+kGcukgBKT25hot3bLhLeUzdeWBeMu4CfKgTOW5Duc= Subject key identifier: 8A:96:35:9A:69:9A:F9:78:58:9C:C5:CE:DD:46:A4:9A:BC:99:BE:9E Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F7BB2E0DE828DC476AFA4DC00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9a66c770-b964-381d-895e-6501b4a4de25.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 53107 IP address blocks: 38.20.0.0/23 maxlen: 24 38.51.134.0/23 maxlen: 24 38.52.128.0/23 maxlen: 24 38.210.208.0/22 maxlen: 24 38.210.212.0/23 maxlen: 24 38.211.128.0/22 maxlen: 24 38.255.122.0/23 maxlen: 24 204.157.108.0/22 maxlen: 24 209.61.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b2:e0:de:82:8d:c4:76:af:a4:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=54bdd0dd-65ec-476d-b21f-198fa3534cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:27:a5:e2:f8:d7:93:8a:57:6f:92:7b:dc:3a: 66:ff:50:0c:70:5d:0d:b5:2a:e6:df:2d:5d:0e:5f: 0c:dc:65:f0:24:f9:2b:5e:8d:e2:68:27:ed:57:79: 22:c3:6a:a8:17:1b:af:32:23:25:37:1f:43:d1:01: f3:17:1c:03:ca:17:72:99:97:59:44:89:ac:13:14: c9:6b:6f:06:27:12:0e:ba:13:66:36:26:8b:86:3e: 20:4a:31:0e:8b:a9:bf:3b:af:18:3b:bc:30:83:fd: 75:e8:29:1b:68:bc:ca:49:3c:cb:f0:19:f9:18:64: 7d:de:79:37:0d:3b:a3:ee:a7:7d:12:09:68:73:62: 66:2a:46:1e:91:99:fd:86:e7:d6:ac:8c:e1:76:31: 3d:cc:e1:fc:8a:c5:cf:64:d4:dc:6a:41:9a:6f:72: 2a:31:ec:a5:2d:66:92:20:c8:23:70:21:7f:bd:74: d8:7b:e0:bf:cb:ab:ba:64:ae:31:20:03:e6:ea:70: 17:92:76:78:29:fc:e7:a6:4e:13:27:07:ed:b5:a0: df:8d:85:1e:f2:40:6c:4c:e1:cf:38:64:f2:79:f5: 9b:84:9a:6c:10:b8:1d:f3:60:0a:9a:cd:77:af:19: a7:1c:fa:ca:f4:29:5f:6b:83:20:5e:80:64:a1:4c: 98:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:96:35:9A:69:9A:F9:78:58:9C:C5:CE:DD:46:A4:9A:BC:99:BE:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9a66c770-b964-381d-895e-6501b4a4de25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.20.0.0/23 38.51.134.0/23 38.52.128.0/23 38.210.208.0-38.210.213.255 38.211.128.0/22 38.255.122.0/23 204.157.108.0/22 209.61.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:d2:76:67:91:f4:92:f1:d6:e0:d0:50:0e:e6:5a:cf:3d:dd: 14:84:43:f0:19:ea:a7:f9:15:30:21:75:13:98:bf:c0:92:12: 40:e6:17:3f:91:93:61:84:a8:f9:c2:49:6b:0d:89:0f:30:30: 1f:eb:49:d6:32:da:03:50:cd:d0:03:d7:ad:8c:94:39:3d:a8: 70:26:c4:b5:f2:0d:42:07:47:76:26:e6:9a:4f:f8:23:3a:ff: 20:f7:ce:93:d7:84:79:57:4a:ac:9b:f9:d8:6e:37:fb:14:96: 22:5a:3a:74:62:18:59:e0:fd:b3:bf:2f:e1:19:51:e8:8f:0a: 85:8b:8d:9d:4a:57:cf:d7:63:c8:a9:b3:a1:0f:f3:80:39:10: fd:ff:18:ff:c6:43:ad:48:72:36:74:70:4b:7d:20:a7:31:3a: a3:df:0d:c6:d0:ea:75:7e:dd:56:8a:f4:c9:0c:ff:7d:87:34: 18:34:0b:23:a7:bb:d6:e5:65:73:63:20:4d:e7:79:6a:10:7b: 0f:78:22:3c:9b:63:11:b1:da:b6:44:c5:ee:b1:ac:b0:f4:d4: 33:fa:32:eb:7f:77:d2:c4:e9:b7:f2:e7:36:92:3a:4f:a8:29: f7:a9:41:4d:5e:77:be:45:e5:65:c1:b2:5c:9f:ba:b1:8d:b5: f7:40:db:b9 -----BEGIN CERTIFICATE----- MIIGdTCCBV2gAwIBAgIUAQ0Mn0MoWE97suDego3Edq+k3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk NTRiZGQwZGQtNjVlYy00NzZkLWIyMWYtMTk4ZmEzNTM0Y2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCel4vjXk4pXb5J73Dpm/1AMcF0NtSrm3y1d Dl8M3GXwJPkrXo3iaCftV3kiw2qoFxuvMiMlNx9D0QHzFxwDyhdymZdZRImsExTJ a28GJxIOuhNmNiaLhj4gSjEOi6m/O68YO7wwg/116CkbaLzKSTzL8Bn5GGR93nk3 DTuj7qd9Egloc2JmKkYekZn9hufWrIzhdjE9zOH8isXPZNTcakGab3IqMeylLWaS IMgjcCF/vXTYe+C/y6u6ZK4xIAPm6nAXknZ4Kfznpk4TJwfttaDfjYUe8kBsTOHP OGTyefWbhJpsELgd82AKms13rxmnHPrK9Clfa4MgXoBkoUyYsQIDAQABo4IDhzCC A4MwHQYDVR0OBBYEFIqWNZppmvl4WJzFzt1GpJq8mb6eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOWE2NmM3NzAtYjk2NC0z ODFkLTg5NWUtNjUwMWI0YTRkZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQBJhQAAwQB JjOGAwQBJjSAMAwDBAQm0tADBAEm0tQDBAIm04ADBAEm/3oDBALMnWwDBALRPSQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAldJ2Z5H0kvHW4NBQDuZazz3dFIRD8Bnqp/kVMCF1E5i/wJISQOYX P5GTYYSo+cJJaw2JDzAwH+tJ1jLaA1DN0APXrYyUOT2ocCbEtfINQgdHdibmmk/4 Izr/IPfOk9eEeVdKrJv52G43+xSWIlo6dGIYWeD9s78v4RlR6I8KhYuNnUpXz9dj yKmzoQ/zgDkQ/f8Y/8ZDrUhyNnRwS30gpzE6o98NxtDqdX7dVor0yQz/fYc0GDQL I6e71uVlc2MgTed5ahB7D3giPJtjEbHatkTF7rGssPTUM/oy63930sTpt/LnNpI6 T6gp96lBTV53vkXlZcGyXJ+6sY2190DbuQ== -----END CERTIFICATE-----Generated at Tue Oct 27 22:51:39 2026 by rpki-client