$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9c8978ae-fb4a-39df-83c1-95b0cd610565.roa File: 9c8978ae-fb4a-39df-83c1-95b0cd610565.roa (raw, json) Hash identifier: /jzP+Ya1e9YGKXmhjou/mQP2vt7oW8v6L8x6sv7Syn0= Subject key identifier: 19:3A:54:A0:74:92:EB:A4:62:6D:9E:EA:61:8F:75:DF:A3:3A:FE:08 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F682822C6092527A1BE9A91A8 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9c8978ae-fb4a-39df-83c1-95b0cd610565.roa Signing time: Tue 06 Oct 2026 01:00:13 +0000 ROA not before: Tue 06 Oct 2026 01:00:13 +0000 ROA not after: Mon 04 Jan 2027 02:00:13 +0000 asID: 33335 IP address blocks: 38.224.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:68:28:22:c6:09:25:27:a1:be:9a:91:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 6 01:00:13 2026 GMT Not After : Jan 4 02:00:13 2027 GMT Subject: CN=ca8727cb-9735-4f08-a9b7-993ad91db2bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:84:f1:ce:5e:a2:d3:32:29:25:c8:b9:48:e8: 03:de:2d:aa:af:c8:1d:cc:08:16:5c:5e:1d:cc:37: 0f:03:cd:21:ca:2d:b4:fa:a5:40:a4:3f:58:1e:fb: a9:01:8a:d4:4e:c6:6a:ea:2b:64:b9:92:3f:d3:dc: fc:b8:80:ee:82:f6:94:1b:62:e2:a6:c5:34:2d:77: 67:3a:50:22:dd:1c:5b:4c:ab:b4:33:e4:c5:de:b0: 95:d2:a3:95:4c:f4:ae:3d:47:7c:2d:9c:99:82:30: 1d:8f:08:c3:33:bd:57:9f:d0:35:ce:ab:12:a5:9c: 41:f8:22:62:5b:47:93:dc:0c:64:23:b0:b8:83:fa: 92:63:c3:f7:6f:08:98:63:90:08:50:e1:7f:79:34: 91:46:10:04:90:82:86:a4:19:e5:80:04:d1:c6:68: 39:16:d6:88:c7:67:4b:cd:e3:09:b6:1a:3f:ab:59: 43:c2:f4:83:8f:76:fe:0a:b3:1c:41:57:2c:60:a0: f3:93:bc:07:92:84:25:9e:0e:eb:32:71:cc:56:4c: 13:ef:a2:aa:bc:6d:0b:3b:ca:ca:33:ea:d1:a3:de: bb:fa:57:85:22:ba:14:7e:ed:20:12:a2:4a:ca:aa: 99:36:ee:8e:65:ad:ff:18:97:c9:0b:b4:b2:25:37: 54:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3A:54:A0:74:92:EB:A4:62:6D:9E:EA:61:8F:75:DF:A3:3A:FE:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9c8978ae-fb4a-39df-83c1-95b0cd610565.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.224.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:58:dd:e9:be:93:08:22:8e:ad:bc:33:f1:7f:7f:46:04:de: cb:d8:53:38:1e:70:8b:14:3b:0b:ca:a9:09:76:b3:be:85:f1: f1:e1:04:5d:5e:cc:25:2c:02:25:04:33:03:79:b8:ff:08:0f: 8e:df:80:bf:cd:68:a2:1b:2f:81:76:a7:db:b6:6b:7f:56:3c: 0d:b1:44:b3:ff:38:64:30:2a:3c:7e:b7:6d:2d:da:76:3e:df: f0:09:e2:05:58:56:a0:b7:d9:57:76:b6:7c:4b:af:f5:86:6f: 02:6d:fb:bb:1a:d9:78:6c:de:f4:5d:ee:ac:5d:97:1d:a7:e4: ab:c9:8c:b4:7c:79:3e:cd:d0:30:80:66:15:ff:8e:3b:29:5c: 09:0c:b4:bf:33:5f:1d:d5:25:6a:17:1a:7e:d6:05:7c:e7:ed: cc:ab:94:c0:c6:78:f3:12:b3:f1:38:55:d5:44:2f:0a:12:4a: d6:79:d3:c0:80:ba:80:af:e5:a1:04:37:ea:43:cc:1b:bf:d8: 05:16:e3:8b:40:0e:92:ef:7f:2f:75:83:b3:8f:e6:76:7a:7c: ff:ab:60:30:3b:ef:e1:a6:a6:de:3b:91:1e:03:fe:46:99:e5: 58:08:ea:e4:f5:67:50:17:9c:b7:85:a3:1d:25:18:5b:1c:8a: 8d:6d:8f:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9oKCLGCSUnob6akagwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwNjAxMDAxM1oXDTI3MDEwNDAyMDAxM1owLzEtMCsGA1UEAxMk Y2E4NzI3Y2ItOTczNS00ZjA4LWE5YjctOTkzYWQ5MWRiMmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oTxzl6i0zIpJci5SOgD3i2qr8gdzAgWXF4d zDcPA80hyi20+qVApD9YHvupAYrUTsZq6itkuZI/09z8uIDugvaUG2LipsU0LXdn OlAi3RxbTKu0M+TF3rCV0qOVTPSuPUd8LZyZgjAdjwjDM71Xn9A1zqsSpZxB+CJi W0eT3AxkI7C4g/qSY8P3bwiYY5AIUOF/eTSRRhAEkIKGpBnlgATRxmg5FtaIx2dL zeMJtho/q1lDwvSDj3b+CrMcQVcsYKDzk7wHkoQlng7rMnHMVkwT76KqvG0LO8rK M+rRo967+leFIroUfu0gEqJKyqqZNu6OZa3/GJfJC7SyJTdUNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBk6VKB0kuukYm2e6mGPdd+jOv4IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOWM4OTc4YWUtZmI0YS0z OWRmLTgzYzEtOTViMGNkNjEwNTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJuD9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMBY3em+kwgijq28M/F/f0YE3svYUzgecIsUOwvKqQl2s76F8fHhBF1e zCUsAiUEMwN5uP8ID47fgL/NaKIbL4F2p9u2a39WPA2xRLP/OGQwKjx+t20t2nY+ 3/AJ4gVYVqC32Vd2tnxLr/WGbwJt+7sa2Xhs3vRd7qxdlx2n5KvJjLR8eT7N0DCA ZhX/jjspXAkMtL8zXx3VJWoXGn7WBXzn7cyrlMDGePMSs/E4VdVELwoSStZ508CA uoCv5aEEN+pDzBu/2AUW44tADpLvfy91g7OP5nZ6fP+rYDA77+Gmpt47kR4D/kaZ 5VgI6uT1Z1AXnLeFox0lGFscio1tj+c= -----END CERTIFICATE-----Generated at Tue Oct 27 12:33:23 2026 by rpki-client