$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9c984b54-fa42-3e59-bd27-e4f4482b7e0c.roa File: 9c984b54-fa42-3e59-bd27-e4f4482b7e0c.roa (raw, json) Hash identifier: yvS4Ta+gJSau08bxHn5vyRRgthTjVuqvMXoW3lP4Mb8= Subject key identifier: 87:94:2A:E3:5E:18:70:D4:B5:01:C3:11:3F:BE:B8:DB:72:C2:76:A2 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F965134D1463B51FC8CF3B180 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9c984b54-fa42-3e59-bd27-e4f4482b7e0c.roa Signing time: Thu 22 Oct 2026 13:50:19 +0000 ROA not before: Thu 22 Oct 2026 13:50:19 +0000 ROA not after: Mon 28 Dec 2026 16:59:13 +0000 asID: 395225 IP address blocks: 38.86.217.0/24 maxlen: 24 38.111.99.0/24 maxlen: 24 38.117.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:96:51:34:d1:46:3b:51:fc:8c:f3:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 22 13:50:19 2026 GMT Not After : Dec 28 16:59:13 2026 GMT Subject: CN=f1926c14-f9f8-475c-a9cf-d0e362ecd0dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e3:fe:52:8d:75:16:2b:c8:cd:23:72:90:1e: 53:b9:9e:b4:a3:9f:95:6e:9b:bf:b5:af:09:44:07: 6e:aa:c6:dd:8d:28:02:d1:0c:db:89:a2:ad:56:dd: 0d:5d:57:0e:a3:00:32:64:0d:b8:49:4a:92:3f:8d: 65:68:e5:19:50:7c:5d:4b:e2:f4:c8:3c:10:0c:b7: a6:5c:60:13:a0:9b:f8:3e:d2:6a:73:d8:e2:ac:db: 35:af:ad:4e:0c:c4:0b:36:2d:63:54:52:59:ba:00: 99:46:6d:3d:9c:50:ad:3e:c4:f3:bf:19:a8:8b:a6: 19:2a:2c:a7:fa:1a:e2:78:e3:cf:01:6b:a3:e0:2a: 7b:4b:cb:41:fb:a0:5d:14:bd:f5:58:3d:40:ab:46: df:65:7e:a5:20:5c:f6:e8:25:20:65:a4:28:72:fd: e4:4e:54:d2:c8:ad:4a:46:f0:68:da:02:31:b5:2d: b0:bd:b8:01:29:cf:7c:8e:7c:1f:3d:dd:2c:c1:b0: c8:e1:78:fe:2a:a5:6c:9d:e3:c3:d1:5b:1b:1d:53: 16:14:a0:ba:a4:84:c7:b0:ee:d5:f9:d4:55:51:50: fa:73:34:bf:2d:14:f9:ab:38:c3:1a:96:83:36:7e: c4:14:a6:9c:19:dc:4b:00:b8:17:59:cc:30:3f:90: 74:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:94:2A:E3:5E:18:70:D4:B5:01:C3:11:3F:BE:B8:DB:72:C2:76:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9c984b54-fa42-3e59-bd27-e4f4482b7e0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.86.217.0/24 38.111.99.0/24 38.117.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:ba:3b:fb:f3:44:fb:ae:31:24:42:19:f0:b4:b4:cf:d5:f0: 35:28:39:b1:7e:20:68:bf:c2:6f:b1:b0:e1:bc:0c:08:72:f5: 80:a7:1b:5b:61:a2:e5:2a:ae:a9:f4:84:44:ca:36:63:7f:b0: 54:7d:d7:e0:dd:e0:d4:88:45:b3:62:d4:77:ce:61:85:3a:62: 20:11:a3:4a:cf:d1:2f:11:b0:63:06:6e:d4:4d:ce:65:1f:ab: d6:82:a0:90:40:aa:96:d7:96:1e:64:59:d7:15:6e:af:37:06: 17:e4:9c:30:2e:f7:16:66:73:f7:92:d5:7c:58:bd:02:9e:ee: d1:99:3a:d7:60:b6:50:b2:70:1d:3a:eb:2c:de:16:cc:b7:ef: e5:41:8b:44:8a:8d:98:98:bd:0a:74:b8:80:90:70:9c:38:67: 7e:ed:aa:d6:37:fd:5d:43:2d:75:30:2d:23:52:55:7c:77:0f: 01:4a:3d:70:87:cb:d5:27:f8:02:00:0d:61:23:20:3f:e5:72: 46:75:41:00:74:30:9c:5b:4a:f4:08:1c:bc:29:30:7e:b7:e1: 45:23:50:99:26:86:57:73:6a:c3:f6:00:62:c6:67:2a:ca:3a: c8:0b:2f:d7:b4:51:cb:1f:19:90:52:48:32:e0:51:8a:f4:30: ec:b8:5b:5b -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE+WUTTRRjtR/IzzsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyMjEzNTAxOVoXDTI2MTIyODE2NTkxM1owLzEtMCsGA1UEAxMk ZjE5MjZjMTQtZjlmOC00NzVjLWE5Y2YtZDBlMzYyZWNkMGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuP+Uo11FivIzSNykB5TuZ60o5+Vbpu/ta8J RAduqsbdjSgC0QzbiaKtVt0NXVcOowAyZA24SUqSP41laOUZUHxdS+L0yDwQDLem XGAToJv4PtJqc9jirNs1r61ODMQLNi1jVFJZugCZRm09nFCtPsTzvxmoi6YZKiyn +hrieOPPAWuj4Cp7S8tB+6BdFL31WD1Aq0bfZX6lIFz26CUgZaQocv3kTlTSyK1K RvBo2gIxtS2wvbgBKc98jnwfPd0swbDI4Xj+KqVsnePD0VsbHVMWFKC6pITHsO7V +dRVUVD6czS/LRT5qzjDGpaDNn7EFKacGdxLALgXWcwwP5B04wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFIeUKuNeGHDUtQHDET++uNtywnaiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOWM5ODRiNTQtZmE0Mi0z ZTU5LWJkMjctZTRmNDQ4MmI3ZTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJlbZAwQA Jm9jAwQAJnV7MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBACa6O/vzRPuuMSRCGfC0tM/V8DUoObF+IGi/wm+x sOG8DAhy9YCnG1thouUqrqn0hETKNmN/sFR91+Dd4NSIRbNi1HfOYYU6YiARo0rP 0S8RsGMGbtRNzmUfq9aCoJBAqpbXlh5kWdcVbq83BhfknDAu9xZmc/eS1XxYvQKe 7tGZOtdgtlCycB066yzeFsy37+VBi0SKjZiYvQp0uICQcJw4Z37tqtY3/V1DLXUw LSNSVXx3DwFKPXCHy9Un+AIADWEjID/lckZ1QQB0MJxbSvQIHLwpMH634UUjUJkm hldzasP2AGLGZyrKOsgLL9e0UcsfGZBSSDLgUYr0MOy4W1s= -----END CERTIFICATE-----Generated at Tue Oct 27 15:34:14 2026 by rpki-client