$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9f3c98d4-dc5a-3875-a845-acb9525125c5.roa File: 9f3c98d4-dc5a-3875-a845-acb9525125c5.roa (raw, json) Hash identifier: MlvY/sQqbNKI3O4YJItPOHKRQsIS2653jmGaWiX93pY= Subject key identifier: 1B:54:0D:6A:E2:50:07:02:EB:B9:A5:25:A4:BE:35:34:D6:03:FC:6D Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F92087E4784FB368EF5C5A480 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9f3c98d4-dc5a-3875-a845-acb9525125c5.roa Signing time: Wed 21 Oct 2026 01:00:12 +0000 ROA not before: Wed 21 Oct 2026 01:00:12 +0000 ROA not after: Tue 19 Jan 2027 02:00:12 +0000 asID: 212667 IP address blocks: 38.180.66.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:92:08:7e:47:84:fb:36:8e:f5:c5:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 21 01:00:12 2026 GMT Not After : Jan 19 02:00:12 2027 GMT Subject: CN=9bdac6f9-378d-4918-8200-f4fbdd57d341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:87:64:7d:03:1c:b3:87:f1:f6:b2:4f:d3:a7: f3:68:1b:60:cc:dc:78:3c:ad:6d:21:c5:40:ef:41: 1a:e2:fd:91:61:70:cb:e6:1a:c5:87:86:8a:4b:81: 80:e4:6c:34:78:93:da:58:3f:78:95:b2:84:b8:df: da:fa:24:38:1a:39:e8:b8:cc:22:36:df:8e:a5:41: de:2b:3b:70:b0:a8:c2:9f:88:76:58:4c:5c:9f:53: 40:ab:a6:a5:86:57:09:de:05:95:a5:50:93:8a:5b: ba:ed:50:fa:f3:88:97:de:f3:a4:e1:e1:1e:51:43: cc:f8:a0:82:53:11:ff:bf:a8:a6:32:03:b0:d0:bb: 2d:b4:1d:39:24:98:51:3d:63:81:70:e8:80:d9:da: 3f:a2:0a:ac:6d:87:20:5d:98:9e:b0:cd:5f:cf:ce: 62:8d:b7:d4:54:0d:9d:f5:ab:dc:c9:25:e6:90:b4: 21:40:ae:db:3e:dd:48:44:2b:8e:24:a2:70:e2:d6: 0f:03:f6:e3:bb:f4:27:56:01:98:47:b4:2a:6e:15: 9b:8c:a1:91:eb:61:17:2f:86:06:8c:77:5c:bc:41: 60:53:e4:c1:b2:25:41:a0:8a:24:30:72:ae:9b:00: 51:d0:3a:7d:9e:c2:ee:d9:a8:11:78:37:aa:43:52: 13:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:54:0D:6A:E2:50:07:02:EB:B9:A5:25:A4:BE:35:34:D6:03:FC:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9f3c98d4-dc5a-3875-a845-acb9525125c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.180.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:48:6e:e2:b9:8b:53:6b:9e:aa:4c:96:64:57:76:6f:b9:33: 96:04:02:fa:e7:b1:0d:a3:f5:7f:ad:71:d4:2a:57:5f:6f:9c: 08:e0:65:57:f2:c1:9d:b0:65:ea:6b:94:7f:6d:51:dd:35:1d: 7d:40:6f:5e:dc:51:cf:b7:88:a1:f5:b7:18:60:60:14:c3:01: 11:a6:b4:9e:16:2f:d2:1e:97:33:e7:e3:55:76:9e:8b:16:f0: 33:b9:99:f5:9b:fd:8e:9c:0f:58:87:01:0c:5d:0b:59:0f:cd: 57:c7:1f:5a:c8:0b:35:e6:51:84:2c:70:b2:e4:9a:13:9d:c5: 9b:f5:d1:a2:0f:45:fa:5a:bb:01:82:94:d9:1e:e5:3e:29:d7: 3a:ea:2a:e0:b4:9b:03:54:62:52:46:ad:ac:20:e3:3c:96:ea: ec:ae:90:ce:f2:3d:e2:2e:60:c9:d4:31:b7:8d:26:ff:cf:e2: 76:46:73:42:2c:ff:f4:66:a6:19:5e:f6:16:57:63:be:5a:51: f5:e3:c9:75:d2:e6:35:d1:5f:aa:00:84:0b:0a:5c:a5:af:64: a2:89:6e:14:56:02:a9:4f:d6:59:2f:89:13:c5:34:be:7d:90: 02:49:c7:16:cc:d9:72:e1:11:7f:f5:00:0a:1c:74:20:1e:f6: cc:58:70:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+SCH5HhPs2jvXFpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyMTAxMDAxMloXDTI3MDExOTAyMDAxMlowLzEtMCsGA1UEAxMk OWJkYWM2ZjktMzc4ZC00OTE4LTgyMDAtZjRmYmRkNTdkMzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhodkfQMcs4fx9rJP06fzaBtgzNx4PK1tIcVA 70Ea4v2RYXDL5hrFh4aKS4GA5Gw0eJPaWD94lbKEuN/a+iQ4GjnouMwiNt+OpUHe KztwsKjCn4h2WExcn1NAq6alhlcJ3gWVpVCTilu67VD684iX3vOk4eEeUUPM+KCC UxH/v6imMgOw0LsttB05JJhRPWOBcOiA2do/ogqsbYcgXZiesM1fz85ijbfUVA2d 9avcySXmkLQhQK7bPt1IRCuOJKJw4tYPA/bju/QnVgGYR7QqbhWbjKGR62EXL4YG jHdcvEFgU+TBsiVBoIokMHKumwBR0Dp9nsLu2agReDeqQ1ITZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtUDWriUAcC67mlJaS+NTTWA/xtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOWYzYzk4ZDQtZGM1YS0z ODc1LWE4NDUtYWNiOTUyNTEyNWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJrRCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZIbuK5i1NrnqpMlmRXdm+5M5YEAvrnsQ2j9X+tcdQqV19vnAjgZVfy wZ2wZeprlH9tUd01HX1Ab17cUc+3iKH1txhgYBTDARGmtJ4WL9IelzPn41V2nosW 8DO5mfWb/Y6cD1iHAQxdC1kPzVfHH1rICzXmUYQscLLkmhOdxZv10aIPRfpauwGC lNke5T4p1zrqKuC0mwNUYlJGrawg4zyW6uyukM7yPeIuYMnUMbeNJv/P4nZGc0Is //Rmphle9hZXY75aUfXjyXXS5jXRX6oAhAsKXKWvZKKJbhRWAqlP1lkviRPFNL59 kAJJxxbM2XLhEX/1AAocdCAe9sxYcHw= -----END CERTIFICATE-----Generated at Tue Oct 27 17:24:29 2026 by rpki-client