$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a7fb1e03-31b7-3f7e-9d52-d8f5dbe8b452.roa File: a7fb1e03-31b7-3f7e-9d52-d8f5dbe8b452.roa (raw, json) Hash identifier: 3c/tN1LtEzZFdbwWI+ODnK7dysT75rGJ8SLBWMzEhEU= Subject key identifier: 4C:81:6B:83:A2:14:BC:43:CB:30:B1:90:5F:E3:33:7B:09:44:7B:14 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F5903FFAC960878E68B0E5380 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a7fb1e03-31b7-3f7e-9d52-d8f5dbe8b452.roa Signing time: Wed 30 Sep 2026 14:50:27 +0000 ROA not before: Wed 30 Sep 2026 14:50:27 +0000 ROA not after: Tue 29 Dec 2026 15:50:27 +0000 asID: 136625 IP address blocks: 38.146.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:59:03:ff:ac:96:08:78:e6:8b:0e:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 30 14:50:27 2026 GMT Not After : Dec 29 15:50:27 2026 GMT Subject: CN=5b94409a-2c5d-44e3-ac50-4f8171e3865c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:27:49:f2:6d:d4:df:a1:73:80:f5:44:fb:1d: d0:4f:7f:81:8e:d5:63:6e:5c:66:85:91:f0:67:7c: 6e:97:e0:60:e1:15:96:92:ee:5e:91:b0:e9:0e:e1: 91:0e:0f:dd:a6:01:4e:30:00:07:dd:5f:d2:e1:5b: c3:9c:80:32:72:b0:46:2f:b4:7e:80:23:99:18:93: 9d:72:14:1e:3b:44:13:96:83:ba:dc:36:f4:52:87: 6a:34:d2:83:7c:0b:97:ab:f8:14:0a:7d:91:63:0b: 82:81:57:08:e5:06:44:79:42:2e:14:a4:19:bc:2b: 82:dd:b8:9b:15:8d:41:8e:c4:a2:a5:4f:0b:cc:d1: 16:c5:2e:8d:49:5f:2e:e5:27:10:19:ed:b5:b5:c0: 6d:15:3d:22:61:80:a4:a7:5a:8e:26:ae:49:30:28: d3:70:0b:f4:8a:a3:f6:0c:b4:e3:d2:cf:e9:21:99: 93:a2:1e:8c:26:46:b4:82:91:6b:fa:9e:87:75:05: c2:67:35:1a:11:b8:34:b4:fe:a3:d8:72:ba:07:ed: a7:ad:25:d5:49:92:d3:74:41:34:e8:2f:76:a2:3a: 44:91:9c:60:0a:d1:71:ff:1c:d1:56:16:19:15:a9: 37:c0:ee:98:87:00:7c:70:ac:ca:6d:c1:63:e7:7c: 43:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:81:6B:83:A2:14:BC:43:CB:30:B1:90:5F:E3:33:7B:09:44:7B:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a7fb1e03-31b7-3f7e-9d52-d8f5dbe8b452.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.146.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:01:eb:f1:14:1b:4e:9a:71:b9:5b:82:1d:4b:74:0d:00:fe: e2:22:25:91:d2:3f:cf:bc:9d:2f:ce:0a:3b:cd:9f:db:51:cb: 0e:d4:2b:be:11:f5:76:69:75:0d:7e:f4:72:c7:95:21:55:22: ec:bb:00:c0:78:aa:0c:60:20:ac:89:31:11:03:a3:e4:63:0a: 3b:8b:c1:c5:0d:26:1c:2c:6a:5d:3f:d2:96:f5:e5:5b:3e:d3: c8:ca:b3:d9:6c:79:c8:c0:51:21:eb:9e:c7:9e:67:20:15:79: ca:e9:cb:c1:49:5c:d8:6f:02:ce:72:26:64:b4:ef:a1:86:2f: af:96:9f:d1:62:c8:dc:5b:60:2d:24:c4:72:f2:da:ec:fc:aa: 66:af:52:a0:1c:60:13:9b:15:b5:27:89:ae:98:fe:7a:39:9d: e8:10:18:1c:28:4d:53:ea:42:14:f6:b5:b3:1d:c1:51:68:0c: 02:72:b9:05:b4:7a:07:e9:e1:47:db:d0:94:5c:6e:6d:72:dd: 99:a9:f0:86:3d:17:8e:8f:a6:20:61:fd:6d:ee:68:a6:a0:7a: 1f:70:52:45:36:56:27:dd:5c:2e:45:d3:8a:e2:62:81:d5:82: df:e4:0a:d2:16:9d:c2:c8:3e:3c:42:ac:fb:2c:e7:22:2d:3c: a5:22:b7:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ZA/+slgh45osOU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkzMDE0NTAyN1oXDTI2MTIyOTE1NTAyN1owLzEtMCsGA1UEAxMk NWI5NDQwOWEtMmM1ZC00NGUzLWFjNTAtNGY4MTcxZTM4NjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCdJ8m3U36FzgPVE+x3QT3+BjtVjblxmhZHw Z3xul+Bg4RWWku5ekbDpDuGRDg/dpgFOMAAH3V/S4VvDnIAycrBGL7R+gCOZGJOd chQeO0QTloO63Db0UodqNNKDfAuXq/gUCn2RYwuCgVcI5QZEeUIuFKQZvCuC3bib FY1BjsSipU8LzNEWxS6NSV8u5ScQGe21tcBtFT0iYYCkp1qOJq5JMCjTcAv0iqP2 DLTj0s/pIZmToh6MJka0gpFr+p6HdQXCZzUaEbg0tP6j2HK6B+2nrSXVSZLTdEE0 6C92ojpEkZxgCtFx/xzRVhYZFak3wO6YhwB8cKzKbcFj53xDKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyBa4OiFLxDyzCxkF/jM3sJRHsUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTdmYjFlMDMtMzFiNy0z ZjdlLTlkNTItZDhmNWRiZThiNDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJpLJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQB6/EUG06acblbgh1LdA0A/uIiJZHSP8+8nS/OCjvNn9tRyw7UK74R 9XZpdQ1+9HLHlSFVIuy7AMB4qgxgIKyJMREDo+RjCjuLwcUNJhwsal0/0pb15Vs+ 08jKs9lsecjAUSHrnseeZyAVecrpy8FJXNhvAs5yJmS076GGL6+Wn9FiyNxbYC0k xHLy2uz8qmavUqAcYBObFbUnia6Y/no5negQGBwoTVPqQhT2tbMdwVFoDAJyuQW0 egfp4Ufb0JRcbm1y3Zmp8IY9F46PpiBh/W3uaKageh9wUkU2VifdXC5F04riYoHV gt/kCtIWncLIPjxCrPss5yItPKUit7M= -----END CERTIFICATE-----Generated at Mon Oct 26 00:33:00 2026 by rpki-client