$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/aa1bbbad-2171-30bf-9352-23650a557002.roa File: aa1bbbad-2171-30bf-9352-23650a557002.roa (raw, json) Hash identifier: Ek+4wGLvmGkjKCEXhrT9XnHvb8pSYmvhyTODl7C9+l0= Subject key identifier: 9B:E8:37:DB:3C:6F:C8:79:42:CA:CE:01:44:21:72:C7:3C:AB:6A:ED Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F8F3DEDA902BF153DE11E5820 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/aa1bbbad-2171-30bf-9352-23650a557002.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 152179 IP address blocks: 38.246.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:ed:a9:02:bf:15:3d:e1:1e:58:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=d6f800fb-0bb5-46a6-8154-d689d9b4ff02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7c:2c:f4:1b:b9:03:db:d1:4a:67:7e:c9:ea: ff:29:61:a1:7c:91:9e:a9:64:b9:f5:24:f5:13:1c: 02:da:2c:13:75:1d:82:6f:5b:cc:f2:10:ff:86:66: ac:d9:e0:48:f8:e5:4b:0a:82:07:a8:6d:af:28:d1: b2:f8:05:20:65:1e:f4:eb:f4:54:77:f7:60:b3:b9: 2d:e1:cb:5b:86:cf:47:d3:59:87:c0:ed:82:15:46: c1:7e:f6:62:54:85:a5:d6:a4:74:9d:c6:5b:ee:20: 2e:8c:10:46:7f:a8:9a:5e:25:e2:b3:44:a1:4a:54: 24:3c:4a:8e:c2:1e:4f:65:79:76:3e:6b:ad:65:b4: e5:b6:a6:7c:fb:d0:5a:59:81:e4:2f:61:56:6e:32: dd:95:e3:40:a2:f2:e4:16:5e:ec:8d:4d:8c:4d:30: dd:ea:bb:07:e7:58:2e:12:e5:aa:26:d1:38:c2:d0: e1:0a:89:17:c2:bc:31:2a:94:8e:5d:aa:95:ee:f7: e3:ca:74:49:6c:30:59:d8:59:cb:7d:de:ee:74:7b: ca:82:6a:0a:55:15:f9:58:ed:74:c9:c0:84:b5:a7: 98:37:14:47:c8:ae:c9:2a:46:04:89:fc:8e:23:20: 23:94:9c:d8:4d:6b:2b:50:d5:92:8c:ff:0f:a9:41: b6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E8:37:DB:3C:6F:C8:79:42:CA:CE:01:44:21:72:C7:3C:AB:6A:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/aa1bbbad-2171-30bf-9352-23650a557002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.246.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:be:29:47:62:79:9c:ae:99:03:51:9d:83:f7:20:be:b4:d4: ef:97:16:c3:fc:92:5a:2f:2e:84:1f:ad:a7:55:82:72:20:32: 1a:16:74:e9:9e:24:f5:0c:2f:63:f8:a7:85:fa:63:fc:37:25: 74:b0:f5:5e:1c:5f:b0:02:75:8b:20:65:b9:16:3b:3d:eb:d3: 63:18:e1:5f:b7:50:de:3e:fe:dc:89:f6:00:7b:cd:9b:fd:87: d0:44:79:a6:a1:09:fd:ac:f3:04:ef:35:78:77:66:82:b5:20: 87:6b:69:f3:2e:e7:4c:c8:7c:79:56:c8:72:5c:bf:f4:25:4f: 70:99:8c:3f:c7:00:a8:0c:90:2f:10:18:8d:6f:22:26:59:86: 5d:fb:d9:51:c5:40:f4:dc:0c:90:25:dc:a2:f4:23:4e:e5:da: b2:fd:87:52:a3:1f:0c:62:e1:1b:64:98:a9:e3:f8:c9:a1:4a: 83:7f:7e:df:39:6b:fe:5a:b8:10:84:b1:0a:b8:49:71:4c:72: 22:fe:4e:a8:0e:49:30:ae:70:ef:bb:0d:05:46:9e:f3:0a:73: bb:f0:a6:5d:20:68:9c:83:78:d0:5f:97:ed:a0:d1:5e:8a:b0: 6e:69:58:51:b8:34:e7:24:80:c7:7d:fe:e2:2f:aa:15:d0:ef: c3:5a:61:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPe2pAr8VPeEeWCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk ZDZmODAwZmItMGJiNS00NmE2LTgxNTQtZDY4OWQ5YjRmZjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHws9Bu5A9vRSmd+yer/KWGhfJGeqWS59ST1 ExwC2iwTdR2Cb1vM8hD/hmas2eBI+OVLCoIHqG2vKNGy+AUgZR706/RUd/dgs7kt 4ctbhs9H01mHwO2CFUbBfvZiVIWl1qR0ncZb7iAujBBGf6iaXiXis0ShSlQkPEqO wh5PZXl2PmutZbTltqZ8+9BaWYHkL2FWbjLdleNAovLkFl7sjU2MTTDd6rsH51gu EuWqJtE4wtDhCokXwrwxKpSOXaqV7vfjynRJbDBZ2FnLfd7udHvKgmoKVRX5WO10 ycCEtaeYNxRHyK7JKkYEifyOIyAjlJzYTWsrUNWSjP8PqUG2nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvoN9s8b8h5QsrOAUQhcsc8q2rtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYWExYmJiYWQtMjE3MS0z MGJmLTkzNTItMjM2NTBhNTU3MDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJvaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADO+KUdieZyumQNRnYP3IL601O+XFsP8klovLoQfradVgnIgMhoWdOme JPUML2P4p4X6Y/w3JXSw9V4cX7ACdYsgZbkWOz3r02MY4V+3UN4+/tyJ9gB7zZv9 h9BEeaahCf2s8wTvNXh3ZoK1IIdrafMu50zIfHlWyHJcv/QlT3CZjD/HAKgMkC8Q GI1vIiZZhl372VHFQPTcDJAl3KL0I07l2rL9h1KjHwxi4RtkmKnj+MmhSoN/ft85 a/5auBCEsQq4SXFMciL+TqgOSTCucO+7DQVGnvMKc7vwpl0gaJyDeNBfl+2g0V6K sG5pWFG4NOckgMd9/uIvqhXQ78NaYTE= -----END CERTIFICATE-----Generated at Tue Oct 27 15:04:58 2026 by rpki-client