$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ad539036-4cb7-37a4-a9e1-99fc6935167b.roa File: ad539036-4cb7-37a4-a9e1-99fc6935167b.roa (raw, json) Hash identifier: qSXDu5NtLwAAr3UrYfXsE7PXQGy2v7jlOQmxEOHugqs= Subject key identifier: F3:09:86:DD:E0:73:5D:DC:EC:4B:B5:DB:83:FB:07:23:16:04:33:CA Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F66C2C7FF1E8D4F553C3F2FB0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ad539036-4cb7-37a4-a9e1-99fc6935167b.roa Signing time: Mon 05 Oct 2026 13:00:13 +0000 ROA not before: Mon 05 Oct 2026 13:00:13 +0000 ROA not after: Sun 03 Jan 2027 14:00:13 +0000 asID: 61461 IP address blocks: 38.25.128.0/17 maxlen: 24 38.166.0.0/16 maxlen: 24 38.171.0.0/16 maxlen: 24 206.0.224.0/19 maxlen: 24 206.1.128.0/17 maxlen: 24 206.62.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:c2:c7:ff:1e:8d:4f:55:3c:3f:2f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 5 13:00:13 2026 GMT Not After : Jan 3 14:00:13 2027 GMT Subject: CN=72b21823-fe1d-4165-88e6-735d57dc11b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c2:a6:c1:69:26:4e:40:ad:80:30:19:9c:42: be:10:b0:19:cb:f7:ef:95:f6:69:f4:27:4e:1c:0a: 37:c0:c6:66:92:25:bd:2a:2c:ad:e3:5b:cb:cc:76: 3c:be:78:cf:01:1b:f1:a6:b0:ad:3e:14:d9:0c:9e: 78:20:3b:cf:1c:ca:34:3c:40:f0:9a:a9:38:50:f0: bf:f8:f5:02:75:64:72:97:2a:e9:88:df:15:50:44: c6:42:15:69:d9:a0:d9:71:44:7b:8d:c0:86:1e:da: 1e:a7:01:cc:e8:ce:5c:2d:15:46:9e:3c:2c:ba:f8: cb:26:ff:33:48:99:2e:12:4f:d7:c5:bb:1f:09:f7: 12:91:f2:72:8a:fc:5d:ec:0d:61:2e:d7:fa:e9:6f: 0f:05:6f:3b:5a:e9:e6:e5:b6:87:ad:50:ed:03:18: b1:76:bc:e0:2b:ad:eb:3e:38:18:c1:ca:fd:71:ac: c9:78:dd:49:6a:ef:ac:50:2e:22:5b:c0:1a:5f:5b: a0:b5:7c:2a:f9:d8:4e:11:df:61:79:dc:86:44:ad: 32:39:93:8e:45:5e:ef:3a:6e:8f:b1:3e:5a:d6:b5: 29:2c:a2:d9:62:0f:7a:83:32:6b:b5:09:75:68:93: 79:1d:fd:c0:63:7b:c7:c3:be:77:71:8d:85:12:87: 18:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:09:86:DD:E0:73:5D:DC:EC:4B:B5:DB:83:FB:07:23:16:04:33:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ad539036-4cb7-37a4-a9e1-99fc6935167b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.25.128.0/17 38.166.0.0/16 38.171.0.0/16 206.0.224.0/19 206.1.128.0/17 206.62.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:2b:c0:0f:39:ff:af:66:22:5d:df:44:78:63:dd:b6:97:53: e2:19:0c:ea:cf:c6:c5:85:65:30:f2:f5:78:92:2a:b0:f8:4a: 18:42:6a:2e:d2:51:3a:ef:cc:d9:b4:0c:66:ed:b9:40:34:14: 5a:cb:d2:f8:d6:b2:2f:28:78:1c:6b:07:53:8d:03:10:6c:0a: a0:49:6c:3e:12:fa:65:fc:13:2d:ae:41:37:24:6c:09:b5:3d: aa:8f:6d:fb:f1:1b:a5:05:1a:d5:e1:85:5e:f9:0c:32:06:43: 99:e9:f5:72:57:cf:e6:09:e3:da:c0:65:6b:17:6e:ea:ac:8a: 7a:24:a8:69:f9:f6:68:ee:8c:d5:c8:ff:86:25:4b:7a:b8:78: 1b:ea:9c:9b:d7:cf:0a:43:ba:5f:2c:47:42:09:50:f0:af:41: 21:d8:12:99:31:d1:ea:f6:00:e7:91:09:18:93:f0:d6:62:07: 0d:35:e4:73:f7:23:3e:3f:4a:20:49:64:b9:4a:6b:c6:45:d3: 09:bd:14:f5:b5:ee:72:ec:8e:7f:66:ae:fb:5c:4e:78:74:58: 2b:6a:6d:7f:68:50:01:35:d7:ad:4e:53:9d:f4:23:ad:4d:1a: 09:42:ab:0d:99:4c:bd:91:5c:fe:cf:6c:4b:64:2a:5f:fe:f6: 50:20:21:89 -----BEGIN CERTIFICATE----- MIIGXzCCBUegAwIBAgIUAQ0Mn0MoWE9mwsf/Ho1PVTw/L7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwNTEzMDAxM1oXDTI3MDEwMzE0MDAxM1owLzEtMCsGA1UEAxMk NzJiMjE4MjMtZmUxZC00MTY1LTg4ZTYtNzM1ZDU3ZGMxMWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sKmwWkmTkCtgDAZnEK+ELAZy/fvlfZp9CdO HAo3wMZmkiW9Kiyt41vLzHY8vnjPARvxprCtPhTZDJ54IDvPHMo0PEDwmqk4UPC/ +PUCdWRylyrpiN8VUETGQhVp2aDZcUR7jcCGHtoepwHM6M5cLRVGnjwsuvjLJv8z SJkuEk/XxbsfCfcSkfJyivxd7A1hLtf66W8PBW87Wunm5baHrVDtAxixdrzgK63r PjgYwcr9cazJeN1Jau+sUC4iW8AaX1ugtXwq+dhOEd9hedyGRK0yOZOORV7vOm6P sT5a1rUpLKLZYg96gzJrtQl1aJN5Hf3AY3vHw753cY2FEocY/QIDAQABo4IDcTCC A20wHQYDVR0OBBYEFPMJht3gc13c7Eu124P7ByMWBDPKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYWQ1MzkwMzYtNGNiNy0z N2E0LWE5ZTEtOTlmYzY5MzUxNjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQHJhmAAwMA JqYDAwAmqwMEBc4A4AMEB84BgAMEBc4+oDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA4K8APOf+vZiJd30R4 Y922l1PiGQzqz8bFhWUw8vV4kiqw+EoYQmou0lE678zZtAxm7blANBRay9L41rIv KHgcawdTjQMQbAqgSWw+Evpl/BMtrkE3JGwJtT2qj2378RulBRrV4YVe+QwyBkOZ 6fVyV8/mCePawGVrF27qrIp6JKhp+fZo7ozVyP+GJUt6uHgb6pyb188KQ7pfLEdC CVDwr0Eh2BKZMdHq9gDnkQkYk/DWYgcNNeRz9yM+P0ogSWS5SmvGRdMJvRT1te5y 7I5/Zq77XE54dFgram1/aFABNdetTlOd9COtTRoJQqsNmUy9kVz+z2xLZCpf/vZQ ICGJ -----END CERTIFICATE-----Generated at Tue Oct 27 18:15:35 2026 by rpki-client