$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/afab8d3f-618a-3c7b-8343-aa87c9e98597.roa File: afab8d3f-618a-3c7b-8343-aa87c9e98597.roa (raw, json) Hash identifier: sdAZS4wjdNKHOqH3I3r/bReGGpdWSYjsnPDwQzkVxzQ= Subject key identifier: C3:98:C6:6B:3B:98:80:97:7E:AB:D0:6E:2C:2E:7B:AA:75:B4:33:2E Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F8DD893F3DA973F1765DDB500 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/afab8d3f-618a-3c7b-8343-aa87c9e98597.roa Signing time: Mon 19 Oct 2026 13:00:12 +0000 ROA not before: Mon 19 Oct 2026 13:00:12 +0000 ROA not after: Sun 17 Jan 2027 14:00:12 +0000 asID: 174 IP address blocks: 38.150.17.0/24 maxlen: 24 154.18.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d8:93:f3:da:97:3f:17:65:dd:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 19 13:00:12 2026 GMT Not After : Jan 17 14:00:12 2027 GMT Subject: CN=6b055012-1d90-46ee-af76-5d5b736cb728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:96:ab:1e:ef:05:25:dc:8f:a1:7b:02:8e:71: f7:67:aa:42:ee:68:d5:14:a9:a3:02:ce:df:11:24: 7a:7d:be:ce:92:f7:3b:c5:6c:8c:0b:5b:eb:76:1e: 75:77:29:92:f5:e5:36:80:4f:8d:28:1e:65:20:e8: ce:7b:5a:bf:04:72:a4:2f:4c:ce:ae:89:05:96:85: 40:95:19:8c:c5:80:ca:e9:7a:cb:e6:40:50:d8:24: bd:65:c2:74:c9:fe:15:13:3b:f4:d1:6b:31:eb:4b: 1b:5f:94:ed:6f:ff:c2:76:b1:03:76:95:0d:49:06: 6e:99:10:86:6e:bd:77:f4:76:a1:db:07:1f:90:54: 1b:87:4f:a0:66:71:c5:1a:54:38:93:3d:5d:e9:27: 3a:25:3d:46:05:84:39:ea:45:3f:72:8a:07:59:c5: 60:63:4c:13:26:18:dc:75:89:69:54:11:7f:f6:ae: f0:3d:ee:9c:8f:df:3f:a1:5d:d9:65:8e:da:c2:f6: 6a:76:55:79:a7:6f:86:b3:dc:1b:e8:e0:5d:b5:d6: 8e:e4:73:4a:71:fd:a3:5a:b8:87:9b:a2:fa:64:e8: 4a:01:52:da:86:9b:1f:82:8f:c4:2a:7e:fe:6b:c1: 1c:a4:32:a6:55:c7:51:95:3a:cb:de:e1:88:9f:d9: 63:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:98:C6:6B:3B:98:80:97:7E:AB:D0:6E:2C:2E:7B:AA:75:B4:33:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/afab8d3f-618a-3c7b-8343-aa87c9e98597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.150.17.0/24 154.18.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:54:c8:0f:7a:99:c7:49:31:93:01:b1:84:e2:7c:6b:8a:b4: 84:ca:2b:01:92:f1:4d:c4:9a:46:ca:fb:ca:48:29:8b:b0:f0: f6:3f:40:34:9f:4f:db:c9:bd:2f:12:87:09:f8:66:40:94:1a: 09:75:6d:55:ed:77:ea:bf:08:fc:3f:b7:13:79:1f:cc:98:5c: 62:f5:bc:f4:b1:fb:5a:6a:cf:d2:d5:25:80:a3:8b:c2:c7:99: f0:0e:6c:3f:8e:bc:87:c3:26:e2:d7:0a:14:35:24:9c:45:8e: 4d:cc:76:b7:96:93:1f:50:45:89:0b:9c:be:0c:60:a5:e0:49: e1:56:95:84:29:1b:5b:b3:57:e9:b1:9b:cb:9b:e4:a8:94:87: 17:61:76:32:87:ad:ea:a3:7a:be:f8:1a:c1:5e:52:f2:80:ba: 55:ca:9d:d2:c4:51:4b:8a:2f:9a:de:f1:84:d5:10:2a:89:5a: 1e:1b:22:4a:37:88:03:ba:54:76:d2:53:81:e8:8d:a3:eb:40: 63:26:e3:28:08:2a:58:62:51:6d:a9:9e:7e:50:37:3f:d5:52: b6:24:19:14:09:58:6d:83:ee:6e:42:85:90:53:13:55:db:b1: 5b:09:4f:b1:47:f2:da:38:5c:b5:7e:43:ed:29:0f:7d:f8:1a: 56:d8:91:bd -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE+N2JPz2pc/F2XdtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk NmIwNTUwMTItMWQ5MC00NmVlLWFmNzYtNWQ1YjczNmNiNzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZarHu8FJdyPoXsCjnH3Z6pC7mjVFKmjAs7f ESR6fb7Okvc7xWyMC1vrdh51dymS9eU2gE+NKB5lIOjOe1q/BHKkL0zOrokFloVA lRmMxYDK6XrL5kBQ2CS9ZcJ0yf4VEzv00Wsx60sbX5Ttb//CdrEDdpUNSQZumRCG br139Hah2wcfkFQbh0+gZnHFGlQ4kz1d6Sc6JT1GBYQ56kU/cooHWcVgY0wTJhjc dYlpVBF/9q7wPe6cj98/oV3ZZY7awvZqdlV5p2+Gs9wb6OBdtdaO5HNKcf2jWriH m6L6ZOhKAVLahpsfgo/EKn7+a8EcpDKmVcdRlTrL3uGIn9ljlwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMOYxms7mICXfqvQbiwue6p1tDMuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYWZhYjhkM2YtNjE4YS0z YzdiLTgzNDMtYWE4N2M5ZTk4NTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJpYRAwQA mhLiMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACdUyA96mcdJMZMBsYTifGuKtITKKwGS8U3EmkbK+8pIKYuw 8PY/QDSfT9vJvS8Shwn4ZkCUGgl1bVXtd+q/CPw/txN5H8yYXGL1vPSx+1pqz9LV JYCji8LHmfAObD+OvIfDJuLXChQ1JJxFjk3MdreWkx9QRYkLnL4MYKXgSeFWlYQp G1uzV+mxm8ub5KiUhxdhdjKHreqjer74GsFeUvKAulXKndLEUUuKL5re8YTVECqJ Wh4bIko3iAO6VHbSU4HojaPrQGMm4ygIKlhiUW2pnn5QNz/VUrYkGRQJWG2D7m5C hZBTE1XbsVsJT7FH8to4XLV+Q+0pD334GlbYkb0= -----END CERTIFICATE-----Generated at Wed Oct 28 11:41:13 2026 by rpki-client