$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/afe8feb6-573f-3243-8ca6-ec83906a9ba6.roa File: afe8feb6-573f-3243-8ca6-ec83906a9ba6.roa (raw, json) Hash identifier: leZDXkv49AMgzV4ivvvBiGtr0hFf9p8dRoH9daJJmO0= Subject key identifier: B8:17:63:4B:B0:25:3F:24:E7:0B:8D:E7:8A:96:A8:51:AF:54:32:1B Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F9A68C28AD9DA48EC7D544540 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/afe8feb6-573f-3243-8ca6-ec83906a9ba6.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 61622 IP address blocks: 38.225.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:c2:8a:d9:da:48:ec:7d:54:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=d6a89ad1-9e9e-47a1-9eb4-e0de662da060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d7:c8:be:d9:63:c1:3e:65:cb:95:59:e5:f2: 31:d9:7a:6f:bc:35:c9:f2:c3:f8:be:89:f3:42:50: 9f:04:a7:c1:48:08:81:0b:62:ca:3f:25:bf:a4:ac: 92:71:bf:cd:3c:f8:46:94:1a:c6:78:be:35:25:b6: 51:a9:13:d5:80:de:b5:c7:8b:a9:4d:82:bd:9b:e8: c9:62:d0:bf:3b:11:fa:15:d3:95:19:80:f9:b7:30: 39:3c:a6:78:2c:af:05:ab:3e:53:97:cf:7e:7b:aa: c0:73:71:76:b8:e3:84:31:5a:b6:35:4a:6f:f4:ac: 3d:5a:5a:42:5d:38:5d:ef:d2:ca:9c:b8:96:6e:3b: 74:8a:25:ea:70:2c:a2:21:cb:83:9f:4c:fe:d6:6a: 7c:19:00:67:a6:c6:42:f2:d3:02:0d:08:3a:3c:f1: bd:1d:e9:ae:9a:d8:14:bb:32:fe:02:04:30:38:2d: c8:97:4c:84:45:74:19:e5:26:82:ee:ff:b2:b2:ce: f5:a5:ed:ea:82:06:d8:d6:d4:25:33:07:1f:69:16: 27:ea:07:76:a1:71:ae:a1:ba:7d:20:26:f9:82:49: 28:5c:83:8d:95:6e:54:9a:ce:ab:80:2f:67:2a:53: c1:cb:f5:a8:cb:70:15:40:94:19:dd:0c:a6:9a:9e: 00:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:17:63:4B:B0:25:3F:24:E7:0B:8D:E7:8A:96:A8:51:AF:54:32:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/afe8feb6-573f-3243-8ca6-ec83906a9ba6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.225.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:79:46:7f:d7:5f:5c:4c:40:7a:82:39:53:ae:b1:0a:49:c2: 67:d3:1a:18:69:bb:12:b0:48:81:5f:7c:40:ec:b3:51:9b:0a: 9a:ff:e2:58:eb:bc:3c:71:2f:74:29:04:43:77:f4:d1:8b:b3: f5:f8:95:0a:b2:b3:33:5b:b8:14:e7:21:78:18:43:39:d9:96: 44:78:18:c3:b3:5c:42:dd:07:44:5d:a9:84:cf:7b:5a:ad:60: d3:dd:19:0c:87:a4:cf:8e:ab:02:a2:55:1b:86:19:58:e1:88: 93:69:ec:86:dc:de:f8:39:0a:27:48:b6:4e:08:1e:98:0f:8c: ad:32:46:05:14:56:33:53:e9:aa:b1:91:c2:32:20:e5:8c:45: 6c:2d:f0:f2:1f:81:fd:96:07:46:b6:06:4f:f6:1f:27:99:59: 05:7b:86:29:27:f3:eb:63:4c:53:ef:f2:cf:a2:60:3e:00:34: 28:4d:8d:c4:ed:5e:cf:56:87:e5:b3:6e:06:a0:59:6f:49:a1: 58:4b:76:67:9b:86:aa:33:85:33:5e:8e:58:f3:9d:bf:93:16: 60:9d:bf:78:d5:43:99:09:54:25:9c:a6:bc:9f:8c:b3:69:2f: 8a:1c:05:d9:fc:f9:b5:ab:72:6e:9a:7e:83:54:91:14:a3:23: 8b:a1:40:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaMKK2dpI7H1URUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk ZDZhODlhZDEtOWU5ZS00N2ExLTllYjQtZTBkZTY2MmRhMDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9fIvtljwT5ly5VZ5fIx2XpvvDXJ8sP4vonz QlCfBKfBSAiBC2LKPyW/pKyScb/NPPhGlBrGeL41JbZRqRPVgN61x4upTYK9m+jJ YtC/OxH6FdOVGYD5tzA5PKZ4LK8Fqz5Tl89+e6rAc3F2uOOEMVq2NUpv9Kw9WlpC XThd79LKnLiWbjt0iiXqcCyiIcuDn0z+1mp8GQBnpsZC8tMCDQg6PPG9HemumtgU uzL+AgQwOC3Il0yERXQZ5SaC7v+yss71pe3qggbY1tQlMwcfaRYn6gd2oXGuobp9 ICb5gkkoXIONlW5Ums6rgC9nKlPBy/Woy3AVQJQZ3Qymmp4ADwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgXY0uwJT8k5wuN54qWqFGvVDIbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYWZlOGZlYjYtNTczZi0z MjQzLThjYTYtZWM4MzkwNmE5YmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJuHxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJ5Rn/XX1xMQHqCOVOusQpJwmfTGhhpuxKwSIFffEDss1GbCpr/4ljr vDxxL3QpBEN39NGLs/X4lQqyszNbuBTnIXgYQznZlkR4GMOzXELdB0RdqYTPe1qt YNPdGQyHpM+OqwKiVRuGGVjhiJNp7Ibc3vg5CidItk4IHpgPjK0yRgUUVjNT6aqx kcIyIOWMRWwt8PIfgf2WB0a2Bk/2HyeZWQV7hikn8+tjTFPv8s+iYD4ANChNjcTt Xs9Wh+WzbgagWW9JoVhLdmebhqozhTNejljznb+TFmCdv3jVQ5kJVCWcpryfjLNp L4ocBdn8+bWrcm6afoNUkRSjI4uhQMs= -----END CERTIFICATE-----Generated at Tue Oct 27 14:12:08 2026 by rpki-client