$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b3a04e9d-aa12-30a3-a1b3-da39ed9df272.roa File: b3a04e9d-aa12-30a3-a1b3-da39ed9df272.roa (raw, json) Hash identifier: 2j81Bec6nI70luBek+yWvSZQ/d9pPHXv573UHHfNABg= Subject key identifier: 78:77:D4:67:BA:EC:4E:22:7D:4C:9C:53:4D:9A:75:79:E9:F6:FA:E9 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F4B6FA30198C4943DE009E7A0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b3a04e9d-aa12-30a3-a1b3-da39ed9df272.roa Signing time: Fri 25 Sep 2026 18:06:01 +0000 ROA not before: Fri 25 Sep 2026 18:06:01 +0000 ROA not after: Thu 24 Dec 2026 19:06:01 +0000 asID: 274869 IP address blocks: 38.172.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4b:6f:a3:01:98:c4:94:3d:e0:09:e7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 25 18:06:01 2026 GMT Not After : Dec 24 19:06:01 2026 GMT Subject: CN=118b96a0-9aa6-43c1-b7e0-4a582d74fc8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:23:6d:88:cc:80:af:bc:4f:c2:5f:d0:1d:5b: 00:ea:df:1c:9f:f2:ce:4b:68:a7:96:b2:4c:f3:3d: 24:0d:ca:6d:53:87:b2:ad:bb:c6:98:b2:c0:8c:81: 8e:52:1d:8b:fd:23:e1:9e:94:7b:d8:e1:95:fa:31: c0:93:b1:2d:2f:77:e5:c9:45:28:45:97:f9:90:fd: 16:91:ab:60:c4:06:62:84:1c:f5:59:af:79:d1:14: 56:1e:e7:07:81:fc:9b:b8:6b:07:7d:e4:00:5a:11: 0c:19:ee:6c:ef:7a:eb:46:7e:1e:e1:20:6c:b7:f9: bb:0e:ec:4f:34:4f:9d:03:77:ac:4f:a5:e6:21:f9: 60:89:db:54:a6:8b:90:c3:f9:4d:a6:87:49:e3:ea: 63:86:62:44:2c:5e:9a:f6:c7:e1:67:77:02:b6:bc: 0b:6c:f6:dd:2d:85:2a:e6:88:6b:90:de:fa:1c:e8: 20:06:bf:8b:8a:36:28:f9:20:67:1a:ed:e8:aa:5a: 0c:a7:f4:80:b5:0c:72:ee:d3:fe:91:4e:11:1e:ea: e3:0b:df:3e:7c:dc:c8:9c:4b:75:0b:e0:df:1b:1e: c6:78:08:a6:45:d0:c2:cc:f1:4c:9d:0a:e4:71:03: d9:9a:f7:d3:ee:8d:f5:8e:11:15:cd:66:56:59:1a: 1e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:77:D4:67:BA:EC:4E:22:7D:4C:9C:53:4D:9A:75:79:E9:F6:FA:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b3a04e9d-aa12-30a3-a1b3-da39ed9df272.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.172.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:7e:cc:77:ad:f9:7c:62:13:a7:74:7a:3d:06:b4:77:0e:b9: 52:8a:0a:33:a2:83:f4:e6:06:e3:46:e9:f1:45:e6:c2:fc:3b: 8c:6e:d1:ec:a3:bf:54:fd:f7:c4:03:25:4e:6d:0d:e3:a1:8b: 1b:0d:fa:7a:95:ce:1e:ef:ae:a7:7f:d5:84:71:40:d5:2a:fc: 9b:71:9a:8c:4a:3a:bd:13:75:49:d2:fd:57:bb:12:9b:c2:33: c1:f0:ee:e6:d4:95:ca:0c:94:e2:99:ab:cc:10:f3:24:bd:f8: 93:87:5e:49:33:d6:67:12:1b:88:3c:5e:71:f0:78:9e:ad:6e: 38:3d:92:57:e4:96:86:34:e6:84:04:81:c2:d4:25:16:ee:22: 67:73:34:82:4d:a7:cf:ea:aa:54:18:da:ce:36:a3:1c:05:8b: 0a:4f:0a:d4:07:e8:d6:98:b9:1e:5b:a5:73:73:7e:b1:a0:96: 83:82:92:13:4c:a3:d5:77:32:d6:35:03:e1:04:a4:e6:9e:d4: 14:79:bc:cf:06:3a:8c:7f:72:34:2e:6a:57:c6:1b:11:1d:97: d4:c9:e4:3f:19:df:de:e1:fc:d8:18:a1:e7:e1:1d:77:cf:2e: 6b:30:82:53:4d:d6:67:bc:d2:83:af:ca:79:98:7e:c1:43:63: 93:8c:97:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Lb6MBmMSUPeAJ56AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyNTE4MDYwMVoXDTI2MTIyNDE5MDYwMVowLzEtMCsGA1UEAxMk MTE4Yjk2YTAtOWFhNi00M2MxLWI3ZTAtNGE1ODJkNzRmYzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliNtiMyAr7xPwl/QHVsA6t8cn/LOS2inlrJM 8z0kDcptU4eyrbvGmLLAjIGOUh2L/SPhnpR72OGV+jHAk7EtL3flyUUoRZf5kP0W katgxAZihBz1Wa950RRWHucHgfybuGsHfeQAWhEMGe5s73rrRn4e4SBst/m7DuxP NE+dA3esT6XmIflgidtUpouQw/lNpodJ4+pjhmJELF6a9sfhZ3cCtrwLbPbdLYUq 5ohrkN76HOggBr+LijYo+SBnGu3oqloMp/SAtQxy7tP+kU4RHurjC98+fNzInEt1 C+DfGx7GeAimRdDCzPFMnQrkcQPZmvfT7o31jhEVzWZWWRoePQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHh31Ge67E4ifUycU02adXnp9vrpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYjNhMDRlOWQtYWExMi0z MGEzLWExYjMtZGEzOWVkOWRmMjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJqzWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMN+zHet+XxiE6d0ej0GtHcOuVKKCjOig/TmBuNG6fFF5sL8O4xu0eyj v1T998QDJU5tDeOhixsN+nqVzh7vrqd/1YRxQNUq/JtxmoxKOr0TdUnS/Ve7EpvC M8Hw7ubUlcoMlOKZq8wQ8yS9+JOHXkkz1mcSG4g8XnHweJ6tbjg9klfkloY05oQE gcLUJRbuImdzNIJNp8/qqlQY2s42oxwFiwpPCtQH6NaYuR5bpXNzfrGgloOCkhNM o9V3MtY1A+EEpOae1BR5vM8GOox/cjQualfGGxEdl9TJ5D8Z397h/NgYoefhHXfP LmswglNN1me80oOvynmYfsFDY5OMl+U= -----END CERTIFICATE-----Generated at Wed Oct 28 06:14:55 2026 by rpki-client