$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b463be42-c424-3720-9620-521bf5517995.roa File: b463be42-c424-3720-9620-521bf5517995.roa (raw, json) Hash identifier: VswG3UNfJVkj0sZsVtdeDtzNyrSTSGx2zfgejQ4eiB8= Subject key identifier: 77:78:C3:CF:3C:9A:40:15:7C:14:6D:83:B1:9A:18:F7:DF:90:BB:6B Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F7FFEECE611D076743DA8D440 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b463be42-c424-3720-9620-521bf5517995.roa Signing time: Wed 14 Oct 2026 13:56:45 +0000 ROA not before: Wed 14 Oct 2026 13:56:45 +0000 ROA not after: Tue 12 Jan 2027 14:56:45 +0000 asID: 267749 IP address blocks: 38.9.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:fe:ec:e6:11:d0:76:74:3d:a8:d4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 14 13:56:45 2026 GMT Not After : Jan 12 14:56:45 2027 GMT Subject: CN=319bf5ae-8f73-4543-9395-271452f0d17c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:55:77:57:2e:37:71:a4:fe:2f:ba:20:b4:3b: 30:dd:f8:7b:fa:d3:34:76:fb:e5:3a:8d:a1:9b:4f: 92:5b:bf:69:8a:ae:c4:da:58:6a:3f:57:a4:3f:6b: ba:24:a4:c7:bd:0a:58:7b:8a:52:5f:ab:54:78:92: 31:f1:fa:a0:7e:92:ca:0a:3b:05:ed:8e:47:0b:cd: 97:d7:bd:a4:46:fe:c5:ee:7b:30:94:0e:35:01:07: bf:eb:ce:05:42:01:61:ae:db:12:f3:76:99:d5:eb: 0c:fe:23:ec:70:ff:bb:cd:23:f6:7e:88:7f:b2:47: da:65:5e:1a:70:0e:38:bc:c4:20:30:fd:5c:6c:61: 10:f2:89:0f:84:cc:a4:f8:39:3a:b5:52:24:b7:1b: 8a:52:08:97:c4:5c:73:d0:3f:3a:1a:17:ea:ce:12: c0:83:cb:92:0a:08:ed:fe:ad:f2:f5:58:8a:21:a8: 9a:6e:ca:77:2c:b4:f6:a5:60:90:b2:cd:e8:b5:7c: 2c:49:4c:25:1c:c9:42:13:a8:1f:12:5d:f3:31:f8: 4a:5c:8c:84:53:b3:55:a5:de:c9:44:a9:da:54:a6: a5:2f:e9:dd:4a:7a:0a:2e:93:9c:85:4b:10:f9:d8: af:96:17:bc:01:30:d9:78:6c:f8:d1:e4:c6:18:d7: b9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:78:C3:CF:3C:9A:40:15:7C:14:6D:83:B1:9A:18:F7:DF:90:BB:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b463be42-c424-3720-9620-521bf5517995.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.9.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:60:0d:0e:84:39:27:24:58:e7:0f:98:14:8e:62:9c:cb:fb: a4:f3:32:11:f3:e6:50:c3:5d:2d:cc:32:8f:93:7b:d8:73:b2: 85:73:f0:e3:0e:2b:d8:5b:da:15:00:86:91:b3:e0:4a:64:3c: 85:8a:b2:e5:19:d8:8a:cc:4d:e2:b4:6b:f2:59:29:f3:03:c6: 78:d3:af:a5:bf:24:fb:eb:dd:61:14:f0:09:3f:87:bf:82:b4: 27:19:f1:d1:4d:fc:e4:9e:6c:d1:f7:b7:c9:78:a6:e0:81:2d: 93:13:9a:c6:47:94:85:b6:46:a8:e0:45:eb:9d:b7:6f:cf:04: 59:aa:5d:95:69:66:37:ee:73:fc:94:3c:bf:88:81:8f:60:02: 24:21:ea:c7:6a:7d:82:32:00:bc:e6:b3:41:e6:9e:c6:1b:26: 08:1d:20:b2:eb:67:8e:1f:8d:4a:b1:0a:b5:78:c8:f3:b5:50: 27:cf:ae:ca:72:80:0c:ff:47:f3:f6:96:5d:9e:db:51:85:ca: d0:86:14:65:81:43:c4:cf:ff:49:96:0e:55:0b:39:6e:a9:81: a0:84:ed:9c:34:22:fa:8c:08:2d:6d:82:53:29:aa:5d:ca:c1: f7:00:34:49:1b:82:17:4a:96:a9:31:f7:c8:36:5c:49:ab:46: e1:92:4a:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9//uzmEdB2dD2o1EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxNDEzNTY0NVoXDTI3MDExMjE0NTY0NVowLzEtMCsGA1UEAxMk MzE5YmY1YWUtOGY3My00NTQzLTkzOTUtMjcxNDUyZjBkMTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVV3Vy43caT+L7ogtDsw3fh7+tM0dvvlOo2h m0+SW79piq7E2lhqP1ekP2u6JKTHvQpYe4pSX6tUeJIx8fqgfpLKCjsF7Y5HC82X 172kRv7F7nswlA41AQe/684FQgFhrtsS83aZ1esM/iPscP+7zSP2foh/skfaZV4a cA44vMQgMP1cbGEQ8okPhMyk+Dk6tVIktxuKUgiXxFxz0D86GhfqzhLAg8uSCgjt /q3y9ViKIaiabsp3LLT2pWCQss3otXwsSUwlHMlCE6gfEl3zMfhKXIyEU7NVpd7J RKnaVKalL+ndSnoKLpOchUsQ+divlhe8ATDZeGz40eTGGNe5GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHd4w888mkAVfBRtg7GaGPffkLtrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYjQ2M2JlNDItYzQyNC0z NzIwLTk2MjAtNTIxYmY1NTE3OTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJgkmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1gDQ6EOSckWOcPmBSOYpzL+6TzMhHz5lDDXS3MMo+Te9hzsoVz8OMO K9hb2hUAhpGz4EpkPIWKsuUZ2IrMTeK0a/JZKfMDxnjTr6W/JPvr3WEU8Ak/h7+C tCcZ8dFN/OSebNH3t8l4puCBLZMTmsZHlIW2RqjgReudt2/PBFmqXZVpZjfuc/yU PL+IgY9gAiQh6sdqfYIyALzms0HmnsYbJggdILLrZ44fjUqxCrV4yPO1UCfPrspy gAz/R/P2ll2e21GFytCGFGWBQ8TP/0mWDlULOW6pgaCE7Zw0IvqMCC1tglMpql3K wfcANEkbghdKlqkx98g2XEmrRuGSSpE= -----END CERTIFICATE-----Generated at Sun Oct 25 14:37:48 2026 by rpki-client