$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b72e7a5d-9658-3089-abd9-eb4ea1223e7f.roa File: b72e7a5d-9658-3089-abd9-eb4ea1223e7f.roa (raw, json) Hash identifier: 1Gi9S+D0JzfURBeUE5X6+KHG86VYNz8qlrWPpFNUaBU= Subject key identifier: 5F:16:56:14:AF:D5:09:4F:BC:A6:D2:02:74:4A:DD:C3:C9:DD:45:76 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F7A4D85ACC1041AA7496DEC10 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b72e7a5d-9658-3089-abd9-eb4ea1223e7f.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 6461 IP address blocks: 38.107.152.0/22 maxlen: 24 38.148.144.0/20 maxlen: 24 38.240.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:85:ac:c1:04:1a:a7:49:6d:ec:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=4afb1d15-61b6-4cb8-ad50-c6502b67be01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7c:31:e4:bf:ef:bd:e8:0f:c9:51:b3:9c:78: 41:b3:38:d7:92:e1:46:03:30:9e:d9:b9:31:7f:d8: 6f:18:79:eb:12:1f:2e:c8:bf:5b:61:7f:64:3c:66: 14:5f:0e:c6:d8:0d:e1:8c:ea:e6:98:0a:2f:67:41: ad:59:ad:9a:80:29:3c:e2:5d:47:e4:5a:af:e7:ca: 59:ca:2a:ed:e0:64:a1:0d:9a:aa:14:32:34:ee:6d: d3:fb:35:56:d2:46:b0:73:c7:47:df:a9:ef:96:b0: 47:2f:aa:8f:c1:f4:99:d6:9b:c0:dc:49:fa:5e:a0: 5c:ba:71:c6:7c:d1:1e:05:02:42:21:1d:31:42:81: f4:77:67:5e:81:c6:9b:ef:ac:33:aa:3d:e8:68:8e: 0e:4d:c6:8b:2f:d2:d8:df:da:79:85:19:62:89:3e: 69:e0:39:bc:90:5c:0f:6b:39:a0:b7:d5:87:a2:c6: f6:7c:29:90:d0:c1:1b:c9:03:3d:a0:18:10:12:e1: 71:b8:6c:ea:b6:18:ef:4d:3d:a9:ba:3e:51:60:4c: f5:50:b0:6a:b8:3f:50:60:a8:51:08:56:e4:eb:b5: fe:88:a1:98:61:f6:16:43:e1:e3:54:11:92:89:08: e5:71:c2:05:11:31:f2:bd:9a:3a:e6:a6:b4:68:1d: 88:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:16:56:14:AF:D5:09:4F:BC:A6:D2:02:74:4A:DD:C3:C9:DD:45:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b72e7a5d-9658-3089-abd9-eb4ea1223e7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.107.152.0/22 38.148.144.0/20 38.240.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:9b:33:3c:57:4f:a9:71:b1:5c:b6:3e:ad:9b:ed:9d:cd:92: ad:58:5b:d8:74:de:e4:44:f5:37:96:fd:8f:33:e7:56:2f:7e: 9b:a0:80:6a:7a:43:a4:4d:e5:06:07:a9:9a:47:72:b0:ef:b5: 66:43:75:d5:0e:5c:09:cc:39:44:69:a0:55:00:9f:20:97:46: 24:3e:e8:dc:5f:15:a7:00:72:c5:0b:80:1f:be:b1:92:3d:d1: be:26:5b:a1:d7:51:08:80:82:80:ff:8b:0a:90:48:87:0f:47: 3a:d7:25:3a:9c:1a:c3:45:ec:7e:f7:a7:f6:04:ce:9e:c2:93: 70:a0:c8:27:1d:68:e1:70:b7:61:a1:58:a5:e8:0f:60:1a:47: cb:aa:1a:58:fa:3a:01:cd:f9:09:15:76:13:0b:b7:0f:61:5e: 97:eb:8f:6c:46:04:aa:8f:70:14:9c:be:0c:49:a7:42:86:41: a2:58:7b:3c:0b:ff:16:c0:54:f0:58:b8:fd:cc:3c:53:06:93: ef:18:a6:ff:a6:12:db:80:b6:1a:d9:e1:95:b6:1b:40:cf:83: d8:db:21:5e:c4:7b:18:ca:f3:cc:c0:49:be:b3:10:4f:fa:7a: 1c:50:e8:77:70:a1:c9:bf:5f:23:c4:c3:e1:da:71:08:d8:ec: c2:6b:d7:07 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE96TYWswQQap0lt7BAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk NGFmYjFkMTUtNjFiNi00Y2I4LWFkNTAtYzY1MDJiNjdiZTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHwx5L/vvegPyVGznHhBszjXkuFGAzCe2bkx f9hvGHnrEh8uyL9bYX9kPGYUXw7G2A3hjOrmmAovZ0GtWa2agCk84l1H5Fqv58pZ yirt4GShDZqqFDI07m3T+zVW0kawc8dH36nvlrBHL6qPwfSZ1pvA3En6XqBcunHG fNEeBQJCIR0xQoH0d2degcab76wzqj3oaI4OTcaLL9LY39p5hRliiT5p4Dm8kFwP azmgt9WHosb2fCmQ0MEbyQM9oBgQEuFxuGzqthjvTT2puj5RYEz1ULBquD9QYKhR CFbk67X+iKGYYfYWQ+HjVBGSiQjlccIFETHyvZo65qa0aB2I8wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFF8WVhSv1QlPvKbSAnRK3cPJ3UV2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYjcyZTdhNWQtOTY1OC0z MDg5LWFiZDktZWI0ZWExMjIzZTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCJmuYAwQE JpSQAwQEJvCgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBALubMzxXT6lxsVy2Pq2b7Z3Nkq1YW9h03uRE9TeW /Y8z51YvfpuggGp6Q6RN5QYHqZpHcrDvtWZDddUOXAnMOURpoFUAnyCXRiQ+6Nxf FacAcsULgB++sZI90b4mW6HXUQiAgoD/iwqQSIcPRzrXJTqcGsNF7H73p/YEzp7C k3CgyCcdaOFwt2GhWKXoD2AaR8uqGlj6OgHN+QkVdhMLtw9hXpfrj2xGBKqPcBSc vgxJp0KGQaJYezwL/xbAVPBYuP3MPFMGk+8Ypv+mEtuAthrZ4ZW2G0DPg9jbIV7E exjK88zASb6zEE/6ehxQ6Hdwocm/XyPEw+HacQjY7MJr1wc= -----END CERTIFICATE-----Generated at Tue Oct 20 18:31:09 2026 by rpki-client