$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b8ca7b3f-118d-30c8-b75e-36b2123c43bf.roa File: b8ca7b3f-118d-30c8-b75e-36b2123c43bf.roa (raw, json) Hash identifier: J3KoxTyJnklLGq2ZngwZRmnaVkr/wn3dNKJTxp/0i8I= Subject key identifier: CB:1D:39:22:94:AC:94:E2:7C:20:21:D0:AC:B1:09:17:B7:9E:B8:4F Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F90A305D995917FD5B02B7300 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b8ca7b3f-118d-30c8-b75e-36b2123c43bf.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 273007 IP address blocks: 38.224.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:05:d9:95:91:7f:d5:b0:2b:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=51ed4454-7651-4891-bfc4-a0708dd3d6ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ed:19:96:6d:d2:d9:d4:df:28:7e:8a:25:ae: bf:86:d4:25:d4:c9:30:62:8c:92:b3:af:76:a2:bb: 28:d1:d3:10:ff:8e:41:75:e8:bb:4d:60:72:b7:9f: 0c:4b:91:fb:23:0b:e7:0f:d5:91:15:45:fd:1f:4b: bd:6c:ac:dd:5d:c7:d2:9d:5a:00:46:dc:87:09:37: a1:70:50:ef:f8:c8:5b:0d:5b:e2:a6:2b:ab:c8:c6: 96:7e:6a:a0:49:39:56:9b:d8:d0:55:b8:f5:5c:48: ef:35:73:33:dc:59:1b:91:a5:ca:29:67:c0:5e:fb: 03:10:39:44:d8:60:67:81:60:0c:26:54:b5:b8:4e: 53:1f:1c:c8:20:bb:35:34:d1:b4:ee:63:cb:41:5f: c1:51:bb:0d:89:50:51:53:f8:ad:51:3b:67:79:19: 5a:4d:0f:08:d7:3b:09:36:ff:08:b1:50:42:ed:9a: 5a:06:b4:67:96:d0:3d:ae:f7:d3:6c:2c:74:29:62: b4:62:3e:d8:48:dd:e5:e4:02:87:0c:53:34:af:a2: f2:3f:55:dc:4d:2b:72:cc:02:6d:a0:21:54:8e:82: fe:88:aa:1e:bf:b4:5d:db:16:ca:0c:8b:5a:18:60: 22:ba:a7:66:d5:0e:8f:82:d5:de:f1:55:0d:68:ff: b1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1D:39:22:94:AC:94:E2:7C:20:21:D0:AC:B1:09:17:B7:9E:B8:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b8ca7b3f-118d-30c8-b75e-36b2123c43bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.224.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:c7:d2:0e:fd:66:39:a0:38:d3:9a:92:8f:9d:e6:d0:9b:8d: 4a:c4:e5:01:aa:d0:7e:bc:bf:a6:5b:81:1a:8e:2d:71:5b:3b: db:a8:13:52:0c:b0:6f:64:bc:23:1f:d2:fd:9f:d8:37:34:f8: 01:cf:08:11:7b:3a:4f:c3:8d:6f:fd:a6:f3:ea:a8:83:1c:3e: 96:a3:33:b4:04:5b:51:f4:69:31:c1:5f:ca:47:3b:54:db:62: a2:de:58:73:9b:41:4c:55:fb:f7:8d:d9:52:45:52:43:04:ed: ad:42:f2:2b:2c:72:fb:75:ff:55:78:8c:80:29:8b:d5:5d:0b: 66:c7:d3:2e:01:e9:03:17:36:5e:63:c1:9a:94:8a:0d:e7:84: b1:4e:00:0f:8c:11:b5:b4:f9:8c:36:9b:b4:a0:ca:9d:14:30: f1:64:13:a9:8b:30:da:6d:8e:22:b7:3a:14:65:0e:f0:ce:d9: bd:ad:d1:3b:1e:28:f8:55:f3:b8:14:49:e9:74:93:cc:2d:fc: 59:45:67:81:1a:76:f9:ca:a5:72:c5:04:6a:2c:fb:8a:f4:42: 49:b2:af:ed:8c:c2:12:8e:ac:7f:30:38:26:9a:b3:5e:2c:bc: 9e:91:fe:e9:25:d2:39:4c:95:ea:72:8b:7a:8c:e3:6f:33:d8: 4a:8d:c7:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QowXZlZF/1bArcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk NTFlZDQ0NTQtNzY1MS00ODkxLWJmYzQtYTA3MDhkZDNkNmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+0Zlm3S2dTfKH6KJa6/htQl1MkwYoySs692 orso0dMQ/45Bdei7TWByt58MS5H7IwvnD9WRFUX9H0u9bKzdXcfSnVoARtyHCTeh cFDv+MhbDVvipiuryMaWfmqgSTlWm9jQVbj1XEjvNXMz3FkbkaXKKWfAXvsDEDlE 2GBngWAMJlS1uE5THxzIILs1NNG07mPLQV/BUbsNiVBRU/itUTtneRlaTQ8I1zsJ Nv8IsVBC7ZpaBrRnltA9rvfTbCx0KWK0Yj7YSN3l5AKHDFM0r6LyP1XcTStyzAJt oCFUjoL+iKoev7Rd2xbKDItaGGAiuqdm1Q6PgtXe8VUNaP+xCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsdOSKUrJTifCAh0KyxCRe3nrhPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYjhjYTdiM2YtMTE4ZC0z MGM4LWI3NWUtMzZiMjEyM2M0M2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJuAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3H0g79ZjmgONOako+d5tCbjUrE5QGq0H68v6ZbgRqOLXFbO9uoE1IM sG9kvCMf0v2f2Dc0+AHPCBF7Ok/DjW/9pvPqqIMcPpajM7QEW1H0aTHBX8pHO1Tb YqLeWHObQUxV+/eN2VJFUkME7a1C8isscvt1/1V4jIApi9VdC2bH0y4B6QMXNl5j wZqUig3nhLFOAA+MEbW0+Yw2m7Sgyp0UMPFkE6mLMNptjiK3OhRlDvDO2b2t0Tse KPhV87gUSel0k8wt/FlFZ4EadvnKpXLFBGos+4r0Qkmyr+2MwhKOrH8wOCaas14s vJ6R/ukl0jlMlepyi3qM428z2EqNx+0= -----END CERTIFICATE-----Generated at Wed Oct 28 05:22:45 2026 by rpki-client