$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b99e6375-917f-3041-b42c-33f5e0d5d0c6.roa File: b99e6375-917f-3041-b42c-33f5e0d5d0c6.roa (raw, json) Hash identifier: TungNZqd5Fo6PSUzNbEYXeA24f6WANwio1+Xje0k2ps= Subject key identifier: 23:E6:90:3F:61:BC:71:F6:06:5A:4B:0A:13:13:93:5D:42:14:FC:90 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F94D335726F6E2F683BF1AD00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b99e6375-917f-3041-b42c-33f5e0d5d0c6.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 271832 IP address blocks: 38.3.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:35:72:6f:6e:2f:68:3b:f1:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=0feee774-7343-4462-b0d8-7bf96e4b1f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b3:e4:64:85:46:a6:39:4d:8d:4d:3d:16:0e: 2e:05:fc:f8:65:8b:61:78:51:2a:8d:14:32:04:71: 3e:30:07:82:1c:9b:4a:1a:04:f5:50:63:c6:c1:5c: b8:f1:a0:77:2d:3b:1c:a2:62:74:cc:90:fb:6c:20: d7:8e:f8:c0:2a:1a:ec:ce:0b:79:a6:32:d4:07:17: 93:8c:56:f4:5c:f6:11:c8:91:7f:f1:e0:e7:cc:38: 7e:c7:95:4c:48:76:be:49:89:01:36:e1:76:3b:34: ed:f3:86:11:ed:39:f2:6b:81:77:a5:68:34:6a:c3: 19:41:d8:d6:e4:fe:89:ca:c1:a4:09:32:1c:05:66: 0a:cd:8d:76:f0:81:57:4d:c6:8b:48:ff:5a:62:f5: 68:23:1a:ff:3a:a6:c3:c2:a3:e8:3e:e5:cf:8e:2b: b8:74:bf:56:d1:bd:43:fe:b7:50:9a:df:5c:e3:00: a8:23:b3:19:0e:18:85:87:57:11:3b:53:3a:54:67: 3f:b0:82:cc:c8:61:c7:6d:99:62:7c:e9:32:cd:fd: cb:6c:d5:c9:e4:c3:6b:e8:fc:3e:67:23:1e:9a:d3: 60:de:df:91:b8:08:f6:d8:58:da:38:6e:0a:66:2e: f9:f4:c0:1b:a0:45:14:d6:18:9d:62:ff:8d:d2:1b: 24:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E6:90:3F:61:BC:71:F6:06:5A:4B:0A:13:13:93:5D:42:14:FC:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b99e6375-917f-3041-b42c-33f5e0d5d0c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.3.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:56:18:87:20:8c:8f:2b:53:a2:0d:19:8a:ff:ec:d8:de:f1: 4d:e7:3f:97:55:ab:07:3b:d1:c2:ec:f4:92:ea:bd:e1:0e:b3: 55:c3:34:31:49:b5:0f:81:a8:76:ab:3f:2a:90:78:f6:b6:11: 38:f6:dc:d4:6d:d7:c1:5f:2f:0b:ad:e6:ed:67:8d:6a:f4:79: b4:ff:58:d2:0b:8f:41:98:db:ef:8a:d3:0c:68:55:e3:28:7e: 70:ff:8b:15:ef:32:92:16:29:e6:c6:50:62:37:99:8e:01:3d: 5e:68:bc:3e:79:ad:b1:9a:b5:09:6b:d7:84:3e:2f:e0:da:42: f3:10:30:24:e6:1b:8a:05:23:71:ee:30:f6:86:bb:bf:56:cf: 94:84:b2:fd:68:8f:d3:8e:17:41:0e:9c:2f:56:59:38:8c:11: d6:22:8a:0a:34:e3:30:b4:00:d2:c1:82:f5:5e:b0:5f:0e:3f: b6:88:0c:07:d0:5f:c0:57:58:1d:29:71:42:3f:26:fd:69:0b: 3e:a1:b7:d8:92:2c:a3:b6:f8:30:02:de:6b:88:a6:fc:c4:ec: db:4b:b8:d0:37:51:ac:1d:b4:eb:af:c4:10:16:e3:b2:5e:56: 85:84:6a:c2:36:b1:a7:b8:d0:0a:78:18:d8:0c:d9:6d:d2:95: e5:d5:ed:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U0zVyb24vaDvxrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk MGZlZWU3NzQtNzM0My00NDYyLWIwZDgtN2JmOTZlNGIxZjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLPkZIVGpjlNjU09Fg4uBfz4ZYtheFEqjRQy BHE+MAeCHJtKGgT1UGPGwVy48aB3LTscomJ0zJD7bCDXjvjAKhrszgt5pjLUBxeT jFb0XPYRyJF/8eDnzDh+x5VMSHa+SYkBNuF2OzTt84YR7Tnya4F3pWg0asMZQdjW 5P6JysGkCTIcBWYKzY128IFXTcaLSP9aYvVoIxr/OqbDwqPoPuXPjiu4dL9W0b1D /rdQmt9c4wCoI7MZDhiFh1cRO1M6VGc/sILMyGHHbZlifOkyzf3LbNXJ5MNr6Pw+ ZyMemtNg3t+RuAj22FjaOG4KZi759MAboEUU1hidYv+N0hskAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPmkD9hvHH2BlpLChMTk11CFPyQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYjk5ZTYzNzUtOTE3Zi0z MDQxLWI0MmMtMzNmNWUwZDVkMGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJgO8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFWGIcgjI8rU6INGYr/7Nje8U3nP5dVqwc70cLs9JLqveEOs1XDNDFJ tQ+BqHarPyqQePa2ETj23NRt18FfLwut5u1njWr0ebT/WNILj0GY2++K0wxoVeMo fnD/ixXvMpIWKebGUGI3mY4BPV5ovD55rbGatQlr14Q+L+DaQvMQMCTmG4oFI3Hu MPaGu79Wz5SEsv1oj9OOF0EOnC9WWTiMEdYiigo04zC0ANLBgvVesF8OP7aIDAfQ X8BXWB0pcUI/Jv1pCz6ht9iSLKO2+DAC3muIpvzE7NtLuNA3UawdtOuvxBAW47Je VoWEasI2sae40Ap4GNgM2W3SleXV7ZU= -----END CERTIFICATE-----Generated at Tue Oct 27 20:32:16 2026 by rpki-client