$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bb817fb2-35a0-360b-8580-9765a03e269b.roa File: bb817fb2-35a0-360b-8580-9765a03e269b.roa (raw, json) Hash identifier: SJqyvmRj5Emaph1f4ZtXXOlhyDdeUU0AbUdi2ohXHF8= Subject key identifier: 07:B4:07:C2:8E:1A:01:84:B8:88:9C:F8:60:A4:3D:56:0B:7F:15:BF Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F74B8248B7E997FF6BD020200 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bb817fb2-35a0-360b-8580-9765a03e269b.roa Signing time: Sat 10 Oct 2026 13:00:13 +0000 ROA not before: Sat 10 Oct 2026 13:00:13 +0000 ROA not after: Fri 08 Jan 2027 14:00:13 +0000 asID: 274955 IP address blocks: 38.183.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:74:b8:24:8b:7e:99:7f:f6:bd:02:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 10 13:00:13 2026 GMT Not After : Jan 8 14:00:13 2027 GMT Subject: CN=f02deb7c-03fa-4dbc-81d8-dbab863e0f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:75:5a:9d:1d:aa:b5:b9:72:c0:fa:e3:66:5b: e2:85:22:fd:fb:63:25:a2:6c:6d:56:72:ac:63:63: 8e:f1:79:33:ea:2c:4f:60:e3:a3:a1:2c:50:cb:6e: 19:64:35:53:f1:b9:8c:83:26:73:e4:eb:11:f2:ae: 2b:08:9a:bc:0d:1a:ae:b4:13:68:6c:70:1b:3b:a3: f7:81:2b:c2:38:84:65:c4:ac:a2:b3:35:c5:00:dc: fe:0a:f4:66:2a:01:53:5b:81:85:19:91:c0:8c:f1: 9d:df:c4:49:74:1e:53:6f:ec:af:a3:15:56:ad:24: 9b:78:af:16:11:59:0b:08:9c:5b:b3:dd:d0:18:6d: e0:64:c8:07:bc:13:94:82:51:d4:8a:a6:69:0f:50: 55:62:dc:13:49:56:62:4e:a6:b5:e6:ed:a6:87:29: 64:51:79:8e:74:73:7a:ee:8d:e4:89:0f:95:b5:13: 10:74:72:3a:b9:cc:5c:6a:04:ca:6d:a8:3a:86:8c: f9:23:88:da:51:f1:57:05:7c:fb:1f:79:69:be:f3: af:b4:0c:5c:8f:8b:64:9b:9f:d7:7f:5d:43:df:ac: a4:86:33:56:3f:f6:0d:59:56:fc:7d:b2:24:b7:b9: 5b:4e:58:36:31:3d:f1:ae:18:ac:8b:83:35:b0:86: 03:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B4:07:C2:8E:1A:01:84:B8:88:9C:F8:60:A4:3D:56:0B:7F:15:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bb817fb2-35a0-360b-8580-9765a03e269b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.183.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:e6:0e:98:97:13:8a:cd:8b:2a:8a:f5:10:fc:ae:89:0c:c5: 32:c2:6a:93:e3:7b:3e:9a:6f:48:e0:9f:9f:fb:ed:73:a2:40: 80:c7:79:f7:22:64:ae:0f:07:b4:72:a0:06:35:fb:87:ac:99: 9a:88:54:b2:8e:22:03:eb:82:f7:3f:19:1e:0c:b1:7c:36:a4: 56:c9:17:39:34:d0:ce:21:2a:c4:71:c0:a3:76:d4:75:10:6b: 69:f5:79:aa:a1:db:02:96:f9:ad:dc:83:6c:03:92:69:72:cd: 10:5f:4e:38:b6:8c:4a:4f:23:d1:cf:9f:e7:43:7c:c2:6f:b2: d7:4d:50:d0:5e:4c:de:c6:89:66:a1:bd:f2:26:67:32:b1:ef: c2:6f:9e:09:68:55:d7:ef:96:71:65:84:06:d3:80:49:34:6b: 53:bd:84:42:8a:10:36:ba:b5:42:ad:25:74:07:72:2b:f4:1c: 9d:ed:8b:55:9f:56:f8:8f:f7:56:3b:47:b8:69:c6:06:aa:14: 7b:ed:c5:e1:3f:1a:f3:ac:03:52:61:13:d8:13:34:f9:ec:b4: c1:3c:1e:8c:31:af:ee:65:cc:94:da:83:49:e1:52:21:af:b3: 1b:6e:5c:31:8f:48:f9:c0:7a:51:59:c6:29:8f:de:31:f7:02: d3:8a:0d:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE90uCSLfpl/9r0CAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxMDEzMDAxM1oXDTI3MDEwODE0MDAxM1owLzEtMCsGA1UEAxMk ZjAyZGViN2MtMDNmYS00ZGJjLTgxZDgtZGJhYjg2M2UwZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3VanR2qtblywPrjZlvihSL9+2MlomxtVnKs Y2OO8Xkz6ixPYOOjoSxQy24ZZDVT8bmMgyZz5OsR8q4rCJq8DRqutBNobHAbO6P3 gSvCOIRlxKyiszXFANz+CvRmKgFTW4GFGZHAjPGd38RJdB5Tb+yvoxVWrSSbeK8W EVkLCJxbs93QGG3gZMgHvBOUglHUiqZpD1BVYtwTSVZiTqa15u2mhylkUXmOdHN6 7o3kiQ+VtRMQdHI6ucxcagTKbag6hoz5I4jaUfFXBXz7H3lpvvOvtAxcj4tkm5/X f11D36ykhjNWP/YNWVb8fbIkt7lbTlg2MT3xrhisi4M1sIYDcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAe0B8KOGgGEuIic+GCkPVYLfxW/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYmI4MTdmYjItMzVhMC0z NjBiLTg1ODAtOTc2NWEwM2UyNjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJrfIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvmDpiXE4rNiyqK9RD8rokMxTLCapPjez6ab0jgn5/77XOiQIDHefci ZK4PB7RyoAY1+4esmZqIVLKOIgPrgvc/GR4MsXw2pFbJFzk00M4hKsRxwKN21HUQ a2n1eaqh2wKW+a3cg2wDkmlyzRBfTji2jEpPI9HPn+dDfMJvstdNUNBeTN7GiWah vfImZzKx78JvngloVdfvlnFlhAbTgEk0a1O9hEKKEDa6tUKtJXQHciv0HJ3ti1Wf VviP91Y7R7hpxgaqFHvtxeE/GvOsA1JhE9gTNPnstME8Howxr+5lzJTag0nhUiGv sxtuXDGPSPnAelFZximP3jH3AtOKDXE= -----END CERTIFICATE-----Generated at Tue Oct 27 16:36:49 2026 by rpki-client