$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bc1032ea-80f0-339d-be84-47508dc06301.roa File: bc1032ea-80f0-339d-be84-47508dc06301.roa (raw, json) Hash identifier: CoWJL63cJWd9WW4n9DrnFHd7N8ske0cCz2zE3rRpS6U= Subject key identifier: 6A:F6:1C:02:2E:B2:E4:44:78:93:27:C7:46:C3:66:A7:41:24:40:D5 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F6C5833977EFEC5EE479F7900 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bc1032ea-80f0-339d-be84-47508dc06301.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 272106 IP address blocks: 38.253.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:33:97:7e:fe:c5:ee:47:9f:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=42361cea-ccd8-4675-b653-b8819ac45277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fb:17:a2:3f:dd:9e:df:70:0b:5a:c2:2b:06: b3:75:b2:77:18:ef:be:75:eb:b4:0b:e4:68:33:6c: d6:d9:8b:f2:c6:12:1b:f8:53:c7:42:6a:e7:5e:7d: 78:cf:19:cf:08:b9:49:63:80:b3:11:2c:49:2a:68: a2:7c:64:21:88:ec:76:9b:c8:03:52:49:2a:f7:59: af:6c:04:13:71:af:3b:98:cd:4a:41:2d:6a:8e:96: 28:58:ac:62:11:88:c6:61:70:3c:0c:5e:71:d1:59: 99:de:78:43:86:a9:dc:8f:af:7d:75:23:b8:7b:3d: 30:40:63:7d:46:d8:3a:b3:56:47:8a:14:f8:67:be: 2b:7a:5a:55:89:bd:56:39:ad:0d:f7:2a:da:15:a0: bb:70:36:41:17:06:11:0e:b7:45:95:bf:cd:b0:6c: cb:2d:ae:73:33:14:e1:39:f4:d0:c0:77:2f:59:3a: cb:54:dd:2c:55:ef:6a:e0:f9:67:a4:18:e7:81:f7: 48:c2:87:8f:75:de:f3:ec:5b:2b:c9:41:7a:7c:69: 89:14:c3:b4:df:ac:9f:82:3f:89:b7:ba:55:28:ec: ee:5f:7e:a0:e0:7d:fd:cc:7f:2f:88:62:84:fd:41: 1d:04:34:74:9e:cc:93:12:dd:4f:19:a9:04:33:15: 03:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F6:1C:02:2E:B2:E4:44:78:93:27:C7:46:C3:66:A7:41:24:40:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bc1032ea-80f0-339d-be84-47508dc06301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.253.80.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:59:be:21:2b:8d:55:a7:89:59:ba:22:02:71:a6:a3:c1:2e: c0:0a:26:92:b9:fc:78:c6:25:e0:35:10:5a:df:3e:5e:f9:9c: f2:bc:ae:22:4b:a9:db:3e:d4:e8:8a:ca:9c:bd:3a:45:e1:d1: 51:9f:b0:e2:61:8a:2b:c9:7d:7a:75:3a:36:2f:94:2f:8f:67: d4:5c:15:e1:5f:19:7a:21:ff:13:9b:14:b4:e0:e6:53:f9:04: a0:62:df:43:71:7f:a3:50:b3:1e:ed:0d:d1:b4:4d:df:90:85: 25:ea:c6:3c:78:6c:af:e3:52:36:ac:12:97:65:a6:5b:6f:e7: 65:33:d0:5e:ea:b1:48:dc:06:41:1b:e6:75:9e:e8:b6:f3:41: f2:9d:0b:56:7a:11:b4:ef:1e:fe:b1:28:5d:88:8d:f2:b9:fd: 7d:c2:fa:3b:be:d7:49:82:e2:ff:bd:cf:8c:a7:fa:2b:3d:e1: e7:f8:43:1f:43:c9:4d:de:5f:43:8b:b4:27:03:6c:68:1b:0d: 69:26:56:1d:39:a0:64:ee:28:a8:16:90:1c:c7:bf:95:b6:42: a4:3c:cf:2b:6d:6f:fb:87:e0:16:79:40:68:9c:64:22:5d:61: c3:2f:aa:f2:50:3d:7f:37:4c:f7:40:dd:4c:91:1b:35:f6:e7: 36:16:10:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWDOXfv7F7kefeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk NDIzNjFjZWEtY2NkOC00Njc1LWI2NTMtYjg4MTlhYzQ1Mjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/sXoj/dnt9wC1rCKwazdbJ3GO++deu0C+Ro M2zW2YvyxhIb+FPHQmrnXn14zxnPCLlJY4CzESxJKmiifGQhiOx2m8gDUkkq91mv bAQTca87mM1KQS1qjpYoWKxiEYjGYXA8DF5x0VmZ3nhDhqncj699dSO4ez0wQGN9 Rtg6s1ZHihT4Z74relpVib1WOa0N9yraFaC7cDZBFwYRDrdFlb/NsGzLLa5zMxTh OfTQwHcvWTrLVN0sVe9q4PlnpBjngfdIwoePdd7z7FsryUF6fGmJFMO036yfgj+J t7pVKOzuX36g4H39zH8viGKE/UEdBDR0nsyTEt1PGakEMxUDmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGr2HAIusuREeJMnx0bDZqdBJEDVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYmMxMDMyZWEtODBmMC0z MzlkLWJlODQtNDc1MDhkYzA2MzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJv1QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5ZviErjVWniVm6IgJxpqPBLsAKJpK5/HjGJeA1EFrfPl75nPK8riJL qds+1OiKypy9OkXh0VGfsOJhiivJfXp1OjYvlC+PZ9RcFeFfGXoh/xObFLTg5lP5 BKBi30Nxf6NQsx7tDdG0Td+QhSXqxjx4bK/jUjasEpdlpltv52Uz0F7qsUjcBkEb 5nWe6LbzQfKdC1Z6EbTvHv6xKF2IjfK5/X3C+ju+10mC4v+9z4yn+is94ef4Qx9D yU3eX0OLtCcDbGgbDWkmVh05oGTuKKgWkBzHv5W2QqQ8zyttb/uH4BZ5QGicZCJd YcMvqvJQPX83TPdA3UyRGzX25zYWEPg= -----END CERTIFICATE-----Generated at Tue Oct 27 12:32:55 2026 by rpki-client