$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bea7f4d4-8308-3cfc-8b4f-e3d5cd3f428e.roa File: bea7f4d4-8308-3cfc-8b4f-e3d5cd3f428e.roa (raw, json) Hash identifier: ZG72ZLxoiKlnetFeN/PGhz3ePJxm44p0kqrSOjXD8ps= Subject key identifier: 67:CF:4F:D6:58:D5:48:B7:42:11:C7:F9:4D:8C:7C:BD:B0:A1:E2:B9 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F6C585177FCF010133C4842E0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bea7f4d4-8308-3cfc-8b4f-e3d5cd3f428e.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 274120 IP address blocks: 38.210.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:51:77:fc:f0:10:13:3c:48:42:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=988827ae-19f1-45db-8344-b0e419fcd293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d6:9c:49:5e:92:a3:55:74:97:de:b1:20:03: 32:38:05:89:52:a7:45:a9:ba:2d:2b:ec:03:28:fe: 87:ca:8c:44:a5:f6:d5:8e:df:f4:e9:91:35:1e:2f: 28:27:c6:75:84:45:59:09:09:7b:5d:f5:e6:be:d3: da:5c:76:8c:cc:2a:4c:79:7c:12:9e:56:c5:07:63: c0:28:86:86:0c:f7:a5:62:d9:e3:13:84:88:09:0c: d2:a8:67:c4:78:7a:a7:8b:a2:0c:f5:ee:1c:82:ed: 09:25:e0:a0:25:7b:f9:ef:60:c0:6f:66:a5:94:5e: 1f:de:d3:b9:4f:c6:46:8f:89:be:d6:33:f7:1f:7b: f9:86:13:53:0f:f1:c1:cc:19:67:fd:0f:90:83:5b: e7:55:a5:73:5f:37:17:bc:95:b8:24:af:ed:9a:ee: 1e:73:ba:7f:35:aa:cb:45:b6:c3:09:b8:c1:e0:26: 30:dd:35:4a:6d:46:d2:cf:66:53:d4:96:41:8d:9e: 05:3e:b1:a4:32:05:c6:2b:15:ae:72:d3:5b:0d:cf: b3:a1:4f:4f:75:79:7c:c0:33:f6:bd:49:df:0f:4e: d1:71:2b:ce:d7:1b:af:f4:4b:73:0b:79:19:fa:4a: 54:a7:91:20:4b:61:99:1c:47:d8:7a:35:00:96:35: 43:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:CF:4F:D6:58:D5:48:B7:42:11:C7:F9:4D:8C:7C:BD:B0:A1:E2:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bea7f4d4-8308-3cfc-8b4f-e3d5cd3f428e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.210.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:03:2d:29:ce:d7:99:22:06:6b:0c:11:e3:ec:f9:bf:3a:da: 08:bc:ac:38:ae:94:49:8c:9d:2f:a8:7a:3c:b1:17:57:20:9c: 6d:8d:fa:5b:4f:da:dc:19:24:81:b6:31:b5:fc:60:2b:ca:74: b2:9d:4c:64:49:d9:13:03:27:90:28:35:ee:04:1f:05:45:b1: 90:7b:bf:34:0f:a1:86:76:8b:39:a6:a6:fd:9d:9d:71:12:f8: fd:0a:ed:2d:c0:22:34:e5:26:26:b6:9b:0f:77:b7:92:ab:19: a3:8f:fc:e7:59:3a:09:18:2f:6e:c4:df:b3:bc:31:7d:da:e8: ac:0f:2a:c1:9f:94:85:6d:a5:cd:39:75:01:1c:d6:bd:00:75: d0:d3:8b:f0:eb:b1:28:7d:7c:7c:e1:95:57:f1:4d:c3:f8:fd: 0f:bf:73:6c:24:fa:6c:0a:e5:1f:f3:7a:7e:cb:5d:76:15:37: c7:be:c1:7c:64:db:ee:84:83:c7:9c:55:98:29:70:0c:98:b5: a7:99:be:32:65:df:53:7c:f3:a0:20:a1:e6:34:e1:44:b7:d2: 2d:c3:21:ca:50:c4:ea:22:7e:f8:bf:ff:e8:9b:71:5e:f0:b4: 51:50:62:da:b5:b4:bd:eb:7f:2d:4c:7c:9e:a1:e6:ea:8b:92: 77:49:48:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWFF3/PAQEzxIQuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk OTg4ODI3YWUtMTlmMS00NWRiLTgzNDQtYjBlNDE5ZmNkMjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdacSV6So1V0l96xIAMyOAWJUqdFqbotK+wD KP6HyoxEpfbVjt/06ZE1Hi8oJ8Z1hEVZCQl7XfXmvtPaXHaMzCpMeXwSnlbFB2PA KIaGDPelYtnjE4SICQzSqGfEeHqni6IM9e4cgu0JJeCgJXv572DAb2allF4f3tO5 T8ZGj4m+1jP3H3v5hhNTD/HBzBln/Q+Qg1vnVaVzXzcXvJW4JK/tmu4ec7p/NarL RbbDCbjB4CYw3TVKbUbSz2ZT1JZBjZ4FPrGkMgXGKxWuctNbDc+zoU9PdXl8wDP2 vUnfD07RcSvO1xuv9EtzC3kZ+kpUp5EgS2GZHEfYejUAljVDqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfPT9ZY1Ui3QhHH+U2MfL2woeK5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYmVhN2Y0ZDQtODMwOC0z Y2ZjLThiNGYtZTNkNWNkM2Y0MjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJtIWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsDLSnO15kiBmsMEePs+b862gi8rDiulEmMnS+oejyxF1cgnG2N+ltP 2twZJIG2MbX8YCvKdLKdTGRJ2RMDJ5AoNe4EHwVFsZB7vzQPoYZ2izmmpv2dnXES +P0K7S3AIjTlJia2mw93t5KrGaOP/OdZOgkYL27E37O8MX3a6KwPKsGflIVtpc05 dQEc1r0AddDTi/DrsSh9fHzhlVfxTcP4/Q+/c2wk+mwK5R/zen7LXXYVN8e+wXxk 2+6Eg8ecVZgpcAyYtaeZvjJl31N886AgoeY04US30i3DIcpQxOoifvi//+ibcV7w tFFQYtq1tL3rfy1MfJ6h5uqLkndJSCs= -----END CERTIFICATE-----Generated at Thu Oct 29 00:42:11 2026 by rpki-client