$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c14ba33a-4ce5-39f1-bd1d-0c7eb688d82a.roa File: c14ba33a-4ce5-39f1-bd1d-0c7eb688d82a.roa (raw, json) Hash identifier: 7gr6wb71KQnveLJyVA62fBPj/tQEs6SuH/csOtKBMOk= Subject key identifier: 5E:57:6F:C5:E8:63:72:78:60:BA:4A:53:58:FB:81:D6:91:FA:64:8E Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F9FFDE2A326D1C98C40C50E80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c14ba33a-4ce5-39f1-bd1d-0c7eb688d82a.roa Signing time: Mon 26 Oct 2026 01:00:13 +0000 ROA not before: Mon 26 Oct 2026 01:00:13 +0000 ROA not after: Sun 24 Jan 2027 02:00:13 +0000 asID: 37577 IP address blocks: 38.170.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9f:fd:e2:a3:26:d1:c9:8c:40:c5:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 26 01:00:13 2026 GMT Not After : Jan 24 02:00:13 2027 GMT Subject: CN=d0e30902-e565-4669-bf30-fb1c55ebcb0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a9:06:65:8c:57:1b:71:3b:fd:30:a3:08:52: c8:91:4a:c6:3b:31:0c:15:13:e0:bc:12:16:31:ec: 31:32:fc:c9:ac:86:c9:1c:70:49:7f:ea:2b:c0:98: b9:34:2b:1f:b0:35:e0:1e:f6:83:50:97:9a:98:36: 98:2d:5d:13:5f:0c:cc:1b:69:ca:2c:9e:33:47:32: 34:48:72:c8:ca:14:a7:6d:f0:47:8a:80:2d:23:92: 17:e0:04:37:4c:2e:a2:3d:52:e0:fe:b5:2b:f9:77: 58:5c:ff:a3:d1:87:ac:d2:eb:b8:8a:d2:a7:a7:ef: 07:f9:b5:5f:42:3e:9b:c1:f9:26:16:28:5b:86:7b: d1:50:85:07:9c:53:a1:a1:3d:93:e9:e2:bf:b9:51: 0b:4b:8a:47:27:85:71:fa:36:46:f4:c2:76:2a:93: 69:7d:1f:8d:91:ec:64:66:5c:4e:41:36:5e:40:bd: f6:91:ff:5a:6c:72:33:f4:b6:35:3b:f2:18:b2:1c: d0:eb:62:45:03:cb:dd:8a:19:23:5d:ca:3d:4c:10: 3b:ea:71:c1:7e:97:01:be:19:a6:be:9d:ca:34:b3: 12:01:4f:2d:f8:62:d2:ef:7d:47:d0:1d:10:77:70: 05:34:44:4a:fd:95:1e:f2:4f:95:d8:e0:6b:b9:4d: 6a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:57:6F:C5:E8:63:72:78:60:BA:4A:53:58:FB:81:D6:91:FA:64:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c14ba33a-4ce5-39f1-bd1d-0c7eb688d82a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.170.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:00:6b:28:6f:71:62:5e:a9:89:9f:a0:b8:aa:41:ef:18:23: b8:ea:cf:ee:55:8b:4c:42:4a:fe:bd:47:d2:19:db:3a:cb:70: 96:24:ab:04:83:51:b0:67:cc:fa:a8:2c:88:84:b1:55:9a:91: 02:91:f2:5b:0b:54:27:7f:0f:7d:ee:f5:22:40:1e:c0:f0:91: dd:75:e5:11:3c:90:ba:e9:e6:f1:a9:74:c4:24:1a:92:cf:d0: 98:88:3c:2e:eb:7a:69:d5:bb:22:c6:9c:58:5e:79:66:61:f8: bc:24:63:cb:9a:96:76:45:a9:0c:c6:a1:ad:31:92:65:1f:6e: 20:24:b5:da:9f:ab:ce:5e:94:08:f9:40:48:03:cd:83:ac:38: 42:b8:77:d1:7b:72:7a:2b:41:b1:e6:94:18:1a:f7:2d:f9:40: 8e:bf:e2:cf:a2:26:b9:07:c7:46:64:b2:30:96:9e:a3:25:58: ec:2f:ea:db:98:bf:b7:87:78:7f:63:e3:b9:94:4c:c3:a2:22: 57:68:28:28:13:6c:9e:9c:3c:6b:6b:92:93:ba:cd:0e:4e:f2: a2:8e:08:8e:a2:7d:ae:75:f9:f7:23:a6:cc:3d:55:f4:4a:61: 0c:ad:56:20:eb:bc:be:33:c5:14:0b:3e:1b:1e:01:4c:c8:aa: 1f:d2:39:8c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE+f/eKjJtHJjEDFDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyNjAxMDAxM1oXDTI3MDEyNDAyMDAxM1owLzEtMCsGA1UEAxMk ZDBlMzA5MDItZTU2NS00NjY5LWJmMzAtZmIxYzU1ZWJjYjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6kGZYxXG3E7/TCjCFLIkUrGOzEMFRPgvBIW MewxMvzJrIbJHHBJf+orwJi5NCsfsDXgHvaDUJeamDaYLV0TXwzMG2nKLJ4zRzI0 SHLIyhSnbfBHioAtI5IX4AQ3TC6iPVLg/rUr+XdYXP+j0Yes0uu4itKnp+8H+bVf Qj6bwfkmFihbhnvRUIUHnFOhoT2T6eK/uVELS4pHJ4Vx+jZG9MJ2KpNpfR+Nkexk ZlxOQTZeQL32kf9abHIz9LY1O/IYshzQ62JFA8vdihkjXco9TBA76nHBfpcBvhmm vp3KNLMSAU8t+GLS731H0B0Qd3AFNERK/ZUe8k+V2OBruU1qZQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFF5Xb8XoY3J4YLpKU1j7gdaR+mSOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYzE0YmEzM2EtNGNlNS0z OWYxLWJkMWQtMGM3ZWI2ODhkODJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAJqowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAWQBrKG9xYl6piZ+guKpB7xgjuOrP7lWLTEJK/r1H0hnbOstwliSrBINR sGfM+qgsiISxVZqRApHyWwtUJ38Pfe71IkAewPCR3XXlETyQuunm8al0xCQaks/Q mIg8Lut6adW7IsacWF55ZmH4vCRjy5qWdkWpDMahrTGSZR9uICS12p+rzl6UCPlA SAPNg6w4Qrh30XtyeitBseaUGBr3LflAjr/iz6ImuQfHRmSyMJaeoyVY7C/q25i/ t4d4f2PjuZRMw6IiV2goKBNsnpw8a2uSk7rNDk7yoo4IjqJ9rnX59yOmzD1V9Eph DK1WIOu8vjPFFAs+Gx4BTMiqH9I5jA== -----END CERTIFICATE-----Generated at Tue Oct 27 12:27:22 2026 by rpki-client