$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c2265779-2ff6-39db-9d24-1dd6556a9738.roa File: c2265779-2ff6-39db-9d24-1dd6556a9738.roa (raw, json) Hash identifier: ML3BePTxZ3/BjczuU7Kl9KtbEgV5GKEBjtIFzSYn/GI= Subject key identifier: 11:C9:8A:94:4D:97:B5:1A:52:F8:29:6E:78:BE:4C:74:A3:7C:25:CC Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F8C72F1103F74D94EDB01A680 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c2265779-2ff6-39db-9d24-1dd6556a9738.roa Signing time: Mon 19 Oct 2026 01:00:12 +0000 ROA not before: Mon 19 Oct 2026 01:00:12 +0000 ROA not after: Sun 17 Jan 2027 02:00:12 +0000 asID: 327786 IP address blocks: 38.43.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8c:72:f1:10:3f:74:d9:4e:db:01:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 19 01:00:12 2026 GMT Not After : Jan 17 02:00:12 2027 GMT Subject: CN=9c4f3a38-cb41-46c8-abdc-8f4c0f3371f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1e:39:f7:7f:86:ec:48:4d:28:3b:04:e9:63: 5f:c7:cd:cc:bf:a5:71:74:8e:ae:cb:4b:2b:8e:e7: d6:c2:54:a4:08:0a:d0:7f:2a:2f:60:91:6d:9e:2f: 3f:ec:17:63:5b:3c:6f:d9:03:e7:d1:56:cd:d0:52: d1:5a:07:64:7c:e3:f5:27:37:3e:1e:6e:35:eb:46: 48:76:51:1c:ba:c6:1a:98:1a:0e:f7:8c:45:cc:1e: 22:dc:a9:d2:b0:55:79:87:fa:5b:7f:84:8c:14:df: 27:84:86:db:7b:24:7f:6d:90:ee:79:58:88:d1:90: b1:f7:fd:15:29:09:20:1b:44:67:7e:7a:75:b2:95: aa:92:3e:d8:42:52:dd:62:cf:5d:f3:f9:86:81:83: a0:48:3c:a5:0d:b3:a8:ad:07:32:15:8b:1e:f5:9e: ef:65:16:3e:0a:f1:6f:61:51:d8:89:02:b6:2e:af: 7b:7d:a0:62:e6:22:a4:5f:84:9c:f7:8b:9e:93:24: 9c:54:b4:2d:54:78:b7:5a:50:fa:6f:ff:f3:7d:e3: 8f:ae:45:65:9e:51:a3:7d:64:bc:f3:ef:0b:39:52: d3:5d:b9:7c:45:6c:76:aa:51:62:a6:ec:74:81:c5: 83:60:4a:79:9c:60:8a:85:64:12:ff:07:39:8a:b8: 04:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C9:8A:94:4D:97:B5:1A:52:F8:29:6E:78:BE:4C:74:A3:7C:25:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c2265779-2ff6-39db-9d24-1dd6556a9738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.43.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:5c:48:f0:80:04:2d:3d:bc:e2:55:41:5a:20:3f:4a:7c:88: ca:68:f0:1d:62:35:df:2f:00:78:0e:e6:a5:c2:9e:37:0f:ef: e6:86:65:69:e5:a9:76:fb:e5:4d:6c:91:83:03:7d:05:a9:99: 9c:12:4d:3f:87:25:88:c8:ff:b7:d1:ca:25:46:bb:0c:b4:94: 7a:a5:57:d8:44:1d:ad:8d:3c:01:7b:44:01:23:17:a4:43:77: e9:d5:41:76:eb:0c:07:54:fc:3f:8c:7d:d2:47:d0:d6:77:e3: 74:f3:b7:77:4e:c7:d4:f2:72:26:cf:84:99:eb:5a:00:e1:db: 89:56:69:8c:f9:d9:62:17:73:ca:3e:77:ba:97:ba:8b:71:6a: b9:31:f9:a0:45:54:a3:09:29:ba:38:2a:b3:5e:fa:57:d1:86: e6:3b:f0:1d:da:ac:ee:b2:0e:aa:a8:65:f1:31:13:15:34:cc: 47:98:8f:bb:a1:2e:e9:98:ae:51:26:ad:29:10:9e:8f:00:55: be:ee:7d:f7:08:c7:be:4f:20:36:a9:16:d1:84:84:79:4b:92: 3f:ee:3b:60:7f:6c:04:ca:4e:2a:40:f4:2d:b7:a8:68:b5:4d: 0c:e2:6e:6e:86:10:7c:ac:e2:d9:b5:1c:3e:8c:a1:f2:6c:c8: b9:b6:67:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+McvEQP3TZTtsBpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxOTAxMDAxMloXDTI3MDExNzAyMDAxMlowLzEtMCsGA1UEAxMk OWM0ZjNhMzgtY2I0MS00NmM4LWFiZGMtOGY0YzBmMzM3MWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx4593+G7EhNKDsE6WNfx83Mv6VxdI6uy0sr jufWwlSkCArQfyovYJFtni8/7BdjWzxv2QPn0VbN0FLRWgdkfOP1Jzc+Hm4160ZI dlEcusYamBoO94xFzB4i3KnSsFV5h/pbf4SMFN8nhIbbeyR/bZDueViI0ZCx9/0V KQkgG0Rnfnp1spWqkj7YQlLdYs9d8/mGgYOgSDylDbOorQcyFYse9Z7vZRY+CvFv YVHYiQK2Lq97faBi5iKkX4Sc94uekyScVLQtVHi3WlD6b//zfeOPrkVlnlGjfWS8 8+8LOVLTXbl8RWx2qlFipux0gcWDYEp5nGCKhWQS/wc5irgE2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHJipRNl7UaUvgpbni+THSjfCXMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYzIyNjU3NzktMmZmNi0z OWRiLTlkMjQtMWRkNjU1NmE5NzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJitIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJcSPCABC09vOJVQVogP0p8iMpo8B1iNd8vAHgO5qXCnjcP7+aGZWnl qXb75U1skYMDfQWpmZwSTT+HJYjI/7fRyiVGuwy0lHqlV9hEHa2NPAF7RAEjF6RD d+nVQXbrDAdU/D+MfdJH0NZ343Tzt3dOx9TycibPhJnrWgDh24lWaYz52WIXc8o+ d7qXuotxarkx+aBFVKMJKbo4KrNe+lfRhuY78B3arO6yDqqoZfExExU0zEeYj7uh LumYrlEmrSkQno8AVb7uffcIx75PIDapFtGEhHlLkj/uO2B/bATKTipA9C23qGi1 TQzibm6GEHys4tm1HD6MofJsyLm2Z60= -----END CERTIFICATE-----Generated at Tue Oct 27 22:51:33 2026 by rpki-client