$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c4cf3f6e-557f-30b9-bb44-504d997c4f18.roa File: c4cf3f6e-557f-30b9-bb44-504d997c4f18.roa (raw, json) Hash identifier: K9IFD6SlJx7JTJ+B0gmpvfGOqd8RHSa4efVJdXIdrbI= Subject key identifier: BD:40:68:29:BC:EE:B5:B3:18:9A:80:0D:52:19:22:CC:2D:13:52:33 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F86DD975A7AE4EB68EE48E080 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c4cf3f6e-557f-30b9-bb44-504d997c4f18.roa Signing time: Sat 17 Oct 2026 01:00:13 +0000 ROA not before: Sat 17 Oct 2026 01:00:13 +0000 ROA not after: Fri 15 Jan 2027 02:00:13 +0000 asID: 264814 IP address blocks: 38.250.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:86:dd:97:5a:7a:e4:eb:68:ee:48:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 17 01:00:13 2026 GMT Not After : Jan 15 02:00:13 2027 GMT Subject: CN=9da7310a-dd41-4a14-b3b7-934023eaa39c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e7:de:ae:7f:64:99:d8:a3:d4:16:d2:5c:ef: 49:95:10:82:78:af:76:48:1b:52:1f:33:a1:82:57: cb:66:a2:82:8b:24:ba:6d:c9:e3:20:52:03:3e:a1: d3:a4:26:d6:74:41:11:7f:35:97:eb:a8:00:84:cb: 2f:7d:30:cb:16:81:d2:1b:ff:7d:ed:a1:be:43:26: ab:81:91:32:bd:6f:0d:a9:6c:c3:38:a5:48:9a:0d: aa:57:a5:06:d1:c1:c7:9d:c9:ff:6d:17:2d:81:00: a3:35:b2:ab:42:b1:d3:bd:c9:8a:f1:b0:1f:c1:20: b4:05:a2:db:1b:b6:7a:85:cd:42:f0:ca:6d:6b:c7: 87:85:c6:51:d5:6f:e0:03:34:37:70:ec:e4:5e:ac: a3:2b:1b:e7:bf:db:c4:1b:6e:90:ee:0c:26:d7:14: 9b:a9:8a:fa:51:31:07:b1:14:8d:2f:18:41:b4:68: eb:bd:49:dd:87:af:67:8a:00:61:83:de:7c:fe:81: cc:79:2e:e7:67:3f:9a:52:fc:59:2c:9a:9e:a6:86: 1f:09:38:05:ed:56:03:9d:9f:62:e9:21:4a:8d:50: 0e:6f:d7:f2:8e:41:8e:ee:01:99:6a:de:30:6c:40: 7e:f6:b6:ac:1e:bd:27:cf:3b:47:2e:78:dc:3f:0d: b2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:40:68:29:BC:EE:B5:B3:18:9A:80:0D:52:19:22:CC:2D:13:52:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c4cf3f6e-557f-30b9-bb44-504d997c4f18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.250.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:21:a3:5b:81:76:ca:ab:19:4e:30:07:ce:0b:c8:05:23:6a: 76:d3:04:36:26:41:7e:c4:6f:1c:15:dc:d6:38:cb:75:ea:66: b8:17:c4:92:54:22:69:d1:92:e8:82:dd:de:c5:a5:0a:68:ce: 18:b5:79:25:07:ec:cd:b5:64:bd:d0:91:85:0c:49:db:d7:ab: 26:92:6c:12:c3:0a:91:6a:f9:69:55:1c:96:d6:61:00:5b:1c: 52:df:86:ad:a0:95:ea:64:50:43:2f:d1:47:ef:8d:e1:e0:be: cc:1e:da:4a:62:7b:5c:72:6c:b9:3f:bb:53:57:93:1f:69:b1: be:74:aa:28:5e:4e:52:5f:90:15:d8:cc:58:3f:bb:02:9a:ed: a5:d0:71:7b:99:f3:ba:ce:74:ee:84:0d:51:e2:31:28:2b:66: 7b:bb:cf:b9:ba:9c:5b:2a:f3:0a:ba:f4:81:63:9b:d9:26:15: ec:2d:69:dc:b7:39:73:8d:ae:03:c3:80:0c:9b:1f:11:3a:61: 6c:f5:8f:29:1c:37:88:93:c0:42:5e:93:41:4b:3d:a7:01:34: d2:96:64:19:ff:e0:f1:74:1a:8c:d0:ea:27:17:73:8e:e6:cd: 3b:2f:c7:e0:2a:0a:55:c2:2f:16:03:e1:fc:26:e2:59:c6:62: c9:92:ca:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+G3ZdaeuTraO5I4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxNzAxMDAxM1oXDTI3MDExNTAyMDAxM1owLzEtMCsGA1UEAxMk OWRhNzMxMGEtZGQ0MS00YTE0LWIzYjctOTM0MDIzZWFhMzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgufern9kmdij1BbSXO9JlRCCeK92SBtSHzOh glfLZqKCiyS6bcnjIFIDPqHTpCbWdEERfzWX66gAhMsvfTDLFoHSG/997aG+Qyar gZEyvW8NqWzDOKVImg2qV6UG0cHHncn/bRctgQCjNbKrQrHTvcmK8bAfwSC0BaLb G7Z6hc1C8Mpta8eHhcZR1W/gAzQ3cOzkXqyjKxvnv9vEG26Q7gwm1xSbqYr6UTEH sRSNLxhBtGjrvUndh69nigBhg958/oHMeS7nZz+aUvxZLJqepoYfCTgF7VYDnZ9i 6SFKjVAOb9fyjkGO7gGZat4wbEB+9rasHr0nzztHLnjcPw2yVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1AaCm87rWzGJqADVIZIswtE1IzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYzRjZjNmNmUtNTU3Zi0z MGI5LWJiNDQtNTA0ZDk5N2M0ZjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJvpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcho1uBdsqrGU4wB84LyAUjanbTBDYmQX7EbxwV3NY4y3XqZrgXxJJU ImnRkuiC3d7FpQpozhi1eSUH7M21ZL3QkYUMSdvXqyaSbBLDCpFq+WlVHJbWYQBb HFLfhq2glepkUEMv0UfvjeHgvswe2kpie1xybLk/u1NXkx9psb50qiheTlJfkBXY zFg/uwKa7aXQcXuZ87rOdO6EDVHiMSgrZnu7z7m6nFsq8wq69IFjm9kmFewtady3 OXONrgPDgAybHxE6YWz1jykcN4iTwEJek0FLPacBNNKWZBn/4PF0GozQ6icXc47m zTsvx+AqClXCLxYD4fwm4lnGYsmSylM= -----END CERTIFICATE-----Generated at Tue Oct 27 09:24:09 2026 by rpki-client