$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c814aea4-9b03-33a0-b769-438b1defcfa1.roa File: c814aea4-9b03-33a0-b769-438b1defcfa1.roa (raw, json) Hash identifier: cM+Ow08K3o8meiKDxsI9wiGtmhIhSp+Q3OoXr8c5Y90= Subject key identifier: 78:BA:00:99:CB:4C:83:53:52:76:3D:20:74:6F:B4:72:A6:0B:5A:5B Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584FA276F21B8AD62D6AADB86500 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c814aea4-9b03-33a0-b769-438b1defcfa1.roa Signing time: Mon 26 Oct 2026 22:16:04 +0000 ROA not before: Mon 26 Oct 2026 22:16:04 +0000 ROA not after: Sun 24 Jan 2027 23:16:04 +0000 asID: 399010 IP address blocks: 38.22.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:76:f2:1b:8a:d6:2d:6a:ad:b8:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 26 22:16:04 2026 GMT Not After : Jan 24 23:16:04 2027 GMT Subject: CN=5712b5c1-7bf2-4bca-bc19-a3c1ad8b6019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:36:3a:e9:8e:a3:8d:4f:06:14:89:af:63:72: fd:0e:57:83:36:32:ca:15:d4:e3:79:01:76:3f:14: fe:05:75:06:f7:f7:c5:6a:69:cf:8b:cf:3e:32:40: 23:45:7a:95:6f:2d:f5:4f:ff:cd:fd:dc:5f:fe:9a: c5:7e:00:8a:90:0b:51:6e:46:cf:25:be:b9:fe:63: 2c:8a:8c:b4:3c:85:a8:77:22:b9:e3:6d:3d:39:a7: 89:59:7d:c3:3a:b1:92:c7:2d:a4:11:f9:7f:bc:8a: 8d:bd:d1:05:cf:a2:92:1c:dc:6a:d3:b9:c9:58:72: 97:37:a4:3c:76:43:15:eb:99:5e:e3:29:cb:6c:91: 59:c4:00:ec:27:d1:d2:0e:d8:27:e0:9a:01:44:af: a4:3c:f2:e4:71:b5:93:81:2e:54:d2:0f:0d:a6:ca: 01:12:4b:15:a2:02:a3:74:d2:9f:fa:bc:42:0f:08: 81:ff:fa:9a:98:5f:a6:dc:76:77:34:8c:51:e6:07: a7:19:30:bd:cc:af:d3:eb:fe:41:bb:5e:13:7e:5b: 7b:0b:56:15:50:68:97:7f:d1:fb:8e:62:32:33:dd: 4f:cd:a4:2f:ae:b9:49:de:12:3f:ee:04:bb:74:e5: e4:fe:ac:62:67:a0:20:4c:eb:59:00:78:28:f1:ae: 1b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:BA:00:99:CB:4C:83:53:52:76:3D:20:74:6F:B4:72:A6:0B:5A:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c814aea4-9b03-33a0-b769-438b1defcfa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.22.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:ef:80:95:5e:12:92:2b:f7:aa:ae:2c:1c:1f:25:77:80:d8: ba:71:9f:32:95:ed:0a:06:0f:7b:0a:82:78:f3:e3:ad:32:ba: 01:da:dd:b9:85:a5:64:6b:67:e7:23:a0:d1:b1:ab:c6:a6:3e: e5:82:78:17:1c:01:4e:f1:47:d0:57:eb:3a:b4:17:eb:45:ae: 33:b1:46:dd:8a:6f:4d:3c:8c:19:2f:da:a8:80:c6:17:b1:12: 8a:e0:d6:b9:da:cd:fd:ad:ce:7f:99:0d:cc:be:6d:b6:b3:50: 21:0b:5d:1b:f2:e3:c4:92:05:23:95:b7:c8:19:bb:c6:3e:d6: 8f:46:55:53:18:9d:c7:85:44:d8:0e:07:cb:a7:45:a2:1a:ed: ab:38:0b:75:b0:26:fe:96:f7:83:c7:50:c2:a2:7b:b8:09:d0: c1:0a:ba:e2:e5:59:99:22:71:0b:5c:62:c1:4b:0e:9c:6e:f8: ff:19:8a:cd:58:f2:6c:37:81:a5:30:ee:5d:59:c1:0c:ab:89: 77:1b:1b:99:f1:cf:ec:a6:bf:21:c6:f0:3a:ea:64:90:6f:c9: 81:37:39:e9:85:f2:a3:09:df:95:cd:0b:61:96:d9:6b:a1:d4: f7:da:5c:bd:3d:77:c4:38:1e:f0:80:a1:28:3a:07:df:8b:43: 16:7c:8b:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+idvIbitYtaq24ZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyNjIyMTYwNFoXDTI3MDEyNDIzMTYwNFowLzEtMCsGA1UEAxMk NTcxMmI1YzEtN2JmMi00YmNhLWJjMTktYTNjMWFkOGI2MDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjY66Y6jjU8GFImvY3L9DleDNjLKFdTjeQF2 PxT+BXUG9/fFamnPi88+MkAjRXqVby31T//N/dxf/prFfgCKkAtRbkbPJb65/mMs ioy0PIWodyK54209OaeJWX3DOrGSxy2kEfl/vIqNvdEFz6KSHNxq07nJWHKXN6Q8 dkMV65le4ynLbJFZxADsJ9HSDtgn4JoBRK+kPPLkcbWTgS5U0g8NpsoBEksVogKj dNKf+rxCDwiB//qamF+m3HZ3NIxR5genGTC9zK/T6/5Bu14Tflt7C1YVUGiXf9H7 jmIyM91PzaQvrrlJ3hI/7gS7dOXk/qxiZ6AgTOtZAHgo8a4bNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHi6AJnLTINTUnY9IHRvtHKmC1pbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYzgxNGFlYTQtOWIwMy0z M2EwLWI3NjktNDM4YjFkZWZjZmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJhYlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7vgJVeEpIr96quLBwfJXeA2LpxnzKV7QoGD3sKgnjz460yugHa3bmF pWRrZ+cjoNGxq8amPuWCeBccAU7xR9BX6zq0F+tFrjOxRt2Kb008jBkv2qiAxhex Eorg1rnazf2tzn+ZDcy+bbazUCELXRvy48SSBSOVt8gZu8Y+1o9GVVMYnceFRNgO B8unRaIa7as4C3WwJv6W94PHUMKie7gJ0MEKuuLlWZkicQtcYsFLDpxu+P8Zis1Y 8mw3gaUw7l1ZwQyriXcbG5nxz+ymvyHG8DrqZJBvyYE3OemF8qMJ35XNC2GW2Wuh 1PfaXL09d8Q4HvCAoSg6B9+LQxZ8iyY= -----END CERTIFICATE-----Generated at Tue Oct 27 18:14:23 2026 by rpki-client