$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cb3a6a57-c80d-3be1-a8c5-9573085ae483.roa File: cb3a6a57-c80d-3be1-a8c5-9573085ae483.roa (raw, json) Hash identifier: Mv+Wn35F1AN/SaUvOnxS/fQ1dyx9UUYwx/8xovhW+HY= Subject key identifier: 58:56:72:77:E7:1C:5C:16:58:B4:D7:75:AF:D5:01:28:DE:CF:6F:71 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F4B2E29A97BBA6E20F50E371C Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cb3a6a57-c80d-3be1-a8c5-9573085ae483.roa Signing time: Fri 25 Sep 2026 15:54:05 +0000 ROA not before: Fri 25 Sep 2026 15:54:05 +0000 ROA not after: Thu 24 Dec 2026 16:54:05 +0000 asID: 275012 IP address blocks: 38.224.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4b:2e:29:a9:7b:ba:6e:20:f5:0e:37:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 25 15:54:05 2026 GMT Not After : Dec 24 16:54:05 2026 GMT Subject: CN=117389e6-4a4d-4e5f-a568-9f595de91644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6c:4f:46:5e:f0:ca:66:c8:55:51:28:d9:26: 01:0b:72:09:f6:87:28:f9:6a:66:4b:94:23:f1:01: 14:c8:54:b1:4c:ed:f1:3a:02:58:b8:9d:cc:66:06: 7d:92:59:02:8c:26:9c:22:4b:56:59:ec:a9:ea:26: 4d:d7:37:89:f0:8c:d8:92:b3:05:ab:0b:d6:88:7a: e0:42:b4:1a:bd:a9:dc:a0:f2:ee:a8:e9:be:a6:ab: 2e:13:3d:dc:43:0e:bf:5c:e6:f4:8e:5c:d5:51:54: 52:a3:f2:5b:8b:69:fd:da:3f:17:75:5e:44:78:82: 19:50:53:1c:80:db:e4:b9:65:99:99:d5:f3:3e:fd: 68:d8:7f:1c:4d:f9:10:a3:83:b5:91:92:cd:bf:fe: a7:ff:cf:c6:94:e0:a1:26:db:e9:ff:99:32:9c:13: 47:ff:a7:6c:cd:5b:01:2f:b5:5b:89:08:e3:78:ce: 58:8d:32:8f:85:fe:63:4c:91:a9:a6:e8:51:0c:79: 0c:5e:cc:bb:83:3a:64:6e:ac:4a:a2:fb:b3:ed:86: eb:05:79:c8:84:56:c6:d5:c3:d1:e4:27:85:ef:5d: e3:e3:c6:7b:15:e8:6b:da:a2:56:20:55:07:af:1f: 2a:bd:19:87:6b:b6:5c:89:fb:b8:72:72:e1:55:7e: 63:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:56:72:77:E7:1C:5C:16:58:B4:D7:75:AF:D5:01:28:DE:CF:6F:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cb3a6a57-c80d-3be1-a8c5-9573085ae483.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.224.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:b3:9b:20:39:a0:04:2e:9a:6d:81:e6:ea:6a:1c:f1:1e:e0: b5:5a:cd:0f:e9:4d:e6:dd:14:ba:98:0d:c0:5c:fd:ad:36:77: f6:7f:76:0d:b6:f7:c3:38:cc:d1:e1:31:4a:ee:c1:d5:f2:34: 9c:9f:46:7f:52:1e:32:73:37:7b:95:81:92:ed:30:1e:06:d6: 59:98:19:55:cc:65:6f:ae:81:4a:ec:23:fa:93:7c:aa:90:9d: 3d:6a:69:1d:58:41:cb:51:13:89:2a:29:b1:f4:4e:b3:f6:aa: f6:22:74:3c:68:7f:74:f3:95:8a:b9:7b:26:cd:64:c1:9e:ab: ea:47:53:1b:af:24:2e:61:f5:db:c3:3c:1a:26:e5:c3:bb:ff: e7:c9:e5:b1:cc:fc:87:b3:7f:b2:2d:8a:e8:4a:19:66:b3:9f: 02:a1:8f:57:8d:2c:cf:9f:d8:cc:a7:ef:0f:8d:8e:05:43:7c: 84:9f:eb:62:f5:85:0c:31:19:a3:7a:38:b5:e6:8f:de:15:ae: 18:c6:c6:57:48:ef:45:a5:f9:a8:f7:ed:06:3a:0f:9d:09:71: 43:65:a9:c3:19:99:07:45:00:f7:06:59:b4:ca:0e:9d:13:78: 7b:04:08:01:9d:53:b0:59:9c:4f:e4:6f:54:5a:aa:18:84:6d: 77:1f:86:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9LLimpe7puIPUONxwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyNTE1NTQwNVoXDTI2MTIyNDE2NTQwNVowLzEtMCsGA1UEAxMk MTE3Mzg5ZTYtNGE0ZC00ZTVmLWE1NjgtOWY1OTVkZTkxNjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2xPRl7wymbIVVEo2SYBC3IJ9oco+WpmS5Qj 8QEUyFSxTO3xOgJYuJ3MZgZ9klkCjCacIktWWeyp6iZN1zeJ8IzYkrMFqwvWiHrg QrQavancoPLuqOm+pqsuEz3cQw6/XOb0jlzVUVRSo/Jbi2n92j8XdV5EeIIZUFMc gNvkuWWZmdXzPv1o2H8cTfkQo4O1kZLNv/6n/8/GlOChJtvp/5kynBNH/6dszVsB L7VbiQjjeM5YjTKPhf5jTJGppuhRDHkMXsy7gzpkbqxKovuz7YbrBXnIhFbG1cPR 5CeF713j48Z7Fehr2qJWIFUHrx8qvRmHa7Zcifu4cnLhVX5jaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhWcnfnHFwWWLTXda/VASjez29xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvY2IzYTZhNTctYzgwZC0z YmUxLWE4YzUtOTU3MzA4NWFlNDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJuBmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyzmyA5oAQumm2B5upqHPEe4LVazQ/pTebdFLqYDcBc/a02d/Z/dg22 98M4zNHhMUruwdXyNJyfRn9SHjJzN3uVgZLtMB4G1lmYGVXMZW+ugUrsI/qTfKqQ nT1qaR1YQctRE4kqKbH0TrP2qvYidDxof3TzlYq5eybNZMGeq+pHUxuvJC5h9dvD PBom5cO7/+fJ5bHM/Iezf7ItiuhKGWaznwKhj1eNLM+f2Myn7w+NjgVDfISf62L1 hQwxGaN6OLXmj94VrhjGxldI70Wl+aj37QY6D50JcUNlqcMZmQdFAPcGWbTKDp0T eHsECAGdU7BZnE/kb1RaqhiEbXcfhlY= -----END CERTIFICATE-----Generated at Tue Oct 27 17:34:31 2026 by rpki-client