$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cbba20b7-94cb-39cb-a398-0437c4e3e01f.roa File: cbba20b7-94cb-39cb-a398-0437c4e3e01f.roa (raw, json) Hash identifier: R/eNokkmtt4hgboLtVQ7Y0n34Nf8YX0ZhBN25hCsDnI= Subject key identifier: B3:67:C5:53:0B:EB:67:08:5F:10:ED:F6:2C:FB:46:46:17:EF:F9:2B Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F4C3DE362203596EB874B0E00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cbba20b7-94cb-39cb-a398-0437c4e3e01f.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 19218 IP address blocks: 38.45.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:e3:62:20:35:96:eb:87:4b:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=7f56ff9a-c7ce-404a-9776-ab2e55810492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:aa:39:b0:c4:5b:c1:63:da:25:9e:17:b1:cc: 3b:c8:5e:df:4f:ae:a6:64:4d:0a:2e:b6:97:5d:18: 37:65:7b:f5:78:15:b9:05:8d:16:af:28:f2:17:51: 20:23:18:50:6c:95:7c:bb:84:36:b8:8a:c0:ad:d4: 90:69:de:0a:5d:3d:60:bf:ba:c9:5d:0b:4d:05:a5: e1:75:61:82:02:0e:c7:ad:71:cb:11:b0:f7:90:b0: 30:29:2e:59:bf:eb:df:67:b7:59:8d:73:2b:e7:5c: 0c:9a:91:c0:93:c6:97:8f:dc:0c:eb:c6:ca:f8:cc: 9b:56:41:29:88:b0:8f:6f:02:0c:a6:52:0c:50:29: ba:54:e7:9b:a7:c1:05:ff:1a:38:3e:87:77:76:7a: d5:75:f7:58:a4:99:68:61:61:9d:67:3c:d0:44:28: 73:22:ee:a0:ca:47:3c:a6:f1:ac:de:c0:d3:93:df: 5e:06:f5:9f:a6:78:00:ef:47:f9:4d:4c:b0:c0:8e: 25:8d:f0:29:df:e4:f5:36:c0:ad:e6:bc:71:1f:05: 9d:eb:18:f4:40:cd:8d:2a:cf:e7:93:07:80:ff:b2: 79:d8:95:7d:64:c9:ad:58:cb:a2:d1:f9:bb:bd:65: 10:c5:97:72:bd:27:c9:90:14:bc:d3:de:98:80:60: 2b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:67:C5:53:0B:EB:67:08:5F:10:ED:F6:2C:FB:46:46:17:EF:F9:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cbba20b7-94cb-39cb-a398-0437c4e3e01f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.45.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:6b:44:f3:e8:e7:54:76:ed:d2:a6:89:e9:88:94:75:6f:6b: c8:41:56:d6:64:1a:c3:56:e3:08:d8:e4:a3:59:97:e8:96:c3: b3:cd:ba:e6:1e:f0:cb:79:36:d8:c1:48:cc:66:00:7d:ec:f2: 8e:d2:9e:78:16:77:02:01:46:a5:c5:7f:87:3e:3c:b5:dd:c7: 02:c3:18:9b:5f:b5:ea:a8:f0:60:72:05:3f:5b:40:30:79:6a: 2b:b5:fe:7b:1f:83:2e:fc:3f:a8:6d:6e:65:78:28:ec:e8:53: 95:da:54:d0:98:53:1a:57:85:ab:ba:ba:e4:71:53:84:f6:87: 54:b3:e2:4c:ac:3b:4a:7a:83:72:28:b7:3d:94:a0:dd:b9:5a: e7:65:00:84:2c:4e:99:49:0a:78:a4:03:6a:82:94:61:21:e4: 38:46:89:c0:4f:a1:62:17:ce:72:a7:20:a9:68:36:56:19:e9: 6d:2f:eb:94:64:f4:25:6e:57:ca:4e:18:86:de:9c:5e:00:c5: b6:2b:ad:ec:d5:ed:8f:24:c0:ab:0b:fb:31:2b:93:d3:cf:e1: 5a:02:8d:dd:4c:52:fd:b2:15:a4:4f:d3:af:63:5f:3a:74:96: 49:46:a0:02:83:5b:37:6b:da:23:47:05:e2:db:13:9d:9c:a5: a8:ad:bb:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPeNiIDWW64dLDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk N2Y1NmZmOWEtYzdjZS00MDRhLTk3NzYtYWIyZTU1ODEwNDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ao5sMRbwWPaJZ4Xscw7yF7fT66mZE0KLraX XRg3ZXv1eBW5BY0WryjyF1EgIxhQbJV8u4Q2uIrArdSQad4KXT1gv7rJXQtNBaXh dWGCAg7HrXHLEbD3kLAwKS5Zv+vfZ7dZjXMr51wMmpHAk8aXj9wM68bK+MybVkEp iLCPbwIMplIMUCm6VOebp8EF/xo4Pod3dnrVdfdYpJloYWGdZzzQRChzIu6gykc8 pvGs3sDTk99eBvWfpngA70f5TUywwI4ljfAp3+T1NsCt5rxxHwWd6xj0QM2NKs/n kweA/7J52JV9ZMmtWMui0fm7vWUQxZdyvSfJkBS8096YgGArTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNnxVML62cIXxDt9iz7RkYX7/krMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvY2JiYTIwYjctOTRjYi0z OWNiLWEzOTgtMDQzN2M0ZTNlMDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJi1oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVrRPPo51R27dKmiemIlHVva8hBVtZkGsNW4wjY5KNZl+iWw7PNuuYe 8Mt5NtjBSMxmAH3s8o7SnngWdwIBRqXFf4c+PLXdxwLDGJtfteqo8GByBT9bQDB5 aiu1/nsfgy78P6htbmV4KOzoU5XaVNCYUxpXhau6uuRxU4T2h1Sz4kysO0p6g3Io tz2UoN25WudlAIQsTplJCnikA2qClGEh5DhGicBPoWIXznKnIKloNlYZ6W0v65Rk 9CVuV8pOGIbenF4AxbYrrezV7Y8kwKsL+zErk9PP4VoCjd1MUv2yFaRP069jXzp0 lklGoAKDWzdr2iNHBeLbE52cpaitu7A= -----END CERTIFICATE-----Generated at Tue Oct 13 22:50:18 2026 by rpki-client