$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cc57b9b4-6752-3c81-9eba-429580aa701e.roa File: cc57b9b4-6752-3c81-9eba-429580aa701e.roa (raw, json) Hash identifier: sqwuL590lz2mVQHFhHTugUrTqOj75xwyfO7J77rIToU= Subject key identifier: 2C:E7:92:DD:A7:1A:4E:31:75:5A:24:10:FA:91:3E:87:D2:CE:32:61 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F5E62B25CE1B769AB015BC980 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cc57b9b4-6752-3c81-9eba-429580aa701e.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 274152 IP address blocks: 38.252.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:b2:5c:e1:b7:69:ab:01:5b:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=5d4cd8fb-e3d9-410e-9aa2-787643c3a689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:48:12:d9:6e:59:b4:93:bb:97:c8:d1:1d:b0: 0e:2b:3b:ba:1d:56:f3:0f:41:7e:00:93:3d:86:59: e5:e3:0e:0f:a3:41:49:07:94:79:6f:2e:04:9c:75: 91:53:9f:e1:e4:71:c2:6d:dc:50:db:3d:03:ad:be: 70:4a:8c:2e:5e:6b:29:65:c6:ee:a6:e0:6a:b4:6c: 06:f9:aa:da:fc:71:59:93:cd:f6:e9:e7:78:81:04: 82:ad:d1:01:73:a6:08:a9:2e:00:6a:26:d1:81:2e: 26:f7:20:20:e2:31:05:af:fc:59:b1:22:7d:6e:6f: a9:07:46:0e:bf:53:46:06:ed:a0:31:ad:7f:83:24: 34:d7:39:3d:0f:3e:ac:bf:f2:e8:0d:72:f1:7c:f6: 9b:7f:1b:71:fb:35:29:df:c2:b1:26:52:ff:91:27: 79:2f:70:fd:12:e8:68:98:7d:c4:be:82:9a:4a:f2: 5b:1c:05:e7:79:44:e9:8b:8e:b1:8b:89:dc:a6:b8: f2:13:56:e9:5c:bb:7b:2d:eb:54:58:40:bb:4a:f9: e3:44:82:a3:dd:08:74:c0:24:4f:f7:1a:07:88:cb: 82:0b:51:19:81:32:a7:cf:40:4f:da:4c:91:3c:ea: 0a:b3:18:c4:33:af:49:d5:b6:c0:7e:92:fe:08:8e: 1e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E7:92:DD:A7:1A:4E:31:75:5A:24:10:FA:91:3E:87:D2:CE:32:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cc57b9b4-6752-3c81-9eba-429580aa701e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.252.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:be:67:b4:c2:89:03:a2:a6:1b:d9:03:09:7e:49:b2:86:16: 23:1a:b4:4d:c8:58:34:c2:3b:55:f7:82:71:6f:41:65:bb:36: ed:be:10:bf:57:5e:fc:f9:92:07:7a:91:a4:64:9f:cd:ba:07: f4:c5:f9:f2:89:ac:8f:b0:51:b2:c2:75:12:48:ba:19:07:f3: 48:2a:b2:73:0a:7d:60:13:21:ea:19:55:8b:6f:4b:b1:6b:db: ed:45:d3:55:f9:8e:f0:9e:53:c5:90:b7:c0:63:bd:d7:4f:62: 6f:e2:18:2d:f1:d6:0b:51:18:b9:9e:dd:8f:ab:ef:ec:d8:ed: da:9e:d6:88:a6:cd:82:09:4a:b5:1d:5e:db:63:15:a9:72:aa: b5:ec:ca:86:c5:66:31:db:71:0e:fd:17:04:83:a7:9b:11:94: 63:6d:de:0e:70:73:fe:60:d4:42:6a:3d:87:a0:3f:51:21:26: 82:9f:68:3e:f1:01:a5:78:bd:b1:fd:f0:ab:cb:b6:7a:b6:7d: 77:d1:cf:af:c4:f8:2e:56:94:8f:c7:9f:1b:0b:f8:bb:c8:65: 33:ef:59:39:32:80:10:d7:e9:70:f6:83:da:92:05:09:1f:db: 0a:e2:57:9c:03:94:12:a0:f6:e7:f9:45:58:e5:8a:41:10:34: 03:de:2c:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYrJc4bdpqwFbyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk NWQ0Y2Q4ZmItZTNkOS00MTBlLTlhYTItNzg3NjQzYzNhNjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0gS2W5ZtJO7l8jRHbAOKzu6HVbzD0F+AJM9 hlnl4w4Po0FJB5R5by4EnHWRU5/h5HHCbdxQ2z0Drb5wSowuXmspZcbupuBqtGwG +ara/HFZk8326ed4gQSCrdEBc6YIqS4AaibRgS4m9yAg4jEFr/xZsSJ9bm+pB0YO v1NGBu2gMa1/gyQ01zk9Dz6sv/LoDXLxfPabfxtx+zUp38KxJlL/kSd5L3D9Euho mH3EvoKaSvJbHAXneUTpi46xi4ncprjyE1bpXLt7LetUWEC7SvnjRIKj3Qh0wCRP 9xoHiMuCC1EZgTKnz0BP2kyRPOoKsxjEM69J1bbAfpL+CI4eYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCznkt2nGk4xdVokEPqRPofSzjJhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvY2M1N2I5YjQtNjc1Mi0z YzgxLTllYmEtNDI5NTgwYWE3MDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJvxqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJW+Z7TCiQOiphvZAwl+SbKGFiMatE3IWDTCO1X3gnFvQWW7Nu2+EL9X Xvz5kgd6kaRkn826B/TF+fKJrI+wUbLCdRJIuhkH80gqsnMKfWATIeoZVYtvS7Fr 2+1F01X5jvCeU8WQt8BjvddPYm/iGC3x1gtRGLme3Y+r7+zY7dqe1oimzYIJSrUd XttjFalyqrXsyobFZjHbcQ79FwSDp5sRlGNt3g5wc/5g1EJqPYegP1EhJoKfaD7x AaV4vbH98KvLtnq2fXfRz6/E+C5WlI/HnxsL+LvIZTPvWTkygBDX6XD2g9qSBQkf 2wriV5wDlBKg9uf5RVjlikEQNAPeLP8= -----END CERTIFICATE-----Generated at Tue Oct 27 17:24:18 2026 by rpki-client