$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d03da3b5-3f06-3278-9070-1e3d1ee3ba33.roa File: d03da3b5-3f06-3278-9070-1e3d1ee3ba33.roa (raw, json) Hash identifier: QLdX9Ms67qYXGG6bd3Xr1q38c3my/sgni11FlZS3+Ss= Subject key identifier: 74:1A:28:1A:41:C7:30:86:74:4E:41:54:5F:76:8F:8C:86:EE:5C:B0 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F9BCDE28171346956A5857540 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d03da3b5-3f06-3278-9070-1e3d1ee3ba33.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 274861 IP address blocks: 38.99.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:e2:81:71:34:69:56:a5:85:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=289e0756-dc88-44ce-aa04-57fe46dcf44c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6c:1b:c3:74:d1:78:b9:a0:2e:a7:69:3c:55: f4:7b:79:1e:34:c0:5d:36:e9:3e:a7:c5:51:70:32: 76:bf:ae:2b:91:cb:83:a3:e4:36:e4:c4:71:65:28: 95:b9:ce:46:ae:a7:b4:ad:3f:2e:5a:4a:df:ec:c5: be:5a:5e:4a:44:32:71:86:f8:e0:9f:db:7d:77:26: 15:39:39:ad:9b:a8:1d:e1:6a:cd:c8:24:6d:9f:8c: 27:74:61:1b:e4:b7:82:1a:20:bd:4b:90:14:40:3e: 5b:01:5a:40:b6:8f:79:6a:b7:a2:6a:61:98:cb:2f: e4:34:81:96:55:f6:c2:73:87:3d:37:5e:05:60:4c: 38:2b:1b:c7:e8:f2:9e:bb:19:ec:49:64:85:91:e1: 17:48:fd:39:00:24:5e:4b:54:e1:11:ad:b7:de:c1: 7c:fe:62:53:8c:2b:23:98:93:ca:89:3a:2a:73:dc: 4f:7e:26:5f:dc:94:93:92:96:c5:97:20:70:21:98: f4:25:58:fd:1f:59:c3:3f:d9:4b:8d:82:b2:ba:29: 29:86:9b:b4:8d:76:c9:9e:85:eb:78:f4:01:34:0d: f3:a6:56:42:e7:dc:52:cd:1d:eb:2a:28:de:d7:61: 68:e7:2b:0e:4e:94:93:ad:39:8b:0e:49:e8:4c:12: 2c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:1A:28:1A:41:C7:30:86:74:4E:41:54:5F:76:8F:8C:86:EE:5C:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d03da3b5-3f06-3278-9070-1e3d1ee3ba33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.99.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:9b:6e:82:aa:0a:92:8b:93:75:33:a3:2d:9f:a1:e9:1e:82: 2a:3d:fc:2e:49:ff:95:66:8e:32:05:2a:1d:ee:8c:a6:1b:a7: d1:b2:cc:7b:e9:01:7d:18:20:15:f1:af:9a:d9:42:6e:ba:d4: 92:00:d9:a8:1c:14:4c:67:93:0b:39:54:b3:92:5e:d2:95:3d: 64:eb:a5:75:ec:f3:1c:8b:bf:3f:af:fe:c3:28:b9:3f:99:4f: f0:5a:9f:78:6b:a4:f9:08:1e:c1:7f:aa:61:5f:66:29:dd:3a: c0:97:bf:87:4b:a5:7a:a8:e3:96:6b:7c:4e:f0:3d:77:48:13: 3d:68:71:1f:f9:1c:1f:55:83:b9:79:2f:ef:2f:e3:4f:b5:fb: a6:65:4c:5e:31:ff:6c:b4:94:3a:ea:5e:63:58:06:50:07:50: df:78:5d:e4:4b:41:79:33:41:0c:2c:9e:16:71:a7:0a:7e:35: 63:39:b8:34:a4:0c:18:b8:1e:f0:f4:cf:af:fc:a5:92:fb:4a: d0:8b:ac:c1:ae:28:7a:05:c6:48:49:f4:cc:2c:32:95:6c:01: 91:09:21:70:de:d1:a8:20:58:66:d6:f7:42:03:b7:16:56:6d: 85:1b:1b:0c:6a:38:20:b1:f2:1e:0c:54:e7:f9:22:90:c2:01: bd:26:39:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzeKBcTRpVqWFdUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk Mjg5ZTA3NTYtZGM4OC00NGNlLWFhMDQtNTdmZTQ2ZGNmNDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmwbw3TReLmgLqdpPFX0e3keNMBdNuk+p8VR cDJ2v64rkcuDo+Q25MRxZSiVuc5Grqe0rT8uWkrf7MW+Wl5KRDJxhvjgn9t9dyYV OTmtm6gd4WrNyCRtn4wndGEb5LeCGiC9S5AUQD5bAVpAto95areiamGYyy/kNIGW VfbCc4c9N14FYEw4KxvH6PKeuxnsSWSFkeEXSP05ACReS1ThEa233sF8/mJTjCsj mJPKiToqc9xPfiZf3JSTkpbFlyBwIZj0JVj9H1nDP9lLjYKyuikphpu0jXbJnoXr ePQBNA3zplZC59xSzR3rKije12Fo5ysOTpSTrTmLDknoTBIswQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQaKBpBxzCGdE5BVF92j4yG7lywMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDAzZGEzYjUtM2YwNi0z Mjc4LTkwNzAtMWUzZDFlZTNiYTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJmNIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEebboKqCpKLk3Uzoy2foekegio9/C5J/5VmjjIFKh3ujKYbp9GyzHvp AX0YIBXxr5rZQm661JIA2agcFExnkws5VLOSXtKVPWTrpXXs8xyLvz+v/sMouT+Z T/Ban3hrpPkIHsF/qmFfZindOsCXv4dLpXqo45ZrfE7wPXdIEz1ocR/5HB9Vg7l5 L+8v40+1+6ZlTF4x/2y0lDrqXmNYBlAHUN94XeRLQXkzQQwsnhZxpwp+NWM5uDSk DBi4HvD0z6/8pZL7StCLrMGuKHoFxkhJ9MwsMpVsAZEJIXDe0aggWGbW90IDtxZW bYUbGwxqOCCx8h4MVOf5IpDCAb0mOZ4= -----END CERTIFICATE-----Generated at Wed Oct 28 22:52:06 2026 by rpki-client