$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d1a15596-9418-32ea-bfa5-0bb9442dfb99.roa File: d1a15596-9418-32ea-bfa5-0bb9442dfb99.roa (raw, json) Hash identifier: 325s4ceAZFwdZlSJE1IgYsEbS4OuonMo8bkhekIepcQ= Subject key identifier: 51:60:19:B1:FD:DF:BA:7D:82:19:2C:08:58:72:11:1A:3B:3B:83:B1 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F7BB30A6FEA8613AE29E1DDA0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d1a15596-9418-32ea-bfa5-0bb9442dfb99.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 274857 IP address blocks: 38.94.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:0a:6f:ea:86:13:ae:29:e1:dd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=c79e59ac-7233-4586-baad-e11d23fb7300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:56:08:b1:3e:ef:46:15:f9:71:29:17:71:7d: 2e:fc:7b:72:c3:2e:37:ec:bd:26:66:11:c4:38:aa: 60:31:93:24:5d:c8:f8:75:ed:dd:68:bd:e6:e4:7e: f3:86:59:82:f2:99:82:bf:d2:b1:25:40:25:98:93: 35:2a:c8:1f:84:ea:f8:20:05:f5:8a:e5:77:4a:78: a9:45:cb:c8:55:89:fc:80:80:12:0c:05:1a:99:61: ca:a3:8c:1f:79:97:cb:f6:81:fe:a6:b4:31:95:b5: de:69:81:40:6b:6f:02:45:b1:5b:a4:d4:b5:e9:4e: 5b:06:de:8a:9a:2d:be:2f:2f:e7:8e:36:96:29:ce: ea:9c:8f:03:e9:fc:17:97:fb:1e:ff:2f:cb:c8:a7: 11:66:18:bc:a0:40:2f:88:b2:4c:5b:fa:51:62:43: a8:a8:bd:2b:38:ab:63:b5:ab:be:56:2c:30:88:8b: 62:c2:7f:b8:5a:e9:cb:28:85:53:02:a7:e8:78:b2: 01:2e:17:2f:66:62:3e:eb:2b:71:ba:d9:45:8d:33: 4a:b6:a9:8d:fb:30:98:e8:c3:9c:a5:0e:3f:46:fb: d3:81:e4:46:6f:19:bb:da:52:88:5a:c0:f9:cf:7f: 14:dc:25:77:6f:ed:5c:e0:29:c2:4b:f2:e8:90:7f: 30:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:60:19:B1:FD:DF:BA:7D:82:19:2C:08:58:72:11:1A:3B:3B:83:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d1a15596-9418-32ea-bfa5-0bb9442dfb99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.94.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:f2:74:c2:3d:bc:a2:4e:a6:8a:3e:e7:df:43:dd:a8:5e:09: 66:0f:50:37:0b:01:fe:0e:dd:da:1e:cb:bb:ea:97:a6:c0:01: 2d:0c:38:6b:c5:3d:70:af:d6:c8:14:d3:cc:8d:e5:9d:82:a4: 00:e4:68:3d:e6:45:a7:9d:a7:21:2a:d2:68:31:be:6c:3b:ab: e7:75:b1:8b:6e:38:9e:f7:7d:e0:d2:a1:13:e5:16:5c:36:e3: e4:31:64:43:53:70:ca:2a:64:2a:5a:5b:f6:53:7f:fd:d0:e5: fa:57:11:7d:d5:81:3c:35:dd:26:c3:89:ba:7e:8b:73:5f:b8: e2:f2:f9:75:47:16:74:7d:80:2f:12:6a:ae:af:82:75:1b:a8: bb:9c:0c:d5:ec:69:4e:0a:33:2e:d1:dc:01:96:b1:11:fa:8b: 39:8c:74:cc:64:17:12:22:ee:1c:94:f9:d1:1a:b4:9a:d1:96: a2:23:22:66:c1:05:1f:86:b1:bb:0b:b1:c8:ed:ef:83:ba:a1: a9:73:31:b7:56:fb:bc:0e:ef:7b:60:3c:bf:0c:c7:8e:1b:6e: f7:96:ad:83:58:5e:d4:ac:f5:20:8a:c4:0d:33:5e:26:ad:28: 24:43:6a:e4:40:16:2f:a5:b0:54:ba:77:a6:59:82:bf:4a:7b: 44:0d:1f:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97swpv6oYTrinh3aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk Yzc5ZTU5YWMtNzIzMy00NTg2LWJhYWQtZTExZDIzZmI3MzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVYIsT7vRhX5cSkXcX0u/Htywy437L0mZhHE OKpgMZMkXcj4de3daL3m5H7zhlmC8pmCv9KxJUAlmJM1KsgfhOr4IAX1iuV3Snip RcvIVYn8gIASDAUamWHKo4wfeZfL9oH+prQxlbXeaYFAa28CRbFbpNS16U5bBt6K mi2+Ly/njjaWKc7qnI8D6fwXl/se/y/LyKcRZhi8oEAviLJMW/pRYkOoqL0rOKtj tau+ViwwiItiwn+4WunLKIVTAqfoeLIBLhcvZmI+6ytxutlFjTNKtqmN+zCY6MOc pQ4/RvvTgeRGbxm72lKIWsD5z38U3CV3b+1c4CnCS/LokH8w3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFgGbH937p9ghksCFhyERo7O4OxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDFhMTU1OTYtOTQxOC0z MmVhLWJmYTUtMGJiOTQ0MmRmYjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJl7MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrydMI9vKJOpoo+599D3aheCWYPUDcLAf4O3doey7vql6bAAS0MOGvF PXCv1sgU08yN5Z2CpADkaD3mRaedpyEq0mgxvmw7q+d1sYtuOJ73feDSoRPlFlw2 4+QxZENTcMoqZCpaW/ZTf/3Q5fpXEX3VgTw13SbDibp+i3NfuOLy+XVHFnR9gC8S aq6vgnUbqLucDNXsaU4KMy7R3AGWsRH6izmMdMxkFxIi7hyU+dEatJrRlqIjImbB BR+GsbsLscjt74O6oalzMbdW+7wO73tgPL8Mx44bbveWrYNYXtSs9SCKxA0zXiat KCRDauRAFi+lsFS6d6ZZgr9Ke0QNH2Y= -----END CERTIFICATE-----Generated at Tue Oct 27 16:35:18 2026 by rpki-client