$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d605bbb6-8366-3d9e-964b-ff9d4fbdd081.roa File: d605bbb6-8366-3d9e-964b-ff9d4fbdd081.roa (raw, json) Hash identifier: Uuo/AsOgYZy10xtF0afZs23v/vclIZ8wPXNiVSrdImQ= Subject key identifier: 4E:BF:14:0F:88:58:99:95:89:A1:07:AE:97:41:E2:A1:54:2A:64:76 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F7352DC3E67BEEEE88525F280 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d605bbb6-8366-3d9e-964b-ff9d4fbdd081.roa Signing time: Sat 10 Oct 2026 01:00:13 +0000 ROA not before: Sat 10 Oct 2026 01:00:13 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 273039 IP address blocks: 38.254.112.0/22 maxlen: 24 149.100.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:52:dc:3e:67:be:ee:e8:85:25:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 10 01:00:13 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=f939ff2d-aced-432c-ba17-2012b2c0295c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e5:4e:8b:f2:5d:1b:55:1b:45:e2:86:05:fc: 7c:55:14:b8:dd:01:d2:8d:17:c6:75:38:1e:4f:4b: 51:3c:83:30:27:48:49:51:e6:73:c1:c5:c9:27:ec: 9a:90:9d:40:58:d4:11:2e:43:e3:0e:f6:58:c8:b5: fb:0f:d9:4b:27:46:d0:a9:29:3d:3c:fe:dd:f8:4f: 22:6f:b7:72:92:7f:c3:d3:c7:38:07:12:0a:cd:2b: 92:0f:fc:2e:f2:9b:98:66:ee:1d:b6:1e:dc:2d:52: aa:39:16:97:54:d8:42:c3:91:ab:cb:68:14:1f:db: 2b:9b:d4:f1:d7:88:29:1f:66:8d:d5:8f:78:b5:7e: d2:ad:27:ce:34:f1:ad:17:39:15:d1:04:2e:42:cb: 5a:84:d6:79:e9:cc:a9:20:05:33:00:9f:b5:41:05: e1:f6:9b:89:3f:22:bf:1c:93:6c:95:ec:2b:35:71: fa:26:ec:cb:38:af:3f:31:30:74:93:90:31:46:13: 47:8f:e1:c2:fc:02:c9:c3:e2:61:9f:ed:47:e6:51: b4:52:13:63:40:f3:8a:59:43:5f:14:b2:65:08:44: 6d:db:88:99:33:ba:89:ec:67:6f:2e:8c:13:c6:99: 35:52:35:f2:35:23:5a:a8:b6:5d:30:e2:55:b0:5a: f7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BF:14:0F:88:58:99:95:89:A1:07:AE:97:41:E2:A1:54:2A:64:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d605bbb6-8366-3d9e-964b-ff9d4fbdd081.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.254.112.0/22 149.100.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:94:5e:02:4c:7d:21:98:c3:d9:66:1e:a8:79:b6:7f:88:87: b0:a7:41:6f:76:7c:14:df:d5:30:28:1c:75:09:36:4a:48:4e: 2e:d5:51:43:fd:3d:ba:c4:cf:7b:70:96:f6:f8:61:d0:80:8a: da:95:c5:e5:a5:74:24:56:8c:a6:01:aa:84:3c:45:10:1b:44: 8a:0b:92:45:b4:3f:a5:4a:f8:4d:a0:75:77:9d:e9:e7:f5:ab: 53:5b:4c:a4:2f:6f:fa:ad:17:8c:20:9f:de:0f:2c:83:c5:a6: 24:ba:ab:a1:cc:a6:ba:ae:8b:f8:98:3a:ec:5f:4b:7f:56:1d: 1a:ac:50:97:7e:51:79:73:be:5c:ef:31:a1:6d:b6:65:8b:69: 56:5e:34:93:e9:a4:1f:30:99:d9:b9:46:60:0f:1a:c9:1e:c8: 14:18:72:1c:cb:bb:e8:7d:77:21:76:ef:a6:d4:58:70:cf:3c: 9a:68:cf:70:03:f5:be:ab:c3:61:12:96:b9:b0:82:75:1b:e4: dd:3f:91:02:59:49:3f:5a:90:27:cb:c3:7d:63:67:8a:6d:c7: b1:cf:51:48:ef:33:c0:9e:75:db:22:aa:da:b5:58:fb:2f:30: df:0b:7a:ae:b8:75:5b:11:53:1f:4c:bd:ac:62:88:74:ea:bf: 71:fc:0a:0f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9zUtw+Z77u6IUl8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk ZjkzOWZmMmQtYWNlZC00MzJjLWJhMTctMjAxMmIyYzAyOTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+VOi/JdG1UbReKGBfx8VRS43QHSjRfGdTge T0tRPIMwJ0hJUeZzwcXJJ+yakJ1AWNQRLkPjDvZYyLX7D9lLJ0bQqSk9PP7d+E8i b7dykn/D08c4BxIKzSuSD/wu8puYZu4dth7cLVKqORaXVNhCw5Gry2gUH9srm9Tx 14gpH2aN1Y94tX7SrSfONPGtFzkV0QQuQstahNZ56cypIAUzAJ+1QQXh9puJPyK/ HJNslewrNXH6JuzLOK8/MTB0k5AxRhNHj+HC/ALJw+Jhn+1H5lG0UhNjQPOKWUNf FLJlCERt24iZM7qJ7GdvLowTxpk1UjXyNSNaqLZdMOJVsFr3QwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFE6/FA+IWJmViaEHrpdB4qFUKmR2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDYwNWJiYjYtODM2Ni0z ZDllLTk2NGItZmY5ZDRmYmRkMDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCJv5wAwQE lWSQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAuUXgJMfSGYw9lmHqh5tn+Ih7CnQW92fBTf1TAoHHUJNkpI Ti7VUUP9PbrEz3twlvb4YdCAitqVxeWldCRWjKYBqoQ8RRAbRIoLkkW0P6VK+E2g dXed6ef1q1NbTKQvb/qtF4wgn94PLIPFpiS6q6HMprqui/iYOuxfS39WHRqsUJd+ UXlzvlzvMaFttmWLaVZeNJPppB8wmdm5RmAPGskeyBQYchzLu+h9dyF276bUWHDP PJpoz3AD9b6rw2ESlrmwgnUb5N0/kQJZST9akCfLw31jZ4ptx7HPUUjvM8Ceddsi qtq1WPsvMN8Leq64dVsRUx9MvaxiiHTqv3H8Cg8= -----END CERTIFICATE-----Generated at Tue Oct 27 16:39:56 2026 by rpki-client