$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d6bcd5f6-befa-3519-8a19-ec921fa2ee72.roa File: d6bcd5f6-befa-3519-8a19-ec921fa2ee72.roa (raw, json) Hash identifier: 6NqS7RS6XnBpaZWRKt+x4W+jWxNtl9Y0GecDAoxRijw= Subject key identifier: F2:03:80:BD:D5:9C:79:50:FA:A5:EC:22:62:66:8A:30:CA:D8:DD:07 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584FA4EE04154A1697993FC29460 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d6bcd5f6-befa-3519-8a19-ec921fa2ee72.roa Signing time: Tue 27 Oct 2026 19:27:36 +0000 ROA not before: Tue 27 Oct 2026 19:27:36 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 273595 IP address blocks: 38.3.164.0/22 maxlen: 23 38.4.168.0/21 maxlen: 24 38.56.200.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a4:ee:04:15:4a:16:97:99:3f:c2:94:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 27 19:27:36 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=35beee3d-41c6-4dc9-94e3-8543d366ab8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:af:6b:09:d5:12:9f:36:df:8f:f8:ab:77:a1: b4:7b:4c:63:86:5c:d3:c5:da:91:60:49:e6:f8:d0: b6:25:58:bd:ae:85:06:1c:ed:97:1e:c7:02:ab:ba: 34:4d:86:c3:73:da:ec:1b:30:ff:7c:77:8c:2f:f9: 1a:ce:04:06:88:8e:a9:69:91:4a:27:5b:1e:ed:06: 3b:1b:05:71:97:81:b8:1b:ee:ee:51:35:c5:6e:4e: fe:08:c5:75:7e:d1:fe:3e:85:16:45:c7:e2:74:15: fc:f4:f3:7a:04:b4:19:2a:37:61:bb:bf:87:2b:bc: e9:02:f3:80:e8:1b:8e:50:85:5b:3e:42:dd:f7:fd: 2a:6e:08:11:62:80:e3:db:c1:5a:29:57:f0:66:1e: b4:d5:a8:95:12:e1:70:e9:20:1e:d9:60:47:ae:57: fd:05:0f:95:81:67:5a:c3:b7:31:ce:f1:34:bf:76: 62:2b:37:2f:0f:3b:a6:a5:89:70:02:b5:7a:4b:99: db:09:ec:0c:23:ee:ee:d3:ef:e0:e1:12:20:b0:59: cc:67:25:4b:b6:ac:b1:56:e0:ad:76:9c:94:1a:4b: 74:5a:c2:c0:45:97:a1:5c:c1:18:5d:64:d5:b3:23: 9b:b0:6d:0b:13:37:93:22:5c:77:56:48:e4:10:0b: 6c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:03:80:BD:D5:9C:79:50:FA:A5:EC:22:62:66:8A:30:CA:D8:DD:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d6bcd5f6-befa-3519-8a19-ec921fa2ee72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.3.164.0/22 38.4.168.0/21 38.56.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:be:0f:f4:75:09:20:1e:2a:4d:e9:06:25:4a:c5:7f:a9:d5: ad:66:46:5c:98:8b:be:c4:44:b4:41:1b:67:f9:6b:56:c9:05: 60:9b:8c:2f:1b:1a:45:07:47:d7:c7:d9:80:ab:7c:e3:2c:c3: cb:89:f1:19:8c:65:5e:58:f4:31:f4:7c:7c:49:b2:b9:0f:5b: 5a:a2:7c:49:88:49:2d:11:3d:9c:ec:79:e2:5f:41:19:f0:2d: a1:a1:7a:bc:98:09:82:42:06:c7:b0:4b:a9:37:95:9d:17:f2: aa:e7:7d:77:79:c6:d5:f9:1c:e2:d9:90:00:3d:a6:ea:0d:4a: d0:6f:a7:58:83:1d:ba:cc:39:67:dc:35:ab:af:8f:e8:1c:29: 36:e7:a6:a7:64:a9:86:54:2b:93:97:08:a4:f1:cb:6c:41:2a: 17:49:bf:3a:98:2d:17:50:92:97:96:d8:66:40:e7:b6:60:ce: 34:5b:cd:32:1e:e6:3f:aa:6e:b2:e1:c8:99:39:74:ff:6a:00: 31:a0:28:04:0a:bc:42:2b:13:0e:2a:67:de:bb:c0:6f:df:37: b5:e1:ed:62:9e:6f:13:48:86:24:a7:90:9a:db:02:bb:84:84: fc:f0:13:35:ba:39:16:06:1c:fd:64:86:1e:67:ad:4b:fe:33: 7d:8c:78:0e -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE+k7gQVShaXmT/ClGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyNzE5MjczNloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk MzViZWVlM2QtNDFjNi00ZGM5LTk0ZTMtODU0M2QzNjZhYjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq9rCdUSnzbfj/ird6G0e0xjhlzTxdqRYEnm +NC2JVi9roUGHO2XHscCq7o0TYbDc9rsGzD/fHeML/kazgQGiI6paZFKJ1se7QY7 GwVxl4G4G+7uUTXFbk7+CMV1ftH+PoUWRcfidBX89PN6BLQZKjdhu7+HK7zpAvOA 6BuOUIVbPkLd9/0qbggRYoDj28FaKVfwZh601aiVEuFw6SAe2WBHrlf9BQ+VgWda w7cxzvE0v3ZiKzcvDzumpYlwArV6S5nbCewMI+7u0+/g4RIgsFnMZyVLtqyxVuCt dpyUGkt0WsLARZehXMEYXWTVsyObsG0LEzeTIlx3VkjkEAtsOwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFPIDgL3VnHlQ+qXsImJmijDK2N0HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDZiY2Q1ZjYtYmVmYS0z NTE5LThhMTktZWM5MjFmYTJlZTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCJgOkAwQD JgSoAwQCJjjIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHK+D/R1CSAeKk3pBiVKxX+p1a1mRlyYi77ERLRB G2f5a1bJBWCbjC8bGkUHR9fH2YCrfOMsw8uJ8RmMZV5Y9DH0fHxJsrkPW1qifEmI SS0RPZzseeJfQRnwLaGheryYCYJCBsewS6k3lZ0X8qrnfXd5xtX5HOLZkAA9puoN StBvp1iDHbrMOWfcNauvj+gcKTbnpqdkqYZUK5OXCKTxy2xBKhdJvzqYLRdQkpeW 2GZA57ZgzjRbzTIe5j+qbrLhyJk5dP9qADGgKAQKvEIrEw4qZ967wG/fN7Xh7WKe bxNIhiSnkJrbAruEhPzwEzW6ORYGHP1khh5nrUv+M32MeA4= -----END CERTIFICATE-----Generated at Wed Oct 28 00:47:38 2026 by rpki-client