$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d6f2c855-bfef-39e1-866a-70a5851aeee8.roa File: d6f2c855-bfef-39e1-866a-70a5851aeee8.roa (raw, json) Hash identifier: oa1Ic24lA1K4TYGyCcRfdV3UGKRrBgMyLCCvA1WY7a8= Subject key identifier: 7A:F2:04:8E:4C:53:D7:0C:8A:DA:D5:2F:8C:51:AC:50:C3:87:D8:94 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F5A32A2093213F29A40A89DC0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d6f2c855-bfef-39e1-866a-70a5851aeee8.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 274961 IP address blocks: 38.211.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:a2:09:32:13:f2:9a:40:a8:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=7476c681-b3e1-4939-b736-55ccc241a696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fd:c1:82:43:fc:67:58:30:ec:7d:3e:22:aa: fc:fd:ea:bb:5a:47:17:9a:71:95:94:ec:e6:50:97: c8:33:0d:89:e5:59:80:ef:95:62:b9:52:b8:0d:80: 09:11:39:0b:d8:5a:11:c4:31:e7:90:87:b5:e0:73: fe:5b:7f:0c:40:f5:1a:89:8f:23:f4:3e:44:ad:e1: b4:9d:1d:40:d4:da:f1:c0:03:b5:ec:eb:ea:34:17: c8:c5:63:bd:99:d0:f1:bf:39:91:36:5b:2a:8f:cc: ed:18:75:63:31:74:a3:7c:b2:ee:86:53:b0:c0:28: 89:84:9a:8b:b9:0d:db:37:b6:d3:8e:8a:22:66:60: e3:5f:49:4a:7c:e7:d6:94:ff:5b:20:5b:aa:d9:cf: 83:10:00:2e:56:79:cb:ce:25:1f:5d:8c:6b:c9:15: 60:ac:0f:48:f6:15:35:af:a5:ed:c9:37:0c:07:89: 18:2e:31:04:e7:4d:0c:17:44:cd:33:d9:fc:00:80: 37:65:70:da:ea:11:67:8f:1c:9d:bb:c8:2d:01:27: 46:af:af:31:44:c3:a1:8a:68:71:52:b3:9e:70:6a: 2d:9d:32:dd:64:30:50:f2:ee:61:14:86:29:4c:0f: 98:0d:cc:90:37:8a:4c:5c:dc:99:86:15:0f:64:d1: bc:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F2:04:8E:4C:53:D7:0C:8A:DA:D5:2F:8C:51:AC:50:C3:87:D8:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d6f2c855-bfef-39e1-866a-70a5851aeee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.211.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:6f:76:db:b8:b0:f1:be:87:a8:b4:10:e3:56:64:bd:8e:1d: d4:24:20:08:34:05:69:56:2f:5d:99:aa:43:e4:be:2e:53:9e: fd:c5:94:ad:f3:58:15:c4:3a:15:90:54:f8:5e:ee:e9:37:1d: e7:6f:1b:b1:e5:3e:33:3c:94:03:c0:ef:cf:d1:04:8f:2b:fc: 4c:ad:6a:e1:4c:98:e2:a0:7e:2e:5a:74:b3:ba:a4:4f:d7:db: 2b:70:2e:f1:79:ca:0b:43:41:a0:64:68:71:c6:bc:f3:98:ed: 5e:db:8b:3a:e3:28:84:e7:65:17:d7:00:f6:83:4c:8c:1f:c1: b7:85:1b:7d:44:a9:c5:22:f8:7e:f1:d5:3b:ec:34:b1:a9:c8: 30:1a:d6:77:51:d5:b7:1f:f5:bb:32:91:df:41:ef:c3:c7:38: ed:4a:25:80:7f:13:bb:f2:45:40:52:31:8f:df:d1:57:67:18: 42:d2:2d:d5:0a:a6:0b:16:77:83:ff:c8:96:58:4d:60:6e:8f: 9f:01:ae:2f:83:58:e5:b7:d8:49:2d:aa:4d:cd:75:38:e2:4c: 1e:6d:c4:fd:cb:95:85:77:f4:28:58:73:74:25:59:89:84:c9: 20:8a:d1:73:1b:56:52:89:d1:58:b7:e9:62:30:2f:ed:a6:7f: 61:16:f8:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMqIJMhPymkConcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk NzQ3NmM2ODEtYjNlMS00OTM5LWI3MzYtNTVjY2MyNDFhNjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv3BgkP8Z1gw7H0+Iqr8/eq7WkcXmnGVlOzm UJfIMw2J5VmA75ViuVK4DYAJETkL2FoRxDHnkIe14HP+W38MQPUaiY8j9D5EreG0 nR1A1NrxwAO17OvqNBfIxWO9mdDxvzmRNlsqj8ztGHVjMXSjfLLuhlOwwCiJhJqL uQ3bN7bTjooiZmDjX0lKfOfWlP9bIFuq2c+DEAAuVnnLziUfXYxryRVgrA9I9hU1 r6XtyTcMB4kYLjEE500MF0TNM9n8AIA3ZXDa6hFnjxydu8gtASdGr68xRMOhimhx UrOecGotnTLdZDBQ8u5hFIYpTA+YDcyQN4pMXNyZhhUPZNG8QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHryBI5MU9cMitrVL4xRrFDDh9iUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDZmMmM4NTUtYmZlZi0z OWUxLTg2NmEtNzBhNTg1MWFlZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJtMFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVvdtu4sPG+h6i0EONWZL2OHdQkIAg0BWlWL12ZqkPkvi5Tnv3FlK3z WBXEOhWQVPhe7uk3HedvG7HlPjM8lAPA78/RBI8r/EytauFMmOKgfi5adLO6pE/X 2ytwLvF5ygtDQaBkaHHGvPOY7V7bizrjKITnZRfXAPaDTIwfwbeFG31EqcUi+H7x 1TvsNLGpyDAa1ndR1bcf9bsykd9B78PHOO1KJYB/E7vyRUBSMY/f0VdnGELSLdUK pgsWd4P/yJZYTWBuj58Bri+DWOW32Ektqk3NdTjiTB5txP3LlYV39ChYc3QlWYmE ySCK0XMbVlKJ0Vi36WIwL+2mf2EW+Ik= -----END CERTIFICATE-----Generated at Wed Oct 28 00:50:17 2026 by rpki-client