$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d8e2aa0e-d865-37f1-baa5-dd34c23c0fbe.roa File: d8e2aa0e-d865-37f1-baa5-dd34c23c0fbe.roa (raw, json) Hash identifier: XqQTaBbAQHXogv28ay19XWA0UglUyND6jDziI7hI/uU= Subject key identifier: 4F:7A:08:E8:6A:C7:20:C2:F4:10:42:BE:09:61:DA:8C:67:D5:DD:49 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F674A001AE718761E63281980 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d8e2aa0e-d865-37f1-baa5-dd34c23c0fbe.roa Signing time: Mon 05 Oct 2026 17:32:49 +0000 ROA not before: Mon 05 Oct 2026 17:32:49 +0000 ROA not after: Sun 03 Jan 2027 18:32:49 +0000 asID: 272339 IP address blocks: 38.236.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:67:4a:00:1a:e7:18:76:1e:63:28:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 5 17:32:49 2026 GMT Not After : Jan 3 18:32:49 2027 GMT Subject: CN=1af7138d-f813-4179-a678-32afebfa1d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:61:39:be:7e:9e:94:de:d8:45:3a:5a:2a:4e: 96:da:27:29:ac:2e:c8:54:b7:86:ca:2c:19:f2:9d: ff:d1:1d:d8:ce:d5:15:32:7e:f4:71:db:f5:c0:25: f6:09:b0:8a:93:36:e4:83:60:48:2c:b5:37:9f:c8: c7:aa:71:4a:7d:89:ea:4b:5d:d8:66:68:f6:98:42: 21:ae:0b:eb:03:cb:06:65:62:e6:ff:01:74:84:13: a3:bd:86:61:a1:79:ce:d4:2e:5d:6e:5b:64:97:65: 55:10:72:0e:82:50:b9:72:12:07:90:e4:bd:ec:fe: 08:9c:32:09:8f:cb:a9:4e:37:9b:c3:f1:1d:e0:d9: 6f:81:21:96:79:c2:85:cb:45:c6:a6:c5:ab:52:05: e9:e7:53:1f:ae:d0:20:9b:b1:f7:83:96:f6:ca:cc: bc:6d:19:1e:cf:56:27:2d:5a:00:3a:35:b0:f0:37: e7:cf:85:ec:30:58:40:3f:23:68:73:87:1b:a9:09: 5a:c7:c7:d1:64:8e:db:30:66:4e:92:d1:7a:18:5c: ac:46:b1:70:44:d6:80:e3:96:77:ac:79:0a:1c:52: fc:82:f9:ee:7e:4f:56:bc:95:e6:52:26:7a:89:91: e6:74:4e:1f:4e:26:c9:6c:9d:84:42:f2:38:9a:f0: 90:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:7A:08:E8:6A:C7:20:C2:F4:10:42:BE:09:61:DA:8C:67:D5:DD:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d8e2aa0e-d865-37f1-baa5-dd34c23c0fbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.236.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:3a:d1:54:53:98:14:67:9f:c8:78:ae:e1:8d:67:67:c8:87: b5:b3:18:6f:c2:98:b6:7a:da:b1:94:2a:89:ef:ce:f0:9e:55: aa:3a:8a:e3:5a:ff:be:14:fd:42:d3:81:5d:1a:76:ed:14:a5: cd:13:71:92:cd:0a:1a:bd:cc:77:1e:7c:df:7e:05:c2:2d:6d: 50:f4:ed:a4:74:a9:b4:d8:07:b3:88:e6:27:71:02:85:1f:f5: 0c:40:d6:5c:12:44:27:fc:ce:b7:1f:09:17:80:2b:1e:66:9f: 8e:0f:28:ec:de:70:fe:a4:2c:b1:a1:1b:90:27:69:e7:ab:00: 80:c8:d2:73:21:5f:cd:92:aa:25:31:43:1c:14:46:1d:82:0b: 70:63:cd:3e:41:56:00:66:0b:09:9b:5a:e8:0b:9e:99:84:a3: fc:6d:6e:b6:2e:1c:4a:a4:bc:33:45:84:20:6e:01:23:ee:66: 8c:b3:81:3c:83:4d:e5:f4:a1:55:63:cc:47:c0:7f:ff:e2:db: 26:0e:0f:09:d0:c3:90:42:d5:27:26:c3:cf:3f:9a:8f:0c:35: cd:18:51:c6:ef:86:fe:01:da:48:07:c0:5d:d3:2e:8d:37:c0: a1:f4:05:74:1f:7f:6c:de:ff:6a:9b:d4:0e:cd:06:99:bc:98: d1:18:5c:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9nSgAa5xh2HmMoGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwNTE3MzI0OVoXDTI3MDEwMzE4MzI0OVowLzEtMCsGA1UEAxMk MWFmNzEzOGQtZjgxMy00MTc5LWE2NzgtMzJhZmViZmExZDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2E5vn6elN7YRTpaKk6W2icprC7IVLeGyiwZ 8p3/0R3YztUVMn70cdv1wCX2CbCKkzbkg2BILLU3n8jHqnFKfYnqS13YZmj2mEIh rgvrA8sGZWLm/wF0hBOjvYZhoXnO1C5dbltkl2VVEHIOglC5chIHkOS97P4InDIJ j8upTjebw/Ed4NlvgSGWecKFy0XGpsWrUgXp51MfrtAgm7H3g5b2ysy8bRkez1Yn LVoAOjWw8Dfnz4XsMFhAPyNoc4cbqQlax8fRZI7bMGZOktF6GFysRrFwRNaA45Z3 rHkKHFL8gvnufk9WvJXmUiZ6iZHmdE4fTibJbJ2EQvI4mvCQBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE96COhqxyDC9BBCvglh2oxn1d1JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDhlMmFhMGUtZDg2NS0z N2YxLWJhYTUtZGQzNGMyM2MwZmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJux4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABY60VRTmBRnn8h4ruGNZ2fIh7WzGG/CmLZ62rGUKonvzvCeVao6iuNa /74U/ULTgV0adu0Upc0TcZLNChq9zHcefN9+BcItbVD07aR0qbTYB7OI5idxAoUf 9QxA1lwSRCf8zrcfCReAKx5mn44PKOzecP6kLLGhG5AnaeerAIDI0nMhX82SqiUx QxwURh2CC3BjzT5BVgBmCwmbWugLnpmEo/xtbrYuHEqkvDNFhCBuASPuZoyzgTyD TeX0oVVjzEfAf//i2yYODwnQw5BC1Scmw88/mo8MNc0YUcbvhv4B2kgHwF3TLo03 wKH0BXQff2ze/2qb1A7NBpm8mNEYXLQ= -----END CERTIFICATE-----Generated at Wed Oct 28 04:34:43 2026 by rpki-client