$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/da25995d-c561-3ac8-a837-6292d5f5be37.roa File: da25995d-c561-3ac8-a837-6292d5f5be37.roa (raw, json) Hash identifier: 6RyqPTu/qRL7IYd5GZOINGHOMxE2sHtZtg6i2VnGEWw= Subject key identifier: 34:9D:FC:06:CC:84:67:E6:79:CA:D4:D4:44:C3:46:99:09:01:53:CD Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F9FFDE46A7F812A86F733D440 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/da25995d-c561-3ac8-a837-6292d5f5be37.roa Signing time: Mon 26 Oct 2026 01:00:13 +0000 ROA not before: Mon 26 Oct 2026 01:00:13 +0000 ROA not after: Sun 24 Jan 2027 02:00:13 +0000 asID: 17426 IP address blocks: 38.57.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9f:fd:e4:6a:7f:81:2a:86:f7:33:d4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 26 01:00:13 2026 GMT Not After : Jan 24 02:00:13 2027 GMT Subject: CN=dbe9a0ae-8709-45d3-b1ca-a1d232986f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5d:e9:ef:4c:27:66:ef:ad:37:da:2f:ed:d9: b6:05:69:cd:37:b9:72:96:aa:c7:74:cc:61:21:79: e4:15:d6:2b:c2:0e:6d:7a:a1:cd:15:aa:4d:4f:bd: f2:38:ef:77:63:f0:95:9c:4f:45:a6:61:3a:0e:91: 17:22:4f:b7:07:08:44:86:d4:bb:52:74:68:20:ca: a5:9b:59:a9:82:7e:c9:90:52:ee:e9:9b:57:78:34: 97:bc:34:b7:21:35:b7:c6:8f:10:dc:e9:58:cf:cd: 2f:f5:98:04:53:e8:0d:2a:f1:c7:df:6c:a8:d7:e6: 46:da:19:df:4a:8f:41:b8:a5:30:fb:90:21:44:2e: 1b:62:54:38:77:d3:a1:57:7b:63:55:f0:35:c9:75: 05:d7:64:cf:c6:28:43:ce:7a:43:75:09:48:2e:24: db:b9:74:7a:4d:fa:21:b4:7a:e1:f6:ff:fe:41:a1: df:fc:56:21:78:a7:1f:02:26:2b:4f:73:bb:41:db: 4e:b5:f7:b1:6b:8a:8b:5c:ba:f8:14:63:aa:fa:70: 13:d1:3d:d8:d3:4b:4d:33:6a:bb:3b:0f:38:47:f6: 4d:eb:74:5d:f5:40:12:73:1e:21:71:8c:8f:55:fb: 15:7e:dd:02:21:6b:a3:87:8e:a2:1e:33:bf:18:3c: 4c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:9D:FC:06:CC:84:67:E6:79:CA:D4:D4:44:C3:46:99:09:01:53:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/da25995d-c561-3ac8-a837-6292d5f5be37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.57.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:b6:a4:4d:2d:07:dc:d3:f8:a2:7f:ad:26:30:c6:46:36:8f: 78:ed:83:e7:21:5a:53:d5:5d:28:73:5e:a7:ab:d6:ba:a0:1d: 1c:d9:c4:a7:b4:ab:9d:3d:58:7e:36:22:e8:3c:1e:32:b0:66: 92:9e:a4:46:11:fe:df:5c:3d:32:f8:5b:d5:4e:11:da:51:06: b3:05:2c:ea:4a:7f:d4:10:89:be:63:c6:e2:34:20:0b:8a:0b: fb:f3:b6:11:3c:d4:3f:5b:3d:f8:9e:21:2f:10:c7:c2:19:c5: 3c:6d:77:96:e9:3f:34:4a:32:b9:a4:18:aa:76:fd:01:9e:5c: 27:ef:00:74:d7:28:dd:94:b5:aa:73:ab:f0:c3:0e:6c:3b:a9: 6f:25:05:b5:b8:36:8c:a3:09:01:15:43:6a:29:c1:14:8e:cd: 15:24:f2:b2:82:c3:a5:4d:1a:8a:0b:bf:33:20:3a:ac:8a:88: d4:1a:dc:41:10:21:8b:23:43:10:87:38:f9:a2:c8:85:ee:06: 3f:dc:b1:4d:9a:c8:55:a0:cc:d2:99:86:a7:1a:21:54:33:85: 4c:23:77:1f:69:ee:c3:bf:60:92:e4:84:f2:10:7d:a6:46:09: bb:e5:0c:d4:fb:a9:66:f3:c5:40:14:d3:6b:0a:c1:9c:30:cc: dd:2a:63:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+f/eRqf4Eqhvcz1EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyNjAxMDAxM1oXDTI3MDEyNDAyMDAxM1owLzEtMCsGA1UEAxMk ZGJlOWEwYWUtODcwOS00NWQzLWIxY2EtYTFkMjMyOTg2ZjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF3p70wnZu+tN9ov7dm2BWnNN7lylqrHdMxh IXnkFdYrwg5teqHNFapNT73yOO93Y/CVnE9FpmE6DpEXIk+3BwhEhtS7UnRoIMql m1mpgn7JkFLu6ZtXeDSXvDS3ITW3xo8Q3OlYz80v9ZgEU+gNKvHH32yo1+ZG2hnf So9BuKUw+5AhRC4bYlQ4d9OhV3tjVfA1yXUF12TPxihDznpDdQlILiTbuXR6Tfoh tHrh9v/+QaHf/FYheKcfAiYrT3O7QdtOtfexa4qLXLr4FGOq+nAT0T3Y00tNM2q7 Ow84R/ZN63Rd9UAScx4hcYyPVfsVft0CIWujh46iHjO/GDxMrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSd/AbMhGfmecrU1ETDRpkJAVPNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGEyNTk5NWQtYzU2MS0z YWM4LWE4MzctNjI5MmQ1ZjViZTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJjlsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL+2pE0tB9zT+KJ/rSYwxkY2j3jtg+chWlPVXShzXqer1rqgHRzZxKe0 q509WH42Iug8HjKwZpKepEYR/t9cPTL4W9VOEdpRBrMFLOpKf9QQib5jxuI0IAuK C/vzthE81D9bPfieIS8Qx8IZxTxtd5bpPzRKMrmkGKp2/QGeXCfvAHTXKN2Utapz q/DDDmw7qW8lBbW4NoyjCQEVQ2opwRSOzRUk8rKCw6VNGooLvzMgOqyKiNQa3EEQ IYsjQxCHOPmiyIXuBj/csU2ayFWgzNKZhqcaIVQzhUwjdx9p7sO/YJLkhPIQfaZG CbvlDNT7qWbzxUAU02sKwZwwzN0qY8E= -----END CERTIFICATE-----Generated at Mon Oct 26 14:48:02 2026 by rpki-client