$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dd35a76d-0309-312f-8786-71d9cfcc9f68.roa File: dd35a76d-0309-312f-8786-71d9cfcc9f68.roa (raw, json) Hash identifier: 7r/bohm7K1+/Id1uHoTBUz5z7xRzvbRpt4ymzrj/Fjg= Subject key identifier: 3D:49:97:A0:5B:9F:13:55:36:56:73:12:CC:21:A2:04:B4:D0:D6:68 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F6F22D1B562A45FA4A2EDD180 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dd35a76d-0309-312f-8786-71d9cfcc9f68.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 274862 IP address blocks: 38.110.200.0/22 maxlen: 24 154.9.219.0/24 maxlen: 24 154.50.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:d1:b5:62:a4:5f:a4:a2:ed:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=e3f2e780-e069-4c83-afb8-0402f7653fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:05:18:27:a1:2e:70:7d:4c:42:83:0f:cb:92: fb:39:5d:b7:ee:20:d4:73:3d:6e:b8:6c:d0:35:96: 2e:65:8f:83:88:51:ae:15:e3:ed:a8:64:2e:d5:9f: 28:14:ad:2a:f9:f3:65:3f:c1:c3:ec:92:4b:24:5e: 09:2a:0f:fa:ef:50:46:ca:e0:e6:80:22:09:92:ba: 37:04:24:76:6e:ab:4d:07:c6:53:80:65:1b:ff:2d: e3:0b:51:8e:19:f9:3c:b4:c5:41:2a:ea:63:26:d5: 3b:ed:1b:71:4f:4f:4f:85:f3:23:ee:9d:64:31:e2: f8:57:d2:7d:8e:06:af:ed:ab:02:6f:1e:90:e2:74: 01:0b:a6:cd:ab:5f:10:05:95:ff:27:93:2a:35:b0: 03:88:d6:d9:1f:41:bf:8a:27:df:d8:f3:59:c6:0d: 34:2c:82:c2:0a:15:45:aa:d4:ae:bb:23:68:61:27: 62:3c:04:88:42:46:30:de:61:8a:f6:ff:44:d2:27: 8f:d7:94:60:41:d5:1b:a0:90:f2:f8:8a:12:81:e8: 58:01:9d:f2:c0:f7:6f:89:7f:57:bf:a8:3e:61:ca: 74:88:fc:e4:46:1b:7a:b6:52:0f:4e:23:d8:12:9d: 11:ec:02:d2:de:93:66:cd:f7:35:b9:bf:3e:70:9c: e7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:49:97:A0:5B:9F:13:55:36:56:73:12:CC:21:A2:04:B4:D0:D6:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dd35a76d-0309-312f-8786-71d9cfcc9f68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.110.200.0/22 154.9.219.0/24 154.50.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:f6:e6:96:6b:6a:23:84:7a:fd:b9:01:67:49:f4:16:76:4b: a8:06:49:92:35:c2:f1:5e:aa:1d:03:05:73:c2:fa:6d:d8:5d: aa:1b:1a:e9:47:a7:ce:93:e5:54:92:df:4b:5b:d3:87:89:49: d4:48:3a:9a:98:d9:7b:75:a2:e4:85:bc:a0:91:af:8b:5b:b7: 1a:57:d6:27:f7:f6:d4:a7:a5:32:2d:ef:d9:e2:1e:68:d7:ab: fa:b1:88:b6:f4:4b:1d:0d:8e:28:8e:8a:8b:0f:c9:d3:03:6b: 8c:f0:26:46:59:50:1f:ea:1e:6b:e8:16:fa:32:c1:e8:5c:5a: e4:26:80:dd:ce:fd:8f:4e:43:07:2c:6d:ed:87:57:d5:9b:d4: 97:31:3d:82:a9:28:15:8e:0c:4d:a9:7a:f6:11:90:6d:9a:79: 79:98:49:f8:c7:fe:66:d8:e4:81:9b:57:5b:93:9b:05:90:af: df:c8:5c:12:b0:b4:b5:82:61:d4:31:b0:97:4e:bb:d2:bb:3f: da:50:67:7a:d5:61:80:7b:a9:53:51:62:f2:e0:df:b1:92:e3: d0:89:65:54:aa:18:31:1d:09:79:8f:65:be:ab:ed:7a:09:4c: 81:b4:b0:51:92:5f:97:a8:40:cb:5e:75:f9:01:4c:b1:94:ae: bf:92:22:89 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE9vItG1YqRfpKLt0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk ZTNmMmU3ODAtZTA2OS00YzgzLWFmYjgtMDQwMmY3NjUzZmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgUYJ6EucH1MQoMPy5L7OV237iDUcz1uuGzQ NZYuZY+DiFGuFePtqGQu1Z8oFK0q+fNlP8HD7JJLJF4JKg/671BGyuDmgCIJkro3 BCR2bqtNB8ZTgGUb/y3jC1GOGfk8tMVBKupjJtU77RtxT09PhfMj7p1kMeL4V9J9 jgav7asCbx6Q4nQBC6bNq18QBZX/J5MqNbADiNbZH0G/iiff2PNZxg00LILCChVF qtSuuyNoYSdiPASIQkYw3mGK9v9E0ieP15RgQdUboJDy+IoSgehYAZ3ywPdviX9X v6g+Ycp0iPzkRht6tlIPTiPYEp0R7ALS3pNmzfc1ub8+cJznZwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFD1Jl6BbnxNVNlZzEswhogS00NZoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGQzNWE3NmQtMDMwOS0z MTJmLTg3ODYtNzFkOWNmY2M5ZjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCJm7IAwQA mgnbAwQAmjIzMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADb25pZraiOEev25AWdJ9BZ2S6gGSZI1wvFeqh0D BXPC+m3YXaobGulHp86T5VSS30tb04eJSdRIOpqY2Xt1ouSFvKCRr4tbtxpX1if3 9tSnpTIt79niHmjXq/qxiLb0Sx0NjiiOiosPydMDa4zwJkZZUB/qHmvoFvoywehc WuQmgN3O/Y9OQwcsbe2HV9Wb1JcxPYKpKBWODE2pevYRkG2aeXmYSfjH/mbY5IGb V1uTmwWQr9/IXBKwtLWCYdQxsJdOu9K7P9pQZ3rVYYB7qVNRYvLg37GS49CJZVSq GDEdCXmPZb6r7XoJTIG0sFGSX5eoQMtedfkBTLGUrr+SIok= -----END CERTIFICATE-----Generated at Wed Oct 28 08:43:43 2026 by rpki-client