$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ddf260f8-0797-37de-9209-f0dc6868cbe3.roa File: ddf260f8-0797-37de-9209-f0dc6868cbe3.roa (raw, json) Hash identifier: m4rEiF0wPUGPMMqU/xPo4czvbyXfHrow8GXoodlu3pk= Subject key identifier: 4D:6C:6F:D0:BE:BD:23:DE:B0:C8:2B:DA:9F:05:C0:1A:3E:21:74:3B Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F6C5836E7E2A1DE4663001580 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ddf260f8-0797-37de-9209-f0dc6868cbe3.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 273013 IP address blocks: 38.43.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:36:e7:e2:a1:de:46:63:00:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=b96e3d2f-18f0-4d91-b0e9-a6bc800a4f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:04:23:8a:75:97:bb:0a:71:82:1a:ea:92:ef: f9:75:4a:61:34:e1:44:6b:82:f5:69:ab:85:f7:df: 74:a1:72:97:17:bd:41:cb:50:b3:41:08:b0:28:ad: bb:85:1f:9a:eb:1c:9c:6d:53:92:7a:6c:e0:6f:c9: 96:0d:c5:fd:2f:9f:00:70:1e:6a:8f:e9:13:8e:a5: 04:70:b5:da:01:f8:a8:d6:4e:64:2d:14:a9:31:5a: 94:a8:4e:4a:07:5a:a7:40:5b:d6:de:93:69:77:5b: 94:80:56:f1:62:93:14:1b:d6:46:63:7e:51:68:b7: 1d:4d:ce:ee:fb:25:f9:3b:67:32:d1:78:73:ee:a2: 6f:5f:08:5a:91:87:b3:87:4b:d9:1a:ef:19:6f:d2: 83:37:78:a5:09:76:3b:f9:96:a5:42:7a:d8:e9:73: f3:f5:4c:b5:c3:63:c5:7b:86:8c:09:d3:a1:fc:b7: ef:62:63:01:ad:00:79:f8:25:29:ea:fb:5c:4f:78: 7a:2e:1c:c5:cc:01:95:46:b8:99:95:5d:5a:3a:28: 6d:a5:89:31:2e:52:57:4f:ad:21:05:16:05:b0:6e: 15:41:5c:00:a1:ee:5f:30:dc:17:81:e1:bc:e1:95: ff:b9:7b:9b:82:48:9e:8c:8e:0d:78:e8:b2:39:5b: 7c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:6C:6F:D0:BE:BD:23:DE:B0:C8:2B:DA:9F:05:C0:1A:3E:21:74:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ddf260f8-0797-37de-9209-f0dc6868cbe3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.43.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:7d:ec:f9:f2:5e:e9:69:01:5b:a6:12:15:9a:77:9d:f8:d5: 84:73:f7:72:cf:5f:75:f5:10:db:52:2e:0d:46:f3:0e:bd:8b: 0d:4d:b0:6c:21:79:b6:fa:00:2c:3c:44:bb:5a:f2:34:be:9f: 67:53:65:7a:a5:31:d8:48:05:85:79:79:de:b5:e8:bc:cc:a5: 27:45:79:b5:26:ea:6b:78:58:c7:e3:3e:91:86:9c:01:a0:1b: 39:1c:bd:63:1c:54:e8:6b:c7:98:b9:4d:24:29:46:8b:1e:d2: b8:01:f2:0c:23:7d:6c:66:03:01:62:11:17:b3:81:95:7f:7b: 52:11:df:83:e8:75:3a:81:7b:cb:39:65:38:ea:fe:89:6f:0a: ab:a2:e5:8d:d6:f9:b5:14:00:13:b8:85:ec:1f:8f:8c:76:a8: a9:d0:d5:c6:4f:d5:96:04:d6:36:c8:2d:57:95:5c:e9:f2:b6: 00:bf:c9:a8:fb:d4:51:bc:9b:5f:1d:2d:27:92:f8:99:4f:c8: cd:b7:18:3a:66:cc:4a:16:7f:d6:05:0b:be:8c:81:80:59:69: 67:17:c2:6b:5e:9b:dd:f1:df:c2:bd:69:0a:07:cd:24:a0:73: 9c:57:1b:2e:4b:60:f7:a4:f5:32:10:4f:1a:4e:90:5f:47:eb: 9f:b2:d4:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWDbn4qHeRmMAFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk Yjk2ZTNkMmYtMThmMC00ZDkxLWIwZTktYTZiYzgwMGE0ZjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgQjinWXuwpxghrqku/5dUphNOFEa4L1aauF 9990oXKXF71By1CzQQiwKK27hR+a6xycbVOSemzgb8mWDcX9L58AcB5qj+kTjqUE cLXaAfio1k5kLRSpMVqUqE5KB1qnQFvW3pNpd1uUgFbxYpMUG9ZGY35RaLcdTc7u +yX5O2cy0Xhz7qJvXwhakYezh0vZGu8Zb9KDN3ilCXY7+ZalQnrY6XPz9Uy1w2PF e4aMCdOh/LfvYmMBrQB5+CUp6vtcT3h6LhzFzAGVRriZlV1aOihtpYkxLlJXT60h BRYFsG4VQVwAoe5fMNwXgeG84ZX/uXubgkiejI4NeOiyOVt85QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1sb9C+vSPesMgr2p8FwBo+IXQ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGRmMjYwZjgtMDc5Ny0z N2RlLTkyMDktZjBkYzY4NjhjYmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJit8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACF97PnyXulpAVumEhWad5341YRz93LPX3X1ENtSLg1G8w69iw1NsGwh ebb6ACw8RLta8jS+n2dTZXqlMdhIBYV5ed616LzMpSdFebUm6mt4WMfjPpGGnAGg GzkcvWMcVOhrx5i5TSQpRose0rgB8gwjfWxmAwFiERezgZV/e1IR34PodTqBe8s5 ZTjq/olvCqui5Y3W+bUUABO4hewfj4x2qKnQ1cZP1ZYE1jbILVeVXOnytgC/yaj7 1FG8m18dLSeS+JlPyM23GDpmzEoWf9YFC76MgYBZaWcXwmtem93x38K9aQoHzSSg c5xXGy5LYPek9TIQTxpOkF9H65+y1Os= -----END CERTIFICATE-----Generated at Tue Oct 27 18:08:46 2026 by rpki-client