$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/de564f24-d8eb-3a0b-bd5c-0ac41497d04d.roa File: de564f24-d8eb-3a0b-bd5c-0ac41497d04d.roa (raw, json) Hash identifier: FFAGXpEY33LcKUk47xYbVsKy5ixLPuhCs31XCaNb1M4= Subject key identifier: 40:4F:34:B3:1E:FE:82:E5:68:09:46:29:80:C1:97:5A:22:76:26:53 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584FA2C88A76833BE74865C41419 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/de564f24-d8eb-3a0b-bd5c-0ac41497d04d.roa Signing time: Tue 27 Oct 2026 01:00:14 +0000 ROA not before: Tue 27 Oct 2026 01:00:14 +0000 ROA not after: Mon 25 Jan 2027 02:00:14 +0000 asID: 214708 IP address blocks: 38.98.67.0/24 maxlen: 24 154.57.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:c8:8a:76:83:3b:e7:48:65:c4:14:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 27 01:00:14 2026 GMT Not After : Jan 25 02:00:14 2027 GMT Subject: CN=dea36e70-0517-4cac-8749-20baf2b38b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:09:a3:35:3d:2f:32:9f:9f:87:e8:c9:31:97: 45:3c:08:31:e9:f7:95:17:f0:08:25:79:08:b7:be: 22:c0:2c:07:fb:ba:90:b0:33:cf:37:85:b0:75:ec: b3:1b:4a:02:69:2d:ef:ce:ce:0b:c5:b3:34:b2:92: 80:c5:63:de:d8:f8:e6:dd:91:00:10:65:b6:16:8e: db:ab:a0:5b:48:a9:5e:5d:b8:1e:a1:2a:13:28:c9: 9f:e4:49:7a:66:91:6c:65:fd:fd:96:00:6c:46:49: 94:f4:9f:12:b3:a1:38:28:5f:c8:b1:6d:d3:67:2d: 4d:e3:ad:8a:76:d7:81:75:d0:15:7f:22:30:6e:ce: dc:b7:bc:1d:2a:70:8e:4e:a0:74:00:2a:5b:4f:67: c3:95:d5:7e:f2:b1:77:86:66:a4:6a:6a:85:68:5c: 5f:42:ef:43:52:7a:7b:47:14:6b:54:0c:56:81:22: 78:61:c1:53:37:04:df:3f:29:c9:07:71:e6:96:be: fc:7f:63:e9:c7:6f:e1:f9:fb:6c:f9:b8:7a:c1:c0: ef:6d:74:8d:3c:05:8e:a6:ed:ee:ca:31:ea:2e:05: 81:b2:2d:ba:6f:4a:e7:54:4e:5f:38:8b:42:f6:2b: 96:03:12:db:5c:8e:e0:fc:91:5a:60:0f:46:02:99: 89:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:4F:34:B3:1E:FE:82:E5:68:09:46:29:80:C1:97:5A:22:76:26:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/de564f24-d8eb-3a0b-bd5c-0ac41497d04d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.98.67.0/24 154.57.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:47:db:c0:f3:72:af:69:74:06:46:e4:65:6d:3a:42:26:f8: 0a:27:6a:a2:42:53:5c:f0:74:66:17:85:55:92:b3:67:ec:56: 16:9a:6c:f9:36:1c:41:3c:a1:4d:51:c6:2c:10:a1:8f:35:8e: 79:45:27:08:5b:6b:ff:d8:23:a6:97:76:8a:c6:7d:f3:0a:69: c3:79:6a:72:c0:7f:93:3a:cc:f4:72:09:17:3a:42:26:fa:f8: b3:0e:15:29:9a:d5:62:f6:16:41:14:b8:57:1a:18:bf:cb:d3: bd:8a:33:09:49:46:32:97:0e:5f:e3:e2:87:d8:9a:d1:8f:be: 25:ef:6b:ca:75:56:ef:3c:8e:fb:51:6d:40:b4:bf:98:22:6e: e1:9c:cc:8b:82:65:3a:c3:f4:57:8f:f3:54:a5:27:40:50:bb: 8b:0e:6d:49:09:4a:f4:3b:fa:d1:bf:25:36:0f:18:c0:24:35: 17:62:09:f6:89:86:5c:e0:06:b1:53:f6:0d:45:07:c2:3b:6a: 67:22:d1:69:54:56:26:aa:c7:ec:45:e8:01:0b:b9:b7:f1:d0: 68:c0:41:67:a4:c4:dc:37:e3:52:78:92:8c:24:32:fc:56:af: b5:aa:0f:ca:72:df:c4:04:ce:aa:fc:0c:9f:85:aa:ae:15:0b: 9c:4c:f2:b5 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE+iyIp2gzvnSGXEFBkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyNzAxMDAxNFoXDTI3MDEyNTAyMDAxNFowLzEtMCsGA1UEAxMk ZGVhMzZlNzAtMDUxNy00Y2FjLTg3NDktMjBiYWYyYjM4Yjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwmjNT0vMp+fh+jJMZdFPAgx6feVF/AIJXkI t74iwCwH+7qQsDPPN4WwdeyzG0oCaS3vzs4LxbM0spKAxWPe2Pjm3ZEAEGW2Fo7b q6BbSKleXbgeoSoTKMmf5El6ZpFsZf39lgBsRkmU9J8Ss6E4KF/IsW3TZy1N462K dteBddAVfyIwbs7ct7wdKnCOTqB0ACpbT2fDldV+8rF3hmakamqFaFxfQu9DUnp7 RxRrVAxWgSJ4YcFTNwTfPynJB3Hmlr78f2Ppx2/h+fts+bh6wcDvbXSNPAWOpu3u yjHqLgWBsi26b0rnVE5fOItC9iuWAxLbXI7g/JFaYA9GApmJWwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEBPNLMe/oLlaAlGKYDBl1oidiZTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGU1NjRmMjQtZDhlYi0z YTBiLWJkNWMtMGFjNDE0OTdkMDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJmJDAwQA mjk6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAMpH28Dzcq9pdAZG5GVtOkIm+AonaqJCU1zwdGYXhVWSs2fs VhaabPk2HEE8oU1RxiwQoY81jnlFJwhba//YI6aXdorGffMKacN5anLAf5M6zPRy CRc6Qib6+LMOFSma1WL2FkEUuFcaGL/L072KMwlJRjKXDl/j4ofYmtGPviXva8p1 Vu88jvtRbUC0v5gibuGczIuCZTrD9FeP81SlJ0BQu4sObUkJSvQ7+tG/JTYPGMAk NRdiCfaJhlzgBrFT9g1FB8I7amci0WlUViaqx+xF6AELubfx0GjAQWekxNw341J4 kowkMvxWr7WqD8py38QEzqr8DJ+Fqq4VC5xM8rU= -----END CERTIFICATE-----Generated at Tue Oct 27 20:31:48 2026 by rpki-client