$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/df28a94f-e6da-382b-a651-ff0912755ddc.roa File: df28a94f-e6da-382b-a651-ff0912755ddc.roa (raw, json) Hash identifier: jCVd4cJ9RrfYO1ES7oLJklEvvP50zmARwB1WQGowdhY= Subject key identifier: 7C:C3:6F:E4:4A:04:1F:DF:37:86:67:9D:C5:B3:E4:27:BA:71:0D:36 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F78E832DA81ECB78AE44099B8 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/df28a94f-e6da-382b-a651-ff0912755ddc.roa Signing time: Mon 12 Oct 2026 01:00:13 +0000 ROA not before: Mon 12 Oct 2026 01:00:13 +0000 ROA not after: Sun 10 Jan 2027 02:00:13 +0000 asID: 274939 IP address blocks: 38.19.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:78:e8:32:da:81:ec:b7:8a:e4:40:99:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 12 01:00:13 2026 GMT Not After : Jan 10 02:00:13 2027 GMT Subject: CN=8f7bba44-adc7-44be-8429-6a585cedfe3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0d:40:7d:04:56:28:a8:a9:6c:33:89:34:a8: 35:99:85:82:56:b4:45:4e:36:e1:67:a5:b6:02:b2: 04:a3:9e:01:25:93:b1:05:10:54:aa:77:c8:61:40: 05:98:f4:c7:0b:e3:21:07:bc:d2:06:a2:f3:f3:2d: cc:77:ef:01:1e:3b:b2:00:8e:05:ce:f9:11:57:e9: 9a:3a:25:24:63:7d:4e:d3:5b:33:54:1a:50:31:c7: da:ff:41:11:5c:a8:03:74:16:3f:46:eb:79:99:15: 26:a3:4f:4c:c0:6d:89:cc:40:93:57:a2:60:5b:85: 18:15:52:15:c6:98:a6:a6:5c:92:c8:bd:ba:a5:d0: 6c:1a:31:5a:69:e3:8c:dd:a7:e6:c4:a6:30:fd:50: 32:41:2d:7c:c3:cf:81:37:8b:51:5b:1b:17:cb:4b: 7b:86:03:50:8d:15:83:04:d7:f1:9f:60:1d:4d:39: da:aa:6a:c0:b2:81:b0:62:ba:10:23:a2:fb:0a:af: bf:4a:ed:b8:4a:ba:df:69:ca:df:9c:d0:1b:5a:0e: 77:de:a7:3a:e2:25:b0:80:9f:91:3f:57:c4:7f:43: d1:f1:db:80:d5:61:10:6d:56:83:31:4d:38:39:d4: 79:91:8a:56:8a:f4:65:0c:e2:01:99:7c:70:75:1b: 35:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C3:6F:E4:4A:04:1F:DF:37:86:67:9D:C5:B3:E4:27:BA:71:0D:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/df28a94f-e6da-382b-a651-ff0912755ddc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.19.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:32:a1:73:3e:34:2e:cb:f6:65:13:98:58:ed:6a:61:ac:e3: 73:5d:38:ea:19:88:da:59:cb:1d:a1:19:b5:09:16:cb:8a:2e: 44:1f:97:6e:d9:a3:7b:d6:40:7f:43:84:68:db:2d:ea:ba:ae: f1:50:fa:0f:86:1b:f9:d4:70:20:e9:b1:74:f3:8c:a3:4e:83: 38:f1:47:f9:af:c1:93:e5:3f:40:dc:c4:84:96:70:df:af:68: e0:6b:84:2a:ff:06:f4:25:83:65:75:36:bd:d5:34:f2:3a:e8: 70:36:03:54:ed:11:1e:ef:f0:55:82:e3:36:a7:15:ec:c0:b2: 4b:1d:97:44:d5:ba:ce:bd:99:9d:a0:c0:90:89:b9:9c:b3:ca: a2:c2:0d:cf:e4:66:3e:9c:06:a8:ab:eb:32:d4:c5:60:e2:df: 19:5d:cf:3e:9a:a6:94:d1:66:c2:e1:ed:e7:73:25:06:aa:e1: 17:e0:9d:ff:7a:5e:5f:8d:c1:e1:6c:64:9a:9d:97:c6:53:f1: e7:5c:3c:34:bb:b1:be:c5:c1:83:ff:65:93:bf:d1:77:1b:3c: 3a:85:ea:6e:54:cb:a4:41:aa:35:2e:0e:3f:da:62:9f:a0:57: 8f:e0:a6:d6:56:8f:13:cf:f5:39:3d:0b:b4:fe:7f:96:69:7f: 21:5d:c9:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE946DLagey3iuRAmbgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxMjAxMDAxM1oXDTI3MDExMDAyMDAxM1owLzEtMCsGA1UEAxMk OGY3YmJhNDQtYWRjNy00NGJlLTg0MjktNmE1ODVjZWRmZTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg1AfQRWKKipbDOJNKg1mYWCVrRFTjbhZ6W2 ArIEo54BJZOxBRBUqnfIYUAFmPTHC+MhB7zSBqLz8y3Md+8BHjuyAI4FzvkRV+ma OiUkY31O01szVBpQMcfa/0ERXKgDdBY/Rut5mRUmo09MwG2JzECTV6JgW4UYFVIV xpimplySyL26pdBsGjFaaeOM3afmxKYw/VAyQS18w8+BN4tRWxsXy0t7hgNQjRWD BNfxn2AdTTnaqmrAsoGwYroQI6L7Cq+/Su24SrrfacrfnNAbWg533qc64iWwgJ+R P1fEf0PR8duA1WEQbVaDMU04OdR5kYpWivRlDOIBmXxwdRs1tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzDb+RKBB/fN4ZnncWz5Ce6cQ02MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGYyOGE5NGYtZTZkYS0z ODJiLWE2NTEtZmYwOTEyNzU1ZGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJhNmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMyoXM+NC7L9mUTmFjtamGs43NdOOoZiNpZyx2hGbUJFsuKLkQfl27Z o3vWQH9DhGjbLeq6rvFQ+g+GG/nUcCDpsXTzjKNOgzjxR/mvwZPlP0DcxISWcN+v aOBrhCr/BvQlg2V1Nr3VNPI66HA2A1TtER7v8FWC4zanFezAsksdl0TVus69mZ2g wJCJuZyzyqLCDc/kZj6cBqir6zLUxWDi3xldzz6appTRZsLh7edzJQaq4Rfgnf96 Xl+NweFsZJqdl8ZT8edcPDS7sb7FwYP/ZZO/0XcbPDqF6m5Uy6RBqjUuDj/aYp+g V4/gptZWjxPP9Tk9C7T+f5ZpfyFdyec= -----END CERTIFICATE-----Generated at Tue Oct 27 22:37:33 2026 by rpki-client