$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e20b336c-beb8-3213-bee8-1f4676f34006.roa File: e20b336c-beb8-3213-bee8-1f4676f34006.roa (raw, json) Hash identifier: 3byVLVaXqEwUgnr51sV2F6vb8NttJQV82ZChChoh0Sc= Subject key identifier: 48:1E:C3:AC:B7:C3:CF:B5:9B:8E:E4:54:00:7D:45:D8:DC:2C:1A:99 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F7782D74628A264D301E8D100 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e20b336c-beb8-3213-bee8-1f4676f34006.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 141753 IP address blocks: 38.98.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:d7:46:28:a2:64:d3:01:e8:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=a5558a60-a47c-4738-8866-a846a25e6a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7e:fc:8f:53:db:5a:0e:a2:7d:cf:99:46:4e: db:b4:c2:86:0f:83:72:ab:24:01:d4:db:d3:59:91: 1e:da:d0:0b:13:36:98:88:6d:26:68:93:b3:be:4b: e8:ca:ce:82:81:6b:87:f7:a4:c1:32:6b:80:65:0d: 3c:c1:d9:db:b3:55:c0:5d:2b:3c:28:d6:1d:39:a8: 2e:70:fe:78:32:c4:5e:6e:44:24:79:13:8e:3b:00: f5:68:4e:2a:46:8a:fc:36:c7:78:e6:90:88:1b:14: 79:dc:5d:3d:c6:b7:7a:37:b4:03:8f:a3:f9:bc:0c: bb:15:fc:0a:52:60:64:d0:89:f9:8b:96:7d:c7:e4: a9:14:b3:e9:85:1c:48:a4:80:4d:ff:ce:d8:71:28: 0b:e0:ea:ee:a4:6f:ef:56:a1:62:0d:bd:bd:e2:eb: 66:29:68:97:21:fb:45:2d:9f:a6:f6:96:9d:b7:34: 5a:a2:c8:66:b6:ce:85:cf:b7:36:b3:79:09:f2:08: 65:6b:24:83:aa:8f:1f:74:7f:1c:ea:e2:08:7a:b0: 56:bc:98:ec:1b:e6:26:cf:bc:2d:6a:1a:91:f7:b3: 68:3f:e0:39:9f:4a:b2:6f:87:64:b8:72:9c:4e:2b: 6c:74:1d:29:4f:34:a6:bb:a0:35:7e:20:90:43:fb: 3c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:1E:C3:AC:B7:C3:CF:B5:9B:8E:E4:54:00:7D:45:D8:DC:2C:1A:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e20b336c-beb8-3213-bee8-1f4676f34006.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.98.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:f5:f4:af:ed:f7:ee:d2:44:d3:bd:c2:7f:84:9b:ad:de:38: e7:01:64:3b:b0:d6:3c:74:37:24:87:99:94:6e:c4:49:e5:dd: 03:42:47:4d:a6:ed:10:07:2e:07:17:35:7f:33:72:53:8c:33: 79:a7:d7:f4:1e:c0:75:c6:d9:6f:1f:94:f3:0e:86:32:e6:6b: 75:c0:45:1b:58:21:ca:14:dc:9b:a3:00:37:83:6f:95:dd:77: 49:da:0a:93:5b:6a:92:1b:34:35:fb:52:b5:db:e0:e4:a3:2b: 6e:fc:39:bc:3e:fe:19:92:04:a4:4e:a5:ae:a5:16:ec:eb:bd: a5:af:ca:31:05:46:b4:be:d1:af:2d:02:67:fa:aa:fa:45:85: 25:13:e7:d7:cd:50:cb:92:0c:4c:54:19:3b:08:e2:1a:8b:02: 8a:ac:fa:ff:0c:1d:fb:12:2e:4b:3e:78:06:a0:8e:36:31:b3: 44:bd:f0:70:f5:89:a1:b1:d0:8f:f5:da:21:2a:b5:b5:82:00: a7:26:8d:ea:9b:8c:c1:be:75:1d:ae:89:b3:a2:40:bc:16:52: f8:4b:a6:29:a5:4b:c3:9f:4a:8e:8a:ac:0b:6a:51:14:77:f1: fb:ff:d9:df:fa:1a:5c:97:73:2b:0e:eb:06:2a:ed:75:33:61: 5b:54:59:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gtdGKKJk0wHo0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk YTU1NThhNjAtYTQ3Yy00NzM4LTg4NjYtYTg0NmEyNWU2YThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjH78j1PbWg6ifc+ZRk7btMKGD4NyqyQB1NvT WZEe2tALEzaYiG0maJOzvkvoys6CgWuH96TBMmuAZQ08wdnbs1XAXSs8KNYdOagu cP54MsRebkQkeROOOwD1aE4qRor8Nsd45pCIGxR53F09xrd6N7QDj6P5vAy7FfwK UmBk0In5i5Z9x+SpFLPphRxIpIBN/87YcSgL4OrupG/vVqFiDb294utmKWiXIftF LZ+m9padtzRaoshmts6Fz7c2s3kJ8ghlaySDqo8fdH8c6uIIerBWvJjsG+Ymz7wt ahqR97NoP+A5n0qyb4dkuHKcTitsdB0pTzSmu6A1fiCQQ/s8/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgew6y3w8+1m47kVAB9RdjcLBqZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZTIwYjMzNmMtYmViOC0z MjEzLWJlZTgtMWY0Njc2ZjM0MDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJmKFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI719K/t9+7SRNO9wn+Em63eOOcBZDuw1jx0NySHmZRuxEnl3QNCR02m 7RAHLgcXNX8zclOMM3mn1/QewHXG2W8flPMOhjLma3XARRtYIcoU3JujADeDb5Xd d0naCpNbapIbNDX7UrXb4OSjK278Obw+/hmSBKROpa6lFuzrvaWvyjEFRrS+0a8t Amf6qvpFhSUT59fNUMuSDExUGTsI4hqLAoqs+v8MHfsSLks+eAagjjYxs0S98HD1 iaGx0I/12iEqtbWCAKcmjeqbjMG+dR2uibOiQLwWUvhLpimlS8OfSo6KrAtqURR3 8fv/2d/6GlyXcysO6wYq7XUzYVtUWXA= -----END CERTIFICATE-----Generated at Tue Oct 27 20:46:44 2026 by rpki-client