$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ea260f91-c85d-31e5-a8f9-9e42b1adf550.roa File: ea260f91-c85d-31e5-a8f9-9e42b1adf550.roa (raw, json) Hash identifier: FR5tn6aKTkQ4npiOjqiZYqDQoiNmnd3otfM2vE5WLZs= Subject key identifier: 2A:79:55:43:36:44:FC:79:21:8C:47:EF:88:82:86:32:D9:E4:33:64 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F9E989DEE8F277E9E4658A080 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ea260f91-c85d-31e5-a8f9-9e42b1adf550.roa Signing time: Sun 25 Oct 2026 13:00:13 +0000 ROA not before: Sun 25 Oct 2026 13:00:13 +0000 ROA not after: Sat 23 Jan 2027 14:00:13 +0000 asID: 272118 IP address blocks: 38.150.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9e:98:9d:ee:8f:27:7e:9e:46:58:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 25 13:00:13 2026 GMT Not After : Jan 23 14:00:13 2027 GMT Subject: CN=9072c21c-ed20-41f0-b457-ff6b9eec1cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:87:0c:da:91:39:da:6f:b6:d2:45:84:95:9d: a9:8a:cb:5e:82:92:f3:e4:5f:6e:2a:fb:21:18:fc: a3:08:c9:f3:48:48:64:f7:44:f9:19:da:b2:65:68: 34:ec:f1:d2:35:02:90:9c:01:86:b9:80:56:16:4a: 0d:ae:dd:5a:f3:28:2e:0d:20:16:1b:28:53:d8:05: 49:2c:36:5e:83:48:f7:4a:d8:0c:a0:26:91:a5:8f: 99:74:1c:f1:bf:51:ea:4e:7a:7c:2e:b5:18:f2:d1: 6b:8b:e1:95:01:6c:17:4f:e9:21:7c:17:d7:d7:ae: fc:ca:44:92:31:7a:00:f3:69:9a:5b:68:28:63:f4: 56:8d:3d:7f:9a:6e:0e:f8:54:51:1f:6b:76:29:75: 91:de:1d:fe:e6:08:a4:3b:0f:40:b3:e3:96:99:85: 54:cd:12:be:a8:79:49:d5:1e:3f:94:66:a8:c6:29: 23:fd:dc:9f:8e:53:7f:56:6b:18:08:53:24:37:d0: 21:2e:8d:28:84:46:22:a1:2b:71:e3:0e:28:d3:88: 78:60:31:ca:4d:38:83:ae:88:b9:e0:2a:27:40:33: c0:17:d9:ec:f4:60:b7:81:29:d7:72:e1:1c:5b:f1: 0b:00:e0:6f:5e:66:c7:6b:52:29:c4:d4:fa:f8:1a: c2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:79:55:43:36:44:FC:79:21:8C:47:EF:88:82:86:32:D9:E4:33:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ea260f91-c85d-31e5-a8f9-9e42b1adf550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.150.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:3d:a5:09:58:bb:39:02:f8:65:56:b4:ca:6f:8d:5b:63:3a: b4:39:bb:5e:52:b3:e9:2a:c4:7c:c3:b1:5a:7b:e0:07:53:9b: 6b:75:93:18:30:c7:84:ca:d2:e8:87:d5:b7:b5:e8:0e:83:66: 6c:b4:70:93:ad:b9:c9:1f:76:67:7d:3f:e5:09:bf:0c:c4:2a: 16:48:d1:09:c5:78:a6:48:cd:9e:65:9b:1b:0f:34:a1:9f:8c: 74:42:f4:0c:26:37:dd:4f:96:e8:03:c9:c1:92:fe:e4:ca:2d: 27:84:90:b2:04:77:45:e8:a4:c8:54:51:02:2d:81:b4:02:9f: 26:a8:89:57:d6:5f:7e:bb:6e:69:bd:68:31:be:77:bf:1b:9b: 1a:98:7f:74:04:8f:b0:e5:2f:82:e8:0a:c2:00:c5:63:12:a8: 3b:c0:4b:03:36:bb:9c:62:6c:7c:4a:d3:0b:6c:78:19:48:02: 7e:03:47:bb:a8:33:78:47:c0:a3:62:c6:5f:9c:99:18:6f:0f: 10:4c:e7:26:91:7f:c6:64:b4:0a:43:e3:80:3c:cc:15:df:98: 39:7f:3d:35:c6:5e:9a:5d:31:46:89:59:34:4a:a7:c6:ea:ae: e6:fe:d6:bf:b7:70:03:6d:8a:e8:a0:0f:dc:93:88:6b:1c:4b: fc:e7:e2:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+emJ3ujyd+nkZYoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyNTEzMDAxM1oXDTI3MDEyMzE0MDAxM1owLzEtMCsGA1UEAxMk OTA3MmMyMWMtZWQyMC00MWYwLWI0NTctZmY2YjllZWMxY2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4cM2pE52m+20kWElZ2pistegpLz5F9uKvsh GPyjCMnzSEhk90T5GdqyZWg07PHSNQKQnAGGuYBWFkoNrt1a8yguDSAWGyhT2AVJ LDZeg0j3StgMoCaRpY+ZdBzxv1HqTnp8LrUY8tFri+GVAWwXT+khfBfX1678ykSS MXoA82maW2goY/RWjT1/mm4O+FRRH2t2KXWR3h3+5gikOw9As+OWmYVUzRK+qHlJ 1R4/lGaoxikj/dyfjlN/VmsYCFMkN9AhLo0ohEYioStx4w4o04h4YDHKTTiDroi5 4ConQDPAF9ns9GC3gSnXcuEcW/ELAOBvXmbHa1IpxNT6+BrCwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCp5VUM2RPx5IYxH74iChjLZ5DNkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZWEyNjBmOTEtYzg1ZC0z MWU1LWE4ZjktOWU0MmIxYWRmNTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJpZYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAc9pQlYuzkC+GVWtMpvjVtjOrQ5u15Ss+kqxHzDsVp74AdTm2t1kxgw x4TK0uiH1be16A6DZmy0cJOtuckfdmd9P+UJvwzEKhZI0QnFeKZIzZ5lmxsPNKGf jHRC9AwmN91PlugDycGS/uTKLSeEkLIEd0XopMhUUQItgbQCnyaoiVfWX367bmm9 aDG+d78bmxqYf3QEj7DlL4LoCsIAxWMSqDvASwM2u5xibHxK0wtseBlIAn4DR7uo M3hHwKNixl+cmRhvDxBM5yaRf8ZktApD44A8zBXfmDl/PTXGXppdMUaJWTRKp8bq rub+1r+3cANtiuigD9yTiGscS/zn4oo= -----END CERTIFICATE-----Generated at Tue Oct 27 17:16:16 2026 by rpki-client