$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ea627fa0-2801-34e1-b8b6-f339780f3731.roa File: ea627fa0-2801-34e1-b8b6-f339780f3731.roa (raw, json) Hash identifier: o8Fy8LXUU7ND6WIHkiuadFOOlVGLi4av1SRLth1eqto= Subject key identifier: D7:01:2F:EC:D1:C0:E4:91:A3:3B:A2:EB:13:6F:F0:69:48:1B:8A:97 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F7D4FE057E18CFE6DD14B9800 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ea627fa0-2801-34e1-b8b6-f339780f3731.roa Signing time: Tue 13 Oct 2026 14:52:26 +0000 ROA not before: Tue 13 Oct 2026 14:52:26 +0000 ROA not after: Mon 11 Jan 2027 15:52:26 +0000 asID: 274456 IP address blocks: 38.4.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7d:4f:e0:57:e1:8c:fe:6d:d1:4b:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 13 14:52:26 2026 GMT Not After : Jan 11 15:52:26 2027 GMT Subject: CN=1d20e531-5192-4342-a976-bb92a682607b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a8:f5:bb:f8:90:34:6c:81:c6:5f:25:88:31: 03:be:d6:e9:04:26:52:43:ba:e4:bb:59:1e:12:b8: 81:fb:d9:6f:d5:6b:85:d7:e2:7a:4b:dd:b9:e1:b8: ba:99:fa:d7:31:67:8b:ba:a2:9b:12:e9:13:0e:6a: 49:9c:3b:51:d7:f5:87:f1:52:2b:a3:91:1a:0a:33: 61:80:25:1b:d6:92:5b:ed:71:23:0a:e4:4d:b5:b2: b0:9b:cc:e8:2e:82:08:0e:4d:d0:da:3d:b3:ca:a0: e4:ea:58:54:9b:1c:b3:7b:5f:f3:00:4c:77:ef:71: f2:67:f2:e7:44:55:f8:c7:55:7b:ba:4f:17:b4:fc: a1:8f:31:ef:ee:21:34:85:0a:4f:c3:62:c0:bc:33: 7d:7b:38:30:b7:e0:fb:77:3d:ad:bd:95:30:dd:06: f3:0a:cd:d3:c9:af:77:8d:05:32:68:11:28:ac:77: bd:a2:fc:df:9d:d8:39:8a:6c:e7:ba:6a:8a:87:a1: 02:c6:73:a1:38:0d:a9:67:cc:41:78:7a:7a:ce:d0: c4:6e:31:10:7b:70:32:60:80:f7:a9:1a:30:c7:51: e9:da:53:d9:90:3a:14:96:9b:4b:65:a3:ec:ac:2c: a3:15:aa:76:eb:d2:fb:96:38:64:ce:90:6b:ce:fd: 3a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:01:2F:EC:D1:C0:E4:91:A3:3B:A2:EB:13:6F:F0:69:48:1B:8A:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ea627fa0-2801-34e1-b8b6-f339780f3731.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.4.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:b3:96:85:a2:02:b0:3e:56:70:40:b4:dc:ce:90:43:10:2d: 51:2f:33:32:b4:92:4e:e6:72:80:04:4d:dd:30:e0:76:d0:b1: 76:bd:00:8d:44:14:02:64:6c:39:77:88:94:ed:ad:ae:54:ed: 92:54:39:21:14:4d:41:42:6e:cd:77:2c:eb:be:55:e6:b9:1d: 61:be:4f:f2:ad:05:a8:b4:1a:3b:46:67:58:06:a4:8f:62:62: f0:44:9f:63:7a:cd:b2:d0:6b:46:bd:1e:4f:94:96:3a:6b:f0: b8:d7:5c:7a:c6:78:56:58:ff:6a:f6:2e:b9:f5:6f:69:19:06: 87:73:76:7b:c3:fd:dc:5c:96:0b:57:08:0f:82:7d:13:cc:70: 5a:6f:b8:9b:3b:84:40:3e:df:74:ba:31:44:e0:e1:46:f3:5a: 82:f0:f9:31:1d:fb:6a:cb:b0:79:d1:61:3b:5f:41:d1:ef:27: 83:b7:79:23:2a:7c:b5:83:60:74:1e:a3:a4:e8:16:d9:ba:b1: b1:ba:8d:e4:ab:07:1f:70:82:3b:d7:56:f0:fa:e8:b2:b1:03: 44:29:d3:29:9a:f9:1d:4f:fe:f4:f3:86:ea:d5:95:2b:51:6a: 0d:9c:54:54:90:fa:62:0c:7d:e1:71:23:95:40:a7:61:0c:c0: 59:14:4d:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE99T+BX4Yz+bdFLmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxMzE0NTIyNloXDTI3MDExMTE1NTIyNlowLzEtMCsGA1UEAxMk MWQyMGU1MzEtNTE5Mi00MzQyLWE5NzYtYmI5MmE2ODI2MDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqj1u/iQNGyBxl8liDEDvtbpBCZSQ7rku1ke EriB+9lv1WuF1+J6S9254bi6mfrXMWeLuqKbEukTDmpJnDtR1/WH8VIro5EaCjNh gCUb1pJb7XEjCuRNtbKwm8zoLoIIDk3Q2j2zyqDk6lhUmxyze1/zAEx373HyZ/Ln RFX4x1V7uk8XtPyhjzHv7iE0hQpPw2LAvDN9ezgwt+D7dz2tvZUw3QbzCs3Tya93 jQUyaBEorHe9ovzfndg5imznumqKh6ECxnOhOA2pZ8xBeHp6ztDEbjEQe3AyYID3 qRowx1Hp2lPZkDoUlptLZaPsrCyjFap269L7ljhkzpBrzv06pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcBL+zRwOSRozui6xNv8GlIG4qXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZWE2MjdmYTAtMjgwMS0z NGUxLWI4YjYtZjMzOTc4MGYzNzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJgTSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWzloWiArA+VnBAtNzOkEMQLVEvMzK0kk7mcoAETd0w4HbQsXa9AI1E FAJkbDl3iJTtra5U7ZJUOSEUTUFCbs13LOu+Vea5HWG+T/KtBai0GjtGZ1gGpI9i YvBEn2N6zbLQa0a9Hk+Uljpr8LjXXHrGeFZY/2r2Lrn1b2kZBodzdnvD/dxclgtX CA+CfRPMcFpvuJs7hEA+33S6MUTg4UbzWoLw+TEd+2rLsHnRYTtfQdHvJ4O3eSMq fLWDYHQeo6ToFtm6sbG6jeSrBx9wgjvXVvD66LKxA0Qp0yma+R1P/vTzhurVlStR ag2cVFSQ+mIMfeFxI5VAp2EMwFkUTXU= -----END CERTIFICATE-----Generated at Tue Oct 27 20:44:15 2026 by rpki-client