$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ee3d1d70-81d5-3a65-ba7d-8cbaa2b06176.roa File: ee3d1d70-81d5-3a65-ba7d-8cbaa2b06176.roa (raw, json) Hash identifier: hu1XJVmxpq9GraVq1oOdaihnFC/GrXpjTWsU373xlvE= Subject key identifier: 3F:3C:BE:34:5C:10:B9:C6:32:44:F4:51:E6:61:64:6F:C9:E2:DC:07 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F549DA38C0EE80758CF192480 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ee3d1d70-81d5-3a65-ba7d-8cbaa2b06176.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 210058 IP address blocks: 38.211.228.0/24 maxlen: 24 38.211.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:a3:8c:0e:e8:07:58:cf:19:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=c213da79-a626-44f6-9371-28160ba3b096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:52:52:3c:7a:cf:14:9f:05:00:48:c4:27:98: 34:f8:a3:9d:dd:cc:99:e7:0f:15:77:32:d6:76:b1: 30:fc:b9:f5:13:99:fd:dd:58:9d:79:11:66:2a:5c: 7a:d5:d5:37:0c:42:17:1e:c5:ff:e0:9a:be:06:5f: fe:49:50:05:34:d9:f6:e4:b9:5c:22:22:89:14:3c: 4c:75:fb:5b:df:6a:c4:e1:79:18:05:84:e0:c6:37: 04:79:35:3d:f7:e3:9f:a8:6e:21:42:db:ac:98:5c: 3f:5b:75:12:52:9a:96:1a:56:ab:31:3c:3c:7f:80: 53:6a:d8:9b:84:1f:ff:98:4b:eb:7c:8b:a1:19:2b: 33:74:75:17:f5:20:bf:91:66:d4:78:aa:11:dc:2b: 5a:10:ab:ae:bd:0c:18:72:8b:3f:3d:61:4f:78:7d: 57:c9:6c:37:34:cd:20:30:c3:ec:d5:c9:de:22:e1: aa:ba:72:27:d1:48:a0:71:3f:bf:13:e4:ab:f2:af: 9f:c1:31:f8:af:92:15:89:55:fa:8d:cb:66:a2:3e: 86:d3:04:c1:00:b6:bb:0d:6b:ab:50:f6:b2:4e:45: 90:d1:d2:59:55:f2:48:0f:08:f9:2e:33:13:83:ee: db:22:14:32:a0:98:df:fd:76:7d:fc:5c:f2:45:8d: f5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:3C:BE:34:5C:10:B9:C6:32:44:F4:51:E6:61:64:6F:C9:E2:DC:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ee3d1d70-81d5-3a65-ba7d-8cbaa2b06176.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.211.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:69:39:cf:f6:ef:02:ae:45:d0:fa:d9:84:23:39:b5:51:cd: f1:ae:9f:13:1f:d6:8e:60:cc:6f:b5:e5:48:f3:64:c2:87:ad: 4f:42:4f:7a:c7:57:0d:fc:0d:70:1a:54:31:42:10:92:81:1c: b4:af:1a:51:ce:6d:72:9b:f1:7b:25:f6:b2:a1:a1:c1:45:2e: 10:d9:8d:7d:b9:d7:79:a9:88:7b:f3:4d:94:3a:a4:74:16:b6: 94:e1:6e:79:dd:72:1b:0d:a5:14:de:40:30:11:b1:bf:2e:57: 22:24:4d:47:e6:47:13:f8:8d:89:bc:97:42:d6:77:81:e0:39: f5:1c:91:32:a2:90:ba:11:95:9d:3d:16:be:e8:30:5a:60:43: 76:62:fa:ea:72:3a:c3:61:9f:b2:63:a2:5f:58:56:7b:cd:2d: e4:02:47:e4:6e:79:e1:0a:45:15:c9:36:4f:76:f0:e6:4d:9f: 8d:d5:68:df:e9:9f:b1:8b:80:e9:07:b1:39:88:c2:1f:29:3b: 12:da:3b:58:24:d7:53:dd:15:be:38:fa:f6:6d:70:80:d1:a0: 52:4d:55:d3:09:1d:28:f2:97:36:52:cf:de:b2:68:03:f1:8f: 8b:5b:27:00:fc:ae:07:28:fd:25:ec:16:02:51:3f:13:74:71: fa:df:94:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnaOMDugHWM8ZJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk YzIxM2RhNzktYTYyNi00NGY2LTkzNzEtMjgxNjBiYTNiMDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFJSPHrPFJ8FAEjEJ5g0+KOd3cyZ5w8VdzLW drEw/Ln1E5n93VideRFmKlx61dU3DEIXHsX/4Jq+Bl/+SVAFNNn25LlcIiKJFDxM dftb32rE4XkYBYTgxjcEeTU99+OfqG4hQtusmFw/W3USUpqWGlarMTw8f4BTatib hB//mEvrfIuhGSszdHUX9SC/kWbUeKoR3CtaEKuuvQwYcos/PWFPeH1XyWw3NM0g MMPs1cneIuGqunIn0UigcT+/E+Sr8q+fwTH4r5IViVX6jctmoj6G0wTBALa7DWur UPayTkWQ0dJZVfJIDwj5LjMTg+7bIhQyoJjf/XZ9/FzyRY31/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD88vjRcELnGMkT0UeZhZG/J4twHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZWUzZDFkNzAtODFkNS0z YTY1LWJhN2QtOGNiYWEyYjA2MTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJtPkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9pOc/27wKuRdD62YQjObVRzfGunxMf1o5gzG+15UjzZMKHrU9CT3rH Vw38DXAaVDFCEJKBHLSvGlHObXKb8Xsl9rKhocFFLhDZjX2513mpiHvzTZQ6pHQW tpThbnndchsNpRTeQDARsb8uVyIkTUfmRxP4jYm8l0LWd4HgOfUckTKikLoRlZ09 Fr7oMFpgQ3Zi+upyOsNhn7Jjol9YVnvNLeQCR+RueeEKRRXJNk928OZNn43VaN/p n7GLgOkHsTmIwh8pOxLaO1gk11PdFb44+vZtcIDRoFJNVdMJHSjylzZSz96yaAPx j4tbJwD8rgco/SXsFgJRPxN0cfrflOI= -----END CERTIFICATE-----Generated at Wed Oct 28 05:28:48 2026 by rpki-client