$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ee8bc08b-8e51-3e21-9421-bd1be5e6e829.roa File: ee8bc08b-8e51-3e21-9421-bd1be5e6e829.roa (raw, json) Hash identifier: 8EfStjM/jr3QVXKq2xuz1/7G9ti032wK5U2cxkmvGuM= Subject key identifier: 08:15:BC:30:EC:54:F2:65:97:17:DF:19:F1:8F:14:62:50:8E:88:3C Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F86DD9D95E1A263811DE4B900 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ee8bc08b-8e51-3e21-9421-bd1be5e6e829.roa Signing time: Sat 17 Oct 2026 01:00:13 +0000 ROA not before: Sat 17 Oct 2026 01:00:13 +0000 ROA not after: Fri 15 Jan 2027 02:00:13 +0000 asID: 273254 IP address blocks: 38.3.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:86:dd:9d:95:e1:a2:63:81:1d:e4:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 17 01:00:13 2026 GMT Not After : Jan 15 02:00:13 2027 GMT Subject: CN=3c82c7fe-b3a1-49ed-bf98-41a3d859b1d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:cc:50:d8:7c:d3:f4:bf:d6:89:6e:73:6f:62: f1:73:83:d9:4e:c4:49:1c:fa:88:4a:0e:da:3e:7b: 09:38:40:bd:a3:98:72:e8:40:53:03:36:86:a1:bd: 34:bf:26:c9:f2:77:ac:83:fc:df:57:38:d6:38:b4: 6a:ba:bf:04:47:aa:6f:83:9d:cb:7f:55:92:9a:d9: 29:d7:a3:02:4e:a8:76:60:da:2a:80:b1:91:7f:77: 94:f1:65:7d:fe:71:4e:4e:6e:ad:68:41:4b:b1:82: eb:fc:12:05:17:51:56:22:26:22:c7:98:aa:b1:91: e1:51:de:b3:5e:cc:d1:13:bc:58:5d:d1:d9:cc:cd: ca:77:97:71:31:03:73:8e:7f:68:86:6f:0c:02:a2: 8f:13:c6:0f:cb:2f:bb:1d:6f:d9:52:dd:06:f8:72: a2:1f:d7:17:3a:00:be:28:6a:e1:ef:ed:9b:03:0f: 14:1b:30:a3:e8:84:eb:31:ad:6c:bf:e0:4f:ad:96: 33:c7:36:a1:49:6d:e5:9b:70:45:74:82:c6:0e:cc: 22:5b:76:79:57:de:87:7a:7c:89:5d:3e:55:f3:0e: e6:4f:3a:bc:06:5e:af:ae:58:8c:29:c8:9c:fe:31: 98:2e:15:d7:e1:03:15:20:2f:9d:53:99:d2:2b:1d: 73:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:15:BC:30:EC:54:F2:65:97:17:DF:19:F1:8F:14:62:50:8E:88:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ee8bc08b-8e51-3e21-9421-bd1be5e6e829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.3.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:5c:df:0f:fc:c4:26:51:d0:a0:30:ae:66:54:06:c4:27:e0: 22:bf:55:e2:fb:36:52:27:c1:15:e5:aa:54:b2:9d:3c:34:5e: d3:2b:ca:a8:bd:75:50:ef:0f:9e:11:11:73:cb:55:05:31:3f: 40:98:38:4a:94:46:22:22:78:46:46:69:c4:b9:fc:fc:73:f3: 06:89:8f:f4:b8:d3:99:82:f1:1e:c9:c3:de:ff:51:95:f3:02: b8:46:15:42:1a:2e:84:8d:37:24:ad:fb:ba:b8:6e:cc:d1:86: b8:e8:d2:63:62:df:aa:27:8c:1c:55:20:39:c8:09:86:ca:1e: a3:1c:79:59:38:73:43:33:3f:45:af:e6:b4:c9:45:61:db:25: a8:50:53:f0:19:35:84:8a:24:8f:df:16:63:e6:ca:10:6b:04: 61:2a:a0:f1:d4:d7:65:02:28:ae:28:c6:b4:3d:63:a5:d8:24: 3b:9b:cd:b7:4d:77:69:a7:ef:15:eb:34:92:98:e4:24:1e:7d: d5:4a:af:d2:21:98:5d:19:2b:82:47:f2:6c:87:84:29:51:6c: 86:37:a1:2c:b6:9a:e7:14:a3:05:3c:20:15:55:a9:ee:8c:20: 15:d8:3c:d5:e8:91:75:52:1f:2a:4a:c9:b8:e5:95:78:f0:90: 45:ee:06:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+G3Z2V4aJjgR3kuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxNzAxMDAxM1oXDTI3MDExNTAyMDAxM1owLzEtMCsGA1UEAxMk M2M4MmM3ZmUtYjNhMS00OWVkLWJmOTgtNDFhM2Q4NTliMWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcxQ2HzT9L/WiW5zb2Lxc4PZTsRJHPqISg7a PnsJOEC9o5hy6EBTAzaGob00vybJ8nesg/zfVzjWOLRqur8ER6pvg53Lf1WSmtkp 16MCTqh2YNoqgLGRf3eU8WV9/nFOTm6taEFLsYLr/BIFF1FWIiYix5iqsZHhUd6z XszRE7xYXdHZzM3Kd5dxMQNzjn9ohm8MAqKPE8YPyy+7HW/ZUt0G+HKiH9cXOgC+ KGrh7+2bAw8UGzCj6ITrMa1sv+BPrZYzxzahSW3lm3BFdILGDswiW3Z5V96HenyJ XT5V8w7mTzq8Bl6vrliMKcic/jGYLhXX4QMVIC+dU5nSKx1zJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgVvDDsVPJllxffGfGPFGJQjog8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZWU4YmMwOGItOGU1MS0z ZTIxLTk0MjEtYmQxYmU1ZTZlODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJgPdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBc3w/8xCZR0KAwrmZUBsQn4CK/VeL7NlInwRXlqlSynTw0XtMryqi9 dVDvD54REXPLVQUxP0CYOEqURiIieEZGacS5/Pxz8waJj/S405mC8R7Jw97/UZXz ArhGFUIaLoSNNySt+7q4bszRhrjo0mNi36onjBxVIDnICYbKHqMceVk4c0MzP0Wv 5rTJRWHbJahQU/AZNYSKJI/fFmPmyhBrBGEqoPHU12UCKK4oxrQ9Y6XYJDubzbdN d2mn7xXrNJKY5CQefdVKr9IhmF0ZK4JH8myHhClRbIY3oSy2mucUowU8IBVVqe6M IBXYPNXokXVSHypKybjllXjwkEXuBhg= -----END CERTIFICATE-----Generated at Tue Oct 27 20:33:35 2026 by rpki-client