$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f35d15fa-1205-3111-a019-b720fdf0344f.roa File: f35d15fa-1205-3111-a019-b720fdf0344f.roa (raw, json) Hash identifier: DOdBCnmVL3jkncv9b9GQUSfFIy4n+BNZKW+SeccjoO8= Subject key identifier: C1:06:67:68:1D:98:FB:5E:55:10:91:78:22:2A:21:87:18:CF:2D:34 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F979DB1E940E0E762C791AA80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f35d15fa-1205-3111-a019-b720fdf0344f.roa Signing time: Fri 23 Oct 2026 01:00:12 +0000 ROA not before: Fri 23 Oct 2026 01:00:12 +0000 ROA not after: Thu 21 Jan 2027 02:00:12 +0000 asID: 268157 IP address blocks: 38.19.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:97:9d:b1:e9:40:e0:e7:62:c7:91:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 23 01:00:12 2026 GMT Not After : Jan 21 02:00:12 2027 GMT Subject: CN=d728b3bf-5ce6-49ba-a79b-c3147e2dd9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:37:fd:3b:ea:ec:f8:52:0b:ae:ac:e4:e6:93: d1:8a:97:5e:ae:f1:e0:ae:8b:2d:94:72:a2:6c:2a: 67:33:1b:b7:8c:5f:d2:c6:e8:83:ea:f9:be:f0:5d: 67:34:55:f4:be:f8:65:55:be:1e:35:04:a3:5a:31: c7:29:c7:72:3b:33:da:01:bc:a2:c9:d2:a5:57:dc: 49:3e:40:0b:4c:99:3e:f7:33:a5:59:f2:92:92:e5: 0d:ea:6d:31:1a:9a:82:57:9e:f0:86:a2:32:4d:f8: 48:83:a0:91:e7:f3:7c:b6:9d:6c:d3:e8:66:33:da: 53:de:cf:0f:8e:78:d3:fd:0f:b3:17:1c:9b:0f:83: 19:29:21:31:2a:44:06:0a:89:00:b7:03:76:da:9c: a0:92:47:ce:9c:70:3f:1b:7c:4a:9d:6d:da:0b:0b: 75:f5:a6:ca:90:2e:0a:15:b1:6d:de:3e:67:a1:a1: cd:72:65:44:4e:f1:73:9f:9e:8f:ac:c7:95:6d:c0: ee:e4:ce:9c:37:52:e2:6b:5e:53:ec:20:8d:71:82: e2:8e:3f:75:59:cc:97:07:f9:19:bb:25:25:b2:90: cf:1d:30:ad:d4:cb:1a:47:29:b0:36:7c:27:62:cf: ed:12:7d:0d:06:3d:68:a4:3d:15:fc:e4:99:09:1d: 29:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:06:67:68:1D:98:FB:5E:55:10:91:78:22:2A:21:87:18:CF:2D:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f35d15fa-1205-3111-a019-b720fdf0344f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.19.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:98:64:82:fd:d2:73:dd:7e:0f:89:93:23:5a:f7:c0:ff:02: 69:7f:0b:51:07:b8:b2:2e:65:c3:14:dc:d8:6a:9a:69:97:6f: 18:57:a1:7f:c3:fc:d6:06:ee:84:4a:89:75:93:78:db:fc:e9: c6:95:1c:43:dd:74:6f:03:26:ca:07:fb:0d:50:fa:a7:39:7d: 31:94:c6:ee:e3:0a:86:cf:08:59:5c:a8:da:21:29:af:23:bc: 28:d5:f5:ec:d9:a6:a2:38:09:b6:a7:69:6e:18:57:63:53:e3: 99:18:d7:57:27:59:58:2a:cf:60:f5:66:a2:29:ec:67:56:16: 9b:db:7f:30:d1:95:21:7d:fc:fd:41:d0:4b:54:6c:7a:ba:81: 23:66:05:02:3a:4d:c8:86:a8:20:6e:b9:c5:f4:b5:97:e6:f1: 85:b1:d4:81:77:a3:c5:77:db:e6:a8:d8:98:47:bf:aa:80:4a: 08:f7:9b:f7:9f:91:a0:d8:48:bb:9e:cd:ce:f5:e3:5a:86:fc: 18:76:e1:8c:de:e8:91:15:ff:77:7a:3f:6e:05:dc:f5:1a:1f: 8b:0f:8f:12:5e:d1:39:02:89:62:59:23:7b:e4:27:94:23:78: 68:20:63:9b:df:5c:a8:3d:1d:23:15:49:8c:10:92:82:78:37: bf:07:a2:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+XnbHpQODnYseRqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyMzAxMDAxMloXDTI3MDEyMTAyMDAxMlowLzEtMCsGA1UEAxMk ZDcyOGIzYmYtNWNlNi00OWJhLWE3OWItYzMxNDdlMmRkOWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDf9O+rs+FILrqzk5pPRipdervHgrostlHKi bCpnMxu3jF/SxuiD6vm+8F1nNFX0vvhlVb4eNQSjWjHHKcdyOzPaAbyiydKlV9xJ PkALTJk+9zOlWfKSkuUN6m0xGpqCV57whqIyTfhIg6CR5/N8tp1s0+hmM9pT3s8P jnjT/Q+zFxybD4MZKSExKkQGCokAtwN22pygkkfOnHA/G3xKnW3aCwt19abKkC4K FbFt3j5noaHNcmVETvFzn56PrMeVbcDu5M6cN1Lia15T7CCNcYLijj91WcyXB/kZ uyUlspDPHTCt1MsaRymwNnwnYs/tEn0NBj1opD0V/OSZCR0p+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEGZ2gdmPteVRCReCIqIYcYzy00MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZjM1ZDE1ZmEtMTIwNS0z MTExLWEwMTktYjcyMGZkZjAzNDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJhMmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMaYZIL90nPdfg+JkyNa98D/Aml/C1EHuLIuZcMU3NhqmmmXbxhXoX/D /NYG7oRKiXWTeNv86caVHEPddG8DJsoH+w1Q+qc5fTGUxu7jCobPCFlcqNohKa8j vCjV9ezZpqI4CbanaW4YV2NT45kY11cnWVgqz2D1ZqIp7GdWFpvbfzDRlSF9/P1B 0EtUbHq6gSNmBQI6TciGqCBuucX0tZfm8YWx1IF3o8V32+ao2JhHv6qASgj3m/ef kaDYSLuezc7141qG/Bh24Yze6JEV/3d6P24F3PUaH4sPjxJe0TkCiWJZI3vkJ5Qj eGggY5vfXKg9HSMVSYwQkoJ4N78Hotw= -----END CERTIFICATE-----Generated at Wed Oct 28 11:38:26 2026 by rpki-client