$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f6989d89-67ca-34e1-9fba-586aae3628d1.roa File: f6989d89-67ca-34e1-9fba-586aae3628d1.roa (raw, json) Hash identifier: A4D5InQmd2RgAM3Y0XgV13v2CHO5dz6OSH6O5OkeULo= Subject key identifier: 57:12:B1:B0:67:24:A2:60:61:C7:74:7A:D2:A9:5C:48:D9:47:AE:66 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F698D2525E8423A653CC1B500 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f6989d89-67ca-34e1-9fba-586aae3628d1.roa Signing time: Tue 06 Oct 2026 12:59:43 +0000 ROA not before: Tue 06 Oct 2026 12:59:43 +0000 ROA not after: Mon 04 Jan 2027 13:59:43 +0000 asID: 11172 IP address blocks: 38.225.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:25:25:e8:42:3a:65:3c:c1:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 6 12:59:43 2026 GMT Not After : Jan 4 13:59:43 2027 GMT Subject: CN=77e0511d-5f38-464b-aaab-01a3b2ad39b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0f:52:5c:93:45:d0:d6:03:5a:61:d5:75:ae: 7e:dd:b3:3b:e8:96:89:65:10:92:f8:0a:89:cf:33: 5c:c3:ee:1f:8a:91:a8:03:5c:a6:69:8d:73:bc:35: f2:e2:08:4c:59:28:eb:db:d8:9f:e1:b9:07:56:a7: b9:2e:17:42:f3:73:f5:41:ce:8a:ee:63:e8:2b:1b: 6c:22:a3:b8:f1:40:ec:3a:1d:00:a7:ca:63:cd:d3: af:8d:50:d2:14:eb:ce:a9:b0:75:a7:3a:1b:de:79: 88:fb:ea:dc:96:b0:56:01:ce:22:d4:d1:09:9d:ea: 06:b5:e3:7f:0f:67:0f:a2:22:bd:03:f5:1c:3c:15: fa:9c:78:52:7a:e9:20:be:64:6e:45:29:9b:2b:71: c9:0d:39:8e:17:19:1b:0b:d8:b2:b0:3a:71:6e:cb: bd:98:2c:59:65:6c:9d:aa:75:dc:c3:94:e4:22:f4: 96:bf:06:6a:1d:da:73:cc:39:d2:c9:23:41:e3:9b: a7:8a:f3:1f:c6:9b:93:10:01:fd:d5:50:21:99:96: b6:33:0b:a4:0e:ee:15:23:5c:68:7c:fb:a3:c6:e1: 75:5d:15:bc:ed:9e:bd:9a:de:65:77:9d:a1:23:a4: b0:ec:1f:23:c0:92:d1:f5:95:38:ba:c5:c4:f7:b4: 28:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:12:B1:B0:67:24:A2:60:61:C7:74:7A:D2:A9:5C:48:D9:47:AE:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f6989d89-67ca-34e1-9fba-586aae3628d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.225.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:9f:79:f0:42:6b:da:29:54:38:31:df:ef:e3:61:fe:3b:d1: 3d:dc:1b:fb:8f:c2:b3:c1:fd:bf:90:87:8e:4f:dd:db:c8:69: fa:18:fa:5d:3e:a1:7a:49:b9:c0:90:7f:5f:21:b5:46:25:01: 8d:f2:be:87:eb:73:9d:a5:38:bb:68:54:41:aa:fb:8c:1a:e3: 8b:75:ee:39:32:22:89:19:a4:36:b0:8f:a9:8f:99:04:64:60: ed:bb:d2:c8:1c:53:38:df:7d:65:32:13:7f:73:1f:f8:9a:49: 70:d8:58:ca:96:b8:23:80:7b:1a:1d:fc:e9:1a:b4:bd:f0:66: 6d:20:b8:96:19:c0:77:37:7c:6f:6e:de:bd:90:80:fc:ae:48: cf:52:32:c4:28:d7:15:1e:f5:87:34:8f:63:70:67:e9:11:b5: a9:f8:6b:1e:6f:ca:2a:f5:a8:f3:ae:0f:07:74:e7:8d:20:91: 03:dd:50:45:64:3c:85:d9:1e:40:6d:06:48:5b:0f:9d:84:6e: 6d:74:18:5d:12:d5:9f:69:8b:d6:4a:d0:3e:ab:cb:c8:12:c8: a3:e7:62:31:a2:c5:6e:b0:22:01:35:10:d9:ac:5c:ec:81:d2: 6a:db:97:ea:b2:be:28:01:c7:02:7e:0f:02:a2:b0:9f:f6:45: e0:76:e1:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjSUl6EI6ZTzBtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwNjEyNTk0M1oXDTI3MDEwNDEzNTk0M1owLzEtMCsGA1UEAxMk NzdlMDUxMWQtNWYzOC00NjRiLWFhYWItMDFhM2IyYWQzOWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg9SXJNF0NYDWmHVda5+3bM76JaJZRCS+AqJ zzNcw+4fipGoA1ymaY1zvDXy4ghMWSjr29if4bkHVqe5LhdC83P1Qc6K7mPoKxts IqO48UDsOh0Ap8pjzdOvjVDSFOvOqbB1pzob3nmI++rclrBWAc4i1NEJneoGteN/ D2cPoiK9A/UcPBX6nHhSeukgvmRuRSmbK3HJDTmOFxkbC9iysDpxbsu9mCxZZWyd qnXcw5TkIvSWvwZqHdpzzDnSySNB45univMfxpuTEAH91VAhmZa2MwukDu4VI1xo fPujxuF1XRW87Z69mt5ld52hI6Sw7B8jwJLR9ZU4usXE97QoJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcSsbBnJKJgYcd0etKpXEjZR65mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZjY5ODlkODktNjdjYS0z NGUxLTlmYmEtNTg2YWFlMzYyOGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJuFtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKfefBCa9opVDgx3+/jYf470T3cG/uPwrPB/b+Qh45P3dvIafoY+l0+ oXpJucCQf18htUYlAY3yvofrc52lOLtoVEGq+4wa44t17jkyIokZpDawj6mPmQRk YO270sgcUzjffWUyE39zH/iaSXDYWMqWuCOAexod/OkatL3wZm0guJYZwHc3fG9u 3r2QgPyuSM9SMsQo1xUe9Yc0j2NwZ+kRtan4ax5vyir1qPOuDwd0540gkQPdUEVk PIXZHkBtBkhbD52Ebm10GF0S1Z9pi9ZK0D6ry8gSyKPnYjGixW6wIgE1ENmsXOyB 0mrbl+qyvigBxwJ+DwKisJ/2ReB24Xk= -----END CERTIFICATE-----Generated at Tue Oct 27 18:14:27 2026 by rpki-client