$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f820d9d9-6961-32ec-b5e2-11af2beab2f6.roa File: f820d9d9-6961-32ec-b5e2-11af2beab2f6.roa (raw, json) Hash identifier: 5qUHGphyamOGRnsAOJTYxztr9/aue5Fiic7IMRGbZzw= Subject key identifier: C4:56:17:DD:3B:83:4F:44:1E:AE:8C:08:F8:86:5A:D0:07:B7:7C:D6 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F8C72F2DFBBC4642F41EC6B00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f820d9d9-6961-32ec-b5e2-11af2beab2f6.roa Signing time: Mon 19 Oct 2026 01:00:12 +0000 ROA not before: Mon 19 Oct 2026 01:00:12 +0000 ROA not after: Sun 17 Jan 2027 02:00:12 +0000 asID: 273180 IP address blocks: 38.196.216.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8c:72:f2:df:bb:c4:64:2f:41:ec:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 19 01:00:12 2026 GMT Not After : Jan 17 02:00:12 2027 GMT Subject: CN=75c7d96d-aefe-4c00-9b38-48e6fe6e85b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:49:15:a3:e4:e5:1b:a3:f1:bd:06:17:c4:6d: b6:2c:d5:dd:c6:3a:2c:f0:09:e3:13:61:5b:cc:77: b4:c9:1e:ff:21:fa:af:d4:93:f7:01:e8:95:4a:db: f8:cd:dc:65:25:3a:cd:83:db:41:c6:cc:45:a0:53: c9:68:87:6b:00:84:d6:1a:45:40:47:13:d9:60:35: 8f:38:8f:50:46:78:a7:d2:77:6e:42:4f:2a:48:90: 82:2b:12:64:d5:5b:51:f1:b2:9f:52:f8:03:b5:8b: a4:ec:d2:35:ec:34:54:77:98:e1:54:7a:d1:f1:08: 02:86:ed:5a:a4:91:73:79:b6:4c:1f:d1:bb:12:30: e0:e3:de:19:23:ce:f9:c9:b8:17:83:82:c8:49:df: 40:46:74:0d:a9:20:5d:c1:f5:cd:b0:ef:2e:87:dd: a7:39:d8:bf:3c:a6:f6:5c:ce:8a:96:2a:82:85:13: 25:f8:ed:bf:4a:71:5b:22:c0:81:11:23:44:6d:71: 44:5d:66:4e:e3:27:af:88:44:e4:a4:be:d6:92:9c: fb:ab:41:49:95:0b:f3:27:38:52:23:b0:61:bf:1d: c2:23:34:95:14:73:ea:df:cf:36:95:2c:1c:81:ba: ee:ae:ce:67:93:0b:6e:b8:27:83:be:97:8f:89:e7: e7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:56:17:DD:3B:83:4F:44:1E:AE:8C:08:F8:86:5A:D0:07:B7:7C:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f820d9d9-6961-32ec-b5e2-11af2beab2f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.196.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:3a:d2:99:95:cc:d8:78:dd:e2:15:c9:9c:96:59:5a:28:eb: 48:cf:70:7e:b6:24:e3:65:ef:cd:38:53:89:8a:64:2e:96:4e: 93:06:3f:35:05:32:fc:d5:a2:3a:c3:a4:cb:7a:dc:ed:ff:98: 6b:c9:d0:7c:ea:30:bc:cb:a5:49:67:96:f7:0e:61:7a:f6:45: 90:c0:0e:22:a0:49:21:c4:34:4a:af:96:59:03:90:74:57:98: e2:75:56:41:ba:52:6f:90:4d:d8:64:7d:1e:30:f0:0a:61:3e: 31:9b:98:62:c0:8f:8e:96:23:88:dc:1e:89:e1:b6:24:10:ce: 8a:3b:6b:2c:e9:ea:52:b4:67:ae:6f:43:55:c1:0f:0e:f1:94: d1:de:13:3a:18:b1:8d:93:3b:91:f6:2c:db:fd:e4:ce:b4:27: c4:f5:bf:fe:db:9c:1a:ec:84:da:a7:1b:00:ae:a7:bc:f2:f3: f5:a0:5e:c8:9b:5c:88:5c:0f:14:00:76:2c:4a:65:4f:4a:a7: 43:e3:4f:70:91:a9:47:61:2d:5c:29:74:3d:fb:0a:52:57:57: 3a:30:5c:e2:df:48:47:1f:f3:ea:9a:9b:a0:e0:b2:22:f2:65: 54:07:04:e3:0c:ef:48:ed:e4:d8:a3:2e:41:e3:5f:f4:07:cc: 0f:c4:2b:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+McvLfu8RkL0HsawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxOTAxMDAxMloXDTI3MDExNzAyMDAxMlowLzEtMCsGA1UEAxMk NzVjN2Q5NmQtYWVmZS00YzAwLTliMzgtNDhlNmZlNmU4NWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0kVo+TlG6PxvQYXxG22LNXdxjos8AnjE2Fb zHe0yR7/Ifqv1JP3AeiVStv4zdxlJTrNg9tBxsxFoFPJaIdrAITWGkVARxPZYDWP OI9QRnin0nduQk8qSJCCKxJk1VtR8bKfUvgDtYuk7NI17DRUd5jhVHrR8QgChu1a pJFzebZMH9G7EjDg494ZI875ybgXg4LISd9ARnQNqSBdwfXNsO8uh92nOdi/PKb2 XM6KliqChRMl+O2/SnFbIsCBESNEbXFEXWZO4yeviETkpL7Wkpz7q0FJlQvzJzhS I7Bhvx3CIzSVFHPq3882lSwcgbrurs5nkwtuuCeDvpePiefnlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRWF907g09EHq6MCPiGWtAHt3zWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZjgyMGQ5ZDktNjk2MS0z MmVjLWI1ZTItMTFhZjJiZWFiMmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJsTYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQ60pmVzNh43eIVyZyWWVoo60jPcH62JONl7804U4mKZC6WTpMGPzUF MvzVojrDpMt63O3/mGvJ0HzqMLzLpUlnlvcOYXr2RZDADiKgSSHENEqvllkDkHRX mOJ1VkG6Um+QTdhkfR4w8AphPjGbmGLAj46WI4jcHonhtiQQzoo7ayzp6lK0Z65v Q1XBDw7xlNHeEzoYsY2TO5H2LNv95M60J8T1v/7bnBrshNqnGwCup7zy8/WgXsib XIhcDxQAdixKZU9Kp0PjT3CRqUdhLVwpdD37ClJXVzowXOLfSEcf8+qam6DgsiLy ZVQHBOMM70jt5NijLkHjX/QHzA/EK04= -----END CERTIFICATE-----Generated at Wed Oct 28 12:25:16 2026 by rpki-client