$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fa38ec45-44b8-3d2a-8f2a-ddce01393612.roa File: fa38ec45-44b8-3d2a-8f2a-ddce01393612.roa (raw, json) Hash identifier: BtoyIAWJUo0TCAxEXJT9tblDBEDHz5JFqG6lxW6P7KI= Subject key identifier: AF:EB:A9:9F:17:39:92:10:EC:9A:0F:56:64:66:F2:05:BC:23:34:1B Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F7BB2F5BE88CDCFB7F9D3CF80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fa38ec45-44b8-3d2a-8f2a-ddce01393612.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 275658 IP address blocks: 38.159.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b2:f5:be:88:cd:cf:b7:f9:d3:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=5b179aca-eb03-460f-9f54-d22cac1ebec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:57:29:16:75:7d:ee:fc:ba:b3:48:40:48:7d: 79:36:fc:5f:02:dd:89:2d:fd:bf:7d:70:75:e1:7a: ad:e5:36:ed:cf:60:2b:18:ef:17:38:12:77:87:bb: 9a:3f:09:d6:d0:74:73:3b:78:b7:d0:bd:00:9e:d7: 4f:ae:bd:1f:0e:6a:29:85:6a:90:33:62:41:ac:bd: 11:e3:9a:93:0a:d2:b1:5e:d4:3b:04:d1:06:d0:dd: ba:a4:28:40:ab:4d:32:e2:e6:c4:58:40:52:c7:aa: d4:ce:10:67:a3:93:5a:b0:a0:e9:8a:28:dc:94:45: ce:f7:0c:54:1a:e8:ef:84:07:dd:55:4d:a0:9a:99: ef:07:a3:12:d9:bb:b4:9d:79:37:d5:7e:34:17:a7: 85:69:7e:2c:24:be:0f:73:49:6e:18:31:e5:90:4d: ee:97:05:50:ca:00:7f:20:ba:de:65:c2:e1:33:c8: 0c:d6:35:07:11:2b:82:36:51:9e:00:47:dc:8a:79: 75:e2:90:29:6c:1a:b6:00:06:16:79:6b:b4:7e:d7: 37:34:20:57:0e:0e:5e:63:d8:2d:47:5c:d1:f0:80: 24:97:09:cd:25:67:ec:2d:64:52:68:6d:8d:0f:8e: 2b:7c:d2:17:ce:ee:75:6d:35:1b:f9:9f:87:fb:ba: f1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:EB:A9:9F:17:39:92:10:EC:9A:0F:56:64:66:F2:05:BC:23:34:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fa38ec45-44b8-3d2a-8f2a-ddce01393612.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.159.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:a3:c8:44:6c:54:f1:c6:d0:75:71:bb:ca:f7:d5:89:a4:7c: 66:26:74:34:bc:89:27:8d:37:6e:82:96:96:b7:88:87:ea:c8: 08:bf:98:94:bf:46:0a:b1:9b:e4:9d:e4:75:ea:00:31:e1:ba: 60:24:16:d2:ca:80:e6:28:c5:d1:4e:c3:62:a5:d3:ec:64:95: 31:db:36:39:f3:78:55:74:36:85:1c:13:ad:ec:83:ac:a3:d7: 34:90:9e:16:c8:88:37:53:5a:5f:f3:51:a9:88:c6:3a:8a:c6: 86:1d:e0:3f:23:07:c6:1b:44:6e:a8:8b:69:ca:1f:5b:21:64: 67:e2:e5:c1:81:30:e2:a6:10:e4:82:ec:95:18:b0:37:7a:e1: 5d:4d:ff:31:14:e8:96:86:90:c7:7c:c6:85:0d:cb:04:cd:9b: 13:aa:e5:60:62:26:42:63:9a:8d:52:67:19:ed:18:f4:9c:c4: 29:13:33:8a:6a:4a:1c:23:4a:07:3a:bf:be:52:24:1a:b4:25: 9e:69:65:5c:4a:c9:10:01:6a:e5:a8:2b:10:1c:77:9f:c4:51: 0e:7d:36:8e:3d:a8:51:dd:45:b7:59:38:82:04:e7:e7:d4:f9: ce:df:25:85:8f:5c:3d:03:b4:b7:a6:06:33:00:9d:e9:d9:f0: 07:13:07:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97svW+iM3Pt/nTz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk NWIxNzlhY2EtZWIwMy00NjBmLTlmNTQtZDIyY2FjMWViZWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1cpFnV97vy6s0hASH15NvxfAt2JLf2/fXB1 4Xqt5Tbtz2ArGO8XOBJ3h7uaPwnW0HRzO3i30L0AntdPrr0fDmophWqQM2JBrL0R 45qTCtKxXtQ7BNEG0N26pChAq00y4ubEWEBSx6rUzhBno5NasKDpiijclEXO9wxU GujvhAfdVU2gmpnvB6MS2bu0nXk31X40F6eFaX4sJL4Pc0luGDHlkE3ulwVQygB/ ILreZcLhM8gM1jUHESuCNlGeAEfcinl14pApbBq2AAYWeWu0ftc3NCBXDg5eY9gt R1zR8IAklwnNJWfsLWRSaG2ND44rfNIXzu51bTUb+Z+H+7rxNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/rqZ8XOZIQ7JoPVmRm8gW8IzQbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZmEzOGVjNDUtNDRiOC0z ZDJhLThmMmEtZGRjZTAxMzkzNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJp/kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALSjyERsVPHG0HVxu8r31YmkfGYmdDS8iSeNN26Clpa3iIfqyAi/mJS/ Rgqxm+Sd5HXqADHhumAkFtLKgOYoxdFOw2Kl0+xklTHbNjnzeFV0NoUcE63sg6yj 1zSQnhbIiDdTWl/zUamIxjqKxoYd4D8jB8YbRG6oi2nKH1shZGfi5cGBMOKmEOSC 7JUYsDd64V1N/zEU6JaGkMd8xoUNywTNmxOq5WBiJkJjmo1SZxntGPScxCkTM4pq ShwjSgc6v75SJBq0JZ5pZVxKyRABauWoKxAcd5/EUQ59No49qFHdRbdZOIIE5+fU +c7fJYWPXD0DtLemBjMAnenZ8AcTBzY= -----END CERTIFICATE-----Generated at Tue Oct 27 22:47:51 2026 by rpki-client