$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ffa3fb40-8efc-3b4e-8b58-fd42e99229f9.roa File: ffa3fb40-8efc-3b4e-8b58-fd42e99229f9.roa (raw, json) Hash identifier: s+AQptkkSIJiRLfsJSWHNDGTTZR11wr83qvy2LM4U3A= Subject key identifier: 34:C2:68:FD:44:26:53:E6:27:84:4A:BD:98:A7:2C:75:EA:C3:9E:8E Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F5B98035061B60F84C5F0A440 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ffa3fb40-8efc-3b4e-8b58-fd42e99229f9.roa Signing time: Thu 01 Oct 2026 13:00:12 +0000 ROA not before: Thu 01 Oct 2026 13:00:12 +0000 ROA not after: Wed 30 Dec 2026 14:00:12 +0000 asID: 272403 IP address blocks: 38.101.88.0/23 maxlen: 23 38.101.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:98:03:50:61:b6:0f:84:c5:f0:a4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 1 13:00:12 2026 GMT Not After : Dec 30 14:00:12 2026 GMT Subject: CN=46bc5090-fb99-44e6-bbd4-5d6542a05c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:54:e7:b5:03:00:81:ac:47:11:95:09:b2:32: ad:e0:ef:41:76:c3:20:12:1e:d4:f5:64:b6:84:63: c7:84:7d:dd:25:bf:5a:5a:44:0e:f9:c2:bd:a0:da: 3e:01:20:5e:b1:7f:c5:02:83:80:e9:43:fe:b1:3d: da:74:da:6e:22:15:7a:ad:76:d4:72:9b:3d:3a:76: cc:10:1d:91:0d:31:7d:8f:4c:98:90:98:67:1d:e8: e3:31:43:b4:2d:67:a2:50:fb:a4:7b:65:f4:8c:29: c1:6e:d7:e8:d9:c4:28:d8:aa:39:94:9c:43:cc:1d: f5:54:d6:e3:f6:96:f0:40:03:25:a2:2e:df:94:75: c8:a9:92:e8:75:f8:bd:6a:60:0e:54:12:2d:10:64: 90:76:43:75:86:e1:b1:c6:dd:00:86:8e:76:16:f1: 25:b7:85:69:73:cc:cd:ca:28:8e:1a:30:21:b7:ad: 34:8f:f8:bb:9a:55:6a:9e:e3:93:3f:11:3a:76:63: d5:23:de:a9:5e:44:a0:40:99:9a:18:22:63:dd:1d: a8:96:5e:02:09:42:37:7e:16:19:cc:b2:11:58:e1: 11:9f:99:c8:96:a5:93:57:56:d7:1d:86:54:ab:7a: 03:39:8e:d5:81:0d:4f:03:87:22:1d:e9:f9:3d:62: c9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C2:68:FD:44:26:53:E6:27:84:4A:BD:98:A7:2C:75:EA:C3:9E:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ffa3fb40-8efc-3b4e-8b58-fd42e99229f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.101.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:f3:71:bc:e6:e1:d7:ff:f8:04:6b:84:58:bd:84:9a:52:70: e8:1e:e5:02:52:61:ca:dd:25:7b:2d:08:05:65:ec:34:97:cd: e3:bd:c7:ec:9c:5c:30:9e:7a:ca:4e:f1:dc:60:2f:95:d6:3b: 6a:2d:ee:4c:65:39:c7:c6:15:99:25:32:03:93:b6:24:d3:4b: bd:2c:b9:58:ca:7f:7f:94:9c:b0:78:f1:45:26:fb:72:7a:01: a1:c5:27:9e:95:89:a1:0b:5f:f8:cb:8c:6d:0a:eb:42:6e:9b: fa:a8:39:01:3c:31:37:b1:62:c4:d9:80:2c:b8:13:f8:2b:28: 26:e0:6d:3a:13:ec:e9:bd:90:62:6b:13:36:f8:ef:7f:92:d5: cf:72:9c:63:cf:f4:7f:4e:1a:8a:54:48:79:38:0c:28:fe:11: 8b:88:43:0f:5c:dd:74:ba:12:17:b5:55:e9:2a:9e:c7:dc:54: 09:5b:93:bf:35:f0:14:15:7b:28:a1:7a:c5:36:05:6e:32:75: f0:d5:21:a0:ef:f8:c3:c5:b3:1a:79:ad:48:04:c8:9e:66:0f: bf:21:81:36:0b:a8:f8:d4:f0:e8:f3:2f:3d:ef:27:59:b0:2a: c5:3c:b6:b3:51:db:d4:e8:12:1b:43:8c:88:55:c6:1d:d5:56: 68:16:44:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bmANQYbYPhMXwpEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk NDZiYzUwOTAtZmI5OS00NGU2LWJiZDQtNWQ2NTQyYTA1YzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVTntQMAgaxHEZUJsjKt4O9BdsMgEh7U9WS2 hGPHhH3dJb9aWkQO+cK9oNo+ASBesX/FAoOA6UP+sT3adNpuIhV6rXbUcps9OnbM EB2RDTF9j0yYkJhnHejjMUO0LWeiUPuke2X0jCnBbtfo2cQo2Ko5lJxDzB31VNbj 9pbwQAMloi7flHXIqZLodfi9amAOVBItEGSQdkN1huGxxt0Aho52FvElt4Vpc8zN yiiOGjAht600j/i7mlVqnuOTPxE6dmPVI96pXkSgQJmaGCJj3R2oll4CCUI3fhYZ zLIRWOERn5nIlqWTV1bXHYZUq3oDOY7VgQ1PA4ciHen5PWLJ+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTCaP1EJlPmJ4RKvZinLHXqw56OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZmZhM2ZiNDAtOGVmYy0z YjRlLThiNTgtZmQ0MmU5OTIyOWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJmVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvzcbzm4df/+ARrhFi9hJpScOge5QJSYcrdJXstCAVl7DSXzeO9x+yc XDCeespO8dxgL5XWO2ot7kxlOcfGFZklMgOTtiTTS70suVjKf3+UnLB48UUm+3J6 AaHFJ56ViaELX/jLjG0K60Jum/qoOQE8MTexYsTZgCy4E/grKCbgbToT7Om9kGJr Ezb473+S1c9ynGPP9H9OGopUSHk4DCj+EYuIQw9c3XS6Ehe1VekqnsfcVAlbk781 8BQVeyihesU2BW4ydfDVIaDv+MPFsxp5rUgEyJ5mD78hgTYLqPjU8OjzLz3vJ1mw KsU8trNR29ToEhtDjIhVxh3VVmgWREs= -----END CERTIFICATE-----Generated at Wed Oct 28 00:41:41 2026 by rpki-client