$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0870e864-424f-3b13-8801-79f4c93bce61.roa File: 0870e864-424f-3b13-8801-79f4c93bce61.roa (raw, json) Hash identifier: kQZ/2JqG3ieysftu09xrYLDsRSc0XpVnbvLQBbW/T/U= Subject key identifier: 97:A7:DE:AD:3B:9D:F8:6D:D2:91:D6:28:E9:C7:34:46:F7:C1:8C:D0 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F49894834C786AF9D3C9D3340 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0870e864-424f-3b13-8801-79f4c93bce61.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15830 IP address blocks: 38.70.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:48:34:c7:86:af:9d:3c:9d:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6b7509dd-e074-4bff-9b13-dcb7c6bf1e78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9e:51:72:0d:9d:ad:bd:3b:00:09:d1:f6:62: db:67:f8:f5:26:2c:5e:c5:3f:e8:bd:3c:be:3a:92: 86:6d:f3:fc:9a:f4:5a:82:87:ae:e7:4c:b1:dc:9e: 11:c1:d4:c2:58:78:5c:0d:13:75:ee:a1:42:fe:14: 6f:23:9b:cb:9e:8a:cc:c4:68:70:52:14:0c:17:5a: 8d:01:09:22:14:8b:b9:a2:ad:7c:0a:89:e1:4a:49: 9f:76:61:99:08:37:ae:36:b9:70:e2:69:3a:90:31: b3:36:9d:9c:87:ac:c3:fe:8b:a1:1d:82:6b:00:08: 47:b0:51:95:b2:65:ab:48:19:55:29:c5:a0:92:1e: cc:e4:11:a9:37:ff:74:b3:ff:50:8b:2e:0d:78:4b: d5:67:86:9b:5c:2b:be:18:07:45:6e:ab:51:b9:bf: 89:10:23:80:31:77:9c:e7:f5:86:4a:ef:1d:d2:ef: ff:14:07:2b:a3:e7:41:5a:07:92:07:88:e1:d0:35: e4:84:df:52:f8:a8:f8:dc:f6:8f:5a:09:f4:43:3b: 1d:19:ce:ef:53:29:e2:a5:fe:2b:9a:d1:13:77:9d: 71:72:47:aa:a1:f4:50:39:db:eb:a3:44:82:32:f8: cd:6e:e0:56:bf:33:81:31:f1:ec:90:9c:0e:6d:92: 58:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A7:DE:AD:3B:9D:F8:6D:D2:91:D6:28:E9:C7:34:46:F7:C1:8C:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0870e864-424f-3b13-8801-79f4c93bce61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.70.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:a7:9f:37:99:ea:60:3a:21:78:e5:d9:93:92:1d:f7:62:70: d2:b7:5d:5c:0f:41:f4:bf:1d:e5:af:e4:28:49:fe:79:6b:f0: fe:2c:0c:b8:01:09:50:68:db:6c:78:2c:f2:06:d1:1a:40:71: 81:f8:92:e7:19:0a:82:be:ba:07:32:2a:e3:ec:45:5f:88:c6: 8f:d1:d6:8a:39:43:a2:dc:39:7e:38:de:24:8d:09:d9:14:20: a3:c2:0a:94:81:27:81:d3:ac:2c:24:e1:42:ca:47:c0:fc:f5: bc:01:34:64:e3:af:9b:2f:5f:d8:6a:5c:2a:25:93:1e:2a:38: 30:d2:b3:a1:69:b5:53:61:fc:94:25:a2:e0:26:a1:93:0a:d8: 2a:73:d3:97:bc:48:6b:0b:5c:01:27:8f:45:0a:7a:f9:da:4a: 4f:1c:37:33:76:3d:66:b4:3e:f7:54:bb:1b:92:0e:55:a8:ad: 13:3f:c9:ae:2b:41:cf:88:fa:da:1a:a4:2e:e6:4e:56:2b:64: 97:a1:80:cc:07:2c:cb:c1:5b:d0:ab:6e:81:2e:d0:de:74:08: 90:47:13:b4:98:78:bd:9d:47:b2:b1:d9:cb:8e:49:85:3c:e7: 33:04:98:40:3c:98:0e:de:cd:cb:03:eb:e7:96:b4:03:00:9f: 40:f8:b7:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiUg0x4avnTydM0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmI3NTA5ZGQtZTA3NC00YmZmLTliMTMtZGNiN2M2YmYxZTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlp5Rcg2drb07AAnR9mLbZ/j1JixexT/ovTy+ OpKGbfP8mvRagoeu50yx3J4RwdTCWHhcDRN17qFC/hRvI5vLnorMxGhwUhQMF1qN AQkiFIu5oq18ConhSkmfdmGZCDeuNrlw4mk6kDGzNp2ch6zD/ouhHYJrAAhHsFGV smWrSBlVKcWgkh7M5BGpN/90s/9Qiy4NeEvVZ4abXCu+GAdFbqtRub+JECOAMXec 5/WGSu8d0u//FAcro+dBWgeSB4jh0DXkhN9S+Kj43PaPWgn0QzsdGc7vUynipf4r mtETd51xckeqofRQOdvro0SCMvjNbuBWvzOBMfHskJwObZJYHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJen3q07nfht0pHWKOnHNEb3wYzQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMDg3MGU4NjQtNDI0Zi0z YjEzLTg4MDEtNzlmNGM5M2JjZTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJkZHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWnnzeZ6mA6IXjl2ZOSHfdicNK3XVwPQfS/HeWv5ChJ/nlr8P4sDLgB CVBo22x4LPIG0RpAcYH4kucZCoK+ugcyKuPsRV+Ixo/R1oo5Q6LcOX443iSNCdkU IKPCCpSBJ4HTrCwk4ULKR8D89bwBNGTjr5svX9hqXColkx4qODDSs6FptVNh/JQl ouAmoZMK2Cpz05e8SGsLXAEnj0UKevnaSk8cNzN2PWa0PvdUuxuSDlWorRM/ya4r Qc+I+toapC7mTlYrZJehgMwHLMvBW9CrboEu0N50CJBHE7SYeL2dR7Kx2cuOSYU8 5zMEmEA8mA7ezcsD6+eWtAMAn0D4t04= -----END CERTIFICATE-----Generated at Mon Sep 28 21:25:37 2026 by rpki-client