$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/146604be-880c-37ee-a349-7f94f48d3400.roa File: 146604be-880c-37ee-a349-7f94f48d3400.roa (raw, json) Hash identifier: 5k7SkG/K6I95WVuTZBbScWheZbK9wtQxtusQFp0hHVM= Subject key identifier: 67:38:A6:DD:71:B9:8D:DF:58:0E:E8:D1:03:E6:18:7D:37:FC:66:9A Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F708822AA0A2F7FA35B17A680 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/146604be-880c-37ee-a349-7f94f48d3400.roa Signing time: Fri 09 Oct 2026 01:00:12 +0000 ROA not before: Fri 09 Oct 2026 01:00:12 +0000 ROA not after: Thu 07 Jan 2027 02:00:12 +0000 asID: 271951 IP address blocks: 38.196.64.0/19 maxlen: 24 38.252.184.0/22 maxlen: 24 154.23.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:70:88:22:aa:0a:2f:7f:a3:5b:17:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 9 01:00:12 2026 GMT Not After : Jan 7 02:00:12 2027 GMT Subject: CN=5ead29bf-b515-4b28-a343-90ca764dc1e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3e:f4:f6:2c:c6:1c:f3:b4:9f:6e:58:e2:b2: f5:c9:00:85:84:b7:2d:70:0b:68:79:dd:de:46:30: ea:28:33:dc:20:78:3d:83:52:c6:f8:d1:c8:bd:91: eb:6c:81:93:0f:fe:e4:13:ef:81:b0:88:87:65:6d: c7:2e:a0:5b:80:aa:a0:f0:6e:49:dd:d6:41:e7:b5: cc:20:58:7c:7a:d2:20:e2:d8:3d:ba:b3:a1:3b:fe: 9b:f9:01:dc:1d:4e:17:14:5c:8b:1a:f0:91:7d:d7: 71:29:ba:94:76:03:20:60:c1:a5:0a:69:65:5a:23: 50:6a:50:c5:a8:9a:24:a4:ab:6c:52:e2:3a:f5:eb: f6:df:19:95:46:49:70:29:93:a8:6d:72:51:1c:cb: 09:0c:e4:7d:a9:5f:ee:b3:8c:f9:1e:d4:7d:14:39: 4e:a3:4c:2b:8c:eb:cf:85:61:ba:3b:13:0c:8e:9a: d2:d4:cb:51:fa:f4:7f:4e:23:de:d3:a0:af:6f:3c: 88:f4:ea:86:1d:d2:f6:f6:b2:5d:37:f7:ae:9f:c8: 61:de:cf:aa:8c:65:ce:f8:6b:9b:42:0d:ec:78:07: 38:26:83:02:aa:0e:c1:77:be:8b:06:92:20:80:69: 86:3d:3f:2c:b2:d7:72:99:a6:1c:47:eb:2a:a8:f4: e7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:38:A6:DD:71:B9:8D:DF:58:0E:E8:D1:03:E6:18:7D:37:FC:66:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/146604be-880c-37ee-a349-7f94f48d3400.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.196.64.0/19 38.252.184.0/22 154.23.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:8a:f7:a7:de:fc:94:b7:2b:86:4f:ae:97:14:2e:de:0f:60: 56:5d:b2:ab:47:42:cd:b5:e6:47:37:38:56:98:36:38:6e:66: 6a:d0:0e:08:9b:99:94:17:38:5f:32:a4:1f:82:21:10:76:bb: 7c:1e:70:71:7d:78:a6:05:61:38:c2:b0:75:4b:5f:8f:fe:8c: 54:48:ef:c7:6e:19:ad:d3:d3:3a:8c:8b:4e:ff:93:3d:34:3e: f2:f1:21:3b:6e:0d:6f:33:af:c6:82:f0:55:80:0f:f5:26:cb: 82:f9:86:86:df:71:14:82:e0:13:13:cd:c8:45:3a:30:f5:e2: 8e:20:aa:6f:e7:a0:13:0f:83:a9:32:27:0b:18:63:88:84:b6: 35:f6:fa:5d:63:85:f3:aa:c7:ab:2e:90:19:af:8c:f5:d2:aa: 96:21:15:5b:8a:83:8b:07:41:e5:44:3b:12:1e:d1:fb:0e:18: 72:b6:a9:f3:b4:22:75:2b:1f:9c:c9:c4:e7:62:e6:08:6b:d0: 48:25:ab:aa:f3:44:02:96:5a:b8:7a:66:c4:9d:97:f7:1e:c1: 12:f1:c0:9f:81:18:6b:ae:f2:ae:c7:5f:2e:65:a7:19:72:5c: 67:4b:ea:bc:ca:ae:be:6a:12:18:ca:03:00:64:22:44:88:34: cb:76:69:f4 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE9wiCKqCi9/o1sXpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwOTAxMDAxMloXDTI3MDEwNzAyMDAxMlowLzEtMCsGA1UEAxMk NWVhZDI5YmYtYjUxNS00YjI4LWEzNDMtOTBjYTc2NGRjMWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD709izGHPO0n25Y4rL1yQCFhLctcAtoed3e RjDqKDPcIHg9g1LG+NHIvZHrbIGTD/7kE++BsIiHZW3HLqBbgKqg8G5J3dZB57XM IFh8etIg4tg9urOhO/6b+QHcHU4XFFyLGvCRfddxKbqUdgMgYMGlCmllWiNQalDF qJokpKtsUuI69ev23xmVRklwKZOobXJRHMsJDOR9qV/us4z5HtR9FDlOo0wrjOvP hWG6OxMMjprS1MtR+vR/TiPe06CvbzyI9OqGHdL29rJdN/eun8hh3s+qjGXO+Gub Qg3seAc4JoMCqg7Bd76LBpIggGmGPT8sstdymaYcR+sqqPTnnwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFGc4pt1xuY3fWA7o0QPmGH03/GaaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMTQ2NjA0YmUtODgwYy0z N2VlLWEzNDktN2Y5NGY0OGQzNDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFJsRAAwQC Jvy4AwQHmhcAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADiK96fe/JS3K4ZPrpcULt4PYFZdsqtHQs215kc3 OFaYNjhuZmrQDgibmZQXOF8ypB+CIRB2u3wecHF9eKYFYTjCsHVLX4/+jFRI78du Ga3T0zqMi07/kz00PvLxITtuDW8zr8aC8FWAD/Umy4L5hobfcRSC4BMTzchFOjD1 4o4gqm/noBMPg6kyJwsYY4iEtjX2+l1jhfOqx6sukBmvjPXSqpYhFVuKg4sHQeVE OxIe0fsOGHK2qfO0InUrH5zJxOdi5ghr0Eglq6rzRAKWWrh6ZsSdl/cewRLxwJ+B GGuu8q7HXy5lpxlyXGdL6rzKrr5qEhjKAwBkIkSINMt2afQ= -----END CERTIFICATE-----Generated at Thu Oct 15 08:13:28 2026 by rpki-client