$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/19c3d0da-5402-3472-8f90-b334d93e181c.roa File: 19c3d0da-5402-3472-8f90-b334d93e181c.roa (raw, json) Hash identifier: PrPxHD+4M6DaET3xsrpT5r4hBlsR4W86IZX2hDpt6vY= Subject key identifier: 34:CE:32:9E:F5:E3:04:6E:D0:23:A7:BB:72:C6:30:3C:31:AD:0D:B9 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584FADF32EC86027225D4CB47B00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/19c3d0da-5402-3472-8f90-b334d93e181c.roa Signing time: Sat 31 Oct 2026 01:00:13 +0000 ROA not before: Sat 31 Oct 2026 01:00:13 +0000 ROA not after: Fri 29 Jan 2027 02:00:13 +0000 asID: 0 IP address blocks: 38.190.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ad:f3:2e:c8:60:27:22:5d:4c:b4:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 31 01:00:13 2026 GMT Not After : Jan 29 02:00:13 2027 GMT Subject: CN=8a72847e-eafc-44b3-b6f8-f424ebc6d409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f9:c4:ce:21:ae:20:5d:4f:ad:d1:c1:b1:5b: 64:eb:c7:7b:64:f5:65:2e:15:1e:03:e3:d5:d0:01: 8e:f8:67:ed:e0:2a:58:d3:86:42:15:8c:2d:f6:7e: 41:0c:8f:16:3c:aa:8c:80:d9:cd:d6:fd:1e:cc:67: 30:a4:d0:67:db:d8:85:6c:b3:af:91:9c:bd:ce:0c: d1:51:6f:0c:03:d9:71:51:2c:44:98:43:af:c8:b5: ba:9e:ff:81:49:50:82:b7:19:94:4c:6d:8d:e6:60: 32:bb:bf:6d:e4:a3:4e:13:ee:5b:4f:f4:24:32:68: 24:cd:e3:ce:09:51:53:08:a7:88:f5:bb:b9:a1:44: 78:f8:3c:11:8c:ec:3f:21:57:96:02:c4:89:95:1e: df:e9:84:0b:6f:24:00:eb:e1:e0:50:64:7c:8e:14: 52:02:24:db:e2:a7:3f:ec:1d:47:8a:62:45:19:92: db:58:62:55:71:96:5e:15:1c:b8:d6:92:01:87:13: 08:30:5d:77:16:66:2f:cd:70:b4:84:3c:3c:78:5a: 79:3d:f9:72:b5:50:91:de:a7:c9:93:20:f5:70:8b: 26:d6:d9:f5:d5:88:65:7a:9d:f3:e3:3f:80:72:db: 5f:a1:1b:d8:9f:84:a3:7b:65:03:1b:c1:2a:a0:16: de:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CE:32:9E:F5:E3:04:6E:D0:23:A7:BB:72:C6:30:3C:31:AD:0D:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/19c3d0da-5402-3472-8f90-b334d93e181c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.190.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:45:b8:2f:25:53:91:d1:7e:cb:cc:46:79:9a:12:a7:ff:bb: 46:d3:ca:f2:0a:73:7b:b6:50:36:ed:fd:aa:e1:e7:2e:c7:23: 8f:5a:a8:74:c6:24:80:9b:18:57:4c:50:1c:2c:86:d2:4d:39: 4b:46:40:c1:2a:8c:b3:fa:56:f1:fd:fa:a3:45:96:e9:33:9d: f7:4d:cb:41:a1:15:76:d9:a7:8b:0a:f0:33:cf:45:70:b6:87: 7c:d5:6e:e3:8e:5a:b8:25:57:79:76:e6:bd:c5:07:11:ea:49: 8e:39:00:fe:9a:75:ee:6b:3b:35:3e:a7:99:ee:ba:e1:bb:a2: 3d:53:31:7b:b1:42:f6:f8:27:a5:a2:d8:4a:0d:fe:ff:a9:ef: 6e:f5:e5:29:8a:a2:10:b8:28:ac:d4:83:40:a1:92:78:9c:41: 2a:80:53:c3:df:86:7d:8c:9b:9c:20:23:1f:ce:11:2b:06:fc: b5:e8:f1:e7:19:c2:a2:f6:1c:f9:a4:4c:df:2e:7d:9e:24:e4: 46:a5:3d:b1:f2:d4:72:51:a6:78:ff:47:8f:90:76:f2:6b:79: 93:75:76:3e:50:04:44:e5:ca:ee:f7:ab:52:73:01:c3:4f:3f: ff:be:20:4c:cc:d9:a3:76:be:74:1e:54:e4:3d:52:29:c2:e6: eb:e0:23:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+t8y7IYCciXUy0ewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAzMTAxMDAxM1oXDTI3MDEyOTAyMDAxM1owLzEtMCsGA1UEAxMk OGE3Mjg0N2UtZWFmYy00NGIzLWI2ZjgtZjQyNGViYzZkNDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPnEziGuIF1PrdHBsVtk68d7ZPVlLhUeA+PV 0AGO+Gft4CpY04ZCFYwt9n5BDI8WPKqMgNnN1v0ezGcwpNBn29iFbLOvkZy9zgzR UW8MA9lxUSxEmEOvyLW6nv+BSVCCtxmUTG2N5mAyu79t5KNOE+5bT/QkMmgkzePO CVFTCKeI9bu5oUR4+DwRjOw/IVeWAsSJlR7f6YQLbyQA6+HgUGR8jhRSAiTb4qc/ 7B1HimJFGZLbWGJVcZZeFRy41pIBhxMIMF13FmYvzXC0hDw8eFp5PflytVCR3qfJ kyD1cIsm1tn11Yhlep3z4z+ActtfoRvYn4Sje2UDG8EqoBbeUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTOMp714wRu0COnu3LGMDwxrQ25MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMTljM2QwZGEtNTQwMi0z NDcyLThmOTAtYjMzNGQ5M2UxODFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJr5aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1FuC8lU5HRfsvMRnmaEqf/u0bTyvIKc3u2UDbt/arh5y7HI49aqHTG JICbGFdMUBwshtJNOUtGQMEqjLP6VvH9+qNFlukznfdNy0GhFXbZp4sK8DPPRXC2 h3zVbuOOWrglV3l25r3FBxHqSY45AP6ade5rOzU+p5nuuuG7oj1TMXuxQvb4J6Wi 2EoN/v+p72715SmKohC4KKzUg0ChknicQSqAU8Pfhn2Mm5wgIx/OESsG/LXo8ecZ wqL2HPmkTN8ufZ4k5EalPbHy1HJRpnj/R4+QdvJreZN1dj5QBETlyu73q1JzAcNP P/++IEzM2aN2vnQeVOQ9UinC5uvgI+w= -----END CERTIFICATE-----Generated at Thu Nov 5 12:10:35 2026 by rpki-client