$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4fac3586-2a34-30dc-98a0-363885c03e0c.roa File: 4fac3586-2a34-30dc-98a0-363885c03e0c.roa (raw, json) Hash identifier: w5EJD5OyRTNGS/wvGDuCTNJaZ0dejwIL+mWChIrAhhE= Subject key identifier: E1:AA:A5:60:F0:84:B9:D7:1C:CB:58:59:B4:A5:76:A6:72:A6:61:69 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584FBAFC639A8723B197F5E11800 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4fac3586-2a34-30dc-98a0-363885c03e0c.roa Signing time: Wed 04 Nov 2026 17:04:20 +0000 ROA not before: Wed 04 Nov 2026 17:04:20 +0000 ROA not after: Tue 02 Feb 2027 17:04:20 +0000 asID: 397423 IP address blocks: 38.246.88.0/22 maxlen: 24 38.246.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ba:fc:63:9a:87:23:b1:97:f5:e1:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Nov 4 17:04:20 2026 GMT Not After : Feb 2 17:04:20 2027 GMT Subject: CN=d9ed6795-fb8f-4cc3-9a38-ecf427c5622c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:35:cc:06:79:6a:e4:30:9c:5b:5c:ba:5c:f6: 27:2b:7d:ca:6e:31:41:f0:a2:87:fa:4d:3e:2b:c2: f6:88:45:16:a8:6e:c1:83:5b:15:00:fc:75:8b:a0: f1:5f:57:d7:4a:66:a6:13:70:bb:f2:f7:0f:a0:45: 8f:5e:aa:73:28:62:34:84:41:cd:50:2d:a3:c5:6e: 6d:75:eb:20:af:ed:10:d4:53:c2:43:1e:68:f0:ef: 2c:ae:15:16:d6:56:ae:84:f5:83:e0:05:18:8d:02: a7:e3:06:d7:cc:50:ed:e7:de:82:0b:80:42:52:06: e2:0a:37:9b:38:2a:52:19:c7:12:3a:3e:34:6f:f7: 05:99:4c:25:8e:82:c9:74:e8:13:60:26:6d:80:7f: e8:24:de:51:f8:0a:9c:68:9d:81:ed:fc:ba:05:cf: 8f:f2:39:68:76:52:23:9c:d4:11:5e:f0:71:80:58: f7:ea:1f:21:c8:80:4b:26:7b:c6:56:a5:6a:2c:d2: 51:a0:7c:26:f2:a3:2b:3c:81:5d:f1:6c:07:e4:06: f3:5f:2f:aa:db:5e:53:b5:46:61:1f:09:e9:d9:5b: 26:3d:04:75:b0:55:77:cb:9a:e8:fa:f4:5c:de:19: e2:a1:42:4a:f5:66:ba:37:e6:f2:4b:10:61:ba:5e: e8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:AA:A5:60:F0:84:B9:D7:1C:CB:58:59:B4:A5:76:A6:72:A6:61:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4fac3586-2a34-30dc-98a0-363885c03e0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.246.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:07:3a:46:01:a3:6c:cb:b8:ff:7a:0f:39:75:4a:1f:d0:04: 8a:c9:5c:07:66:33:83:8a:fa:0a:65:28:fc:29:8e:f3:ae:42: 80:f4:2f:4b:36:c2:58:00:cf:9f:6d:21:18:80:e3:79:77:f3: dd:be:81:82:1d:87:5c:7d:20:b8:26:6f:f1:d7:e5:de:0e:7e: 51:b6:dc:87:99:34:a5:38:09:11:d1:6a:c6:03:7e:75:69:0a: 36:be:73:30:f8:59:4c:aa:de:ec:97:89:03:c1:eb:49:b2:78: 1b:29:80:a5:af:27:9a:b6:d6:6b:e6:9e:a2:96:29:38:20:f9: cb:3c:ed:97:d1:04:45:81:75:f5:48:ff:26:2a:01:4a:d9:ec: 00:b5:d5:d3:01:cd:53:3c:a5:6d:13:f4:e7:ea:b2:32:a2:6b: c4:87:60:83:dc:55:3f:42:b3:b5:b2:89:d7:9f:ee:af:10:4f: 86:1f:a1:7f:16:98:de:b6:06:21:4d:7b:f9:38:70:8f:5f:39: 46:02:a0:56:63:7a:5c:5f:1f:2f:96:8b:d0:13:47:80:e7:f8: 5a:c5:05:b5:a2:e0:57:21:40:99:9d:c6:df:45:3a:68:9d:bb: 88:46:2b:5d:1b:c5:5c:2f:b2:70:1e:e9:6b:fc:b1:f2:45:6c: a7:f2:bb:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+6/GOahyOxl/XhGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTEwNDE3MDQyMFoXDTI3MDIwMjE3MDQyMFowLzEtMCsGA1UEAxMk ZDllZDY3OTUtZmI4Zi00Y2MzLTlhMzgtZWNmNDI3YzU2MjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTXMBnlq5DCcW1y6XPYnK33KbjFB8KKH+k0+ K8L2iEUWqG7Bg1sVAPx1i6DxX1fXSmamE3C78vcPoEWPXqpzKGI0hEHNUC2jxW5t desgr+0Q1FPCQx5o8O8srhUW1lauhPWD4AUYjQKn4wbXzFDt596CC4BCUgbiCjeb OCpSGccSOj40b/cFmUwljoLJdOgTYCZtgH/oJN5R+AqcaJ2B7fy6Bc+P8jlodlIj nNQRXvBxgFj36h8hyIBLJnvGVqVqLNJRoHwm8qMrPIFd8WwH5AbzXy+q215TtUZh Hwnp2VsmPQR1sFV3y5ro+vRc3hnioUJK9Wa6N+bySxBhul7o8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGqpWDwhLnXHMtYWbSldqZypmFpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNGZhYzM1ODYtMmEzNC0z MGRjLTk4YTAtMzYzODg1YzAzZTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJvZYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4HOkYBo2zLuP96Dzl1Sh/QBIrJXAdmM4OK+gplKPwpjvOuQoD0L0s2 wlgAz59tIRiA43l3892+gYIdh1x9ILgmb/HX5d4OflG23IeZNKU4CRHRasYDfnVp Cja+czD4WUyq3uyXiQPB60myeBspgKWvJ5q21mvmnqKWKTgg+cs87ZfRBEWBdfVI /yYqAUrZ7AC11dMBzVM8pW0T9OfqsjKia8SHYIPcVT9Cs7Wyidef7q8QT4YfoX8W mN62BiFNe/k4cI9fOUYCoFZjelxfHy+Wi9ATR4Dn+FrFBbWi4FchQJmdxt9FOmid u4hGK10bxVwvsnAe6Wv8sfJFbKfyu4o= -----END CERTIFICATE-----Generated at Thu Nov 5 12:50:59 2026 by rpki-client