$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/558a7e2d-6931-3f27-8561-f30dcc2f1064.roa File: 558a7e2d-6931-3f27-8561-f30dcc2f1064.roa (raw, json) Hash identifier: 69fg2xUtvZpM1W3Sn9kOZarcMUAwIJXpcE1d8+i18FU= Subject key identifier: 16:AB:3F:CC:BD:69:9A:FE:3C:13:DB:7E:97:F0:09:C1:46:FE:91:53 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F5A332CF1F955969BF4D08000 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/558a7e2d-6931-3f27-8561-f30dcc2f1064.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 395886 IP address blocks: 38.47.192.0/18 maxlen: 24 38.181.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:2c:f1:f9:55:96:9b:f4:d0:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=bbd295c2-1062-4f6e-b2e4-63eae8bd9227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4d:c0:df:18:21:07:75:76:d1:5a:0f:de:81: 89:2b:46:36:79:27:bb:b6:91:76:8b:5d:30:2e:d4: 30:77:d1:85:0b:eb:d6:bb:c5:c6:2c:b8:a1:88:40: 94:72:ba:84:c8:8a:4e:03:85:cd:22:fc:26:9b:90: 5e:40:32:03:45:ae:02:e9:22:06:de:46:9c:be:e3: 38:de:ff:b1:0c:6c:ad:8e:24:f7:b4:ca:8d:e8:ed: 82:51:b5:56:41:7d:35:bf:ee:fc:de:68:f3:75:11: 36:0a:79:4e:eb:57:10:e7:bc:22:cd:66:6a:21:c3: d1:13:d9:fe:b5:c6:d2:42:3b:83:ce:ea:af:57:7e: 1b:46:bf:ad:d8:9e:ab:54:6f:50:70:2c:85:92:41: f3:19:53:8a:52:cc:1c:05:ec:c1:73:92:6b:de:7b: c4:bf:ec:49:a0:28:e7:5e:7c:95:48:58:a1:66:e2: 7f:e4:15:ab:32:d8:e3:2a:37:27:a7:9e:29:85:3c: 88:bc:3e:ab:28:04:2f:81:0c:9f:a3:53:df:c3:26: 27:b3:00:53:98:56:39:ad:08:f0:b2:61:a4:7a:12: 3a:64:ac:7c:df:be:2b:2a:33:ec:d6:4a:59:89:c5: 80:d5:94:68:e8:85:14:96:aa:fe:10:33:3c:11:ba: d3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:AB:3F:CC:BD:69:9A:FE:3C:13:DB:7E:97:F0:09:C1:46:FE:91:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/558a7e2d-6931-3f27-8561-f30dcc2f1064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.47.192.0/18 38.181.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:52:2a:fb:1f:21:8f:87:2c:fc:3e:bd:78:2e:86:d1:d2:81: aa:27:f5:27:f8:90:29:66:c3:5e:1d:ed:52:71:86:a7:3c:6a: 64:76:1f:eb:fa:fe:ca:d5:fd:82:6a:64:c7:81:49:a5:3a:73: 27:1c:ad:91:a0:c5:d0:00:d8:71:42:75:31:48:3f:1c:91:6e: 51:45:cb:5f:02:45:6c:90:22:6c:40:62:55:b4:46:2d:a5:b3: 53:7c:e4:95:1f:4b:2f:1d:63:0e:ff:a3:f9:0e:8d:1c:73:68: 20:cd:e0:e6:ec:f1:74:e0:9a:c0:2a:e3:85:00:e3:72:f0:2b: 48:b7:ce:d4:fe:26:95:e4:ef:81:90:80:34:96:b9:9b:45:9a: af:bf:76:b8:21:7a:fa:0b:5b:a0:5a:70:32:ea:85:1a:b4:67: bd:f6:5c:34:b1:de:9b:df:9e:a4:4f:7d:20:b8:96:45:97:17: eb:6f:d0:2a:d1:29:47:18:c7:cf:77:bd:55:d0:d5:c2:c5:4d: c2:40:86:45:03:c8:43:27:7d:46:c1:dd:73:10:aa:36:b8:08: 8b:2b:80:c5:3f:f3:65:3a:17:d4:ed:17:bd:03:06:df:3b:f3: f0:d5:4a:9c:27:cb:24:50:bd:4b:8b:b1:ec:70:87:7f:b9:2c: 8f:53:48:94 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9aMyzx+VWWm/TQgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk YmJkMjk1YzItMTA2Mi00ZjZlLWIyZTQtNjNlYWU4YmQ5MjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk3A3xghB3V20VoP3oGJK0Y2eSe7tpF2i10w LtQwd9GFC+vWu8XGLLihiECUcrqEyIpOA4XNIvwmm5BeQDIDRa4C6SIG3kacvuM4 3v+xDGytjiT3tMqN6O2CUbVWQX01v+783mjzdRE2CnlO61cQ57wizWZqIcPRE9n+ tcbSQjuDzuqvV34bRr+t2J6rVG9QcCyFkkHzGVOKUswcBezBc5Jr3nvEv+xJoCjn XnyVSFihZuJ/5BWrMtjjKjcnp54phTyIvD6rKAQvgQyfo1PfwyYnswBTmFY5rQjw smGkehI6ZKx8374rKjPs1kpZicWA1ZRo6IUUlqr+EDM8EbrTMQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBarP8y9aZr+PBPbfpfwCcFG/pFTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNTU4YTdlMmQtNjkzMS0z ZjI3LTg1NjEtZjMwZGNjMmYxMDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGJi/AAwQG JrUAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIdSKvsfIY+HLPw+vXguhtHSgaon9Sf4kClmw14d7VJxhqc8 amR2H+v6/srV/YJqZMeBSaU6cyccrZGgxdAA2HFCdTFIPxyRblFFy18CRWyQImxA YlW0Ri2ls1N85JUfSy8dYw7/o/kOjRxzaCDN4Obs8XTgmsAq44UA43LwK0i3ztT+ JpXk74GQgDSWuZtFmq+/drghevoLW6BacDLqhRq0Z732XDSx3pvfnqRPfSC4lkWX F+tv0CrRKUcYx893vVXQ1cLFTcJAhkUDyEMnfUbB3XMQqja4CIsrgMU/82U6F9Tt F70DBt878/DVSpwnyyRQvUuLsexwh3+5LI9TSJQ= -----END CERTIFICATE-----Generated at Sat Oct 10 23:08:26 2026 by rpki-client