$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/65b16338-a139-320b-81dd-7c3f5ecd3a78.roa File: 65b16338-a139-320b-81dd-7c3f5ecd3a78.roa (raw, json) Hash identifier: x7DHTm3L1/fKcRULl6UWkAwMiLOMhK3VMdADXC3CL2s= Subject key identifier: 1E:BA:73:C0:C0:B2:5F:F8:AD:70:80:38:06:F7:30:01:51:33:AE:55 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F4F082A5D066458ACCC322940 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/65b16338-a139-320b-81dd-7c3f5ecd3a78.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 263767 IP address blocks: 38.76.136.0/22 maxlen: 24 38.137.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:2a:5d:06:64:58:ac:cc:32:29:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=4d2563cf-7cd8-4918-a425-32e39fe78390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:34:92:58:ed:7f:02:48:03:d0:e4:06:6f:e8: e4:36:6a:76:11:ff:6d:d7:37:7c:a1:98:df:06:d7: db:fb:51:9f:d5:9a:19:cc:80:9b:1a:6a:d3:75:39: cf:3a:cd:dc:26:ad:59:c8:c2:fe:02:9f:4e:28:f8: a9:62:6d:01:46:b4:98:63:64:31:38:29:4c:eb:00: cd:ac:47:c7:5c:8b:fe:ad:01:8b:9a:49:4e:e7:35: e1:e1:2b:ff:a5:eb:04:6f:24:02:1f:f0:6e:cb:9e: 40:48:3f:53:b7:93:02:66:52:34:f8:01:b3:62:aa: 5b:65:8b:a4:b3:e8:28:19:68:c3:3e:b3:e5:39:ef: db:c4:a7:cd:36:16:db:ba:38:a0:8d:ee:ae:60:2c: 83:67:13:37:48:7a:5f:74:1e:93:c4:d5:6c:7d:fb: b4:6d:e0:d2:59:b9:65:5d:e2:9b:4b:84:af:b6:2a: ce:2f:f7:c0:26:c6:2f:9f:2e:18:9b:a2:ee:60:78: 39:cc:39:0f:0a:fd:bb:7c:96:54:d7:e7:cd:2f:e3: ad:11:82:83:c4:c5:3d:91:11:56:9e:c6:9f:86:c0: 20:6b:5a:8b:f3:19:47:29:cc:91:af:87:0e:4a:49: 4c:28:01:e6:5d:cd:d1:91:7d:55:1c:25:6a:31:5f: e3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:BA:73:C0:C0:B2:5F:F8:AD:70:80:38:06:F7:30:01:51:33:AE:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/65b16338-a139-320b-81dd-7c3f5ecd3a78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.76.136.0/22 38.137.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:74:58:0e:78:a0:15:0d:09:3d:93:2a:c6:05:89:96:77:8e: 8d:1a:41:64:34:2b:8b:67:59:a6:a4:ee:99:71:5c:81:55:a6: e0:8b:3b:9b:8e:91:6e:a6:c3:98:83:39:c1:79:a7:b7:77:c2: 87:ad:81:8a:b4:6b:c9:a4:5b:e9:cb:74:e9:f3:a7:c2:cb:7d: f3:05:0b:28:aa:eb:f4:c5:3c:ce:a7:cc:7b:d3:c1:2d:8c:f4: 0c:3e:5e:e6:c9:f9:90:e7:0c:02:29:42:b2:83:ac:d4:90:b7: 2a:f6:93:c3:4a:af:af:d9:9c:5d:be:b0:b0:97:6b:b1:d0:5b: b9:94:23:be:f0:99:eb:f4:5b:6e:f1:86:0f:d1:e7:94:9b:2d: 88:54:92:5e:07:04:ac:b1:60:9d:84:d5:e8:91:b9:ce:62:b9: 6d:48:7b:c0:bf:17:26:66:48:6e:bf:b5:27:28:b8:bd:dd:ef: d3:00:fa:b3:b3:46:01:0e:02:c1:3f:10:f8:f3:8c:c6:94:16: e5:76:50:39:b2:ac:b4:6f:4a:70:5a:b4:31:21:78:87:80:f8: 23:2e:1e:f2:b2:8e:78:ea:cb:21:c2:c1:5c:b7:85:20:1a:e6: 43:0c:32:15:8d:7f:2b:03:b7:ac:cd:5f:0f:77:6f:13:af:aa: 12:1d:1e:ee -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9PCCpdBmRYrMwyKUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk NGQyNTYzY2YtN2NkOC00OTE4LWE0MjUtMzJlMzlmZTc4MzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjSSWO1/AkgD0OQGb+jkNmp2Ef9t1zd8oZjf Btfb+1Gf1ZoZzICbGmrTdTnPOs3cJq1ZyML+Ap9OKPipYm0BRrSYY2QxOClM6wDN rEfHXIv+rQGLmklO5zXh4Sv/pesEbyQCH/Buy55ASD9Tt5MCZlI0+AGzYqpbZYuk s+goGWjDPrPlOe/bxKfNNhbbujigje6uYCyDZxM3SHpfdB6TxNVsffu0beDSWbll XeKbS4SvtirOL/fAJsYvny4Ym6LuYHg5zDkPCv27fJZU1+fNL+OtEYKDxMU9kRFW nsafhsAga1qL8xlHKcyRr4cOSklMKAHmXc3RkX1VHCVqMV/jQwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFB66c8DAsl/4rXCAOAb3MAFRM65VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNjViMTYzMzgtYTEzOS0z MjBiLTgxZGQtN2MzZjVlY2QzYTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCJkyIAwQC JonoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEJ0WA54oBUNCT2TKsYFiZZ3jo0aQWQ0K4tnWaak7plxXIFV puCLO5uOkW6mw5iDOcF5p7d3woetgYq0a8mkW+nLdOnzp8LLffMFCyiq6/TFPM6n zHvTwS2M9Aw+XubJ+ZDnDAIpQrKDrNSQtyr2k8NKr6/ZnF2+sLCXa7HQW7mUI77w mev0W27xhg/R55SbLYhUkl4HBKyxYJ2E1eiRuc5iuW1Ie8C/FyZmSG6/tScouL3d 79MA+rOzRgEOAsE/EPjzjMaUFuV2UDmyrLRvSnBatDEheIeA+CMuHvKyjnjqyyHC wVy3hSAa5kMMMhWNfysDt6zNXw93bxOvqhIdHu4= -----END CERTIFICATE-----Generated at Mon Sep 28 04:20:46 2026 by rpki-client