$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8c8d737a-6c2e-3870-be14-ce15a46bd04f.roa File: 8c8d737a-6c2e-3870-be14-ce15a46bd04f.roa (raw, json) Hash identifier: F360sPO+TQ01f8QMxk6RanZ5HcHQGaTe47RwaP8XqHE= Subject key identifier: F6:27:38:94:D7:EE:FA:24:8B:F6:A7:10:47:39:98:07:57:A3:F9:18 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F69924391C6ACBBB7384E3400 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8c8d737a-6c2e-3870-be14-ce15a46bd04f.roa Signing time: Tue 06 Oct 2026 13:10:02 +0000 ROA not before: Tue 06 Oct 2026 13:10:02 +0000 ROA not after: Mon 04 Jan 2027 14:10:02 +0000 asID: 273235 IP address blocks: 38.147.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:92:43:91:c6:ac:bb:b7:38:4e:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 6 13:10:02 2026 GMT Not After : Jan 4 14:10:02 2027 GMT Subject: CN=fb63e2b9-28f0-4c97-a78d-f940eb07b7df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9c:e0:3f:b6:ac:46:f8:c3:72:1c:9a:e3:e8: 8a:34:d4:2d:b4:e9:d2:2f:b0:97:12:91:c3:25:b0: 96:a6:5a:5a:9b:f7:c0:e8:83:00:8b:14:8c:4d:9c: 4c:3a:73:49:ec:78:e6:38:29:84:94:0c:85:02:43: 24:e7:90:5a:65:c9:5a:b3:27:34:ef:ca:fe:36:d6: 54:03:84:5e:e3:d3:8b:ab:1d:52:cb:c5:a5:e1:0a: e1:cc:a2:0f:71:a3:07:c8:73:ea:8b:f6:54:db:92: 8d:82:df:a5:b5:31:58:fd:69:ec:fa:ae:00:83:7f: 15:f4:51:03:4b:64:08:c7:15:71:b1:08:38:f5:bb: 5e:3b:d9:0e:69:5c:41:ea:70:ef:56:38:30:25:77: fe:55:87:aa:cc:c2:be:41:6d:a0:10:53:43:3e:15: c0:27:71:93:05:f1:0d:b1:2b:3e:9c:f4:ee:c7:10: 59:9f:a0:bd:69:20:5f:73:e7:c9:0c:e2:6b:02:5a: 23:45:a3:41:16:3d:c6:14:e3:7a:06:69:9f:fd:c4: dc:79:ce:69:65:36:b6:a3:8a:23:1f:33:65:1a:6b: 47:61:fe:6b:39:84:6b:37:b1:0e:5d:61:fc:d3:dc: 48:81:a8:bc:13:98:c1:29:3d:74:d5:dd:0b:f1:41: 17:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:27:38:94:D7:EE:FA:24:8B:F6:A7:10:47:39:98:07:57:A3:F9:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8c8d737a-6c2e-3870-be14-ce15a46bd04f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.147.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:1d:dd:12:27:1f:48:99:d8:be:01:97:33:48:83:ad:8b:19: a9:df:46:eb:57:94:df:8d:52:2f:67:84:c0:ad:5c:cb:a9:5d: b5:76:8a:d6:76:e7:10:d9:53:aa:29:9a:83:34:b1:23:03:14: d5:ed:87:c8:4a:d4:c3:95:99:f3:6f:e6:45:34:47:23:d4:eb: 8e:00:25:6f:bf:dd:8f:55:7e:64:f1:6c:b1:ec:6e:6d:86:42: 51:b1:a0:32:67:8a:08:da:a2:e2:0e:12:39:dc:40:07:9b:44: 53:3f:a4:de:36:f5:64:3e:be:4c:26:2b:ee:9d:6d:0d:0b:43: 80:db:8a:a5:6c:aa:9e:8e:7c:85:58:36:33:60:4b:9c:fe:72: e8:5e:46:03:25:8f:fd:5d:e7:61:92:e6:80:96:e5:24:1b:8a: 98:45:a4:9a:7b:01:8a:7b:c0:43:5d:d2:2f:33:c9:78:51:6b: ce:58:11:a9:e5:c6:8f:cd:3a:ea:57:43:e5:ad:5f:ee:b2:7c: eb:3b:e2:81:58:cc:8d:2c:25:ae:c5:4d:23:c8:e7:15:dd:2b: d7:7d:ac:43:ec:f8:2c:9c:a2:ee:54:2a:08:f3:c3:c6:b8:25: 79:54:0b:1b:e3:4c:8b:d3:b7:92:ea:77:6d:6c:b9:1e:d5:fc: a8:47:a5:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pkkORxqy7tzhONAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwNjEzMTAwMloXDTI3MDEwNDE0MTAwMlowLzEtMCsGA1UEAxMk ZmI2M2UyYjktMjhmMC00Yzk3LWE3OGQtZjk0MGViMDdiN2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpzgP7asRvjDchya4+iKNNQttOnSL7CXEpHD JbCWplpam/fA6IMAixSMTZxMOnNJ7HjmOCmElAyFAkMk55BaZclasyc078r+NtZU A4Re49OLqx1Sy8Wl4QrhzKIPcaMHyHPqi/ZU25KNgt+ltTFY/Wns+q4Ag38V9FED S2QIxxVxsQg49bteO9kOaVxB6nDvVjgwJXf+VYeqzMK+QW2gEFNDPhXAJ3GTBfEN sSs+nPTuxxBZn6C9aSBfc+fJDOJrAlojRaNBFj3GFON6Bmmf/cTcec5pZTa2o4oj HzNlGmtHYf5rOYRrN7EOXWH809xIgai8E5jBKT101d0L8UEXlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYnOJTX7voki/anEEc5mAdXo/kYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOGM4ZDczN2EtNmMyZS0z ODcwLWJlMTQtY2UxNWE0NmJkMDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJpOdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMd3RInH0iZ2L4BlzNIg62LGanfRutXlN+NUi9nhMCtXMupXbV2itZ2 5xDZU6opmoM0sSMDFNXth8hK1MOVmfNv5kU0RyPU644AJW+/3Y9VfmTxbLHsbm2G QlGxoDJnigjaouIOEjncQAebRFM/pN429WQ+vkwmK+6dbQ0LQ4DbiqVsqp6OfIVY NjNgS5z+cuheRgMlj/1d52GS5oCW5SQbiphFpJp7AYp7wENd0i8zyXhRa85YEanl xo/NOupXQ+WtX+6yfOs74oFYzI0sJa7FTSPI5xXdK9d9rEPs+Cycou5UKgjzw8a4 JXlUCxvjTIvTt5Lqd21suR7V/KhHpV4= -----END CERTIFICATE-----Generated at Tue Oct 27 22:46:25 2026 by rpki-client