$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/afb2a99b-be72-3255-9f67-ccb9c1b66fa7.roa File: afb2a99b-be72-3255-9f67-ccb9c1b66fa7.roa (raw, json) Hash identifier: 7phdd1IA3XfEd+DOuPS/g/5CQueq1WU/3wLWuAo6cYI= Subject key identifier: C1:C7:57:05:BF:1C:D8:5C:7E:9C:95:E2:3E:3E:CA:94:76:02:84:6B Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F7352E0009A41CCC672679340 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/afb2a99b-be72-3255-9f67-ccb9c1b66fa7.roa Signing time: Sat 10 Oct 2026 01:00:13 +0000 ROA not before: Sat 10 Oct 2026 01:00:13 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 0 IP address blocks: 38.250.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:52:e0:00:9a:41:cc:c6:72:67:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 10 01:00:13 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=fd727cc8-74ce-4383-83e9-b13ea1088c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b0:8b:d2:d9:04:55:be:48:98:ed:a2:06:9d: eb:2a:e9:aa:7b:be:14:41:d4:51:df:98:53:b0:82: 21:97:c4:7d:09:6c:09:8b:9a:f4:77:f4:a2:9f:05: d3:cc:ae:df:3a:13:a0:e0:d9:4f:0b:46:ce:63:70: 57:98:f4:83:0b:71:bb:9c:d3:cc:67:7c:b4:55:c0: 5a:91:6e:3e:92:12:8a:bf:c7:48:8b:ac:bf:de:f9: 2e:96:bc:5b:85:a8:84:54:d4:23:13:bc:5d:61:f9: d6:b7:c5:96:b6:26:2f:55:dd:80:92:e4:cc:04:f8: 54:13:11:bc:bd:01:b3:21:d2:9c:bf:20:6c:6d:12: a1:a5:6d:5e:a8:38:d7:b9:07:e1:62:14:bd:72:b6: cb:5c:7c:db:5a:37:7e:3d:a8:87:0b:b8:6f:50:0d: ce:fc:1c:21:2f:d1:b6:2b:6b:b5:2a:7c:56:b2:a9: f3:fa:d7:8c:2b:a8:17:78:96:31:16:25:39:7a:4c: 0f:3a:87:60:ec:68:a1:93:5b:f5:e6:21:44:1f:3b: 74:b6:1f:f4:8d:57:61:92:c7:0b:69:fe:22:88:d1: f1:ab:9b:3a:7b:e9:05:11:59:05:a8:99:89:3e:8a: 40:5d:56:50:3d:df:97:05:04:4f:32:53:81:f7:1a: a2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C7:57:05:BF:1C:D8:5C:7E:9C:95:E2:3E:3E:CA:94:76:02:84:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/afb2a99b-be72-3255-9f67-ccb9c1b66fa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.250.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:6b:3a:82:d3:10:56:b4:4d:75:d8:24:d4:c3:6d:88:a4:3f: 8f:25:47:e5:d5:5a:f7:5b:b5:ae:f2:a0:f5:d2:c4:8e:fe:6c: 80:13:d3:06:b0:01:7b:12:72:3c:ad:97:22:fc:1a:d2:1d:96: 2c:de:69:f4:01:7c:87:b3:c0:93:98:6c:db:94:c8:12:64:33: de:5a:6e:3b:36:29:0a:d3:aa:c4:64:f6:55:8c:c0:21:e0:40: 27:38:45:41:bc:64:9f:3a:52:29:26:9f:25:9a:97:96:39:04: 86:3b:96:d2:87:7c:8c:8b:dd:c1:d5:c6:88:79:c1:f8:f3:94: 50:79:75:23:0b:12:be:66:bc:ac:0a:4a:3e:e4:6a:0b:2a:2f: 0f:3a:07:4a:9e:70:9f:33:34:f3:e7:f9:04:1f:b7:0d:17:38: bc:08:e5:05:88:23:e6:3f:6b:d1:c5:8f:ef:ea:fd:6b:93:0f: 95:b7:e0:c7:f6:3a:a0:b4:43:94:7c:79:cc:68:a1:35:db:9a: 05:2e:df:e2:58:9c:7f:3b:03:8d:17:d1:06:3a:22:6e:c2:39: ed:4b:41:43:53:c1:2a:bb:fe:8b:13:e3:e6:cc:a0:e7:07:89: 3a:b4:46:9c:23:0b:74:4b:89:15:1f:ef:06:33:98:03:09:f8: 62:5c:52:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9zUuAAmkHMxnJnk0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk ZmQ3MjdjYzgtNzRjZS00MzgzLTgzZTktYjEzZWExMDg4YzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbCL0tkEVb5ImO2iBp3rKumqe74UQdRR35hT sIIhl8R9CWwJi5r0d/SinwXTzK7fOhOg4NlPC0bOY3BXmPSDC3G7nNPMZ3y0VcBa kW4+khKKv8dIi6y/3vkulrxbhaiEVNQjE7xdYfnWt8WWtiYvVd2AkuTMBPhUExG8 vQGzIdKcvyBsbRKhpW1eqDjXuQfhYhS9crbLXHzbWjd+PaiHC7hvUA3O/BwhL9G2 K2u1KnxWsqnz+teMK6gXeJYxFiU5ekwPOodg7Gihk1v15iFEHzt0th/0jVdhkscL af4iiNHxq5s6e+kFEVkFqJmJPopAXVZQPd+XBQRPMlOB9xqiYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHHVwW/HNhcfpyV4j4+ypR2AoRrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYWZiMmE5OWItYmU3Mi0z MjU1LTlmNjctY2NiOWMxYjY2ZmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJvp8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZrOoLTEFa0TXXYJNTDbYikP48lR+XVWvdbta7yoPXSxI7+bIAT0waw AXsScjytlyL8GtIdlizeafQBfIezwJOYbNuUyBJkM95abjs2KQrTqsRk9lWMwCHg QCc4RUG8ZJ86UikmnyWal5Y5BIY7ltKHfIyL3cHVxoh5wfjzlFB5dSMLEr5mvKwK Sj7kagsqLw86B0qecJ8zNPPn+QQftw0XOLwI5QWII+Y/a9HFj+/q/WuTD5W34Mf2 OqC0Q5R8ecxooTXbmgUu3+JYnH87A40X0QY6Im7COe1LQUNTwSq7/osT4+bMoOcH iTq0RpwjC3RLiRUf7wYzmAMJ+GJcUrc= -----END CERTIFICATE-----Generated at Thu Nov 5 05:06:11 2026 by rpki-client