$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bbd6b4f5-e62e-3c05-9c50-720b58d848e1.roa File: bbd6b4f5-e62e-3c05-9c50-720b58d848e1.roa (raw, json) Hash identifier: cJbhaIeJe+exncnvns0g9sIgZHm60cTgqbMZtDOgXNA= Subject key identifier: 3E:AE:28:8C:9E:FA:69:7A:2B:37:17:08:5D:F6:23:6F:EE:E4:B3:03 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584FAA0EA6BCE4826732AED43D80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bbd6b4f5-e62e-3c05-9c50-720b58d848e1.roa Signing time: Thu 29 Oct 2026 15:32:23 +0000 ROA not before: Thu 29 Oct 2026 15:32:23 +0000 ROA not after: Wed 27 Jan 2027 16:32:23 +0000 asID: 403106 IP address blocks: 38.93.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:aa:0e:a6:bc:e4:82:67:32:ae:d4:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 29 15:32:23 2026 GMT Not After : Jan 27 16:32:23 2027 GMT Subject: CN=a3625d11-0d8a-48f8-82e9-523b7e64178e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b1:1d:6f:f0:43:ae:a0:ef:98:5f:58:a4:ef: 21:25:99:ad:58:92:48:2d:fc:97:f5:47:c6:e4:fc: ff:8e:72:ab:48:43:a2:8f:44:43:04:0d:3b:0b:d7: 3e:d9:07:b8:93:8d:7c:0b:94:0e:0a:39:9b:2d:ef: b0:d2:80:f9:9e:60:a3:0b:5d:0c:37:aa:5e:0f:c8: a6:10:2c:41:cb:7b:d3:a0:4b:69:e8:06:b3:9f:19: de:7c:7d:9a:a3:fa:f0:63:e2:6d:eb:cb:42:0f:df: 83:53:a5:d4:b8:42:a7:3d:b7:0e:47:a7:f1:f8:80: 1f:38:44:06:68:d8:ed:58:98:b4:23:a2:70:88:10: f5:71:10:15:ea:71:03:fa:4f:a7:6a:68:58:b4:30: 5a:b5:bd:f2:3a:ad:c5:31:8d:5c:ef:e6:16:83:4c: 3d:a7:c4:33:1f:3d:7a:6e:71:03:74:32:f0:52:a2: 19:5d:20:f1:59:15:7e:ae:d8:b6:b7:6c:14:9f:76: c6:72:f0:80:3e:94:f5:ba:09:35:6e:e2:c5:24:68: e4:99:9c:b8:db:1c:de:ef:9a:a9:fb:6f:9d:a0:a1: 4b:a7:2a:48:fe:32:3a:e9:a2:43:ae:0c:50:04:af: 3f:cb:78:26:b7:89:e5:25:2f:26:4b:06:4d:8b:1e: d6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:AE:28:8C:9E:FA:69:7A:2B:37:17:08:5D:F6:23:6F:EE:E4:B3:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bbd6b4f5-e62e-3c05-9c50-720b58d848e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.93.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:f6:d1:2c:95:d5:e8:09:04:9a:db:2c:17:7b:3f:3d:98:d6: af:7c:e1:9f:00:81:ef:e1:0a:85:47:55:e4:31:59:65:e5:68: 03:41:05:06:c6:8e:84:81:0d:95:3f:31:8f:34:af:d3:58:18: be:70:88:c0:93:79:6f:ff:a4:b0:8c:48:6a:08:7f:45:b5:d2: 46:8c:00:21:f4:54:80:bb:31:12:61:3e:2b:e3:f4:31:db:8c: 0f:41:5e:a2:5f:b7:75:12:2c:4e:2a:72:f1:81:89:9b:d9:6d: 61:65:8b:22:ff:0d:81:2d:89:53:aa:5a:22:93:9b:6e:2b:f8: 84:5c:6a:a1:53:39:44:4c:90:3a:67:81:53:47:43:13:fa:46: 43:ac:77:9a:69:b8:38:39:1b:e8:7f:1f:f7:0d:b7:9d:7c:08: c9:bb:66:8e:f8:cc:1f:34:09:95:1f:be:3a:42:39:9c:47:06: 97:01:5b:1e:31:ea:f4:7e:93:bf:53:ba:65:9f:96:a3:7a:7e: 6d:13:ad:c6:76:79:51:e8:98:27:cb:ea:e7:4b:56:42:63:20: c5:75:77:7b:5e:76:95:57:55:81:f8:d7:cd:88:e6:5a:98:1a: 24:08:20:38:8f:e8:06:01:9b:49:26:d5:d1:db:d9:e1:5b:eb: 8c:41:1c:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+qDqa85IJnMq7UPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAyOTE1MzIyM1oXDTI3MDEyNzE2MzIyM1owLzEtMCsGA1UEAxMk YTM2MjVkMTEtMGQ4YS00OGY4LTgyZTktNTIzYjdlNjQxNzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbEdb/BDrqDvmF9YpO8hJZmtWJJILfyX9UfG 5Pz/jnKrSEOij0RDBA07C9c+2Qe4k418C5QOCjmbLe+w0oD5nmCjC10MN6peD8im ECxBy3vToEtp6AaznxnefH2ao/rwY+Jt68tCD9+DU6XUuEKnPbcOR6fx+IAfOEQG aNjtWJi0I6JwiBD1cRAV6nED+k+namhYtDBatb3yOq3FMY1c7+YWg0w9p8QzHz16 bnEDdDLwUqIZXSDxWRV+rti2t2wUn3bGcvCAPpT1ugk1buLFJGjkmZy42xze75qp +2+doKFLpypI/jI66aJDrgxQBK8/y3gmt4nlJS8mSwZNix7WewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6uKIye+ml6KzcXCF32I2/u5LMDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYmJkNmI0ZjUtZTYyZS0z YzA1LTljNTAtNzIwYjU4ZDg0OGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJl3hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALr20SyV1egJBJrbLBd7Pz2Y1q984Z8Age/hCoVHVeQxWWXlaANBBQbG joSBDZU/MY80r9NYGL5wiMCTeW//pLCMSGoIf0W10kaMACH0VIC7MRJhPivj9DHb jA9BXqJft3USLE4qcvGBiZvZbWFliyL/DYEtiVOqWiKTm24r+IRcaqFTOURMkDpn gVNHQxP6RkOsd5ppuDg5G+h/H/cNt518CMm7Zo74zB80CZUfvjpCOZxHBpcBWx4x 6vR+k79TumWflqN6fm0TrcZ2eVHomCfL6udLVkJjIMV1d3tedpVXVYH4182I5lqY GiQIIDiP6AYBm0km1dHb2eFb64xBHEQ= -----END CERTIFICATE-----Generated at Thu Nov 5 14:02:53 2026 by rpki-client