$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/41b495a1-3627-3667-af41-d2072d5d9889.roa File: 41b495a1-3627-3667-af41-d2072d5d9889.roa (raw, json) Hash identifier: BnnxuHq/2E5d29L/v68xfDWrEAMlwHHOfyWqElZtKlg= Subject key identifier: B4:07:7E:65:3A:02:C2:69:EA:AB:C4:58:61:31:2D:01:C5:27:95:1F Certificate issuer: /CN=38ec4694-a70f-4329-b713-f4da59e49973 Certificate serial: 010D0C9F4328584F093CD94EFA152A257DF30580 Authority key identifier: B6:D1:08:1D:37:82:AE:20:58:F3:76:D9:DC:18:7B:0C:14:93:2B:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/41b495a1-3627-3667-af41-d2072d5d9889.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 23.247.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:d9:4e:fa:15:2a:25:7d:f3:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38ec4694-a70f-4329-b713-f4da59e49973 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=194c0d61-5e56-4ed7-b927-3ed3916e0312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:78:6f:65:5d:c4:bb:25:7d:c9:8b:bd:4e:da: 17:ae:2f:2e:58:54:b3:4e:78:0d:59:c1:7b:fa:56: ac:0c:1c:fa:4f:15:4f:7d:48:e8:e6:fc:5f:7d:12: 26:41:2c:61:9a:f8:d6:13:42:47:a4:5f:07:52:2f: 36:69:89:8d:ac:08:fe:c9:3b:3e:58:42:1a:1c:b2: 8d:03:02:98:40:c5:71:f4:98:41:75:13:ce:9c:ba: 98:90:2a:c2:52:fd:2b:cb:2c:c6:58:91:eb:76:3a: 98:41:ca:15:6b:18:9d:4e:b1:25:62:fb:e3:3a:11: e7:76:3c:85:3b:ac:87:d4:96:81:b0:02:28:05:b3: f9:b4:5a:2f:55:94:81:4c:39:e4:1f:df:f5:3c:97: b5:e6:1e:9b:d2:31:09:40:f8:33:08:ed:67:53:a8: c4:bf:6e:97:62:34:8a:f8:21:46:80:71:54:14:68: c6:90:8b:3f:d3:f9:06:5f:b0:68:35:5b:00:47:05: 71:a8:67:39:dd:d4:d9:c6:87:a1:d0:45:59:3e:d5: 2a:2f:61:3c:95:c3:96:e2:f6:25:09:f5:93:9f:c7: 63:31:e9:00:a6:cd:a3:87:f2:84:81:d3:0d:f8:8f: a5:83:ac:5c:03:d2:ea:5f:76:b4:61:30:7b:a4:5d: fc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:07:7E:65:3A:02:C2:69:EA:AB:C4:58:61:31:2D:01:C5:27:95:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/41b495a1-3627-3667-af41-d2072d5d9889.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.crl X509v3 Authority Key Identifier: keyid:B6:D1:08:1D:37:82:AE:20:58:F3:76:D9:DC:18:7B:0C:14:93:2B:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer sbgp-ipAddrBlock: critical IPv4: 23.247.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:26:6e:a9:d9:d2:e2:5a:59:8f:8d:97:9b:51:4f:5f:5d:01: 41:6e:07:d9:8b:1c:7e:b0:95:17:36:df:b1:0f:94:ff:c7:f7: cb:22:0c:a3:8d:c4:95:ac:95:22:1c:78:bf:4c:9a:60:ab:66: 11:f6:74:08:87:8c:af:3f:3d:f9:d0:84:a9:bf:a7:63:3c:d3: 58:27:a0:11:d4:70:d7:77:4b:ab:f3:db:1c:d6:6b:98:fe:9f: 78:2e:fd:4e:69:2a:95:95:77:fd:ea:cc:47:9b:56:b0:28:c5: 0e:cb:63:e1:00:2d:a4:13:86:5d:78:1a:31:ff:4f:4d:6b:27: 07:23:2b:d6:e2:d9:54:e2:42:5b:d8:2c:33:61:be:46:8c:6a: e7:fd:5e:b7:b0:ce:1d:17:03:57:6c:c4:45:9b:bc:bb:84:3e: 85:d8:b1:c0:93:22:e9:b5:56:d1:a0:e1:98:16:d6:29:85:62: c9:a2:b3:eb:27:69:1e:ee:5c:35:e9:98:b1:6c:26:48:54:f8: 97:ef:29:f4:df:27:31:e8:bd:5f:59:90:9c:a5:d2:a8:bf:fc: 08:bb:c3:85:15:be:7e:d2:f9:90:68:fd:e2:ea:b3:8a:d6:1e: 0b:d2:22:96:53:73:10:c1:c8:b7:11:17:08:ad:7f:35:da:86: fc:2d:dc:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPNlO+hUqJX3zBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlYzQ2OTQtYTcwZi00MzI5LWI3MTMtZjRkYTU5ZTQ5 OTczMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk MTk0YzBkNjEtNWU1Ni00ZWQ3LWI5MjctM2VkMzkxNmUwMzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXhvZV3EuyV9yYu9TtoXri8uWFSzTngNWcF7 +lasDBz6TxVPfUjo5vxffRImQSxhmvjWE0JHpF8HUi82aYmNrAj+yTs+WEIaHLKN AwKYQMVx9JhBdRPOnLqYkCrCUv0ryyzGWJHrdjqYQcoVaxidTrElYvvjOhHndjyF O6yH1JaBsAIoBbP5tFovVZSBTDnkH9/1PJe15h6b0jEJQPgzCO1nU6jEv26XYjSK +CFGgHFUFGjGkIs/0/kGX7BoNVsARwVxqGc53dTZxoeh0EVZPtUqL2E8lcOW4vYl CfWTn8djMekAps2jh/KEgdMN+I+lg6xcA9LqX3a0YTB7pF385QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQHfmU6AsJp6qvEWGExLQHFJ5UfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGVj NDY5NC1hNzBmLTQzMjktYjcxMy1mNGRhNTllNDk5NzMvNDFiNDk1YTEtMzYyNy0z NjY3LWFmNDEtZDIwNzJkNWQ5ODg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhlYzQ2OTQtYTcwZi00MzI5LWI3 MTMtZjRkYTU5ZTQ5OTczLzM4ZWM0Njk0LWE3MGYtNDMyOS1iNzEzLWY0ZGE1OWU0 OTk3My5jcmwwHwYDVR0jBBgwFoAUttEIHTeCriBY83bZ3Bh7DBSTK7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGVjNDY5NC1hNzBmLTQzMjktYjcxMy1mNGRh NTllNDk5NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF/e4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQmbqnZ0uJaWY+Nl5tRT19dAUFuB9mLHH6wlRc237EPlP/H98siDKON xJWslSIceL9MmmCrZhH2dAiHjK8/PfnQhKm/p2M801gnoBHUcNd3S6vz2xzWa5j+ n3gu/U5pKpWVd/3qzEebVrAoxQ7LY+EALaQThl14GjH/T01rJwcjK9bi2VTiQlvY LDNhvkaMauf9Xrewzh0XA1dsxEWbvLuEPoXYscCTIum1VtGg4ZgW1imFYsmis+sn aR7uXDXpmLFsJkhU+JfvKfTfJzHovV9ZkJyl0qi//Ai7w4UVvn7S+ZBo/eLqs4rW HgvSIpZTcxDByLcRFwitfzXahvwt3I8= -----END CERTIFICATE-----Generated at Wed Oct 14 00:59:19 2026 by rpki-client