$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/00a58e9c-bea4-356d-a32b-0d34181e9289.roa File: 00a58e9c-bea4-356d-a32b-0d34181e9289.roa (raw, json) Hash identifier: 9LZGz97FGpK9YY2H6/WgRC8NnSVrvroc1p1zgXrhZ1U= Subject key identifier: DB:B2:29:AE:A2:69:1D:AA:95:74:8C:86:33:3E:6C:12:DD:FD:86:16 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F173241020AD0D41488A78980 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/00a58e9c-bea4-356d-a32b-0d34181e9289.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 0 IP address blocks: 38.3.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:41:02:0a:d0:d4:14:88:a7:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=17500166-1c8f-4ad3-868f-148a32151dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:dc:a9:fb:4e:56:af:23:b3:d2:ce:56:9d:78: be:6c:56:19:e4:05:38:fe:74:84:2e:59:fd:76:fa: 76:d9:45:40:44:22:68:66:5f:16:9f:d4:90:d1:d2: 72:c3:08:43:b6:91:c0:0d:b6:1c:9f:cb:39:b5:78: ef:23:18:b7:d2:70:28:8e:2e:4c:11:d7:31:72:53: 63:3b:60:cf:f5:8b:3c:30:e7:55:8e:83:23:38:eb: 53:95:0e:f0:d3:b3:19:4e:d8:f7:84:ee:00:76:c6: cc:10:65:8b:92:25:05:6d:4c:26:25:a5:3b:8c:2f: 45:6a:aa:d5:3f:46:80:d2:47:58:6a:54:06:1a:97: e6:9d:0d:96:fe:a7:db:dd:2f:bf:ba:dd:0a:ed:a3: 76:6d:12:cd:82:0e:19:ec:2c:48:fa:7b:8d:94:ba: 54:de:30:1f:ac:56:c1:3a:70:f0:d3:82:0c:17:39: 4f:65:96:9a:68:44:e5:5f:11:01:81:58:09:7b:90: 8c:1e:73:e1:9f:82:b9:9d:c4:68:ca:0b:da:fc:20: cf:0a:4d:9f:ca:39:88:a8:32:ca:54:de:f0:8e:e7: fc:d8:80:81:7e:ba:86:33:59:74:c9:1f:54:47:11: af:53:bc:76:08:fd:83:5c:c3:30:7b:4e:e7:6a:04: 02:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B2:29:AE:A2:69:1D:AA:95:74:8C:86:33:3E:6C:12:DD:FD:86:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/00a58e9c-bea4-356d-a32b-0d34181e9289.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.3.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:8c:d8:17:54:13:7c:6a:2d:26:cc:4d:94:fe:a5:68:37:5d: 76:c2:4d:b6:f4:de:d0:12:ad:3c:e3:71:35:25:c3:7b:88:c5: b5:f7:66:c2:4a:95:90:a5:04:ae:cc:4a:1f:7e:22:c9:22:cd: c3:c1:67:c6:32:01:f5:da:50:32:fc:28:19:66:1c:52:a7:03: 8a:b9:97:8d:23:36:57:a2:e0:3a:d3:fe:23:87:1b:36:cb:fd: 34:29:fa:31:62:dd:a7:45:64:4c:73:aa:99:ed:55:32:9e:4e: 3c:30:f7:5a:54:88:67:a7:ed:8f:76:fd:7d:57:5c:d6:26:cc: f1:a1:6c:5a:25:b9:49:bd:bc:93:8f:37:1e:95:04:20:ac:39: 63:f5:fa:5f:af:11:0c:d2:87:3e:0a:7c:c2:ea:8a:28:8f:f2: 54:d2:8a:99:19:fe:36:cb:53:eb:ae:cc:d0:56:94:20:9e:39: ea:f2:3b:a5:93:24:46:b5:aa:12:91:52:30:8d:1f:eb:63:c9: 0f:d0:48:98:92:0c:01:f7:a3:94:41:d0:18:af:e4:e1:dd:f8: 83:82:53:00:d6:6a:45:a1:5a:51:d9:43:3e:f7:d4:a4:74:02: df:bb:93:64:9c:17:28:e6:9f:ef:57:ea:47:2e:b6:85:cf:34: 4d:6c:77:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMkECCtDUFIiniYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk MTc1MDAxNjYtMWM4Zi00YWQzLTg2OGYtMTQ4YTMyMTUxZGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9yp+05WryOz0s5WnXi+bFYZ5AU4/nSELln9 dvp22UVARCJoZl8Wn9SQ0dJywwhDtpHADbYcn8s5tXjvIxi30nAoji5MEdcxclNj O2DP9Ys8MOdVjoMjOOtTlQ7w07MZTtj3hO4AdsbMEGWLkiUFbUwmJaU7jC9FaqrV P0aA0kdYalQGGpfmnQ2W/qfb3S+/ut0K7aN2bRLNgg4Z7CxI+nuNlLpU3jAfrFbB OnDw04IMFzlPZZaaaETlXxEBgVgJe5CMHnPhn4K5ncRoygva/CDPCk2fyjmIqDLK VN7wjuf82ICBfrqGM1l0yR9URxGvU7x2CP2DXMMwe07nagQCKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNuyKa6iaR2qlXSMhjM+bBLd/YYWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMDBhNThlOWMtYmVhNC0z NTZkLWEzMmItMGQzNDE4MWU5Mjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJgOzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSM2BdUE3xqLSbMTZT+pWg3XXbCTbb03tASrTzjcTUlw3uIxbX3ZsJK lZClBK7MSh9+IskizcPBZ8YyAfXaUDL8KBlmHFKnA4q5l40jNlei4DrT/iOHGzbL /TQp+jFi3adFZExzqpntVTKeTjww91pUiGen7Y92/X1XXNYmzPGhbFoluUm9vJOP Nx6VBCCsOWP1+l+vEQzShz4KfMLqiiiP8lTSipkZ/jbLU+uuzNBWlCCeOeryO6WT JEa1qhKRUjCNH+tjyQ/QSJiSDAH3o5RB0Biv5OHd+IOCUwDWakWhWlHZQz731KR0 At+7k2ScFyjmn+9X6kcutoXPNE1sd6A= -----END CERTIFICATE-----Generated at Fri Sep 11 13:49:12 2026 by rpki-client