$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/034f829f-4865-3513-b95f-a56e2b1e619f.roa File: 034f829f-4865-3513-b95f-a56e2b1e619f.roa (raw, json) Hash identifier: 9/U0K45gVXQ+KzX68ZkBhOe6qYWwBHgtiRRny6I+Vb0= Subject key identifier: D6:60:4D:3A:1E:FB:6F:94:C4:70:1F:00:7B:01:2A:F4:19:9E:A4:42 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F4974F2D7640267F3AEF7BB20 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/034f829f-4865-3513-b95f-a56e2b1e619f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 0 IP address blocks: 38.201.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:f2:d7:64:02:67:f3:ae:f7:bb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=66a157bd-c8fb-4b3b-ac9f-789cd9fbce2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4c:fa:b2:d9:62:f6:82:a8:f4:69:d5:23:df: 7e:58:60:3e:4c:09:75:7f:b1:98:9c:d5:2b:ea:5c: 41:aa:e8:79:e2:30:e5:3f:84:c1:66:f2:39:47:6b: 7e:33:5e:7b:bd:80:a9:1c:56:98:6f:66:3d:22:85: 8c:0e:01:69:6d:f0:e7:da:6f:1c:31:f2:66:75:c8: af:01:f4:0c:ec:8e:63:c0:0d:4c:c9:e2:22:86:6e: 00:8f:5e:e1:7b:76:b1:a4:d6:8b:9c:b3:0b:d5:e3: 4e:fd:d7:70:84:69:26:65:e2:69:fd:c7:1a:3e:07: 39:7e:b7:b8:d5:b5:75:79:0d:82:51:5e:ef:eb:9e: ea:2d:9c:05:d8:40:f0:66:05:39:64:9b:4b:c1:fe: b2:b9:b7:1e:4b:b2:c1:cd:c1:83:d6:aa:68:7f:93: 7d:77:80:c6:46:34:4f:ce:4e:3a:ed:46:02:46:93: 3c:f6:e0:9f:01:c1:0e:d4:c2:e9:e8:c0:9c:40:dd: db:d6:bb:80:81:7d:61:df:bd:31:53:e4:ba:32:91: 82:2e:0b:48:c1:15:b7:6f:1e:44:e6:84:ea:1c:83: 59:a6:44:92:52:5c:49:59:a3:61:43:0f:cf:47:b1: 1a:49:25:24:26:ce:3b:45:a8:72:ef:79:2f:62:da: 42:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:60:4D:3A:1E:FB:6F:94:C4:70:1F:00:7B:01:2A:F4:19:9E:A4:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/034f829f-4865-3513-b95f-a56e2b1e619f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.201.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:bb:b3:70:61:ff:a2:8c:04:16:51:dd:cd:35:d7:c4:56:b4: d9:25:ae:4e:7f:8b:0e:6e:48:63:66:95:42:50:3d:f0:fe:a4: 55:b7:96:fb:a9:b4:25:e1:6a:02:82:72:a4:87:e1:50:b4:06: 7d:52:6c:b2:4a:d2:10:c9:a5:e7:8e:c9:25:15:6d:cf:3b:03: 86:b9:28:ea:7d:c1:82:32:2c:0d:05:c3:9f:7d:07:bd:c9:68: a7:40:84:38:4b:9b:a4:74:7c:62:d1:e9:ae:50:c1:76:23:97: 13:16:f2:08:0a:e4:58:1b:77:a8:2d:78:a4:c9:e8:4f:6c:34: c8:e5:81:0f:a8:78:9b:0d:ba:70:88:3a:27:21:10:29:29:88: 05:92:46:d9:98:55:32:0a:92:e1:de:bb:9a:27:5f:7a:fe:ab: f9:e0:c2:72:3b:c8:eb:c7:39:11:1a:23:e0:50:a7:91:9e:72: 48:22:4e:dc:1d:2d:56:41:d3:a0:d8:43:5f:6c:e6:c0:ce:cd: ab:f0:cc:77:0d:57:1e:ce:92:d2:15:81:d6:cc:a9:a3:75:f2: b6:ee:af:ec:64:ad:f1:3a:8c:db:78:32:48:b5:b0:5c:e2:a2: 9f:fa:23:ce:6f:6e:37:aa:34:73:43:7b:4a:3e:28:61:f1:aa: f7:05:e5:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdPLXZAJn8673uyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjZhMTU3YmQtYzhmYi00YjNiLWFjOWYtNzg5Y2Q5ZmJjZTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ez6stli9oKo9GnVI99+WGA+TAl1f7GYnNUr 6lxBquh54jDlP4TBZvI5R2t+M157vYCpHFaYb2Y9IoWMDgFpbfDn2m8cMfJmdciv AfQM7I5jwA1MyeIihm4Aj17he3axpNaLnLML1eNO/ddwhGkmZeJp/ccaPgc5fre4 1bV1eQ2CUV7v657qLZwF2EDwZgU5ZJtLwf6yubceS7LBzcGD1qpof5N9d4DGRjRP zk467UYCRpM89uCfAcEO1MLp6MCcQN3b1ruAgX1h370xU+S6MpGCLgtIwRW3bx5E 5oTqHINZpkSSUlxJWaNhQw/PR7EaSSUkJs47Rahy73kvYtpCoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZgTToe+2+UxHAfAHsBKvQZnqRCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMDM0ZjgyOWYtNDg2NS0z NTEzLWI5NWYtYTU2ZTJiMWU2MTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJskAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIe7s3Bh/6KMBBZR3c0118RWtNklrk5/iw5uSGNmlUJQPfD+pFW3lvup tCXhagKCcqSH4VC0Bn1SbLJK0hDJpeeOySUVbc87A4a5KOp9wYIyLA0Fw599B73J aKdAhDhLm6R0fGLR6a5QwXYjlxMW8ggK5Fgbd6gteKTJ6E9sNMjlgQ+oeJsNunCI OichECkpiAWSRtmYVTIKkuHeu5onX3r+q/ngwnI7yOvHOREaI+BQp5GeckgiTtwd LVZB06DYQ19s5sDOzavwzHcNVx7OktIVgdbMqaN18rbur+xkrfE6jNt4Mki1sFzi op/6I85vbjeqNHNDe0o+KGHxqvcF5fs= -----END CERTIFICATE-----Generated at Tue Oct 6 04:09:15 2026 by rpki-client