$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0489acf6-e9b7-349c-8411-98ab0910ebf2.roa File: 0489acf6-e9b7-349c-8411-98ab0910ebf2.roa (raw, json) Hash identifier: 8UnpxsSF4RCASOAhb/c5OeKel+cNVxqQGMMwxln6Zp4= Subject key identifier: B6:AA:B9:65:94:50:88:93:0D:52:1A:5A:CA:BC:D2:0B:A3:B7:91:A7 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584ED2CC77CB5FB5A22ECF1B2D00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0489acf6-e9b7-349c-8411-98ab0910ebf2.roa Signing time: Thu 13 Aug 2026 13:00:12 +0000 ROA not before: Thu 13 Aug 2026 13:00:12 +0000 ROA not after: Wed 11 Nov 2026 14:00:12 +0000 asID: 27578 IP address blocks: 38.94.112.0/22 maxlen: 24 38.141.32.0/22 maxlen: 24 38.141.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d2:cc:77:cb:5f:b5:a2:2e:cf:1b:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 13 13:00:12 2026 GMT Not After : Nov 11 14:00:12 2026 GMT Subject: CN=685a6b58-50f1-41b5-82dc-3e6036f65fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:70:20:db:e2:3f:23:0c:a0:a5:c9:a8:4f:01: 08:36:05:fa:fd:c5:8f:4d:1d:df:4d:38:03:92:54: 4f:f5:f9:d5:3c:8b:43:bc:e9:62:1c:c7:43:80:00: e9:3a:1b:31:8c:79:0f:64:ad:5a:c6:39:83:1c:14: b0:15:14:cd:37:7f:30:ae:2e:d8:84:d7:82:45:87: ce:f7:fb:94:52:da:9c:6a:41:48:22:1a:f4:4b:09: 5c:88:f6:da:f8:8f:68:a7:bb:34:43:69:0b:5c:08: f3:ba:84:9c:5d:fa:bc:0e:b6:f4:65:96:04:4d:2a: d2:68:7c:6e:87:8b:23:dc:d0:5f:f1:e3:82:70:e6: a0:8f:2f:e9:f7:55:9b:e8:51:8d:ba:ee:f3:48:90: f4:92:04:94:b0:82:94:a8:f4:14:a0:ba:f4:08:dd: 05:7a:a7:4d:6f:59:e6:83:a2:73:43:a3:96:9a:c7: 78:35:9f:55:04:82:4f:79:7f:06:6d:a1:8e:6f:08: c0:bf:36:f3:1d:99:27:12:df:85:d4:04:09:72:d2: 5d:74:28:df:fe:72:21:c0:23:c8:77:b6:70:34:b6: 32:80:43:8f:e4:a5:f4:5c:64:8d:26:63:fd:7a:46: 6b:b5:42:b6:c4:18:f7:7f:e5:55:5a:0d:4f:7e:ba: fb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AA:B9:65:94:50:88:93:0D:52:1A:5A:CA:BC:D2:0B:A3:B7:91:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0489acf6-e9b7-349c-8411-98ab0910ebf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.94.112.0/22 38.141.32.0/22 38.141.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:6d:0b:6f:53:55:c8:a8:5e:1b:af:2a:9e:1f:dc:b5:7e:82: 10:20:1c:48:71:83:53:65:e2:2a:88:6a:88:35:18:21:17:57: fa:53:21:51:a0:62:26:19:bd:04:04:92:8b:a6:6a:e6:78:3a: be:10:75:95:86:08:82:c7:25:54:cd:5a:10:a1:6f:d9:69:85: 5e:07:76:2f:cb:89:85:fe:b9:d9:df:28:64:4f:eb:dc:97:34: b8:d8:4f:32:5d:37:88:4d:c6:e0:e0:b7:ef:83:84:4f:da:67: eb:36:76:6f:d5:b3:16:2f:5a:45:98:ed:25:6b:fb:e7:3d:15: 31:9f:cf:00:71:56:d2:2d:c7:57:ba:41:88:c6:32:06:b7:ce: f3:ee:e7:44:ec:60:19:b7:f7:88:f6:47:09:0d:70:08:16:d3: b7:49:2f:4f:cd:28:f1:85:7a:22:4a:db:b7:61:e6:db:b3:eb: 0e:b7:cb:28:7c:3c:f7:83:16:13:04:25:d6:77:15:f1:55:58: 8d:18:0d:fc:e9:09:31:e5:f1:6c:e9:9d:ef:ea:7e:9c:3f:74: 6e:3b:34:fc:3f:24:d1:6f:ae:eb:80:d4:cc:17:49:87:6f:1a: 7a:bb:4d:96:c7:99:2a:d0:3c:25:39:fe:b3:b2:22:56:82:7b: 71:7b:a3:0f -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE7SzHfLX7WiLs8bLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgxMzEzMDAxMloXDTI2MTExMTE0MDAxMlowLzEtMCsGA1UEAxMk Njg1YTZiNTgtNTBmMS00MWI1LTgyZGMtM2U2MDM2ZjY1ZmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnAg2+I/IwygpcmoTwEINgX6/cWPTR3fTTgD klRP9fnVPItDvOliHMdDgADpOhsxjHkPZK1axjmDHBSwFRTNN38wri7YhNeCRYfO 9/uUUtqcakFIIhr0SwlciPba+I9op7s0Q2kLXAjzuoScXfq8Drb0ZZYETSrSaHxu h4sj3NBf8eOCcOagjy/p91Wb6FGNuu7zSJD0kgSUsIKUqPQUoLr0CN0FeqdNb1nm g6JzQ6OWmsd4NZ9VBIJPeX8GbaGObwjAvzbzHZknEt+F1AQJctJddCjf/nIhwCPI d7ZwNLYygEOP5KX0XGSNJmP9ekZrtUK2xBj3f+VVWg1Pfrr72wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFLaquWWUUIiTDVIaWsq80gujt5GnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMDQ4OWFjZjYtZTliNy0z NDljLTg0MTEtOThhYjA5MTBlYmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCJl5wAwQC Jo0gAwQCJo0oMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADZtC29TVcioXhuvKp4f3LV+ghAgHEhxg1Nl4iqI aog1GCEXV/pTIVGgYiYZvQQEkoumauZ4Or4QdZWGCILHJVTNWhChb9lphV4Hdi/L iYX+udnfKGRP69yXNLjYTzJdN4hNxuDgt++DhE/aZ+s2dm/VsxYvWkWY7SVr++c9 FTGfzwBxVtItx1e6QYjGMga3zvPu50TsYBm394j2RwkNcAgW07dJL0/NKPGFeiJK 27dh5tuz6w63yyh8PPeDFhMEJdZ3FfFVWI0YDfzpCTHl8Wzpne/qfpw/dG47NPw/ JNFvruuA1MwXSYdvGnq7TZbHmSrQPCU5/rOyIlaCe3F7ow8= -----END CERTIFICATE-----Generated at Fri Sep 11 14:30:22 2026 by rpki-client