$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0952f43e-16b7-3030-95a3-48a989059742.roa File: 0952f43e-16b7-3030-95a3-48a989059742.roa (raw, json) Hash identifier: Mzg6o8MjS2POfXIlTVn0tgqGzB0Cuax1/BYxtBBjRu8= Subject key identifier: 84:05:F7:85:B0:46:B6:78:EA:A6:29:DD:70:10:50:79:39:3C:6C:30 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EA799F46B9A4A99E692CC8480 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0952f43e-16b7-3030-95a3-48a989059742.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 270165 IP address blocks: 38.19.204.0/22 maxlen: 24 38.43.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:99:f4:6b:9a:4a:99:e6:92:cc:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=097b3c3b-c276-408f-9f01-c39a33671406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d5:ee:28:35:1a:77:29:03:af:5b:72:c4:63: 6b:e3:cb:57:c2:be:29:da:11:8e:fb:51:2d:4b:52: b4:42:4c:fa:65:67:26:a4:49:cc:db:b1:01:72:18: 02:99:66:4d:af:98:9d:b5:3f:96:f4:f5:ed:c8:e4: 8c:6a:2a:43:40:cf:b9:7e:72:4c:ba:bf:62:30:ca: 39:fd:a9:e4:ce:b4:36:3c:bb:d2:33:67:6c:04:2c: 61:48:37:3a:ad:26:4b:41:e5:af:0c:ab:72:3c:45: cd:3b:53:37:55:19:ca:a3:01:96:b6:74:33:08:22: 4d:7a:cf:f4:bb:07:0e:17:cb:04:16:6d:dd:1e:f4: 15:d2:71:27:03:a5:99:21:0f:e6:e2:d4:ca:4c:b6: dc:c6:e6:bc:3c:c5:c3:73:68:35:61:f1:21:81:81: 94:08:1b:ea:50:3e:82:b5:e0:ec:6a:10:9c:ae:e8: 47:12:04:51:01:a4:ad:d9:09:2d:63:10:25:86:88: 3c:6b:cd:6c:96:b2:8e:31:a9:a4:a6:cf:cd:ff:34: 78:bc:3d:14:1c:be:81:d7:2a:af:ff:1c:e2:12:ee: 0a:09:f2:e7:ac:4c:5b:4f:eb:40:00:6d:a9:95:c4: 65:18:34:f4:3b:f6:6a:1a:58:13:ec:6c:12:5f:51: 65:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:05:F7:85:B0:46:B6:78:EA:A6:29:DD:70:10:50:79:39:3C:6C:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0952f43e-16b7-3030-95a3-48a989059742.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.19.204.0/22 38.43.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:a9:a3:01:1e:fe:4f:4d:0a:1f:df:82:bc:66:b1:0b:cb:6e: f8:94:f5:ce:82:42:27:fb:d7:3d:d4:1a:49:59:a2:47:5f:cf: 87:61:1e:f0:c9:9f:fc:35:e7:f9:a4:27:41:2f:43:4a:0a:ef: 6e:fc:92:43:24:6c:6f:7d:ff:4c:eb:23:54:26:d8:61:2a:a3: e5:6a:5d:07:8d:08:ac:2d:ac:dd:15:46:6a:b6:0b:7b:26:41: 9d:27:58:10:f4:3a:05:6a:35:5b:60:b5:b1:9c:cb:6a:0a:67: 99:13:2c:76:f3:4e:b1:2c:1e:29:79:18:9b:17:82:4d:d8:bf: ce:9a:30:50:50:24:66:f4:63:01:5b:7a:15:93:2d:d7:eb:fd: b3:d8:90:02:6f:b9:7f:fc:a6:13:9e:41:5d:b7:bf:a7:00:5a: 31:05:e5:6c:bf:e2:b3:57:eb:b2:e1:90:99:0b:8e:6b:b6:f4: 4f:81:60:e8:21:93:73:4a:66:de:dd:2f:2a:52:dc:e0:d2:bf: e5:22:1f:63:0d:71:b0:7c:84:e5:70:77:eb:87:22:d8:dd:7a: 28:62:27:35:35:4f:49:a9:10:c0:56:87:3f:e0:80:cf:bf:4f: 6d:45:00:36:53:ec:70:32:f6:84:34:06:cc:8e:43:da:37:12: bc:66:7f:a5 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6nmfRrmkqZ5pLMhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDk3YjNjM2ItYzI3Ni00MDhmLTlmMDEtYzM5YTMzNjcxNDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtXuKDUadykDr1tyxGNr48tXwr4p2hGO+1Et S1K0Qkz6ZWcmpEnM27EBchgCmWZNr5idtT+W9PXtyOSMaipDQM+5fnJMur9iMMo5 /ankzrQ2PLvSM2dsBCxhSDc6rSZLQeWvDKtyPEXNO1M3VRnKowGWtnQzCCJNes/0 uwcOF8sEFm3dHvQV0nEnA6WZIQ/m4tTKTLbcxua8PMXDc2g1YfEhgYGUCBvqUD6C teDsahCcruhHEgRRAaSt2QktYxAlhog8a81slrKOMamkps/N/zR4vD0UHL6B1yqv /xziEu4KCfLnrExbT+tAAG2plcRlGDT0O/ZqGlgT7GwSX1FlcQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIQF94WwRrZ46qYp3XAQUHk5PGwwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMDk1MmY0M2UtMTZiNy0z MDMwLTk1YTMtNDhhOTg5MDU5NzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCJhPMAwQC JitgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFSpowEe/k9NCh/fgrxmsQvLbviU9c6CQif71z3UGklZokdf z4dhHvDJn/w15/mkJ0EvQ0oK7278kkMkbG99/0zrI1Qm2GEqo+VqXQeNCKwtrN0V Rmq2C3smQZ0nWBD0OgVqNVtgtbGcy2oKZ5kTLHbzTrEsHil5GJsXgk3Yv86aMFBQ JGb0YwFbehWTLdfr/bPYkAJvuX/8phOeQV23v6cAWjEF5Wy/4rNX67LhkJkLjmu2 9E+BYOghk3NKZt7dLypS3ODSv+UiH2MNcbB8hOVwd+uHItjdeihiJzU1T0mpEMBW hz/ggM+/T21FADZT7HAy9oQ0BsyOQ9o3Erxmf6U= -----END CERTIFICATE-----Generated at Fri Sep 11 14:34:55 2026 by rpki-client