$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0dc3e9a6-0180-30c7-bedd-e615acb49639.roa File: 0dc3e9a6-0180-30c7-bedd-e615acb49639.roa (raw, json) Hash identifier: XBqe8tk/gyntu01hYMXxtb51Iwny1Qbm/vkPYvVlIHs= Subject key identifier: 8F:17:A9:52:E4:C0:DE:4A:9C:C7:AA:F9:66:B6:BA:F1:53:29:93:93 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F0C078599B208A31B9AC6E880 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0dc3e9a6-0180-30c7-bedd-e615acb49639.roa Signing time: Thu 03 Sep 2026 01:00:12 +0000 ROA not before: Thu 03 Sep 2026 01:00:12 +0000 ROA not after: Wed 02 Dec 2026 02:00:12 +0000 asID: 273127 IP address blocks: 38.121.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0c:07:85:99:b2:08:a3:1b:9a:c6:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 3 01:00:12 2026 GMT Not After : Dec 2 02:00:12 2026 GMT Subject: CN=1cb17d4e-e4e3-4ec5-8975-04ba01d760d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:79:69:70:9c:07:c8:ad:eb:18:93:7a:82:6c: b2:aa:d1:65:28:f4:3f:29:fc:0a:26:fd:c0:d2:0b: 3f:c5:97:7f:eb:8e:da:43:d0:82:a8:28:99:62:8f: 34:58:95:fb:f5:14:47:71:6e:59:78:59:09:e5:ab: 97:19:1f:3f:54:93:0e:68:28:7c:99:13:e6:23:4d: 02:74:76:b8:dc:61:37:25:99:ee:0c:83:5b:a7:5e: 9f:c5:e1:fa:cc:1b:ab:3c:16:b8:5b:57:27:c5:58: ad:b9:60:71:ad:b3:b4:c3:8f:2e:c7:e1:f5:50:78: 71:3d:d0:05:15:6c:5a:9a:ea:12:d7:cc:82:36:4c: 14:c3:ca:f5:0b:68:37:c4:cf:2c:e5:85:b9:60:3c: 1d:ff:aa:e7:1a:c3:58:b5:a2:a9:c7:ce:21:bb:8a: b5:a9:f4:9d:c5:bd:07:5d:0c:e3:53:fd:81:fb:6b: df:8d:e5:30:c8:06:3e:65:19:95:63:f1:9f:ee:49: 71:4c:c5:e1:98:f3:8a:ee:ef:d6:50:ab:d7:6c:c5: 0f:27:6a:31:6b:f9:9b:c7:1a:3c:b9:d6:cd:a5:24: d7:09:12:c2:c1:ec:55:a7:98:0f:a7:6b:a6:c3:2b: 73:06:f1:fc:7e:91:ae:61:0e:ad:8c:47:69:bb:92: e0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:17:A9:52:E4:C0:DE:4A:9C:C7:AA:F9:66:B6:BA:F1:53:29:93:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0dc3e9a6-0180-30c7-bedd-e615acb49639.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.121.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:c0:a8:78:94:d0:65:ea:fa:4c:f7:e5:75:48:a3:c4:22:88: 93:fc:25:e0:00:f0:fe:35:cb:f4:5c:9e:18:1b:81:02:bc:cc: b3:6b:aa:f0:51:b1:58:a1:65:88:8e:80:cd:02:a7:18:c9:77: e2:a9:20:41:78:dd:4b:11:c2:7a:1f:f1:b8:10:38:32:c1:77: c0:5b:d2:69:f0:cd:66:37:3a:a9:89:87:9f:db:14:5a:35:6d: 3e:fd:2e:04:5c:b0:b1:e7:58:13:88:01:67:a3:ea:39:0e:ee: aa:07:77:67:eb:f9:ee:c2:80:8c:e4:fc:e5:f9:e7:90:02:8d: be:1f:47:f3:06:21:f3:6a:65:34:e2:88:1c:65:78:82:f2:83: 43:9f:a6:38:f8:2c:00:c2:07:30:c0:99:92:f4:f2:a8:e2:ea: f2:02:e2:6a:5c:f0:6a:a4:4d:96:64:36:c4:af:ef:28:03:d0: 93:a7:2b:ae:1d:36:7f:56:d0:40:24:80:05:92:40:da:c6:60: 69:37:16:bd:16:15:2e:e2:84:4d:d0:fe:4b:b1:90:7d:e0:c6: c9:84:72:1f:2c:85:f5:4e:fb:6e:6b:6e:9c:4f:c8:a9:a5:ea: 24:98:26:91:dd:55:37:a9:b1:ad:70:7f:95:28:81:8a:46:7f: e8:bc:b1:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8MB4WZsgijG5rG6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkwMzAxMDAxMloXDTI2MTIwMjAyMDAxMlowLzEtMCsGA1UEAxMk MWNiMTdkNGUtZTRlMy00ZWM1LTg5NzUtMDRiYTAxZDc2MGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnlpcJwHyK3rGJN6gmyyqtFlKPQ/KfwKJv3A 0gs/xZd/647aQ9CCqCiZYo80WJX79RRHcW5ZeFkJ5auXGR8/VJMOaCh8mRPmI00C dHa43GE3JZnuDINbp16fxeH6zBurPBa4W1cnxVituWBxrbO0w48ux+H1UHhxPdAF FWxamuoS18yCNkwUw8r1C2g3xM8s5YW5YDwd/6rnGsNYtaKpx84hu4q1qfSdxb0H XQzjU/2B+2vfjeUwyAY+ZRmVY/Gf7klxTMXhmPOK7u/WUKvXbMUPJ2oxa/mbxxo8 udbNpSTXCRLCwexVp5gPp2umwytzBvH8fpGuYQ6tjEdpu5LgqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8XqVLkwN5KnMeq+Wa2uvFTKZOTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMGRjM2U5YTYtMDE4MC0z MGM3LWJlZGQtZTYxNWFjYjQ5NjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJnnhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLAqHiU0GXq+kz35XVIo8QiiJP8JeAA8P41y/RcnhgbgQK8zLNrqvBR sVihZYiOgM0CpxjJd+KpIEF43UsRwnof8bgQODLBd8Bb0mnwzWY3OqmJh5/bFFo1 bT79LgRcsLHnWBOIAWej6jkO7qoHd2fr+e7CgIzk/OX555ACjb4fR/MGIfNqZTTi iBxleILyg0Ofpjj4LADCBzDAmZL08qji6vIC4mpc8GqkTZZkNsSv7ygD0JOnK64d Nn9W0EAkgAWSQNrGYGk3Fr0WFS7ihE3Q/kuxkH3gxsmEch8shfVO+25rbpxPyKml 6iSYJpHdVTepsa1wf5UogYpGf+i8sc8= -----END CERTIFICATE-----Generated at Fri Sep 11 14:27:35 2026 by rpki-client