$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0ecb9baf-be24-3732-a6c5-b78ce28091fd.roa File: 0ecb9baf-be24-3732-a6c5-b78ce28091fd.roa (raw, json) Hash identifier: UCdS4jtQQVUTS64XtK2X3I+x/UrrMhpXHNTezMu8Qxk= Subject key identifier: 65:D5:93:9F:BB:D8:45:9F:78:5F:81:E7:B8:AB:4F:6D:37:21:A0:ED Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EE921F3C275EF37CD5E382C80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0ecb9baf-be24-3732-a6c5-b78ce28091fd.roa Signing time: Fri 21 Aug 2026 13:00:11 +0000 ROA not before: Fri 21 Aug 2026 13:00:11 +0000 ROA not after: Thu 19 Nov 2026 14:00:11 +0000 asID: 137182 IP address blocks: 38.45.112.0/22 maxlen: 24 38.45.116.0/22 maxlen: 24 38.57.132.0/22 maxlen: 24 38.92.72.0/21 maxlen: 24 38.99.252.0/22 maxlen: 24 38.107.164.0/22 maxlen: 24 38.135.136.0/21 maxlen: 24 154.46.140.0/22 maxlen: 24 154.57.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e9:21:f3:c2:75:ef:37:cd:5e:38:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 21 13:00:11 2026 GMT Not After : Nov 19 14:00:11 2026 GMT Subject: CN=fbff34f1-c0df-45fa-bbb8-bcf130907f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:dc:b2:0f:ed:79:29:b8:30:30:7e:fd:e9:3e: 9b:3d:ce:66:86:08:92:64:6d:ca:48:ae:76:e5:3d: fd:6e:c1:f3:9e:19:22:0d:ef:c8:43:10:d5:04:fa: f5:44:76:96:ad:71:87:f8:ad:13:84:41:08:02:3b: 79:e7:e6:83:43:32:d8:1a:a6:7c:72:30:7d:12:19: 33:7a:9e:10:60:02:00:2d:19:24:f9:45:85:70:ed: 2c:a8:12:f5:70:7a:da:b0:34:41:74:82:03:48:c4: 2c:74:12:37:31:93:1c:38:f3:21:12:c1:8f:f8:2f: bb:9e:af:9c:33:33:ca:2d:07:99:13:ec:8b:bf:fe: 84:11:fb:f2:c0:d7:1b:e8:c2:92:3b:3e:57:fb:9b: 96:57:d7:c1:3a:98:bf:29:0f:e1:2e:21:13:9f:44: 4c:de:66:3f:60:b5:46:74:4f:01:b0:1b:6a:05:9b: 81:97:9a:33:0a:b8:79:47:05:38:42:98:5f:f4:43: 80:08:99:21:e9:e0:ec:f7:42:ff:d7:a2:88:04:ce: e7:77:ee:cc:65:b2:55:14:65:36:a8:7e:93:8e:63: b9:4d:95:e5:28:dc:26:c1:c5:d4:ec:ae:ae:6b:e3: 9b:e7:2e:f4:e3:89:33:87:ae:7a:32:76:3b:34:93: 4a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D5:93:9F:BB:D8:45:9F:78:5F:81:E7:B8:AB:4F:6D:37:21:A0:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0ecb9baf-be24-3732-a6c5-b78ce28091fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.45.112.0/21 38.57.132.0/22 38.92.72.0/21 38.99.252.0/22 38.107.164.0/22 38.135.136.0/21 154.46.140.0/22 154.57.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:bc:56:a5:c4:c1:2c:6c:82:ac:7b:bf:09:5f:81:2e:8c:fd: 14:08:70:07:c7:5d:6a:4a:c2:ad:42:79:4a:19:3e:ee:6b:44: 7d:07:4f:58:c0:31:50:17:13:70:60:03:6b:f8:7e:46:55:b9: dd:3a:e2:53:18:d0:64:22:9e:92:11:81:3b:bb:3e:63:f7:cb: b2:0c:d2:dc:c5:df:87:2a:cd:90:c1:7e:71:0b:ac:c0:9e:6f: 2c:91:4a:5b:9a:f3:5e:f4:6b:fa:85:7b:91:f0:be:82:91:30: 9d:15:05:0e:4c:1b:e2:18:54:b0:c8:72:98:90:a0:79:c1:b6: fb:67:32:01:d1:37:b4:6f:de:fa:6f:8b:63:57:0c:eb:55:f4: 4b:2c:4c:af:13:5e:7b:e2:bd:e4:d7:31:b1:e1:ac:a6:3d:be: 65:06:87:58:14:2b:dc:f3:5c:fe:ce:f8:45:c6:df:7e:f5:a4: fe:85:36:ae:88:b1:be:ba:9e:79:dd:51:cb:dd:cc:04:99:01: 84:12:98:34:3e:93:9c:ac:cf:fb:3a:6d:94:bf:59:aa:91:a5: 63:00:d2:be:42:70:55:69:4d:e1:ac:50:94:8d:27:21:f4:44: e0:1d:da:0e:f7:88:6f:9b:8b:a2:54:f8:20:ec:f8:ed:67:49: 95:e4:b1:35 -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWE7pIfPCde83zV44LIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgyMTEzMDAxMVoXDTI2MTExOTE0MDAxMVowLzEtMCsGA1UEAxMk ZmJmZjM0ZjEtYzBkZi00NWZhLWJiYjgtYmNmMTMwOTA3Zjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNyyD+15KbgwMH796T6bPc5mhgiSZG3KSK52 5T39bsHznhkiDe/IQxDVBPr1RHaWrXGH+K0ThEEIAjt55+aDQzLYGqZ8cjB9Ehkz ep4QYAIALRkk+UWFcO0sqBL1cHrasDRBdIIDSMQsdBI3MZMcOPMhEsGP+C+7nq+c MzPKLQeZE+yLv/6EEfvywNcb6MKSOz5X+5uWV9fBOpi/KQ/hLiETn0RM3mY/YLVG dE8BsBtqBZuBl5ozCrh5RwU4Qphf9EOACJkh6eDs90L/16KIBM7nd+7MZbJVFGU2 qH6TjmO5TZXlKNwmwcXU7K6ua+Ob5y7044kzh656MnY7NJNK6wIDAQABo4IDfzCC A3swHQYDVR0OBBYEFGXVk5+72EWfeF+B57irT203IaDtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMGVjYjliYWYtYmUyNC0z NzMyLWE2YzUtYjc4Y2UyODA5MWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQDJi1wAwQC JjmEAwQDJlxIAwQCJmP8AwQCJmukAwQDJoeIAwQCmi6MAwQCmjmsMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AJe8VqXEwSxsgqx7vwlfgS6M/RQIcAfHXWpKwq1CeUoZPu5rRH0HT1jAMVAXE3Bg A2v4fkZVud064lMY0GQinpIRgTu7PmP3y7IM0tzF34cqzZDBfnELrMCebyyRSlua 8170a/qFe5HwvoKRMJ0VBQ5MG+IYVLDIcpiQoHnBtvtnMgHRN7Rv3vpvi2NXDOtV 9EssTK8TXnviveTXMbHhrKY9vmUGh1gUK9zzXP7O+EXG3371pP6FNq6Isb66nnnd UcvdzASZAYQSmDQ+k5ysz/s6bZS/WaqRpWMA0r5CcFVpTeGsUJSNJyH0ROAd2g73 iG+bi6JU+CDs+O1nSZXksTU= -----END CERTIFICATE-----Generated at Fri Sep 11 13:52:21 2026 by rpki-client