$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0fc2d493-c090-3471-af2d-aaff8180f6c6.roa File: 0fc2d493-c090-3471-af2d-aaff8180f6c6.roa (raw, json) Hash identifier: oKfv5U4LImSARDx5CTdLHqiucwv1WtrXYZxYNies52o= Subject key identifier: B8:FB:11:00:FD:9B:A6:DD:5B:A5:01:F6:20:7E:48:B1:6E:5C:D8:6F Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F1B8E2BEAFFE1548EC388ED80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0fc2d493-c090-3471-af2d-aaff8180f6c6.roa Signing time: Tue 08 Sep 2026 14:28:44 +0000 ROA not before: Tue 08 Sep 2026 14:28:44 +0000 ROA not after: Mon 07 Dec 2026 15:28:44 +0000 asID: 265757 IP address blocks: 38.250.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:8e:2b:ea:ff:e1:54:8e:c3:88:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 8 14:28:44 2026 GMT Not After : Dec 7 15:28:44 2026 GMT Subject: CN=d9d3f1de-b0da-4295-b46a-b272ba439989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:15:71:83:a3:ed:5f:59:f9:95:a9:11:ed:1e: 8f:34:72:4d:08:84:9e:ac:7d:dd:02:86:10:81:b1: 05:bb:3f:b2:8d:23:d4:68:6a:1d:7d:15:d5:83:ed: f8:b4:b1:d4:57:a0:4e:12:a1:9e:54:44:ee:46:18: 2c:6e:e9:f5:97:35:ed:87:62:77:43:c4:9d:44:59: 93:0b:a7:42:79:4b:2c:6f:27:43:66:af:94:0f:44: 3d:b2:3b:2d:9a:ef:4a:65:d5:1f:03:b6:31:d2:c0: bd:2f:07:83:e4:37:75:02:2d:b5:7d:f4:38:c0:d8: a6:d2:90:aa:8d:5b:a6:58:54:37:a7:4f:bc:ce:75: a3:95:bf:00:d6:ce:94:0c:d6:d5:53:32:5e:72:f7: ab:74:32:4e:fb:2e:bf:d2:ee:60:25:50:9a:98:9d: a6:08:da:00:17:09:91:5c:f7:f0:7b:d3:f2:9d:1c: 07:3f:6f:85:ba:74:f0:ce:09:eb:e1:5c:2f:86:34: 05:bd:00:8a:77:e7:30:e7:bc:66:ab:75:0d:c1:5f: 3b:95:2c:b4:f6:03:f9:72:f6:89:ac:2b:3e:61:a6: 82:33:7c:66:13:6f:50:bf:8d:aa:a7:37:b5:bc:68: f5:f9:e8:2f:73:12:9d:c4:1b:e8:7f:40:81:e3:29: 18:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:FB:11:00:FD:9B:A6:DD:5B:A5:01:F6:20:7E:48:B1:6E:5C:D8:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0fc2d493-c090-3471-af2d-aaff8180f6c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.250.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:48:97:f8:dd:82:48:a6:f4:6a:aa:3e:7c:32:39:df:8c:28: cc:94:6b:12:23:a8:a7:e9:6d:59:58:eb:67:3f:93:5c:77:38: 34:95:c2:52:e6:aa:17:74:13:c9:cf:65:54:a8:82:e2:53:93: 8b:45:a3:cf:d3:9b:7e:99:db:25:b3:b1:ca:b0:4b:fb:43:49: 0c:df:34:17:56:e3:ce:aa:8f:51:3f:5c:89:86:3a:ee:53:cd: 6a:9b:39:fc:ad:36:60:ae:73:06:e4:72:c3:6f:04:d0:a0:1d: 37:c6:91:73:7a:73:e7:dc:0a:f2:f0:79:af:54:77:f9:29:5f: 6b:17:f3:95:2e:1e:56:14:de:b2:66:e8:78:ff:72:8a:94:da: 9b:b5:c0:b0:d5:ef:14:38:c0:85:21:07:fb:0e:f9:e2:6b:df: ea:44:07:5e:dd:aa:34:5a:61:d2:1f:3f:04:89:f1:22:f9:b8: e7:3b:79:70:38:fb:a4:be:55:b1:39:ff:67:e3:51:56:a9:c5: 6d:a9:a9:1d:60:ca:9c:db:ca:ad:f8:03:f1:bf:ba:27:4a:4a: c6:fc:26:e8:48:80:37:85:51:92:48:95:15:66:68:17:6e:f3: c0:75:19:56:3f:bb:92:19:73:d8:b1:47:28:a1:53:6d:f8:e0: 08:91:f8:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bjivq/+FUjsOI7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkwODE0Mjg0NFoXDTI2MTIwNzE1Mjg0NFowLzEtMCsGA1UEAxMk ZDlkM2YxZGUtYjBkYS00Mjk1LWI0NmEtYjI3MmJhNDM5OTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRVxg6PtX1n5lakR7R6PNHJNCISerH3dAoYQ gbEFuz+yjSPUaGodfRXVg+34tLHUV6BOEqGeVETuRhgsbun1lzXth2J3Q8SdRFmT C6dCeUssbydDZq+UD0Q9sjstmu9KZdUfA7Yx0sC9LweD5Dd1Ai21ffQ4wNim0pCq jVumWFQ3p0+8znWjlb8A1s6UDNbVUzJecverdDJO+y6/0u5gJVCamJ2mCNoAFwmR XPfwe9PynRwHP2+FunTwzgnr4VwvhjQFvQCKd+cw57xmq3UNwV87lSy09gP5cvaJ rCs+YaaCM3xmE29Qv42qpze1vGj1+egvcxKdxBvof0CB4ykYSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLj7EQD9m6bdW6UB9iB+SLFuXNhvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMGZjMmQ0OTMtYzA5MC0z NDcxLWFmMmQtYWFmZjgxODBmNmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJvpsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJIl/jdgkim9GqqPnwyOd+MKMyUaxIjqKfpbVlY62c/k1x3ODSVwlLm qhd0E8nPZVSoguJTk4tFo8/Tm36Z2yWzscqwS/tDSQzfNBdW486qj1E/XImGOu5T zWqbOfytNmCucwbkcsNvBNCgHTfGkXN6c+fcCvLwea9Ud/kpX2sX85UuHlYU3rJm 6Hj/coqU2pu1wLDV7xQ4wIUhB/sO+eJr3+pEB17dqjRaYdIfPwSJ8SL5uOc7eXA4 +6S+VbE5/2fjUVapxW2pqR1gypzbyq34A/G/uidKSsb8JuhIgDeFUZJIlRVmaBdu 88B1GVY/u5IZc9ixRyihU2344AiR+CY= -----END CERTIFICATE-----Generated at Fri Sep 11 13:47:10 2026 by rpki-client