$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/14714c3f-d83b-3870-8c0f-f211fda4c917.roa File: 14714c3f-d83b-3870-8c0f-f211fda4c917.roa (raw, json) Hash identifier: 0gYeMcD8c4jjDzEImc7fM4TaWt4XnlMiCciHOExjKtU= Subject key identifier: 17:E7:DF:52:3D:66:3F:CD:7B:65:FC:C8:BC:89:AB:17:97:86:04:CC Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F1732345B8322F3F58F51D2C0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/14714c3f-d83b-3870-8c0f-f211fda4c917.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 11635 IP address blocks: 38.111.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:34:5b:83:22:f3:f5:8f:51:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=c9a94ea1-0959-40ef-9905-9a902617a3ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ad:ce:f0:0a:22:90:4f:0e:15:b1:3d:43:d8: d9:ba:54:4a:89:0f:ff:68:b0:2b:34:12:62:51:8d: af:0e:b9:03:0d:84:dc:31:22:4c:a3:dc:28:e4:6f: 2b:cb:03:44:45:4c:95:7b:f6:fd:01:50:c8:cc:4e: 73:ac:2b:6d:17:ca:73:d3:69:7f:83:f2:64:f3:e8: b2:1f:73:fe:81:ea:dd:a6:a0:80:5b:f1:d8:d3:4a: 95:ab:60:d6:14:66:b5:3d:8d:74:84:43:41:b0:87: 79:b9:40:e2:d3:78:35:82:bf:57:f7:13:53:bc:29: 71:d2:23:7e:dd:68:6a:db:d5:fe:a0:a5:18:16:6e: 89:ce:e7:70:e4:40:27:99:b1:8e:3f:7d:34:1c:58: 6e:9b:11:cd:cc:39:e2:08:64:b1:d4:6d:15:b1:2f: 1f:86:3c:6a:25:55:a0:c5:bb:4d:34:ff:db:79:23: 4a:3b:7a:a7:51:2a:e4:91:ad:fd:79:de:cc:ab:7a: d8:94:82:2a:6c:d1:7e:f3:97:3a:d7:30:12:48:ae: 6b:ac:98:01:f8:53:26:e6:a2:b1:a9:e0:ae:ea:09: 40:4d:1f:56:54:d3:7a:16:ad:72:b0:dd:87:23:46: ea:16:66:62:cb:e4:59:ba:10:71:7d:4a:b7:d5:c5: 2a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E7:DF:52:3D:66:3F:CD:7B:65:FC:C8:BC:89:AB:17:97:86:04:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/14714c3f-d83b-3870-8c0f-f211fda4c917.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.111.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:24:1c:0b:12:06:44:8e:d9:2c:59:0e:5e:a2:d7:b2:c2:f4: 79:9e:86:a6:7f:42:d7:52:2f:60:26:43:1f:be:44:5e:44:18: 15:19:24:26:9b:a9:08:bb:a2:c3:9b:3e:f4:6a:12:bb:2a:d3: c8:f7:b6:ac:6f:cd:26:04:24:87:d8:8e:3a:c9:f2:fb:68:1e: e3:fe:d5:5d:9b:61:b9:7b:88:f2:67:63:9f:56:c8:7d:f4:9b: de:e5:0d:d9:1e:b2:5d:12:b1:5c:58:21:bd:bd:9f:ce:9b:50: 5d:4f:cc:a7:02:9f:42:d1:08:b9:5b:d0:a7:3d:d6:cc:12:9c: 02:b9:9f:ba:f8:ba:35:bd:c4:12:df:59:89:7c:60:b5:be:da: 74:2f:a2:e2:79:0f:43:f3:50:b7:d4:76:69:27:13:7e:3e:b7: 00:87:a2:3b:a9:84:ed:5b:06:83:74:6f:a4:df:5a:12:b5:23: de:16:81:7d:c3:58:4b:6f:bf:78:2f:5d:75:7b:64:4d:ce:1f: f9:bf:57:98:a1:81:7a:56:65:49:60:65:ae:b5:0d:02:bf:dc: 60:87:c2:6a:8f:27:12:d5:b7:90:b7:bc:11:d3:0c:4f:8a:08: 55:30:1a:64:86:59:2f:d0:ee:31:aa:12:05:51:41:89:af:8b: 56:e1:3f:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMjRbgyLz9Y9R0sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk YzlhOTRlYTEtMDk1OS00MGVmLTk5MDUtOWE5MDI2MTdhM2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjK3O8AoikE8OFbE9Q9jZulRKiQ//aLArNBJi UY2vDrkDDYTcMSJMo9wo5G8rywNERUyVe/b9AVDIzE5zrCttF8pz02l/g/Jk8+iy H3P+gerdpqCAW/HY00qVq2DWFGa1PY10hENBsId5uUDi03g1gr9X9xNTvClx0iN+ 3Whq29X+oKUYFm6Jzudw5EAnmbGOP300HFhumxHNzDniCGSx1G0VsS8fhjxqJVWg xbtNNP/beSNKO3qnUSrkka39ed7Mq3rYlIIqbNF+85c61zASSK5rrJgB+FMm5qKx qeCu6glATR9WVNN6Fq1ysN2HI0bqFmZiy+RZuhBxfUq31cUqTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfn31I9Zj/Ne2X8yLyJqxeXhgTMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMTQ3MTRjM2YtZDgzYi0z ODcwLThjMGYtZjIxMWZkYTRjOTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJm9sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADckHAsSBkSO2SxZDl6i17LC9HmehqZ/QtdSL2AmQx++RF5EGBUZJCab qQi7osObPvRqErsq08j3tqxvzSYEJIfYjjrJ8vtoHuP+1V2bYbl7iPJnY59WyH30 m97lDdkesl0SsVxYIb29n86bUF1PzKcCn0LRCLlb0Kc91swSnAK5n7r4ujW9xBLf WYl8YLW+2nQvouJ5D0PzULfUdmknE34+twCHojuphO1bBoN0b6TfWhK1I94WgX3D WEtvv3gvXXV7ZE3OH/m/V5ihgXpWZUlgZa61DQK/3GCHwmqPJxLVt5C3vBHTDE+K CFUwGmSGWS/Q7jGqEgVRQYmvi1bhP0s= -----END CERTIFICATE-----Generated at Fri Sep 11 13:13:29 2026 by rpki-client