$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/19c3d0da-5402-3472-8f90-b334d93e181c.roa File: 19c3d0da-5402-3472-8f90-b334d93e181c.roa (raw, json) Hash identifier: NNA0A3SVzG8xC0AYjrna5aJi5Akp73HmzsiDwQJWHmM= Subject key identifier: BF:9A:3F:00:39:21:F1:F7:23:53:8A:6A:A2:C2:90:F3:E0:5C:04:56 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F0B6692BB1AC69ACD6222A780 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/19c3d0da-5402-3472-8f90-b334d93e181c.roa Signing time: Wed 02 Sep 2026 19:36:01 +0000 ROA not before: Wed 02 Sep 2026 19:36:01 +0000 ROA not after: Tue 01 Dec 2026 20:36:01 +0000 asID: 0 IP address blocks: 38.190.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0b:66:92:bb:1a:c6:9a:cd:62:22:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 2 19:36:01 2026 GMT Not After : Dec 1 20:36:01 2026 GMT Subject: CN=de5ae1a1-2287-48f2-bafc-e673280f0dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b8:fd:27:47:c5:89:47:aa:e3:56:bd:b1:3b: 1a:25:c9:b2:98:5d:aa:1f:7a:4b:f2:82:10:9a:67: 3c:83:ed:69:ef:2c:e8:7e:7c:df:12:31:ce:b8:63: 67:0b:39:2b:49:77:32:3a:36:0d:04:a6:de:85:13: c6:56:99:f7:64:ce:98:b3:f3:50:53:c2:d4:3c:f5: 18:d7:62:7a:27:10:8e:36:d8:94:d3:d3:39:60:c6: 6f:80:4d:55:95:bc:c7:84:31:f4:59:4c:08:3d:99: 13:e1:ad:11:10:5a:a4:49:da:8f:5a:21:59:92:af: 69:33:09:b8:ab:7f:5c:aa:17:11:9e:d0:5f:25:53: 6b:5e:f2:81:19:29:b0:93:77:8f:60:78:1a:15:b5: 31:30:26:e4:7c:d9:cb:c2:88:fe:b2:52:1d:e0:9f: f3:74:6d:35:de:8f:de:2e:ab:65:bc:ea:49:dc:88: 38:04:7a:6c:7d:85:6d:14:54:4b:db:a2:3b:f1:34: 57:55:3c:40:3a:0d:90:a6:2d:67:40:98:5c:aa:02: 95:c3:80:ab:91:ab:6a:e3:31:89:31:66:44:73:30: 13:f2:79:d1:c5:3d:71:bf:d3:43:50:9f:5f:20:d9: 94:5a:c8:f1:0d:e4:2a:47:27:9d:fe:68:1b:d8:00: b8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:9A:3F:00:39:21:F1:F7:23:53:8A:6A:A2:C2:90:F3:E0:5C:04:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/19c3d0da-5402-3472-8f90-b334d93e181c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.190.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:c8:e9:a8:ee:33:fe:4a:d3:fa:43:5c:03:24:42:45:77:04: f0:68:a9:41:88:81:df:dc:c7:4d:c5:58:83:69:5b:a3:0a:cc: 36:ab:13:26:2e:70:0e:b9:0c:b7:4c:fe:86:b4:f1:86:91:c3: fd:1b:19:b5:84:13:07:66:18:75:5b:c9:a2:da:4e:7a:29:3f: b7:cc:9d:8b:a2:e9:bf:90:b3:93:f7:45:75:1d:3e:c1:31:53: 2d:7c:f1:ab:7b:f5:f2:44:8c:8e:fb:77:6a:3b:c0:89:00:5f: ad:e9:d0:cc:5b:90:83:4a:85:31:ee:20:47:72:5d:4c:d4:67: 75:06:51:d1:53:79:53:08:b6:e4:9e:10:30:0a:87:a4:0c:62: c9:9a:64:43:a6:40:b7:48:f5:83:da:6e:dc:98:7c:b6:54:a8: 6e:08:c4:3c:10:08:80:a1:12:7e:c2:b7:fb:23:db:7e:58:f9: 87:2f:4a:2a:e6:28:f5:72:0e:82:17:a6:63:b0:c6:92:87:73: fd:c7:d6:e8:8a:2e:3e:6c:6a:de:a7:4d:6e:28:50:4e:33:f5: 52:06:a9:c1:40:7b:f1:0d:44:43:18:79:3f:39:5a:5d:c8:a3: 18:cf:61:ef:7a:46:ab:96:72:8a:3b:94:b4:89:d3:e0:96:d2: 77:06:31:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8LZpK7GsaazWIip4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkwMjE5MzYwMVoXDTI2MTIwMTIwMzYwMVowLzEtMCsGA1UEAxMk ZGU1YWUxYTEtMjI4Ny00OGYyLWJhZmMtZTY3MzI4MGYwZGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrj9J0fFiUeq41a9sTsaJcmymF2qH3pL8oIQ mmc8g+1p7yzofnzfEjHOuGNnCzkrSXcyOjYNBKbehRPGVpn3ZM6Ys/NQU8LUPPUY 12J6JxCONtiU09M5YMZvgE1VlbzHhDH0WUwIPZkT4a0REFqkSdqPWiFZkq9pMwm4 q39cqhcRntBfJVNrXvKBGSmwk3ePYHgaFbUxMCbkfNnLwoj+slId4J/zdG013o/e LqtlvOpJ3Ig4BHpsfYVtFFRL26I78TRXVTxAOg2Qpi1nQJhcqgKVw4Crkatq4zGJ MWZEczAT8nnRxT1xv9NDUJ9fINmUWsjxDeQqRyed/mgb2AC4XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+aPwA5IfH3I1OKaqLCkPPgXARWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMTljM2QwZGEtNTQwMi0z NDcyLThmOTAtYjMzNGQ5M2UxODFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJr5aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/I6ajuM/5K0/pDXAMkQkV3BPBoqUGIgd/cx03FWINpW6MKzDarEyYu cA65DLdM/oa08YaRw/0bGbWEEwdmGHVbyaLaTnopP7fMnYui6b+Qs5P3RXUdPsEx Uy188at79fJEjI77d2o7wIkAX63p0MxbkINKhTHuIEdyXUzUZ3UGUdFTeVMItuSe EDAKh6QMYsmaZEOmQLdI9YPabtyYfLZUqG4IxDwQCIChEn7Ct/sj235Y+YcvSirm KPVyDoIXpmOwxpKHc/3H1uiKLj5sat6nTW4oUE4z9VIGqcFAe/ENREMYeT85Wl3I oxjPYe96RquWcoo7lLSJ0+CW0ncGMW8= -----END CERTIFICATE-----Generated at Fri Sep 11 13:47:16 2026 by rpki-client