$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1e606d97-7536-360c-a1be-c18aae3076e8.roa File: 1e606d97-7536-360c-a1be-c18aae3076e8.roa (raw, json) Hash identifier: 22he2Hl+3VogwAG3hOoikT71MG8oJedqfEjqZVRG+Uk= Subject key identifier: 4B:59:09:8A:40:13:12:16:61:5E:72:A5:B2:FF:F2:92:06:D9:46:29 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F0D65B5CB016CC20731E7DF80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1e606d97-7536-360c-a1be-c18aae3076e8.roa Signing time: Thu 03 Sep 2026 12:45:53 +0000 ROA not before: Thu 03 Sep 2026 12:45:53 +0000 ROA not after: Wed 02 Dec 2026 13:45:53 +0000 asID: 274799 IP address blocks: 38.225.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:65:b5:cb:01:6c:c2:07:31:e7:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 3 12:45:53 2026 GMT Not After : Dec 2 13:45:53 2026 GMT Subject: CN=7497c2a7-d5a3-4a8a-8c8f-7a86439d4432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:da:42:8a:cb:46:c0:43:f7:d7:29:90:a6:9b: 96:5a:fb:bd:b0:08:c4:c8:44:88:a2:4f:d1:6f:19: 3a:97:09:39:8f:01:4e:96:38:be:28:90:d9:32:e9: ba:60:d1:da:3c:62:ac:a3:af:6d:c0:4b:66:0c:43: 84:a9:df:91:6d:bf:85:68:62:6b:45:0b:66:9e:32: 78:32:db:7d:11:e5:40:9a:c3:21:12:e0:d3:19:bd: 29:97:d3:db:f8:a2:e8:3b:77:65:17:18:55:48:b9: 0c:69:7a:80:96:c9:80:ca:9b:d7:92:90:6a:78:68: a2:22:55:08:2d:e5:63:b8:f7:42:53:99:2f:13:54: c3:40:e7:ea:c6:2f:45:1d:a9:7a:cf:4f:0d:bb:4b: 38:35:72:91:9a:bc:7f:92:74:8b:5d:a7:5e:3c:3a: 45:3a:a9:45:80:89:e6:ad:e6:2d:17:28:1a:42:96: bf:d0:fa:7c:b6:ba:43:cc:b1:62:c8:c5:19:f0:89: 90:1f:bd:20:21:f0:84:c2:e7:96:31:e5:c9:0b:d9: 11:06:4a:f3:c1:56:90:f5:42:99:d6:3c:2f:34:ea: 2b:9d:ec:d8:21:37:92:44:c2:eb:d6:9d:30:3a:13: 39:15:49:f5:f4:3a:e3:da:89:ce:17:f2:d8:d0:13: d2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:59:09:8A:40:13:12:16:61:5E:72:A5:B2:FF:F2:92:06:D9:46:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1e606d97-7536-360c-a1be-c18aae3076e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.225.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:94:c1:45:be:ab:19:1c:5d:43:b1:e1:b5:3a:a3:60:fb:17: 97:19:25:81:56:be:fc:10:56:b7:7f:7f:0b:ea:da:17:4a:76: 5d:b2:3b:3a:ad:24:e3:fb:d3:9a:21:06:7b:e6:cd:99:1c:b5: f0:d2:40:0a:9f:a7:d6:1c:58:4a:64:71:ab:20:34:8a:21:6d: f9:7d:2a:f7:47:a9:70:d2:9c:d0:0a:33:61:3b:22:59:e8:fa: f7:2d:15:c5:27:3a:64:06:b2:ee:b0:8e:e3:79:f6:ff:fc:60: 28:03:a3:75:2d:b2:47:ae:a5:6e:d8:f0:9e:c4:f4:2f:93:27: f1:23:59:1f:5a:ba:92:a2:3a:aa:0f:80:08:19:29:82:f5:33: 8d:d9:ef:e2:0b:79:c8:9e:c2:d7:9b:c0:b4:c6:27:06:ee:0b: 35:fa:ac:67:b5:42:09:94:f3:c7:01:c3:76:01:25:5a:73:d9: 21:8f:3e:03:26:dc:d9:8d:cf:bf:1d:11:00:03:d0:3d:e1:6a: 79:24:1d:a9:fc:01:55:31:6f:2a:0b:46:91:8d:ba:71:a6:73: ad:75:9f:29:d3:f2:75:59:99:64:e8:ad:88:29:72:57:33:39: 72:da:b3:0d:4a:66:07:7e:b1:ac:b9:91:9e:52:ad:77:27:79: 3c:a2:77:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NZbXLAWzCBzHn34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkwMzEyNDU1M1oXDTI2MTIwMjEzNDU1M1owLzEtMCsGA1UEAxMk NzQ5N2MyYTctZDVhMy00YThhLThjOGYtN2E4NjQzOWQ0NDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9pCistGwEP31ymQppuWWvu9sAjEyESIok/R bxk6lwk5jwFOlji+KJDZMum6YNHaPGKso69twEtmDEOEqd+Rbb+FaGJrRQtmnjJ4 Mtt9EeVAmsMhEuDTGb0pl9Pb+KLoO3dlFxhVSLkMaXqAlsmAypvXkpBqeGiiIlUI LeVjuPdCU5kvE1TDQOfqxi9FHal6z08Nu0s4NXKRmrx/knSLXadePDpFOqlFgInm reYtFygaQpa/0Pp8trpDzLFiyMUZ8ImQH70gIfCEwueWMeXJC9kRBkrzwVaQ9UKZ 1jwvNOornezYITeSRMLr1p0wOhM5FUn19Drj2onOF/LY0BPS2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtZCYpAExIWYV5ypbL/8pIG2UYpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMWU2MDZkOTctNzUzNi0z NjBjLWExYmUtYzE4YWFlMzA3NmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJuFMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyUwUW+qxkcXUOx4bU6o2D7F5cZJYFWvvwQVrd/fwvq2hdKdl2yOzqt JOP705ohBnvmzZkctfDSQAqfp9YcWEpkcasgNIohbfl9KvdHqXDSnNAKM2E7Ilno +vctFcUnOmQGsu6wjuN59v/8YCgDo3UtskeupW7Y8J7E9C+TJ/EjWR9aupKiOqoP gAgZKYL1M43Z7+ILeciewtebwLTGJwbuCzX6rGe1QgmU88cBw3YBJVpz2SGPPgMm 3NmNz78dEQAD0D3hankkHan8AVUxbyoLRpGNunGmc611nynT8nVZmWTorYgpclcz OXLasw1KZgd+say5kZ5SrXcneTyidxA= -----END CERTIFICATE-----Generated at Fri Sep 11 13:08:47 2026 by rpki-client