$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2046a935-c7d0-3294-88cb-f10320e58d17.roa File: 2046a935-c7d0-3294-88cb-f10320e58d17.roa (raw, json) Hash identifier: TpLdvf33Z1iJ03iIJhhjXYwG7pZRV2lXhclM/OSbyWs= Subject key identifier: 3D:3C:30:28:A4:B9:00:78:85:DF:B2:2E:DD:58:6B:68:64:B6:92:1D Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F1F1326D0DE39479DE4A54420 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2046a935-c7d0-3294-88cb-f10320e58d17.roa Signing time: Wed 09 Sep 2026 20:44:06 +0000 ROA not before: Wed 09 Sep 2026 20:44:06 +0000 ROA not after: Tue 08 Dec 2026 21:44:06 +0000 asID: 273173 IP address blocks: 38.188.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1f:13:26:d0:de:39:47:9d:e4:a5:44:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 9 20:44:06 2026 GMT Not After : Dec 8 21:44:06 2026 GMT Subject: CN=afbd6d5a-4018-487e-aa81-390ce4074906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a8:14:55:7b:00:ec:04:a2:f2:06:4f:d8:69: da:39:9e:a0:a3:9f:c2:51:ce:74:86:4f:0e:5d:e8: 4c:48:3c:be:ac:57:eb:94:e1:59:63:8a:5c:79:37: b4:f5:87:05:96:fc:ed:30:e1:b2:28:a7:0b:8c:8b: 89:82:b9:26:a1:5c:27:73:01:0b:74:d8:09:10:9d: 05:01:19:24:05:dd:bb:ae:3d:3e:da:b7:f1:97:9e: 53:3a:1b:e6:43:4c:17:b2:46:8d:62:8b:03:ad:30: 4d:c0:db:e5:93:7b:d5:bc:0d:22:f2:2e:91:e7:53: 48:6f:04:48:0b:00:a9:05:a2:c8:20:24:ce:6b:43: 0d:58:f7:a9:3f:55:54:9c:31:44:d7:44:11:73:fe: e1:1f:d6:69:20:21:e6:5d:04:70:d2:64:69:d8:94: 4e:79:9f:44:0a:fa:3f:c1:c1:45:06:ec:fc:03:cb: 1a:2b:12:ee:be:69:34:0f:0e:a2:fa:8d:8e:eb:52: f9:50:c3:d6:dc:f8:5b:ad:19:ee:9c:31:46:6a:73: 4a:87:63:4c:55:6c:32:58:8e:0d:c6:f5:38:ea:d6: 53:3b:3d:c6:71:7f:4a:ca:3e:26:f3:c7:6b:66:64: 57:9f:51:f4:1b:09:49:f9:f2:1f:64:13:2c:a2:7a: 19:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3C:30:28:A4:B9:00:78:85:DF:B2:2E:DD:58:6B:68:64:B6:92:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2046a935-c7d0-3294-88cb-f10320e58d17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.188.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:92:e6:ea:86:73:65:fc:a0:6e:68:d7:9d:36:68:fe:2b:01: 97:a1:22:de:ce:68:75:75:5f:f5:53:d5:86:82:28:fa:c6:26: db:7e:ba:d5:a2:fc:27:9c:0f:54:81:81:e6:89:41:de:f8:b0: 30:a5:3b:b7:5b:1a:b6:e6:75:8e:0d:21:23:c1:5b:29:11:3f: ab:13:76:68:18:13:0b:2e:99:7c:31:f3:0a:5f:d5:2a:81:63: d1:8d:97:ea:ef:14:85:35:cb:3d:6b:84:28:8f:e7:d7:67:3a: 24:97:42:ab:08:25:78:c0:05:7a:cb:43:ca:50:fa:28:6b:6b: 0a:c3:4b:e3:c9:f6:e3:8e:5c:32:ec:a5:4b:9f:33:0b:7a:47: 3a:40:bc:f8:64:d2:ef:ca:b9:fc:3c:99:65:2f:63:e4:eb:1b: b3:18:11:75:4b:02:51:5e:45:ca:2f:4a:4e:c2:d5:1c:3a:30: a7:ae:9d:de:81:6d:72:7d:11:05:4e:5e:7f:ee:44:06:3b:dc: 15:72:57:44:a8:4a:ae:02:88:67:ad:96:c3:8e:3c:23:bc:4c: a8:e8:f6:42:04:fe:ef:f9:df:8a:fd:81:4d:75:48:d7:25:ed: 61:19:00:b6:f1:9f:04:43:c4:01:50:fc:4b:9b:24:e9:ae:2c: 65:23:2f:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8fEybQ3jlHneSlRCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkwOTIwNDQwNloXDTI2MTIwODIxNDQwNlowLzEtMCsGA1UEAxMk YWZiZDZkNWEtNDAxOC00ODdlLWFhODEtMzkwY2U0MDc0OTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06gUVXsA7ASi8gZP2GnaOZ6go5/CUc50hk8O XehMSDy+rFfrlOFZY4pceTe09YcFlvztMOGyKKcLjIuJgrkmoVwncwELdNgJEJ0F ARkkBd27rj0+2rfxl55TOhvmQ0wXskaNYosDrTBNwNvlk3vVvA0i8i6R51NIbwRI CwCpBaLIICTOa0MNWPepP1VUnDFE10QRc/7hH9ZpICHmXQRw0mRp2JROeZ9ECvo/ wcFFBuz8A8saKxLuvmk0Dw6i+o2O61L5UMPW3PhbrRnunDFGanNKh2NMVWwyWI4N xvU46tZTOz3GcX9Kyj4m88drZmRXn1H0GwlJ+fIfZBMsonoZOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD08MCikuQB4hd+yLt1Ya2hktpIdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMjA0NmE5MzUtYzdkMC0z Mjk0LTg4Y2ItZjEwMzIwZTU4ZDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJrzoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImS5uqGc2X8oG5o1502aP4rAZehIt7OaHV1X/VT1YaCKPrGJtt+utWi /CecD1SBgeaJQd74sDClO7dbGrbmdY4NISPBWykRP6sTdmgYEwsumXwx8wpf1SqB Y9GNl+rvFIU1yz1rhCiP59dnOiSXQqsIJXjABXrLQ8pQ+ihrawrDS+PJ9uOOXDLs pUufMwt6RzpAvPhk0u/Kufw8mWUvY+TrG7MYEXVLAlFeRcovSk7C1Rw6MKeund6B bXJ9EQVOXn/uRAY73BVyV0SoSq4CiGetlsOOPCO8TKjo9kIE/u/534r9gU11SNcl 7WEZALbxnwRDxAFQ/EubJOmuLGUjLyQ= -----END CERTIFICATE-----Generated at Fri Sep 11 13:05:12 2026 by rpki-client