$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2a84e595-0f08-3f6d-baf6-2e21537c12c6.roa File: 2a84e595-0f08-3f6d-baf6-2e21537c12c6.roa (raw, json) Hash identifier: 4eMaQaSYMB/p7I8kvQweH0oSUhLkAGtfvc+ifqcER84= Subject key identifier: 72:76:08:3D:1C:D2:02:47:A6:93:9C:F9:C5:70:85:4E:AF:15:24:0C Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EEA0A086D5790A0F1C92F3240 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2a84e595-0f08-3f6d-baf6-2e21537c12c6.roa Signing time: Fri 21 Aug 2026 20:47:53 +0000 ROA not before: Fri 21 Aug 2026 20:47:53 +0000 ROA not after: Thu 19 Nov 2026 21:47:53 +0000 asID: 273861 IP address blocks: 38.196.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:0a:08:6d:57:90:a0:f1:c9:2f:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 21 20:47:53 2026 GMT Not After : Nov 19 21:47:53 2026 GMT Subject: CN=0fb16cc7-b02f-4f48-8d8d-19be9748431f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:26:2f:14:1a:47:ca:09:57:85:8a:80:ba:80: df:fd:da:09:a6:3c:b5:da:20:4b:69:89:d5:74:58: c2:58:31:60:e1:11:28:8c:28:2e:f6:6a:a8:a2:2c: 44:02:02:6c:93:48:8e:9e:62:db:0b:07:3d:77:95: 7f:e6:c8:20:6e:7d:6b:3f:a4:25:22:20:19:d6:c6: 34:11:d1:9c:bd:e8:2f:2b:e4:7f:32:0f:69:d7:9f: 11:eb:65:5b:39:96:c7:a4:28:92:ab:21:9a:87:3f: 6e:a5:bc:68:0b:67:97:38:7b:d3:82:29:b6:95:e3: 52:52:63:82:d5:ce:df:42:3f:cc:57:96:db:2c:34: a1:1a:4c:79:0b:33:da:3b:62:69:3b:7a:53:b4:e8: d6:ab:19:0c:c2:1c:b9:e2:f6:4c:66:76:37:65:6e: b4:5c:1f:52:f4:ff:23:f2:9c:db:47:75:74:e0:b6: 68:5f:ee:1d:2e:13:6a:9c:aa:28:4d:30:c1:a1:83: dd:52:d3:33:15:45:b6:16:dd:de:ab:a1:98:4a:cc: a6:81:9a:85:35:65:b4:90:6a:41:7d:97:73:6a:9d: 6f:8c:14:ef:e1:f8:ec:d2:4a:d0:07:08:5c:60:8e: b7:ec:a0:ac:46:a9:14:ce:bf:6a:ea:8b:82:f2:4d: a2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:76:08:3D:1C:D2:02:47:A6:93:9C:F9:C5:70:85:4E:AF:15:24:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2a84e595-0f08-3f6d-baf6-2e21537c12c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.196.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:1d:cf:81:f6:ba:5a:64:71:77:a2:20:be:33:30:af:8e:e9: f5:d4:e3:90:c4:c7:6b:bc:5c:90:c4:a2:d3:20:6e:ad:0f:2a: 13:da:fb:c7:6a:9a:91:90:68:eb:b2:e3:81:34:9c:da:ed:e3: 5a:83:20:e5:bc:c9:7e:91:28:4c:1e:f5:f4:75:05:87:0f:01: 91:66:1a:7f:e2:d5:39:10:3b:4f:d0:30:0f:11:86:3b:42:79: 5d:14:77:d8:30:d3:25:e1:09:a7:08:3c:2b:07:77:0f:18:e0: 74:b6:6c:95:97:c8:78:d4:3b:91:57:c8:0e:14:1a:25:43:8e: 8e:24:3a:d9:8a:0c:0a:19:9c:93:31:f2:7b:3a:8f:ee:62:b9: 34:ad:75:a5:e3:d4:fc:5a:dc:2b:a9:b9:ba:13:b0:1e:42:e3: 03:88:46:b5:ae:12:c8:40:dd:cc:5d:2d:c8:dd:87:36:4f:3e: 22:b0:b7:a1:a7:0f:e8:93:27:c7:5c:b2:12:93:13:8f:17:b9: 46:bb:26:fe:71:fa:5d:38:ed:84:06:3f:98:68:f7:e6:74:9b: ba:83:90:02:42:7a:7f:f7:f1:32:9b:ad:19:cb:70:0b:21:bc: 01:b8:61:92:81:fb:17:f1:c6:4d:66:ac:93:d4:49:90:d4:f1: 2d:01:b1:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qCghtV5Cg8ckvMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgyMTIwNDc1M1oXDTI2MTExOTIxNDc1M1owLzEtMCsGA1UEAxMk MGZiMTZjYzctYjAyZi00ZjQ4LThkOGQtMTliZTk3NDg0MzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CYvFBpHyglXhYqAuoDf/doJpjy12iBLaYnV dFjCWDFg4REojCgu9mqooixEAgJsk0iOnmLbCwc9d5V/5sggbn1rP6QlIiAZ1sY0 EdGcvegvK+R/Mg9p158R62VbOZbHpCiSqyGahz9upbxoC2eXOHvTgim2leNSUmOC 1c7fQj/MV5bbLDShGkx5CzPaO2JpO3pTtOjWqxkMwhy54vZMZnY3ZW60XB9S9P8j 8pzbR3V04LZoX+4dLhNqnKooTTDBoYPdUtMzFUW2Ft3eq6GYSsymgZqFNWW0kGpB fZdzap1vjBTv4fjs0krQBwhcYI637KCsRqkUzr9q6ouC8k2i4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJ2CD0c0gJHppOc+cVwhU6vFSQMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMmE4NGU1OTUtMGYwOC0z ZjZkLWJhZjYtMmUyMTUzN2MxMmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJsTZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMgdz4H2ulpkcXeiIL4zMK+O6fXU45DEx2u8XJDEotMgbq0PKhPa+8dq mpGQaOuy44E0nNrt41qDIOW8yX6RKEwe9fR1BYcPAZFmGn/i1TkQO0/QMA8RhjtC eV0Ud9gw0yXhCacIPCsHdw8Y4HS2bJWXyHjUO5FXyA4UGiVDjo4kOtmKDAoZnJMx 8ns6j+5iuTStdaXj1Pxa3CupuboTsB5C4wOIRrWuEshA3cxdLcjdhzZPPiKwt6Gn D+iTJ8dcshKTE48XuUa7Jv5x+l047YQGP5ho9+Z0m7qDkAJCen/38TKbrRnLcAsh vAG4YZKB+xfxxk1mrJPUSZDU8S0BsXg= -----END CERTIFICATE-----Generated at Fri Sep 11 13:46:26 2026 by rpki-client