$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2b8e69f0-b314-36f5-b386-293e3802994a.roa File: 2b8e69f0-b314-36f5-b386-293e3802994a.roa (raw, json) Hash identifier: PkqE8doIk7IRc4Hh+1NFOJ+AN85OEcGl/bbDCRGIi/I= Subject key identifier: CA:2C:EF:20:7A:34:84:08:EB:62:85:0E:64:67:28:1D:9E:43:2C:49 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584ECA6C8B04F59AD6D141998D80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2b8e69f0-b314-36f5-b386-293e3802994a.roa Signing time: Mon 10 Aug 2026 13:00:12 +0000 ROA not before: Mon 10 Aug 2026 13:00:12 +0000 ROA not after: Sun 08 Nov 2026 14:00:12 +0000 asID: 272106 IP address blocks: 38.224.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ca:6c:8b:04:f5:9a:d6:d1:41:99:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 10 13:00:12 2026 GMT Not After : Nov 8 14:00:12 2026 GMT Subject: CN=c1bc098b-06e8-4806-b8df-7f485bca0d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f5:f8:9e:ee:20:d3:2c:30:68:f4:cc:ca:e5: d5:d6:00:71:11:83:2f:64:4d:a9:07:f0:b1:4f:86: 47:f8:af:f2:b7:d9:cf:12:1a:6e:45:3b:8a:2b:55: 98:76:8e:f0:a3:4e:82:ae:3d:1e:73:f7:e1:63:33: 20:1f:6c:4d:63:90:31:f2:63:b8:cd:85:db:b6:cd: 09:9c:1a:50:76:70:2b:89:88:de:be:e4:79:21:6c: 8b:22:ae:fb:ae:6e:f5:18:80:a7:4c:ac:29:87:37: 27:61:4b:29:2f:fe:4f:68:67:3c:24:2a:03:4b:e0: f1:26:c5:d9:c4:08:07:8e:cf:29:8d:b6:69:95:21: 1f:77:2c:91:84:9e:d0:fb:4a:3b:1b:f9:ad:3a:62: 6b:72:fe:37:2b:53:33:0c:29:80:35:27:3c:98:93: 71:ec:08:dc:d2:a8:f9:fd:4a:c5:98:c5:d1:d8:23: 22:85:6c:e3:4e:cc:ac:c6:23:26:3b:20:cc:d7:05: fc:56:9a:57:f3:79:07:f4:3e:20:6a:2b:11:2d:fe: bb:ce:e0:0f:2f:93:b5:a5:24:46:e6:71:3c:93:0f: aa:6f:8d:92:84:6c:81:39:92:48:9e:12:ce:88:52: 46:e5:48:be:08:1f:95:76:3c:a3:cb:43:31:6e:1a: e0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:2C:EF:20:7A:34:84:08:EB:62:85:0E:64:67:28:1D:9E:43:2C:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2b8e69f0-b314-36f5-b386-293e3802994a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.224.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:18:dc:8a:d1:00:7c:56:a9:3d:8e:ed:63:d4:52:e8:71:9f: dd:f8:78:7d:6f:2a:8c:d8:2d:c8:f9:f4:9e:86:57:bd:33:17: 71:f4:34:41:59:ce:76:d1:47:bc:d1:b6:e8:54:8c:61:7e:c6: e5:56:43:18:8e:d3:06:ca:f3:f7:0b:41:7d:74:b6:55:0a:d1: 41:25:57:e7:25:a7:8e:52:19:44:01:ca:8b:d6:a7:ee:01:e5: 33:5c:7d:81:68:ad:8f:4b:bb:da:90:b8:6d:bf:13:bf:2e:58: c2:98:3b:5c:73:66:b3:34:31:d2:04:81:9f:e5:86:63:7b:b8: 82:95:52:37:5b:be:d4:69:0c:69:f9:e4:51:3d:c5:a5:28:12: 52:23:0e:95:c8:52:88:1d:55:10:40:49:1b:34:b2:00:d8:a5: 1c:42:58:66:cf:59:e5:03:61:90:f6:d8:6e:ea:30:f4:f6:04: c4:c9:17:09:c3:9d:8f:35:2a:8b:34:83:a4:06:4a:c8:06:01: af:e7:ba:2e:fc:f3:85:45:69:70:2d:b2:bc:c7:84:20:8b:bb: c0:c9:5e:c7:ec:b4:44:fb:78:f6:5b:36:18:7c:97:b4:39:58: af:23:2b:e6:46:8a:78:0e:40:e8:a2:11:bb:c9:28:fd:92:cc: 6a:8e:22:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7KbIsE9ZrW0UGZjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgxMDEzMDAxMloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk YzFiYzA5OGItMDZlOC00ODA2LWI4ZGYtN2Y0ODViY2EwZDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/X4nu4g0ywwaPTMyuXV1gBxEYMvZE2pB/Cx T4ZH+K/yt9nPEhpuRTuKK1WYdo7wo06Crj0ec/fhYzMgH2xNY5Ax8mO4zYXbts0J nBpQdnAriYjevuR5IWyLIq77rm71GICnTKwphzcnYUspL/5PaGc8JCoDS+DxJsXZ xAgHjs8pjbZplSEfdyyRhJ7Q+0o7G/mtOmJrcv43K1MzDCmANSc8mJNx7Ajc0qj5 /UrFmMXR2CMihWzjTsysxiMmOyDM1wX8VppX83kH9D4gaisRLf67zuAPL5O1pSRG 5nE8kw+qb42ShGyBOZJInhLOiFJG5Ui+CB+Vdjyjy0MxbhrgnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMos7yB6NIQI62KFDmRnKB2eQyxJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMmI4ZTY5ZjAtYjMxNC0z NmY1LWIzODYtMjkzZTM4MDI5OTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJuDkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgY3IrRAHxWqT2O7WPUUuhxn934eH1vKozYLcj59J6GV70zF3H0NEFZ znbRR7zRtuhUjGF+xuVWQxiO0wbK8/cLQX10tlUK0UElV+clp45SGUQByovWp+4B 5TNcfYForY9Lu9qQuG2/E78uWMKYO1xzZrM0MdIEgZ/lhmN7uIKVUjdbvtRpDGn5 5FE9xaUoElIjDpXIUogdVRBASRs0sgDYpRxCWGbPWeUDYZD22G7qMPT2BMTJFwnD nY81Kos0g6QGSsgGAa/nui7884VFaXAtsrzHhCCLu8DJXsfstET7ePZbNhh8l7Q5 WK8jK+ZGingOQOiiEbvJKP2SzGqOIlU= -----END CERTIFICATE-----Generated at Fri Sep 11 13:56:00 2026 by rpki-client