$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2dbeb4c9-d890-33d6-abb2-207a08528fb0.roa File: 2dbeb4c9-d890-33d6-abb2-207a08528fb0.roa (raw, json) Hash identifier: MYpPFHnfoYevORKvthoiTdMB7O5Ef+EJsmDc74EOWdg= Subject key identifier: CE:E5:FD:56:2A:95:3F:7F:DE:F2:A2:83:1A:D3:8B:13:CF:70:8D:A3 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EFE12103F289260E0AB9D3180 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2dbeb4c9-d890-33d6-abb2-207a08528fb0.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 274690 IP address blocks: 38.52.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:10:3f:28:92:60:e0:ab:9d:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=d242b3d7-4404-4354-9fb0-3a4cf7feeefe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d7:3d:73:9e:c7:20:5f:da:f1:21:bb:8e:3e: ec:23:9b:ec:da:b5:7b:ce:e5:a5:ee:f0:73:6e:b5: 78:3f:87:2e:1e:2e:94:28:84:51:5f:2f:85:eb:81: 42:85:cf:25:01:a0:0c:65:59:c7:71:21:c0:2b:97: da:8b:48:d7:24:e8:5d:af:7e:14:4b:bb:b2:70:67: 8f:16:c2:05:cf:09:bf:93:a8:62:d7:6e:48:3a:84: 68:b0:d9:0c:bd:c3:13:89:3a:84:b3:4b:8d:62:5c: a8:be:9d:45:e0:df:8f:34:8c:47:42:b6:46:e6:61: a1:5b:3a:77:f0:57:bb:7a:be:20:f9:d1:fa:ce:85: f8:5c:a6:ca:89:0e:6d:4e:49:90:4c:66:de:85:c0: 01:c3:63:65:a1:86:24:d4:7c:19:73:59:b9:9a:5b: 11:61:0d:5f:53:69:b3:d2:0e:51:10:36:49:90:25: ad:72:bc:8a:01:25:10:af:15:de:a6:6b:7d:6e:4d: 4d:de:66:f8:2c:02:a4:ea:d0:11:a4:57:65:f2:09: 0b:e9:b7:02:2e:7b:d1:b6:0a:a5:75:18:e2:27:4c: 16:50:bb:b4:16:b3:2a:50:46:4e:6f:fe:17:47:26: 1d:f7:4f:d0:76:97:75:9b:c3:62:d1:1a:e5:39:de: 80:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E5:FD:56:2A:95:3F:7F:DE:F2:A2:83:1A:D3:8B:13:CF:70:8D:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2dbeb4c9-d890-33d6-abb2-207a08528fb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.52.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:e7:8c:fa:e4:71:8e:5c:fa:47:c4:d9:ef:8e:47:0a:6c:4d: f3:28:28:c4:e2:92:9f:fc:0e:55:92:f0:23:cf:78:98:06:3c: bb:b0:cc:ff:2a:85:c3:4f:6b:b2:e8:f4:f6:cb:b9:fd:12:fa: e2:b6:df:ed:84:6f:41:df:84:cd:be:2a:63:12:45:14:76:6c: eb:69:37:84:96:d4:c3:54:a5:9f:08:76:46:87:b7:b2:ad:78: d1:01:db:4c:57:31:5b:a8:c1:9d:b8:0d:e1:17:5f:fc:69:4a: 4d:a0:d8:01:55:ed:cf:2e:f8:80:52:eb:fc:4a:ec:ce:6c:22: d2:1c:f2:c1:0b:bc:b1:1e:7b:d7:db:47:e0:b2:6b:4a:d5:77: e8:3c:3e:30:9c:bf:38:07:fb:72:7b:75:a7:ff:0a:cc:37:23: 77:a6:e4:7f:fc:d6:86:9d:45:a5:1c:11:04:74:0c:d3:c5:1e: 37:6b:36:80:bb:13:09:3e:c8:7f:6d:6b:95:24:6e:42:d1:e9: 8e:f2:3c:50:cd:dd:73:e9:33:db:da:e9:05:ce:c7:21:2d:d3: 2a:19:a8:61:93:f0:98:4a:09:1a:4d:91:5a:f8:1c:cd:d2:05: 9c:2f:3f:20:45:a3:c1:a7:b7:1d:e9:53:37:46:43:2f:20:5d: 26:1c:eb:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7+EhA/KJJg4KudMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk ZDI0MmIzZDctNDQwNC00MzU0LTlmYjAtM2E0Y2Y3ZmVlZWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdc9c57HIF/a8SG7jj7sI5vs2rV7zuWl7vBz brV4P4cuHi6UKIRRXy+F64FChc8lAaAMZVnHcSHAK5fai0jXJOhdr34US7uycGeP FsIFzwm/k6hi125IOoRosNkMvcMTiTqEs0uNYlyovp1F4N+PNIxHQrZG5mGhWzp3 8Fe7er4g+dH6zoX4XKbKiQ5tTkmQTGbehcABw2NloYYk1HwZc1m5mlsRYQ1fU2mz 0g5REDZJkCWtcryKASUQrxXepmt9bk1N3mb4LAKk6tARpFdl8gkL6bcCLnvRtgql dRjiJ0wWULu0FrMqUEZOb/4XRyYd90/Qdpd1m8Ni0RrlOd6A5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7l/VYqlT9/3vKigxrTixPPcI2jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMmRiZWI0YzktZDg5MC0z M2Q2LWFiYjItMjA3YTA4NTI4ZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJjSRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTnjPrkcY5c+kfE2e+ORwpsTfMoKMTikp/8DlWS8CPPeJgGPLuwzP8q hcNPa7Lo9PbLuf0S+uK23+2Eb0HfhM2+KmMSRRR2bOtpN4SW1MNUpZ8IdkaHt7Kt eNEB20xXMVuowZ24DeEXX/xpSk2g2AFV7c8u+IBS6/xK7M5sItIc8sELvLEee9fb R+Cya0rVd+g8PjCcvzgH+3J7daf/Csw3I3em5H/81oadRaUcEQR0DNPFHjdrNoC7 Ewk+yH9ta5UkbkLR6Y7yPFDN3XPpM9va6QXOxyEt0yoZqGGT8JhKCRpNkVr4HM3S BZwvPyBFo8Gntx3pUzdGQy8gXSYc61E= -----END CERTIFICATE-----Generated at Fri Sep 11 13:09:53 2026 by rpki-client