$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2f363cbd-03ad-377e-b713-886834f50a2c.roa File: 2f363cbd-03ad-377e-b713-886834f50a2c.roa (raw, json) Hash identifier: Z/8TmR2dyLwEZLRlRl4dpCadWCqkMNSbbjp1YZj/ZLI= Subject key identifier: 5D:3B:AE:1A:CD:33:20:23:23:49:29:CC:C6:C9:0B:1D:E7:89:BF:C8 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EB9AC4CF20BF2E9E3146E8000 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2f363cbd-03ad-377e-b713-886834f50a2c.roa Signing time: Tue 04 Aug 2026 13:00:12 +0000 ROA not before: Tue 04 Aug 2026 13:00:12 +0000 ROA not after: Mon 02 Nov 2026 14:00:12 +0000 asID: 208972 IP address blocks: 38.10.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b9:ac:4c:f2:0b:f2:e9:e3:14:6e:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 4 13:00:12 2026 GMT Not After : Nov 2 14:00:12 2026 GMT Subject: CN=a55764b8-097f-4b25-8cdd-406766b4cba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:64:7d:63:b4:68:57:e0:2f:11:ed:83:c7:ef: 36:ce:94:dd:37:c2:59:3c:b1:1f:b6:80:ad:90:42: 2e:65:78:12:67:b3:86:3d:bb:37:d2:30:b9:86:6e: bf:87:a3:c7:56:85:60:c0:81:e6:24:77:c1:8d:e7: 5f:09:33:09:7e:19:fa:5e:22:2d:21:6b:c6:5c:2f: 0b:0f:b0:03:73:ed:b4:b7:e8:2c:bc:bb:16:e9:4d: 71:bc:e6:83:28:82:13:f3:ab:68:6d:97:04:08:12: ff:40:0b:b4:45:c1:88:bf:63:58:82:1a:14:d3:26: df:02:98:e6:bf:b9:c1:a5:ea:b6:1c:12:cf:c5:ae: 8f:8a:03:a1:ff:6b:45:7a:e6:e2:1e:e8:4e:93:f6: 33:aa:b3:dd:bf:58:c8:e6:e0:28:4c:76:35:ef:01: 0d:1a:84:2f:81:6e:eb:df:8a:9d:10:85:38:23:c9: 04:92:b9:42:f4:60:e5:8c:9c:d9:32:21:20:03:28: 57:b5:01:58:7b:80:af:bf:5c:2f:e3:e4:a5:11:ca: 95:88:47:23:d8:96:e7:18:3d:11:1f:d5:19:72:e9: 95:44:06:e6:dd:6c:83:59:d6:55:ee:99:38:4a:2a: df:c6:7a:81:3d:72:81:e4:63:b7:09:fe:b5:bf:7c: 87:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:3B:AE:1A:CD:33:20:23:23:49:29:CC:C6:C9:0B:1D:E7:89:BF:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2f363cbd-03ad-377e-b713-886834f50a2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.10.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:b1:91:b8:01:e2:c3:1e:b1:22:33:8b:11:3e:3c:ab:53:40: df:09:e7:4e:be:6f:20:bc:91:1c:ec:8c:57:84:11:f3:96:48: 64:30:9e:cf:43:8b:be:8f:8e:85:f6:79:f3:f6:93:64:67:98: 61:bd:0d:24:84:74:fb:ca:78:db:e6:a1:40:4f:ab:16:ec:9d: 91:3c:61:c5:5f:ae:66:57:16:08:58:a8:8b:e6:c8:cc:ae:27: 47:51:2f:c1:c2:db:37:eb:db:68:ab:3a:c4:73:80:70:ed:4a: 3f:48:5a:f2:6b:6d:b9:31:a3:11:04:25:3d:95:44:03:ef:25: 18:0d:37:38:a3:2d:b7:0d:34:5b:14:60:74:8b:6a:ea:c0:2f: 0f:4e:d9:bd:f2:00:3d:18:a3:5b:b4:02:bb:01:c0:cf:98:fc: c4:72:a4:25:59:be:a4:9f:92:c5:09:61:db:3f:13:7a:5e:dc: fd:8f:bd:1e:7d:4c:80:d0:68:da:f4:e5:1a:0f:a5:99:c0:cd: fa:20:27:d3:39:8b:e3:2c:73:1f:27:93:03:3f:70:05:4d:43: 94:5b:e1:72:69:05:ad:de:68:a7:65:25:6b:35:33:8b:38:77: 02:10:59:a5:7f:48:21:4f:44:4a:2b:64:a6:6f:d7:2a:41:9f: 22:28:cf:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE65rEzyC/Lp4xRugAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgwNDEzMDAxMloXDTI2MTEwMjE0MDAxMlowLzEtMCsGA1UEAxMk YTU1NzY0YjgtMDk3Zi00YjI1LThjZGQtNDA2NzY2YjRjYmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomR9Y7RoV+AvEe2Dx+82zpTdN8JZPLEftoCt kEIuZXgSZ7OGPbs30jC5hm6/h6PHVoVgwIHmJHfBjedfCTMJfhn6XiItIWvGXC8L D7ADc+20t+gsvLsW6U1xvOaDKIIT86tobZcECBL/QAu0RcGIv2NYghoU0ybfApjm v7nBpeq2HBLPxa6PigOh/2tFeubiHuhOk/YzqrPdv1jI5uAoTHY17wENGoQvgW7r 34qdEIU4I8kEkrlC9GDljJzZMiEgAyhXtQFYe4Cvv1wv4+SlEcqViEcj2JbnGD0R H9UZcumVRAbm3WyDWdZV7pk4SirfxnqBPXKB5GO3Cf61v3yH3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF07rhrNMyAjI0kpzMbJCx3nib/IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMmYzNjNjYmQtMDNhZC0z NzdlLWI3MTMtODg2ODM0ZjUwYTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJgpEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWxkbgB4sMesSIzixE+PKtTQN8J506+byC8kRzsjFeEEfOWSGQwns9D i76PjoX2efP2k2RnmGG9DSSEdPvKeNvmoUBPqxbsnZE8YcVfrmZXFghYqIvmyMyu J0dRL8HC2zfr22irOsRzgHDtSj9IWvJrbbkxoxEEJT2VRAPvJRgNNzijLbcNNFsU YHSLaurALw9O2b3yAD0Yo1u0ArsBwM+Y/MRypCVZvqSfksUJYds/E3pe3P2PvR59 TIDQaNr05RoPpZnAzfogJ9M5i+Mscx8nkwM/cAVNQ5Rb4XJpBa3eaKdlJWs1M4s4 dwIQWaV/SCFPREorZKZv1ypBnyIoz8o= -----END CERTIFICATE-----Generated at Thu Sep 10 10:43:48 2026 by rpki-client